last executing test programs: 126.893321ms ago: executing program 0 (id=1): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x51, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, 0x0) 0s ago: executing program 1 (id=2): bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000019080)={'\x00', 0x7, 0x401, 0x7, 0xfffffffffffffffe, 0x7c, r0}) waitid(0x2, r3, &(0x7f0000019100), 0x8, &(0x7f0000019180)) setrlimit(0x6, &(0x7f0000019240)={0xfffffffffffffff8, 0xfffffffffffffffd}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sync() gettid() socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, 0x0, 0x0, 0x200) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:34051' (ED25519) to the list of known hosts. syzkaller login: [ 82.928463][ T3313] cgroup: Unknown subsys name 'net' [ 83.192367][ T3313] cgroup: Unknown subsys name 'cpuset' [ 83.218594][ T3313] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.676747][ T3313] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.067221][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.126409][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.225330][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.282960][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.936257][ T3319] hsr_slave_0: entered promiscuous mode [ 92.945513][ T3319] hsr_slave_1: entered promiscuous mode [ 93.414730][ T3318] hsr_slave_0: entered promiscuous mode [ 93.418536][ T3318] hsr_slave_1: entered promiscuous mode [ 93.425052][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 93.425731][ T3318] Cannot create hsr debugfs directory [ 94.155098][ T3319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.204641][ T3319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.249107][ T3319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.294284][ T3319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.388568][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.415939][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.436586][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.457457][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.483714][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.549206][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.668784][ T3318] veth0_vlan: entered promiscuous mode [ 98.731516][ T3318] veth1_vlan: entered promiscuous mode [ 98.835311][ T3319] veth0_vlan: entered promiscuous mode [ 98.885211][ T3319] veth1_vlan: entered promiscuous mode [ 98.971285][ T3318] veth0_macvtap: entered promiscuous mode [ 99.005937][ T3318] veth1_macvtap: entered promiscuous mode [ 99.117313][ T3319] veth0_macvtap: entered promiscuous mode [ 99.174039][ T3319] veth1_macvtap: entered promiscuous mode [ 99.261149][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.261975][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.262135][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.262281][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.445904][ T176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.447526][ T176] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.462391][ T176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.463829][ T176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.796907][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.681122][ T3426] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.884383][ T3426] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.888634][ T3426] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.894563][ T3426] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.903491][ T3426] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.906926][ T3426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.944863][ T3426] usb 1-1: config 0 descriptor?? [ 101.448806][ T3426] hid-generic 0003:047F:FFFF.0001: hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 102.877523][ T2068] usb 1-1: USB disconnect, device number 2 [ 103.702683][ T3474] INFO: The task syz.1.2:3474 has been waiting for writeback completion for more than 1 seconds. [ 103.703256][ T3474] INFO: The task syz.1.2:3474 has been waiting for writeback completion for more than 1 seconds. [ 103.712658][ T3474] INFO: The task syz.1.2:3474 has been waiting for writeback completion for more than 1 seconds. [ 103.713010][ T3474] INFO: The task syz.1.2:3474 has been waiting for writeback completion for more than 1 seconds. [ 103.720804][ T3474] INFO: The task syz.1.2:3474 has been waiting for writeback completion for more than 1 seconds. [ 103.721070][ T3474] INFO: The task syz.1.2:3474 has been waiting for writeback completion for more than 1 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 103.728955][ T3474] INFO: The task syz.1.2:3474 has been waiting for writeback completion for more than 1 seconds. [ 104.095973][ T3472] fido_id[3472]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 104.116844][ T3471] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.635952][ T1085] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.797129][ T1085] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.875058][ T1085] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.982756][ T1085] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.556142][ T1085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.590328][ T1085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.634526][ T1085] bond0 (unregistering): Released all slaves [ 105.705383][ T1085] hsr_slave_0: left promiscuous mode [ 105.715480][ T1085] hsr_slave_1: left promiscuous mode [ 105.734627][ T1085] veth1_macvtap: left promiscuous mode [ 105.735159][ T1085] veth0_macvtap: left promiscuous mode [ 105.735655][ T1085] veth1_vlan: left promiscuous mode [ 105.736091][ T1085] veth0_vlan: left promiscuous mode [ 107.063721][ T1085] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.139160][ T1085] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.219101][ T1085] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.311367][ T1085] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.046055][ T1085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.068739][ T1085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.106476][ T1085] bond0 (unregistering): Released all slaves [ 108.219072][ T1085] hsr_slave_0: left promiscuous mode [ 108.224997][ T1085] hsr_slave_1: left promiscuous mode [ 108.243786][ T1085] veth1_macvtap: left promiscuous mode [ 108.244148][ T1085] veth0_macvtap: left promiscuous mode [ 108.246438][ T1085] veth1_vlan: left promiscuous mode [ 108.246899][ T1085] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 10:58:10 Registers: info registers vcpu 0 CPU#0 PC=ffff800080341cf4 X00=ffff800080171398 X01=ffff800088043148 X02=0000000000000010 X03=00000000d1bb26e1 X04=0000000000000003 X05=0000000000000001 X06=0000000000000001 X07=f8f000000654621c X08=00000000000000a0 X09=0000000000000002 X10=0000000000000000 X11=ffff800088043690 X12=0000000000000000 X13=0000000000000000 X14=0000000000000000 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=0000000000060000 X19=fdf000000343dc00 X20=f5f0000005a50110 X21=0000000000000000 X22=fdf000000343dc00 X23=319f800080171590 X24=0000000000000000 X25=0000000000000001 X26=ffff800082a01000 X27=f9f000000307b500 X28=0000000000000000 X29=ffff800088043150 X30=ffff800081b85a74 SP=ffff800088043150 PSTATE=61402009 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:10c8b8c0abef3a20 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00302e7465676461:00000000eafe8360 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bcbcbc0000000030:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000073:0000aaaae03d7c90 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000074:0000aaaae03d4f70 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffca688c70:0000ffffca688c70 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffca688c40 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff8000800122d4 X00=0000aaaae03c20b0 X01=0000ffffca688ac8 X02=0000000000000000 X03=0000ffffa3d28b18 X04=00000000fffffffe X05=0000000000000000 X06=0000ffffa3bdb020 X07=0000aaaae03e11f0 X08=0000000000000087 X09=0000000000000230 X10=0000000000000044 X11=0000aaaae03ba010 X12=0000001810cf1f2a X13=0000000000001030 X14=0000000000000001 X15=0000000000000038 X16=0000000000000001 X17=0000ffffa3526400 X18=0000ffffca6880c0 X19=0000aaaae03e0ff0 X20=0000aaaae03ba910 X21=0000aaaad73a5000 X22=0000ffffca688ac8 X23=0000aaaae03d5380 X24=0000aaaad73a5010 X25=0000ffffca688ba8 X26=0000aaaad73a5000 X27=0000aaaae040ddc0 X28=0000000000000000 X29=0000ffffca688ae0 X30=0000aaaad735eff8 SP=ffff800089f14000 PSTATE=414023c9 -Z-- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffff000000ff0000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ff00010000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00302e7465676461:672f302e6364755f Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff0f00f000f0 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bcbcbc0000000030:bcbcbc0000000030 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000073:0000aaaae03d7c90 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000074:0000aaaae03d4f70 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffca688c70:0000ffffca688c70 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffca688c40 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000