last executing test programs: 1m9.308081477s ago: executing program 3 (id=1433): syz_io_uring_setup(0x3b, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x6, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$UBLK_U_CMD_GET_DEV_INFO(0xffffffffffffffff, 0x80207502, &(0x7f0000000380)={0x0, 0xffff, 0x40, &(0x7f0000000180)}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000280)=[r4], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r6, r5, r6], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) sync_file_range(0xffffffffffffffff, 0x6, 0x0, 0x7) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, 0x0) 1m7.667920021s ago: executing program 3 (id=1435): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r1, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 1m7.109235649s ago: executing program 3 (id=1437): socket(0x10, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) eventfd(0x5ef) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x109002, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1m6.395879939s ago: executing program 3 (id=1441): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000ffff0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29) 1m4.944306928s ago: executing program 3 (id=1444): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 1m1.021827737s ago: executing program 3 (id=1454): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x3}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setrlimit(0x40000000000008, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r3, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x1b, &(0x7f0000001400)=""/223}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r4, &(0x7f0000000080)="c713d29c3a", &(0x7f0000000100)=""/180, 0x4}, 0x20) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x210a, r4}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000300)=""/7, 0x7, 0x400000a0, &(0x7f0000000340)={0x2, 0x4e22, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000019ffff3f00000000000000001801000020207325000000000020200b7b0af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b70300001800000085000000cb00000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xfe4, &(0x7f0000001e00)=""/4068, 0x40f00, 0x45}, 0x94) landlock_restrict_self(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48) 1m0.321019181s ago: executing program 32 (id=1454): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x3}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setrlimit(0x40000000000008, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r3, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x1b, &(0x7f0000001400)=""/223}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r4, &(0x7f0000000080)="c713d29c3a", &(0x7f0000000100)=""/180, 0x4}, 0x20) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x210a, r4}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000300)=""/7, 0x7, 0x400000a0, &(0x7f0000000340)={0x2, 0x4e22, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000019ffff3f00000000000000001801000020207325000000000020200b7b0af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b70300001800000085000000cb00000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xfe4, &(0x7f0000001e00)=""/4068, 0x40f00, 0x45}, 0x94) landlock_restrict_self(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48) 15.141334226s ago: executing program 2 (id=1565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f0000000180)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004700)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9e, @local, 0x2}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000080)='^', 0x1}], 0x1}}], 0x2, 0x40) shutdown(0xffffffffffffffff, 0x1) write$sndseq(0xffffffffffffffff, &(0x7f0000000280)=[{0x7, 0x4, 0x9, 0x35, @tick=0x1, {0x6c, 0x3}, {0x5, 0xb}, @addr={0xf, 0xfd}}, {0x8, 0x5, 0x5, 0x7, @time={0x3, 0x10001}, {0xad, 0x6}, {0x5, 0xd}, @quote={{0x80, 0x6}, 0x0, &(0x7f0000000140)={0x9, 0x1, 0x6, 0x1, @tick=0x80000000, {0x0, 0x6}, {0xff, 0x2}, @raw8={"eb7268afa5fc7088f5349e8a"}}}}, {0xd8, 0x0, 0x9, 0x1, @time={0x3, 0x4b9e}, {0x9, 0x7}, {0x2}, @ext={0xd, &(0x7f00000001c0)="da2d6df106b35e13a52fa352a9"}}, {0x6, 0x7, 0x9a, 0x4, @time={0x9, 0x1}, {0x8, 0x1}, {0x8}, @time=@time={0x7, 0x3}}, {0x8, 0x6, 0xf0, 0xe, @time={0x9, 0x6}, {0xbb, 0x9}, {0x5, 0x6}, @note={0x2, 0xff, 0x1, 0x6, 0x6}}, {0x1, 0xb, 0x2, 0x9d, @tick=0xffff, {0x8b, 0x5}, {0xd7, 0x5}, @quote={{0xd, 0x8}, 0x6, &(0x7f0000000240)={0xff, 0x5, 0x1, 0x3, @time={0xff, 0xc6c1}, {0xfb, 0x2}, {0x9, 0x5}, @ext={0x24, &(0x7f0000000200)="16f85e7ff16ab7f016d9fe1c7b97f4df086fd5da851f454727d3da38d60c08b5a3714cb4"}}}}, {0x3, 0xf8, 0xf9, 0x7, @time={0x1, 0xfffffff9}, {0x0, 0x4}, {0x3}, @connect={{0x6, 0x4}, {0x4, 0x6}}}, {0x5, 0x6, 0x1f, 0x6, @time={0x4, 0xc}, {0xf3, 0x4}, {0x81, 0x8}, @queue={0x57, {0xb, 0x9}}}, {0x1, 0x1, 0x93, 0x8, @time={0xf, 0x401}, {0x8, 0x3}, {0x7, 0x5}, @addr={0x8, 0x8}}], 0xfc) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmmsg$inet(r1, &(0x7f0000003f80)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0}}], 0x1, 0x20008080) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) 13.601646159s ago: executing program 2 (id=1569): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_usb_connect$uac3(0x3, 0xa0, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100300000040b404840340000102030109028e000301002040080b0201012130080904000000010130000a2401040a00fe0f0000090401"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r4, 0x0) stat(&(0x7f00000025c0)='./file0\x00', 0x0) close(r0) r5 = accept4$unix(r1, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000300)={{r5}, {@void, @max}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000840)=[{{&(0x7f0000000380)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB='X'], 0x58}}], 0x1, 0x0) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0xbc) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$UI_SET_PROPBIT(r9, 0x4004556e, 0x19) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r10, &(0x7f00000005c0)}, 0x20) 13.037238666s ago: executing program 1 (id=1572): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000040)="5a8fcf40", 0x4}], 0x1}, 0x4040001) recvmsg$unix(r1, &(0x7f0000000180)={&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000000d40)=[{0x0}, {0x0}, {0x0, 0x3e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000b80)=""/161, 0xa1}], 0x9}, 0x4003) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000feffffff00010000000000000000000004000000e0cb2d18bb03ad1d1f8f3ceab4d86b5d0b39d0c2af828a606911dfed0fbb97a61b02b2d30f8ab0f9bb969843a5c528681c"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x11, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000b752c6d2ab11b46e3055080000000000007baaf8040000007b8af0ff00000000bf00000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200"/100, @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd", 0x1}], 0xfd, &(0x7f0000000740)=[@rights={{0x1c, 0x1, 0x1, [r6, r6, r6]}}], 0x20, 0x20000041}}], 0x1, 0x20040004) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$sock(r6, &(0x7f00000012c0)={&(0x7f0000000640)=@nfc_llcp={0x27, r8, 0x0, 0x5, 0x4b, 0x3, "5da0b843a455e30f295a50d717f3a16d8e817ad2bcc15ef9da94c729d22092ed39d7dad57e786c7ca72d78e50ae41e4e77cd48938bbd074dcfd14885757b85", 0x13}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000c40)="d56e4408f0b29eebe887de58dc497637a6bba4ee1a33a7dd0771cc5feeaa322a60f8416adf0c5e7fd70c717e0915d7ddd112ab0531d8bdcbd727f0ec9d22bdda85a95838d0e1ac356b9dc9439cc0736d4a4f7778b752ee0f12d3bbaf8aa51a2b3e6108581e7aacf7d2e042d93fe8af5643bd97bf7144b8abda5ae7bef0ce043507af4b53fef85bb6e8989fddd9f7f9579b12d52cdf517f23be917639a80f20b1879aa06a427b04722c0d7e876b0fca234400a930898b4b59d1cea58b8a6e", 0xbe}, {&(0x7f0000000ec0)="35b3b3e4c54268f1242ab20512ab7db6675fc8c10376402a08ce66ccd668cd372aa1e355cdadec69f3757d21e51208a967b27bba9d01be24d0b97e5aa64b37c468cdba0eaf5e4b81f3e3384fb5cd2f90dd2d9947eca64fc9aacbf782e2a97b95869e9236c465962926edde164cca58add8bb38b2bca8570896f507fd98117496f0e9720ea146aed539df120dfc97be1c94da5712cb54364ce24c5e92ca3b4683fedc4d30f180771cdb9d0809911bd3abd2e90b75b1cd05d89e0d5a954295cd75d2fa817449af16b6132ba96d7359649f188e3962b99002d2eb4a72ed63a7f21331aa18d1a57ae7407e28d3ece412", 0xee}, {&(0x7f0000000fc0)="048d8ffaae1c787ed350337dc439549a33913a11069e31c6ee7b0ceef082c276b35d5fbb1c8215ee1ad6fb982bf44a7a26053ec1522f988afd542ddac3a35dd8b18624a36aed586c79c407aa363cd1faa2c3b4f19244c1677645974f4377ffc6a22a5bc6f303a165020c92a08ce423314bbb1bc2be631028a4a58b4a0c7b9c2773d869109ae30f96a3940b8e31d53dcb263305fb5033140fe4c5d8451d87ef1c021af24d8becb434d085123bbb6c2d619ccb09b0b73cbd2b3b28a70801e20128edf781d8cf87e8e83b8cb23bbc7cccec3cc818d430a4", 0xd6}], 0x3, &(0x7f00000011c0)=[@mark={{0x14, 0x1, 0x24, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @mark={{0x14, 0x1, 0x24, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffe}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}], 0xd8}, 0x20000802) sendmsg$nl_xfrm(r7, &(0x7f0000000900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="4c0200001f0000082cbd7000fddbdf2500000000000000000000ffffac1e0001000004d202002b00ac1414aa000000000000000000000000c42700000635000008001e003f0d000044000500ac1e0101000000000000000000000000000004d60400000002000000ac1414aa000000000000000000000000063500000203bc004dfcffff02000000cd0900002c001300fe8000000000000000000000000000aa00000000000000000000000000000000000000000a000000b0001400626c616b6532732d3132382d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002003000080010000cf2c3bd7c8108137967a9d23711b340d56e9922b4d8a215c2b1bc187eabe9bd6b4d600b6efc57e8ee63bc9f679deccf25ab9367837155534eedd0d60606d02f9c0b3c4f175fdc7e12db327092ae88d3a8c5deea4d9e8bf96245dd822ea40c0d6570941ecd700120061656769733235362d6165736e690000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000580400008000000076f4ed09f26cc9e5b2cc5f0d57fa49ee27f1f39d7ad4f6ad40eaec63e39955bce11f0f484ae96a9eeef34868ef3ced9909b38d873f9fc73c87791603448e4e66693e5bae225f080fc9d0f984d1847432cb804eafde9259f2e0e34bafc481c9086821ab08246ed81edab38959a39a5f10c9ba95c2248ecd1183e5bf419bf3d7e0df4e7a1222db8aa248e4e2000a0010000100000000000000b80fcd00d108be543ffbf4b0ddc244192a0660055edfe3ed47aa31ee4b1f7b12b75d2026"], 0x24c}}, 0x4044881) syz_usb_control_io(r0, &(0x7f0000000e80)={0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="0023080000000805d8e4f7774a21"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000061181c000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x78, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x60, 0xf8, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x3, 0xa, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x3, 0x4, 0x18}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x70, 0x8, 0x6}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x2, 0x8, 0x5, 0xff, 0x7}, 0x42, &(0x7f00000000c0)={0x5, 0xf, 0x42, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x8, 0xff00}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "b93f1d8d71842c0179f215cf3f0da771"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa6, 0x9, 0x5, 0xce5a, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0xc, 0x2, 0xac8, 0xf00, 0x9, [0xff0000, 0x0]}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc07}}, {0xe7, &(0x7f00000001c0)=ANY=[@ANYBLOB="e703058972f37a88b4f85235439f1754381c1a352e86cfd17da9f4cf00801543fd8ce466c46f427500ce0c4e993dd34f78d9d5c7600719fce991b0bacca3d5ed22fedd666761ae131da10e87423ca980fc996c1069ead2fca992342c9bae565fed1401fa0f21aa75109c886ede11b0d9683b3a204570ff105c1594ef6a79273dd9242b6169ce34cd7a05f609f1abdbb4825b70cdb3b03167e05efdc403b1d4f6ff703504ba38d1957bb135cf368b9537af5bc176baf7eb7ba3d22367767a6fbad2d111059861db8392c7da9c3dccec7c4754fc887d07c383cf5bc800"/231]}]}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000440)=r4, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) 12.17952851s ago: executing program 5 (id=1574): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xa, 0x7, 0x7ffc0001}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x5, 0x0) ptrace(0x10, r0) 10.954722781s ago: executing program 5 (id=1576): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x16, 0x14, 0x10, 0xc, 0x10, 0x10, 0x10, 0xd, 0x10, 0x10, 0x2}}, 0x0, 0x0, 0x0, 0x0}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000000)=0x7) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x108001, "0659dc2a4d18829bbfc530c92dff81cac142a1ce3a056f3348823f8f2891f8f4"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000280)={0x13, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x9, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25"}) 10.40726981s ago: executing program 4 (id=1577): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(r1, &(0x7f0000000b80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000002bc0)={0xa0, 0x0, r2, {{0x3, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000002c0)={0x3f}) write$uinput_user_dev(r6, &(0x7f0000000300)={'syz0\x00', {0xb, 0x5f93, 0x8, 0x674}, 0x3, [0x2955, 0x4, 0x1000, 0x80000001, 0x8, 0xfa5, 0x6, 0x0, 0x2d, 0x7, 0x6, 0x7, 0x0, 0x5, 0x6, 0x5, 0xe, 0xe93, 0x3, 0xe, 0x12, 0x9, 0x2, 0x3, 0x40000, 0xff, 0x2, 0x1, 0x9, 0xfffffffb, 0xfffffffe, 0x10, 0x13d, 0x5, 0xfffffff8, 0x4, 0xb, 0x9, 0x3, 0x4, 0x9, 0x7f, 0x3, 0x2a12, 0x2, 0x8, 0x7, 0x2, 0x7, 0x2, 0x3, 0x4, 0x8, 0x2, 0x1, 0x3325, 0x51, 0x28ba, 0x2, 0xaa, 0x9, 0xfffffffd, 0x2, 0xf36], [0xf, 0x1, 0x5fd, 0x0, 0x5, 0x2f3, 0x8000, 0x5000, 0x85, 0x0, 0x1fda, 0x1, 0x7fffffff, 0x0, 0xa, 0x80000000, 0x4, 0x1ff, 0x8, 0x300000, 0x4, 0x84d, 0x5fdb3133, 0x40, 0x3, 0x8, 0x6, 0x9, 0x9ef, 0x2, 0x0, 0x401, 0x3, 0x1, 0x2, 0x7, 0x9, 0x6, 0x3, 0x0, 0x8001, 0x80009, 0x4, 0x0, 0x0, 0x101, 0x1, 0x0, 0x412, 0x3, 0xfffffffc, 0x8, 0x27bb, 0x3, 0xfff, 0x7, 0x36, 0x20009, 0x7, 0x8, 0x312, 0x5, 0x8, 0x1], [0x58a4, 0x80000000, 0x10, 0xffff, 0x7, 0x9, 0x3, 0x0, 0x9e, 0x4e0aea88, 0x4bea, 0xfff, 0x6, 0x3, 0x10, 0xa0c2, 0xffc, 0xc, 0x1, 0x8, 0x7fff, 0x4, 0x7, 0x3, 0x7f, 0x1, 0x80000001, 0x7, 0x8001, 0x3, 0x6, 0x3, 0x9, 0x3, 0x5a7, 0x44, 0x1, 0x27, 0x2, 0x7, 0x1, 0x10100, 0xe6c, 0x2, 0x4, 0x7, 0x76, 0xffffffff, 0xe7a5, 0x1, 0x9, 0x694e1c40, 0x3, 0x800, 0x7, 0x401, 0xdee, 0x1, 0x7, 0x4, 0x2, 0xd9, 0x1, 0x7fff], [0x3, 0x9, 0x400003, 0x3, 0xfffff800, 0x0, 0x0, 0x627, 0x5, 0xa6ea7521, 0x3, 0x8, 0xeeb6, 0xf, 0x0, 0x100, 0x5, 0x800, 0x9, 0x6, 0x800, 0xcb8a, 0x1, 0x3, 0x8, 0x4, 0x8, 0xf, 0x1, 0xfffffff3, 0x3ff, 0x7, 0xfffffffc, 0x336, 0x4, 0x4d, 0x0, 0x7623d9cc, 0xf8, 0x1, 0x100, 0x7, 0xfffffff9, 0x17b8, 0xea2, 0x81, 0x1000, 0x3, 0x7f95, 0x7, 0x7fffffff, 0x4, 0x7fffffff, 0x6, 0x88, 0x6, 0x1, 0x200, 0x8, 0xfffffff7, 0x4, 0xc, 0x2, 0x9]}, 0x45c) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 10.288037498s ago: executing program 1 (id=1578): mkdir(&(0x7f0000000040)='./file0\x00', 0x184) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7d}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x44) r1 = open(&(0x7f0000001400)='./file0\x00', 0x0, 0xa0) copy_file_range(r1, 0x0, r1, 0x0, 0x101, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r2, &(0x7f0000000080)=""/41, 0x29) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x1}, 0x30, 0x0) landlock_restrict_self(r3, 0xe) recvfrom$packet(r2, &(0x7f0000000140)=""/126, 0x7e, 0x10000, 0x0, 0x0) 10.092003226s ago: executing program 1 (id=1579): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x72d782, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(r4, 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0xa, 0x20082f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.889533197s ago: executing program 2 (id=1581): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) prlimit64(r1, 0xf, 0x0, &(0x7f0000000140)) 7.832367641s ago: executing program 4 (id=1582): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 7.593030787s ago: executing program 2 (id=1584): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000600)=""/143) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file1/../file0', [], 0xa, "fd50b4b78ebd13bbdbd0799fbb9425b3ea049783c6c79cddbdcde2a2c27ec6af243f3467fd0ee5d0d7ce6a8fd959d95559a1f87b20a1c1c10254fa0a186e7208ccf1b701572d8a1f5283bb7c0f22e381210767f8c25cc9b795b2adbda77aed7cb73dc22611bd4dd9394e53bfd1a3d76d0a4badf43dd09ddf75bd1eb05c5ec97f16e1823e00692829fa4d72dfd8cdabf9158f0b0eee704f25cac1e7365458117e6915f638d393a9d1f4b2996f36a64277d350b38563322eb542bb255732fe0e021d3de794b5bea43c15a512ecd90bcc72b5"}, 0xe5) writev(r2, &(0x7f0000000280), 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0xfffffffd, 0xffc00, 0x3, 0x101, 0x1, 0x9}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x10000, 0xa895, 0x7, 0xf, 0x1ff}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x9, 0x6, 0x3, 0x2}}]}]}}}]}, 0x94}}, 0x10) write$sysctl(r3, &(0x7f0000000040)='5\x00', 0x2) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0xe4d, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 7.573323776s ago: executing program 0 (id=1585): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(r1, &(0x7f0000000b80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000002bc0)={0xa0, 0x0, r2, {{0x3, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x4) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000002c0)={0x3f}) write$uinput_user_dev(r6, &(0x7f0000000300)={'syz0\x00', {0xb, 0x5f93, 0x8, 0x674}, 0x3, [0x2955, 0x4, 0x1000, 0x80000001, 0x8, 0xfa5, 0x6, 0x0, 0x2d, 0x7, 0x6, 0x7, 0x0, 0x5, 0x6, 0x5, 0xe, 0xe93, 0x3, 0xe, 0x12, 0x9, 0x2, 0x3, 0x40000, 0xff, 0x2, 0x1, 0x9, 0xfffffffb, 0xfffffffe, 0x10, 0x13d, 0x5, 0xfffffff8, 0x4, 0xb, 0x9, 0x3, 0x4, 0x9, 0x7f, 0x3, 0x2a12, 0x2, 0x8, 0x7, 0x2, 0x7, 0x2, 0x3, 0x4, 0x8, 0x2, 0x1, 0x3325, 0x51, 0x28ba, 0x2, 0xaa, 0x9, 0xfffffffd, 0x2, 0xf36], [0xf, 0x1, 0x5fd, 0x0, 0x5, 0x2f3, 0x8000, 0x5000, 0x85, 0x0, 0x1fda, 0x1, 0x7fffffff, 0x0, 0xa, 0x80000000, 0x4, 0x1ff, 0x8, 0x300000, 0x4, 0x84d, 0x5fdb3133, 0x40, 0x3, 0x8, 0x6, 0x9, 0x9ef, 0x2, 0x0, 0x401, 0x3, 0x1, 0x2, 0x7, 0x9, 0x6, 0x3, 0x0, 0x8001, 0x80009, 0x4, 0x0, 0x0, 0x101, 0x1, 0x0, 0x412, 0x3, 0xfffffffc, 0x8, 0x27bb, 0x3, 0xfff, 0x7, 0x36, 0x20009, 0x7, 0x8, 0x312, 0x5, 0x8, 0x1], [0x58a4, 0x80000000, 0x10, 0xffff, 0x7, 0x9, 0x3, 0x0, 0x9e, 0x4e0aea88, 0x4bea, 0xfff, 0x6, 0x3, 0x10, 0xa0c2, 0xffc, 0xc, 0x1, 0x8, 0x7fff, 0x4, 0x7, 0x3, 0x7f, 0x1, 0x80000001, 0x7, 0x8001, 0x3, 0x6, 0x3, 0x9, 0x3, 0x5a7, 0x44, 0x1, 0x27, 0x2, 0x7, 0x1, 0x10100, 0xe6c, 0x2, 0x4, 0x7, 0x76, 0xffffffff, 0xe7a5, 0x1, 0x9, 0x694e1c40, 0x3, 0x800, 0x7, 0x401, 0xdee, 0x1, 0x7, 0x4, 0x2, 0xd9, 0x1, 0x7fff], [0x3, 0x9, 0x400003, 0x3, 0xfffff800, 0x0, 0x0, 0x627, 0x5, 0xa6ea7521, 0x3, 0x8, 0xeeb6, 0xf, 0x0, 0x100, 0x5, 0x800, 0x9, 0x6, 0x800, 0xcb8a, 0x1, 0x3, 0x8, 0x4, 0x8, 0xf, 0x1, 0xfffffff3, 0x3ff, 0x7, 0xfffffffc, 0x336, 0x4, 0x4d, 0x0, 0x7623d9cc, 0xf8, 0x1, 0x100, 0x7, 0xfffffff9, 0x17b8, 0xea2, 0x81, 0x1000, 0x3, 0x7f95, 0x7, 0x7fffffff, 0x4, 0x7fffffff, 0x6, 0x88, 0x6, 0x1, 0x200, 0x8, 0xfffffff7, 0x4, 0xc, 0x2, 0x9]}, 0x45c) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd32924031de07", 0x10) 7.47738728s ago: executing program 4 (id=1586): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002840)={0x20, r0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x44020) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64=r4], 0x18}}, 0x2080) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r8 = socket$kcm(0xa, 0x2, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x108, 0x0, &(0x7f0000000640)="e3ef7f090000ec6783b4241544940000000000000000000000000033a42c9550f50ac311e0f0544b00aab05450dc23d998e6f578af3a439e1432fa00228f11b0f472aeeb58d909c56270d30b5b85617a3c907c8ea9f1a44b2bc30ed6239eb52ee012b4c3e1932680b192d2d613e4301940d6312a6faff570879d2f1b517251ee5473a94bfd82980a9a880700d5f059a6b7bb7b6a9787136a408914de373597695c519462765a1138c2e8b63a83b661cfff41edd8f8b4c5ec056b51b5ade61d5e7f552750a3f2434463d3ae0ab1aee2190f2087da0baed7000bae934c2a91d8187e555c69de7a58858ac2fcff9758c8bf3107b6acd6c941f70f547be18b3813cbee5fb5e873e5f974", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, 0x50) r9 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x0) ioctl$FIBMAP(r9, 0x1, &(0x7f0000000040)=0x85) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xff00) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x34, r6, 0x60b, 0x70bd2d, 0x3, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x34}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="04002dbd7000fcdbdf251600000008000300", @ANYRES32=r7, @ANYBLOB="9f79a20d07a763f4277471766b6bc6efa53fb88b8856bdf1bd2b8bbe94d9bc9db4b382083adbdc4438962bc88f7a1bce09d191ba4fc220b1604df0d3c4ca8b7e73f730796f0040d39a80ee82168550637230195a0e61b11a732b64e8b766431720f4232c3bfb5d74c4628d40016070dafc51407eaacd40b733add86b6f08844f42018ea1b081a50b36eb5ab9ff0dd3381c1cc2546e6cc122d68c3d26ee130660aa0b4d9472ed8d68f545d4f8277cc66d881bb260b119c741d113a20a8ad894df2fd8edef02f4902c9e6fab948ad65cebca85043db7cb3bfc28b0f4cf6d8e75d27dcd52e9d7ffd1"], 0x1c}}, 0x800) 7.435374829s ago: executing program 5 (id=1587): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x72d782, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0xa, 0x20082f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.136341599s ago: executing program 1 (id=1588): mkdir(&(0x7f0000000040)='./file0\x00', 0x184) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7d}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x44) r1 = open(&(0x7f0000001400)='./file0\x00', 0x0, 0xa0) copy_file_range(r1, 0x0, r1, 0x0, 0x101, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r2, &(0x7f0000000080)=""/41, 0x29) landlock_restrict_self(r1, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)="83739bdc9574dbf7e0890b699c2b3237915caf761839e4bd5d0acb48900941c8dfad41dde4d2966d345d90a114dfd4ba6cd581d6b276d5049c210404bd4f5bb7ab6a66bf00200a2e6e16958b52295582ebf5a5139f8fc0bdc1b024d89502a4f0c3048eb698f25d9b37178c95bda9461b3279bb5805664771a33fd7e05611", 0x7e) landlock_restrict_self(0xffffffffffffffff, 0xe) recvfrom$packet(r2, &(0x7f0000000140)=""/126, 0x7e, 0x10000, 0x0, 0x0) 6.135704604s ago: executing program 2 (id=1589): mkdir(&(0x7f0000000040)='./file0\x00', 0x184) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7d}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x44) r1 = open(&(0x7f0000001400)='./file0\x00', 0x0, 0xa0) copy_file_range(r1, 0x0, r1, 0x0, 0x101, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x1}, 0x30, 0x0) landlock_restrict_self(r3, 0xe) recvfrom$packet(r2, &(0x7f0000000140)=""/126, 0x7e, 0x10000, 0x0, 0x0) 6.135382141s ago: executing program 2 (id=1590): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_usb_connect$uac3(0x3, 0xa0, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100300000040b404840340000102030109028e000301002040080b0201012130080904000000010130000a2401040a00fe0f0000090401"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r4, 0x0) stat(&(0x7f00000025c0)='./file0\x00', 0x0) close(r0) r5 = accept4$unix(r1, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000300)={{r5}, {@void, @max}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000840)=[{{&(0x7f0000000380)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB='X'], 0x58}}], 0x1, 0x0) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0xbc) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$UI_SET_PROPBIT(r9, 0x4004556e, 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@tail_call]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f00000005c0)}, 0x20) 5.084198524s ago: executing program 4 (id=1591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) r2 = getpid() prctl$PR_SCHED_CORE(0x41555856, 0x100006, r2, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000040) ioperm(0x0, 0x62ee, 0x2000000000000006) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x2) r4 = socket(0x10, 0x803, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033ddaf373b1ce2be0696a3da", 0x0, 0x9ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback={0xff00000000000000}, 0x80, 0x0, 0x1, 0x1}}) 4.829878948s ago: executing program 0 (id=1592): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(r1, &(0x7f0000000b80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000002bc0)={0xa0, 0x0, r2, {{0x3, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000002c0)={0x3f}) write$uinput_user_dev(r6, &(0x7f0000000300)={'syz0\x00', {0xb, 0x5f93, 0x8, 0x674}, 0x3, [0x2955, 0x4, 0x1000, 0x80000001, 0x8, 0xfa5, 0x6, 0x0, 0x2d, 0x7, 0x6, 0x7, 0x0, 0x5, 0x6, 0x5, 0xe, 0xe93, 0x3, 0xe, 0x12, 0x9, 0x2, 0x3, 0x40000, 0xff, 0x2, 0x1, 0x9, 0xfffffffb, 0xfffffffe, 0x10, 0x13d, 0x5, 0xfffffff8, 0x4, 0xb, 0x9, 0x3, 0x4, 0x9, 0x7f, 0x3, 0x2a12, 0x2, 0x8, 0x7, 0x2, 0x7, 0x2, 0x3, 0x4, 0x8, 0x2, 0x1, 0x3325, 0x51, 0x28ba, 0x2, 0xaa, 0x9, 0xfffffffd, 0x2, 0xf36], [0xf, 0x1, 0x5fd, 0x0, 0x5, 0x2f3, 0x8000, 0x5000, 0x85, 0x0, 0x1fda, 0x1, 0x7fffffff, 0x0, 0xa, 0x80000000, 0x4, 0x1ff, 0x8, 0x300000, 0x4, 0x84d, 0x5fdb3133, 0x40, 0x3, 0x8, 0x6, 0x9, 0x9ef, 0x2, 0x0, 0x401, 0x3, 0x1, 0x2, 0x7, 0x9, 0x6, 0x3, 0x0, 0x8001, 0x80009, 0x4, 0x0, 0x0, 0x101, 0x1, 0x0, 0x412, 0x3, 0xfffffffc, 0x8, 0x27bb, 0x3, 0xfff, 0x7, 0x36, 0x20009, 0x7, 0x8, 0x312, 0x5, 0x8, 0x1], [0x58a4, 0x80000000, 0x10, 0xffff, 0x7, 0x9, 0x3, 0x0, 0x9e, 0x4e0aea88, 0x4bea, 0xfff, 0x6, 0x3, 0x10, 0xa0c2, 0xffc, 0xc, 0x1, 0x8, 0x7fff, 0x4, 0x7, 0x3, 0x7f, 0x1, 0x80000001, 0x7, 0x8001, 0x3, 0x6, 0x3, 0x9, 0x3, 0x5a7, 0x44, 0x1, 0x27, 0x2, 0x7, 0x1, 0x10100, 0xe6c, 0x2, 0x4, 0x7, 0x76, 0xffffffff, 0xe7a5, 0x1, 0x9, 0x694e1c40, 0x3, 0x800, 0x7, 0x401, 0xdee, 0x1, 0x7, 0x4, 0x2, 0xd9, 0x1, 0x7fff], [0x3, 0x9, 0x400003, 0x3, 0xfffff800, 0x0, 0x0, 0x627, 0x5, 0xa6ea7521, 0x3, 0x8, 0xeeb6, 0xf, 0x0, 0x100, 0x5, 0x800, 0x9, 0x6, 0x800, 0xcb8a, 0x1, 0x3, 0x8, 0x4, 0x8, 0xf, 0x1, 0xfffffff3, 0x3ff, 0x7, 0xfffffffc, 0x336, 0x4, 0x4d, 0x0, 0x7623d9cc, 0xf8, 0x1, 0x100, 0x7, 0xfffffff9, 0x17b8, 0xea2, 0x81, 0x1000, 0x3, 0x7f95, 0x7, 0x7fffffff, 0x4, 0x7fffffff, 0x6, 0x88, 0x6, 0x1, 0x200, 0x8, 0xfffffff7, 0x4, 0xc, 0x2, 0x9]}, 0x45c) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 3.680145995s ago: executing program 1 (id=1593): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000001700)=@urb_type_control={0x2, {0xc, 0x1}, 0x7f, 0x20, &(0x7f0000001680)={0x1f, 0x5, 0x0, 0x3, 0x7}, 0x8, 0x2a, 0x2, 0x0, 0x8, 0x8, 0x0}) accept4$inet(r0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 3.564731662s ago: executing program 1 (id=1594): ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)={[0x5]}, 0x8) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r0, 0x29, 0xb, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) r1 = socket(0x39, 0x0, 0x7) syz_genetlink_get_family_id$mptcp(0x0, r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x7c, 0x6, 0x9, 0x54, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, @private1, 0x7, 0x0, 0x7fff, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4000011}, 0x4080) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = io_uring_setup(0x1de1, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x3ffffd, 0xc}) r5 = epoll_create1(0x0) epoll_pwait2(r5, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000340)={0x20000005}) socket$inet(0x2, 0x6, 0x80006) 3.543031876s ago: executing program 4 (id=1595): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20048045) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map, 0x9, 0x0, 0xfaa7, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0x0, 0x0}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={r3, 0x0, 0x25, 0x8, @val=@tcx={@void, @value=r3, @void, @void, r4}}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) 3.320323705s ago: executing program 5 (id=1596): socket$key(0xf, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x401) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="143cede284", @ANYRES64=r3], 0xb2) 2.40055381s ago: executing program 0 (id=1597): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1.936858479s ago: executing program 0 (id=1598): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000019ffff3f00000000000000001801000020207325000000000020200b7b0af8ff00000000bf"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xfe4, &(0x7f0000001e00)=""/4068, 0x40f00, 0x45}, 0x94) 1.884379001s ago: executing program 4 (id=1599): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x8040010) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0x8, 0xbc1, 0x80000, 0x0, 0x5e81b39d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x9, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0xd5, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0xfff, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x7]}, 0x45c) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) 1.165692773s ago: executing program 5 (id=1600): r0 = semget$private(0x0, 0x6, 0x0) r1 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) writev(r3, &(0x7f0000001800)=[{&(0x7f00000002c0)="d5e28823a9b6d98a297c9d1751e88d1250db347d87f65244d94e2296dce5e38ee46d7812df3ef4da294e61abd7bda5a779df87bb1367f77ea322c3bddc1af860c355e93d7006c062880d", 0x4a}, {&(0x7f00000000c0)="53dce7bb7ae284275e936959015469eb02d509d4427aafb1de8a1795264f2d78033421f37ffd88210e9cfbad10bd9f463cabe989678d", 0x36}, {&(0x7f0000000100)="d33391f7b28d3c28ae06bd", 0xb}, {&(0x7f0000000800)="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", 0xf76}], 0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000200), 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0xc, 0x0) semop(r0, &(0x7f0000000000)=[{0x4, 0x5, 0x1800}, {0x0, 0x9, 0x1c00}, {0x2, 0xfff8, 0x800}], 0x3) semctl$SETVAL(r0, 0x4, 0x10, 0x0) 868.256009ms ago: executing program 0 (id=1601): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = fanotify_init(0x0, 0x1) mount$9p_fd(0x1008, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 74.309871ms ago: executing program 0 (id=1602): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(r1, &(0x7f0000000b80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000002bc0)={0xa0, 0x0, r2, {{0x3, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x4) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000002c0)={0x3f}) write$uinput_user_dev(r6, &(0x7f0000000300)={'syz0\x00', {0xb, 0x5f93, 0x8, 0x674}, 0x3, [0x2955, 0x4, 0x1000, 0x80000001, 0x8, 0xfa5, 0x6, 0x0, 0x2d, 0x7, 0x6, 0x7, 0x0, 0x5, 0x6, 0x5, 0xe, 0xe93, 0x3, 0xe, 0x12, 0x9, 0x2, 0x3, 0x40000, 0xff, 0x2, 0x1, 0x9, 0xfffffffb, 0xfffffffe, 0x10, 0x13d, 0x5, 0xfffffff8, 0x4, 0xb, 0x9, 0x3, 0x4, 0x9, 0x7f, 0x3, 0x2a12, 0x2, 0x8, 0x7, 0x2, 0x7, 0x2, 0x3, 0x4, 0x8, 0x2, 0x1, 0x3325, 0x51, 0x28ba, 0x2, 0xaa, 0x9, 0xfffffffd, 0x2, 0xf36], [0xf, 0x1, 0x5fd, 0x0, 0x5, 0x2f3, 0x8000, 0x5000, 0x85, 0x0, 0x1fda, 0x1, 0x7fffffff, 0x0, 0xa, 0x80000000, 0x4, 0x1ff, 0x8, 0x300000, 0x4, 0x84d, 0x5fdb3133, 0x40, 0x3, 0x8, 0x6, 0x9, 0x9ef, 0x2, 0x0, 0x401, 0x3, 0x1, 0x2, 0x7, 0x9, 0x6, 0x3, 0x0, 0x8001, 0x80009, 0x4, 0x0, 0x0, 0x101, 0x1, 0x0, 0x412, 0x3, 0xfffffffc, 0x8, 0x27bb, 0x3, 0xfff, 0x7, 0x36, 0x20009, 0x7, 0x8, 0x312, 0x5, 0x8, 0x1], [0x58a4, 0x80000000, 0x10, 0xffff, 0x7, 0x9, 0x3, 0x0, 0x9e, 0x4e0aea88, 0x4bea, 0xfff, 0x6, 0x3, 0x10, 0xa0c2, 0xffc, 0xc, 0x1, 0x8, 0x7fff, 0x4, 0x7, 0x3, 0x7f, 0x1, 0x80000001, 0x7, 0x8001, 0x3, 0x6, 0x3, 0x9, 0x3, 0x5a7, 0x44, 0x1, 0x27, 0x2, 0x7, 0x1, 0x10100, 0xe6c, 0x2, 0x4, 0x7, 0x76, 0xffffffff, 0xe7a5, 0x1, 0x9, 0x694e1c40, 0x3, 0x800, 0x7, 0x401, 0xdee, 0x1, 0x7, 0x4, 0x2, 0xd9, 0x1, 0x7fff], [0x3, 0x9, 0x400003, 0x3, 0xfffff800, 0x0, 0x0, 0x627, 0x5, 0xa6ea7521, 0x3, 0x8, 0xeeb6, 0xf, 0x0, 0x100, 0x5, 0x800, 0x9, 0x6, 0x800, 0xcb8a, 0x1, 0x3, 0x8, 0x4, 0x8, 0xf, 0x1, 0xfffffff3, 0x3ff, 0x7, 0xfffffffc, 0x336, 0x4, 0x4d, 0x0, 0x7623d9cc, 0xf8, 0x1, 0x100, 0x7, 0xfffffff9, 0x17b8, 0xea2, 0x81, 0x1000, 0x3, 0x7f95, 0x7, 0x7fffffff, 0x4, 0x7fffffff, 0x6, 0x88, 0x6, 0x1, 0x200, 0x8, 0xfffffff7, 0x4, 0xc, 0x2, 0x9]}, 0x45c) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd32924031de07", 0x10) 0s ago: executing program 5 (id=1603): socket$inet_icmp_raw(0x2, 0x3, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, 0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_ublk_setup_io_uring(0x1e, &(0x7f0000002900)={0x0, 0xd58e, 0x10, 0x20002, 0x185}, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) kernel console output (not intermixed with test programs): w USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 385.511260][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.556054][ T5812] usb 5-1: config 0 descriptor?? [ 386.594789][ T5812] cp210x 5-1:0.0: cp210x converter detected [ 390.148021][ T9115] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.991'. [ 390.644530][ T9118] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 390.645067][ T9118] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 390.645102][ T9118] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 392.052941][ T5812] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -110 [ 392.053040][ T5812] cp210x 5-1:0.0: querying part number failed [ 392.768465][ T9107] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.991'. [ 392.826077][ T9127] loop9: detected capacity change from 0 to 7 [ 392.828890][ T9127] Dev loop9: unable to read RDB block 7 [ 392.828916][ T9127] loop9: AHDI p1 p2 p4 [ 392.828933][ T9127] loop9: partition table partially beyond EOD, truncated [ 392.830147][ T9127] loop9: p1 start 1920169572 is beyond EOD, truncated [ 392.830170][ T9127] loop9: p2 start 1851744889 is beyond EOD, truncated [ 392.983398][ T5812] usb 5-1: cp210x converter now attached to ttyUSB0 [ 393.315572][ T5812] usb 5-1: USB disconnect, device number 16 [ 393.609229][ T48] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 393.691122][ T5812] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 393.701983][ T5812] cp210x 5-1:0.0: device disconnected [ 393.750723][ T48] usb 2-1: device descriptor read/64, error -71 [ 394.040244][ T48] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 394.155172][ T9150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1002'. [ 394.179297][ T48] usb 2-1: device descriptor read/64, error -71 [ 394.289774][ T48] usb usb2-port1: attempt power cycle [ 395.009377][ T9164] loop9: detected capacity change from 0 to 7 [ 395.012313][ T9164] Dev loop9: unable to read RDB block 7 [ 395.012335][ T9164] loop9: AHDI p1 p2 p4 [ 395.012348][ T9164] loop9: partition table partially beyond EOD, truncated [ 395.042404][ T48] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 395.047139][ T9164] loop9: p1 start 1920169572 is beyond EOD, truncated [ 395.047158][ T9164] loop9: p2 start 1851744889 is beyond EOD, truncated [ 395.074330][ T48] usb 2-1: device descriptor read/8, error -71 [ 395.311095][ T48] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 395.331697][ T48] usb 2-1: device descriptor read/8, error -71 [ 395.440996][ T48] usb usb2-port1: unable to enumerate USB device [ 395.499140][ T5734] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 395.523178][ T9175] loop4: detected capacity change from 0 to 7 [ 395.549258][ T9175] Dev loop4: unable to read RDB block 7 [ 395.549300][ T9175] loop4: unable to read partition table [ 395.549509][ T9175] loop4: partition table beyond EOD, truncated [ 395.549530][ T9175] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 395.651837][ T5734] usb 5-1: device descriptor read/64, error -71 [ 395.889140][ T5734] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 395.934057][ T9184] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 395.985586][ T9187] netlink: 'syz.2.1014': attribute type 2 has an invalid length. [ 396.029087][ T5734] usb 5-1: device descriptor read/64, error -71 [ 396.139585][ T5734] usb usb5-port1: attempt power cycle [ 396.417294][ T9192] binder: 9191:9192 ioctl c0306201 0 returned -14 [ 396.702317][ T5734] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 396.719535][ T9199] binder: 9191:9199 ioctl c0306201 0 returned -14 [ 396.733988][ T5734] usb 5-1: device descriptor read/8, error -71 [ 396.883872][ T9208] netlink: 'syz.3.1020': attribute type 2 has an invalid length. [ 396.969122][ T5734] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 397.000179][ T5734] usb 5-1: device descriptor read/8, error -71 [ 397.114374][ T5609] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 397.128441][ T5609] Bluetooth: hci2: Injecting HCI hardware error event [ 397.140561][ T5617] Bluetooth: hci2: hardware error 0x00 [ 397.141858][ T5734] usb usb5-port1: unable to enumerate USB device [ 397.269465][ T9214] loop4: detected capacity change from 0 to 7 [ 397.343331][ T9214] Dev loop4: unable to read RDB block 7 [ 397.343384][ T9214] loop4: unable to read partition table [ 397.343587][ T9214] loop4: partition table beyond EOD, truncated [ 397.343622][ T9214] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 397.598438][ T510] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.636093][ T510] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.636146][ T510] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.636186][ T510] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.981313][ T9233] netlink: 'syz.3.1031': attribute type 2 has an invalid length. [ 398.335057][ T9235] capability: warning: `syz.2.1030' uses 32-bit capabilities (legacy support in use) [ 399.106398][ T48] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 399.292116][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 399.292151][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.292188][ T48] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 399.292211][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.307323][ T48] usb 2-1: config 0 descriptor?? [ 399.353015][ T5617] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 399.739235][ T5734] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 399.889670][ T48] hid (null): unknown global tag 0xe [ 399.910304][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 399.910347][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.910381][ T5734] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 399.910430][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.976841][ T5734] usb 3-1: config 0 descriptor?? [ 400.013274][ T48] aquacomputer_d5next 0003:0C70:F0B6.0006: unknown global tag 0xe [ 400.013300][ T48] aquacomputer_d5next 0003:0C70:F0B6.0006: item 0 0 1 14 parsing failed [ 400.014164][ T48] aquacomputer_d5next 0003:0C70:F0B6.0006: probe with driver aquacomputer_d5next failed with error -22 [ 400.111885][ T9232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.112443][ T9232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.146863][ T5812] usb 2-1: USB disconnect, device number 15 [ 400.468030][ T5734] hid (null): unknown global tag 0xe [ 400.475373][ T5617] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 400.475754][ T5617] Bluetooth: hci0: Injecting HCI hardware error event [ 400.493014][ T5609] Bluetooth: hci0: hardware error 0x00 [ 400.520757][ T5734] aquacomputer_d5next 0003:0C70:F0B6.0007: unknown global tag 0xe [ 400.520781][ T5734] aquacomputer_d5next 0003:0C70:F0B6.0007: item 0 0 1 14 parsing failed [ 400.521535][ T5734] aquacomputer_d5next 0003:0C70:F0B6.0007: probe with driver aquacomputer_d5next failed with error -22 [ 400.672304][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1041'. [ 400.767090][ T9239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.767641][ T9239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.797071][ T5734] usb 3-1: USB disconnect, device number 14 [ 400.935088][ T9256] team1: entered promiscuous mode [ 400.935204][ T9256] team1: entered allmulticast mode [ 400.936060][ T9256] 8021q: adding VLAN 0 to HW filter on device team1 [ 400.966922][ T510] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.966969][ T510] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.967007][ T510] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.967044][ T510] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.146257][ T9246] kvm: user requested TSC rate below hardware speed [ 401.572382][ T9278] netlink: 'syz.3.1046': attribute type 2 has an invalid length. [ 401.640488][ T5734] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 401.989160][ T5734] usb 5-1: device descriptor read/64, error -71 [ 402.229384][ T5734] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 402.359303][ T5734] usb 5-1: device descriptor read/64, error -71 [ 402.481100][ T5734] usb usb5-port1: attempt power cycle [ 402.710132][ T5609] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 402.880742][ T5734] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 402.965001][ T5734] usb 5-1: device descriptor read/8, error -71 [ 403.199182][ T5734] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 403.219830][ T5734] usb 5-1: device descriptor read/8, error -71 [ 403.339679][ T5734] usb usb5-port1: unable to enumerate USB device [ 404.644243][ T9319] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 405.189290][ T5609] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 405.189626][ T5609] Bluetooth: hci1: Injecting HCI hardware error event [ 405.199326][ T5617] Bluetooth: hci1: hardware error 0x00 [ 405.403638][ T9332] 9p: Bad value for 'wfdno' [ 405.553150][ T9333] sg_write: data in/out 498016/136 bytes for SCSI command 0x0-- guessing data in; [ 405.553150][ T9333] program syz.0.1065 not setting count and/or reply_len properly [ 408.159240][ T5617] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 408.365649][ T9354] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 410.549233][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 414.538053][ T9433] loop4: detected capacity change from 0 to 7 [ 414.603176][ T9433] Dev loop4: unable to read RDB block 7 [ 414.603204][ T9433] loop4: AHDI p1 p2 p3 [ 414.603222][ T9433] loop4: partition table partially beyond EOD, truncated [ 414.603411][ T9433] loop4: p1 start 1601398130 is beyond EOD, truncated [ 414.603430][ T9433] loop4: p2 start 1702059890 is beyond EOD, truncated [ 414.659373][ T4964] Dev loop4: unable to read RDB block 7 [ 414.659415][ T4964] loop4: AHDI p1 p2 p3 [ 414.659437][ T4964] loop4: partition table partially beyond EOD, truncated [ 414.659685][ T4964] loop4: p1 start 1601398130 is beyond EOD, truncated [ 414.659705][ T4964] loop4: p2 start 1702059890 is beyond EOD, truncated [ 415.266335][ T9449] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1095'. [ 416.647702][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'. [ 416.846986][ T9468] loop9: detected capacity change from 0 to 7 [ 416.864181][ T9468] Dev loop9: unable to read RDB block 7 [ 416.864223][ T9468] loop9: unable to read partition table [ 416.864444][ T9468] loop9: partition table beyond EOD, truncated [ 416.864463][ T9468] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 417.600147][ T9473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.643157][ T9473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.348054][ T9488] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 419.804353][ T9494] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 420.195074][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 420.195095][ T36] audit: type=1326 audit(1783429969.619:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9497 comm="syz.2.1118" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c8bde59 code=0x7ffc0000 [ 420.209069][ T36] audit: type=1326 audit(1783429969.689:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9497 comm="syz.2.1118" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f756c8bde59 code=0x7ffc0000 [ 420.223674][ T36] audit: type=1326 audit(1783429969.699:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9497 comm="syz.2.1118" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c8bde59 code=0x7ffc0000 [ 420.234081][ T36] audit: type=1326 audit(1783429969.709:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9497 comm="syz.2.1118" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f756c8bde59 code=0x7ffc0000 [ 420.234134][ T36] audit: type=1326 audit(1783429969.719:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9497 comm="syz.2.1118" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c8bde59 code=0x7ffc0000 [ 420.246323][ T36] audit: type=1326 audit(1783429969.719:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9497 comm="syz.2.1118" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c8bde59 code=0x7ffc0000 [ 420.375121][ T9500] FAULT_INJECTION: forcing a failure. [ 420.375121][ T9500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.375162][ T9500] CPU: 0 UID: 0 PID: 9500 Comm: syz.3.1119 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 420.375193][ T9500] Tainted: [L]=SOFTLOCKUP [ 420.375201][ T9500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 420.375215][ T9500] Call Trace: [ 420.375223][ T9500] [ 420.375232][ T9500] dump_stack_lvl+0xe8/0x150 [ 420.375277][ T9500] should_fail_ex+0x467/0x600 [ 420.375318][ T9500] _copy_to_user+0x31/0xb0 [ 420.375345][ T9500] simple_read_from_buffer+0xe1/0x170 [ 420.375445][ T9500] proc_fail_nth_read+0x1be/0x230 [ 420.375522][ T9500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.375549][ T9500] ? rw_verify_area+0x250/0x4d0 [ 420.375579][ T9500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.375602][ T9500] vfs_read+0x219/0xa90 [ 420.375637][ T9500] ? __pfx_vfs_read+0x10/0x10 [ 420.375667][ T9500] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 420.375759][ T9500] ? lockdep_hardirqs_on+0x7a/0x110 [ 420.375814][ T9500] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 420.375847][ T9500] ? mutex_lock_nested+0x152/0x1d0 [ 420.375870][ T9500] ? fdget_pos+0x252/0x320 [ 420.375903][ T9500] ksys_read+0x156/0x270 [ 420.375933][ T9500] ? __pfx_ksys_read+0x10/0x10 [ 420.375959][ T9500] ? __pfx_blkdev_ioctl+0x10/0x10 [ 420.376055][ T9500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.376082][ T9500] do_syscall_64+0x174/0x580 [ 420.376113][ T9500] ? trace_irq_disable+0x3b/0x140 [ 420.376148][ T9500] ? clear_bhb_loop+0x40/0x90 [ 420.376175][ T9500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.376197][ T9500] RIP: 0033:0x7f663c3de68e [ 420.376219][ T9500] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 420.376238][ T9500] RSP: 002b:00007f663a675fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 420.376261][ T9500] RAX: ffffffffffffffda RBX: 00007f663a6766c0 RCX: 00007f663c3de68e [ 420.376278][ T9500] RDX: 000000000000000f RSI: 00007f663a6760a0 RDI: 0000000000000004 [ 420.376291][ T9500] RBP: 00007f663a676090 R08: 0000000000000000 R09: 0000000000000000 [ 420.376304][ T9500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.376317][ T9500] R13: 00007f663c6a6038 R14: 00007f663c6a5fa0 R15: 00007ffc74360158 [ 420.376350][ T9500] [ 420.412064][ T9502] FAULT_INJECTION: forcing a failure. [ 420.412064][ T9502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.412160][ T9502] CPU: 0 UID: 0 PID: 9502 Comm: syz.4.1120 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 420.412229][ T9502] Tainted: [L]=SOFTLOCKUP [ 420.412247][ T9502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 420.412282][ T9502] Call Trace: [ 420.412295][ T9502] [ 420.412320][ T9502] dump_stack_lvl+0xe8/0x150 [ 420.412445][ T9502] should_fail_ex+0x467/0x600 [ 420.412569][ T9502] _copy_from_user+0x2d/0xb0 [ 420.412629][ T9502] btf_new_fd+0x301/0xc10 [ 420.412835][ T9502] __sys_bpf+0xd2e/0xd90 [ 420.412955][ T9502] ? __pfx___sys_bpf+0x10/0x10 [ 420.413009][ T9502] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 420.413093][ T9502] ? rt_mutex_slowunlock+0x219/0x460 [ 420.413191][ T9502] ? ksys_write+0x248/0x270 [ 420.413260][ T9502] ? __pfx_ksys_write+0x10/0x10 [ 420.413336][ T9502] __x64_sys_bpf+0xba/0xd0 [ 420.413432][ T9502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.413496][ T9502] do_syscall_64+0x174/0x580 [ 420.413564][ T9502] ? trace_irq_disable+0x3b/0x140 [ 420.413614][ T9502] ? clear_bhb_loop+0x40/0x90 [ 420.413694][ T9502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.413739][ T9502] RIP: 0033:0x7f29be54de59 [ 420.413802][ T9502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.413857][ T9502] RSP: 002b:00007f29bc7a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.413917][ T9502] RAX: ffffffffffffffda RBX: 00007f29be7d5fa0 RCX: 00007f29be54de59 [ 420.413957][ T9502] RDX: 0000000000000028 RSI: 0000200000000300 RDI: 0000000000000012 [ 420.413995][ T9502] RBP: 00007f29bc7a6090 R08: 0000000000000000 R09: 0000000000000000 [ 420.414031][ T9502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.414063][ T9502] R13: 00007f29be7d6038 R14: 00007f29be7d5fa0 R15: 00007ffe3432f708 [ 420.414145][ T9502] [ 420.988086][ T9510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1122'. [ 422.309354][ T9521] sg_write: data in/out 235872/136 bytes for SCSI command 0x0-- guessing data in; [ 422.309354][ T9521] program syz.0.1126 not setting count and/or reply_len properly [ 423.137999][ T36] audit: type=1326 audit(1783429972.459:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9529 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4368d5de59 code=0x0 [ 424.333236][ T9546] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 425.030800][ T48] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 425.132103][ T9562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1141'. [ 425.183957][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 425.183995][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.184044][ T48] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 425.184069][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.237927][ T48] usb 5-1: config 0 descriptor?? [ 425.311559][ T9566] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 425.698815][ T48] hid (null): unknown global tag 0xe [ 425.711490][ T48] aquacomputer_d5next 0003:0C70:F0B6.0008: unknown global tag 0xe [ 425.711514][ T48] aquacomputer_d5next 0003:0C70:F0B6.0008: item 0 0 1 14 parsing failed [ 425.712324][ T48] aquacomputer_d5next 0003:0C70:F0B6.0008: probe with driver aquacomputer_d5next failed with error -22 [ 425.915891][ T9550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.916467][ T9550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.952181][ T11] usb 5-1: USB disconnect, device number 25 [ 426.861377][ T36] audit: type=1326 audit(1783429976.349:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.1.1151" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 426.861537][ T36] audit: type=1326 audit(1783429976.349:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.1.1151" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 426.864692][ T36] audit: type=1326 audit(1783429976.349:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.1.1151" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 426.864953][ T36] audit: type=1326 audit(1783429976.349:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.1.1151" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 426.865104][ T36] audit: type=1326 audit(1783429976.349:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.1.1151" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 426.865325][ T36] audit: type=1326 audit(1783429976.349:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.1.1151" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b889bf6c7 code=0x7ffc0000 [ 426.865629][ T36] audit: type=1326 audit(1783429976.349:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.1.1151" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3b8897e68e code=0x7ffc0000 [ 426.889032][ T5734] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 426.898011][ T36] audit: type=1326 audit(1783429976.379:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.1.1151" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3b8897e68e code=0x7ffc0000 [ 426.898148][ T36] audit: type=1326 audit(1783429976.379:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.1.1151" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3b8897e68e code=0x7ffc0000 [ 426.898261][ T36] audit: type=1326 audit(1783429976.379:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.1.1151" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3b8897e68e code=0x7ffc0000 [ 427.019237][ T11] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 427.195216][ T5734] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 207, changing to 11 [ 427.195278][ T5734] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1439, setting to 1024 [ 427.195307][ T5734] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 427.195334][ T5734] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 427.230987][ T5734] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 427.231017][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.237382][ T5734] usb 4-1: Product: syz [ 427.237413][ T5734] usb 4-1: Manufacturer: 䐊 [ 427.243998][ T5734] usb 4-1: SerialNumber: syz [ 427.285186][ T11] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 427.285216][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.285238][ T11] usb 3-1: Product: syz [ 427.285252][ T11] usb 3-1: Manufacturer: syz [ 427.285267][ T11] usb 3-1: SerialNumber: syz [ 427.361611][ T11] usb 3-1: config 0 descriptor?? [ 427.454680][ T11] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 427.598179][ T9586] random: crng reseeded on system resumption [ 427.729678][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 427.735836][ T11] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 427.735983][ T11] usb 3-1: media controller created [ 428.121765][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.127508][ T5734] cdc_ncm 4-1:1.0: bind() failure [ 428.174192][ T5734] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 428.174262][ T5734] cdc_ncm 4-1:1.1: bind() failure [ 428.225802][ T5734] usb 4-1: USB disconnect, device number 10 [ 428.568348][ T11] DVB: Unable to find symbol mt352_attach() [ 428.698189][ T11] DVB: Unable to find symbol nxt6000_attach() [ 428.698206][ T11] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 428.737880][ T11] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 428.767816][ T11] dvb-usb: schedule remote query interval to 1000 msecs. [ 428.767840][ T11] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 428.768174][ T11] dvb-usb: bulk message failed: -22 (7/0) [ 428.768193][ T11] dvb-usb: bulk message failed: -22 (7/0) [ 428.783000][ T9617] loop4: detected capacity change from 0 to 7 [ 428.790660][ T9615] sg_write: data in/out 498016/136 bytes for SCSI command 0x0-- guessing data in; [ 428.790660][ T9615] program syz.4.1157 not setting count and/or reply_len properly [ 428.844660][ T11] usb 3-1: USB disconnect, device number 15 [ 428.846428][ T9617] Dev loop4: unable to read RDB block 7 [ 428.846460][ T9617] loop4: AHDI p1 p2 p3 [ 428.846479][ T9617] loop4: partition table partially beyond EOD, truncated [ 428.846750][ T9617] loop4: p1 start 1601398130 is beyond EOD, truncated [ 428.846771][ T9617] loop4: p2 start 1702059890 is beyond EOD, truncated [ 429.086355][ T9594] mmap: syz.1.1151 (9594) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 429.245498][ T11] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 430.864335][ T9639] FAULT_INJECTION: forcing a failure. [ 430.864335][ T9639] name failslab, interval 1, probability 0, space 0, times 0 [ 430.864391][ T9639] CPU: 1 UID: 0 PID: 9639 Comm: syz.3.1165 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 430.864421][ T9639] Tainted: [L]=SOFTLOCKUP [ 430.864429][ T9639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 430.864446][ T9639] Call Trace: [ 430.864454][ T9639] [ 430.864463][ T9639] dump_stack_lvl+0xe8/0x150 [ 430.864504][ T9639] should_fail_ex+0x467/0x600 [ 430.864542][ T9639] should_failslab+0xa8/0x100 [ 430.864572][ T9639] kmem_cache_alloc_node_noprof+0xae/0x670 [ 430.864675][ T9639] ? dup_task_struct+0x52/0x8f0 [ 430.864730][ T9639] ? dup_task_struct+0x52/0x8f0 [ 430.864764][ T9639] dup_task_struct+0x52/0x8f0 [ 430.864791][ T9639] ? rt_spin_unlock+0x163/0x200 [ 430.864819][ T9639] copy_process+0x820/0x4390 [ 430.864877][ T9639] ? __pfx_copy_process+0x10/0x10 [ 430.864908][ T9639] ? kasan_quarantine_put+0xbb/0x1f0 [ 430.864965][ T9639] ? lockdep_hardirqs_on+0x7a/0x110 [ 430.865004][ T9639] kernel_clone+0x2d2/0x8d0 [ 430.865034][ T9639] ? __pfx_kernel_clone+0x10/0x10 [ 430.865061][ T9639] ? __seccomp_filter+0xd14/0x1e00 [ 430.865139][ T9639] __x64_sys_clone+0x1b6/0x230 [ 430.865172][ T9639] ? __pfx___x64_sys_clone+0x10/0x10 [ 430.865218][ T9639] ? __pfx_ksys_write+0x10/0x10 [ 430.865249][ T9639] ? __secure_computing+0xe7/0x2b0 [ 430.865275][ T9639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.865299][ T9639] do_syscall_64+0x174/0x580 [ 430.865328][ T9639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.865351][ T9639] ? clear_bhb_loop+0x40/0x90 [ 430.865379][ T9639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.865407][ T9639] RIP: 0033:0x7f663c41de59 [ 430.865428][ T9639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.865447][ T9639] RSP: 002b:00007f663a675fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 430.865471][ T9639] RAX: ffffffffffffffda RBX: 00007f663c6a5fa0 RCX: 00007f663c41de59 [ 430.865487][ T9639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 430.865500][ T9639] RBP: 00007f663a676090 R08: 0000000000000000 R09: 0000000000000000 [ 430.865514][ T9639] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 430.865527][ T9639] R13: 00007f663c6a6038 R14: 00007f663c6a5fa0 R15: 00007ffc74360158 [ 430.865560][ T9639] [ 431.728315][ T11] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 431.754826][ T9653] netlink: 'syz.3.1170': attribute type 2 has an invalid length. [ 432.536306][ T11] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 432.536338][ T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.536361][ T11] usb 5-1: config 0 has no interface number 0 [ 432.536407][ T11] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 5120, setting to 1024 [ 432.536438][ T11] usb 5-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 432.536465][ T11] usb 5-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.536495][ T11] usb 5-1: config 0 interface 11 has no altsetting 0 [ 432.536530][ T11] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 432.536555][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.550984][ T11] usb 5-1: config 0 descriptor?? [ 432.713044][ T11] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 432.713634][ T11] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 87 [ 432.736352][ T11] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 432.738034][ T11] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 432.738124][ T11] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 432.738210][ T11] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 432.738355][ T11] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 432.738443][ T11] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 432.797843][ T11] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 432.832165][ T11] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 432.832267][ T11] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 432.832351][ T11] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 432.832433][ T11] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 432.832514][ T11] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 432.832602][ T11] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 432.922739][ T11] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 432.964536][ T11] usb 5-1: USB disconnect, device number 26 [ 433.105227][ T11] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 433.160621][ T11] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 433.166688][ T11] keyspan 5-1:0.11: device disconnected [ 435.184115][ T9677] FAULT_INJECTION: forcing a failure. [ 435.184115][ T9677] name failslab, interval 1, probability 0, space 0, times 0 [ 435.184154][ T9677] CPU: 0 UID: 0 PID: 9677 Comm: syz.4.1179 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 435.184184][ T9677] Tainted: [L]=SOFTLOCKUP [ 435.184191][ T9677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 435.184204][ T9677] Call Trace: [ 435.184212][ T9677] [ 435.184220][ T9677] dump_stack_lvl+0xe8/0x150 [ 435.184259][ T9677] should_fail_ex+0x467/0x600 [ 435.184296][ T9677] should_failslab+0xa8/0x100 [ 435.184325][ T9677] kmem_cache_alloc_node_noprof+0xae/0x670 [ 435.184362][ T9677] ? __alloc_skb+0x1d7/0x7a0 [ 435.184467][ T9677] ? __alloc_skb+0x1d7/0x7a0 [ 435.184506][ T9677] __alloc_skb+0x1d7/0x7a0 [ 435.184552][ T9677] netlink_sendmsg+0x5d4/0xb40 [ 435.184647][ T9677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.184670][ T9677] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 435.184702][ T9677] ? __kernel_text_address+0xd/0x30 [ 435.184756][ T9677] ? unwind_get_return_address+0x4d/0x90 [ 435.184809][ T9677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.184828][ T9677] sock_sendmsg_nosec+0x13a/0x180 [ 435.184859][ T9677] ____sys_sendmsg+0x565/0x870 [ 435.184880][ T9677] ? __might_fault+0xaf/0x130 [ 435.184951][ T9677] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.184983][ T9677] ? import_iovec+0x73/0xa0 [ 435.185034][ T9677] ___sys_sendmsg+0x2a5/0x360 [ 435.185054][ T9677] ? __lock_acquire+0x683/0x2ce0 [ 435.185082][ T9677] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.185140][ T9677] ? __fget_files+0x2a/0x420 [ 435.185160][ T9677] ? __fget_files+0x3a8/0x420 [ 435.185192][ T9677] __x64_sys_sendmsg+0x1b7/0x290 [ 435.185217][ T9677] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.185258][ T9677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.185282][ T9677] do_syscall_64+0x174/0x580 [ 435.185312][ T9677] ? trace_irq_disable+0x3b/0x140 [ 435.185332][ T9677] ? clear_bhb_loop+0x40/0x90 [ 435.185359][ T9677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.185381][ T9677] RIP: 0033:0x7f29be54de59 [ 435.185402][ T9677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.185421][ T9677] RSP: 002b:00007f29bc7a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.185444][ T9677] RAX: ffffffffffffffda RBX: 00007f29be7d5fa0 RCX: 00007f29be54de59 [ 435.185459][ T9677] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 435.185473][ T9677] RBP: 00007f29bc7a6090 R08: 0000000000000000 R09: 0000000000000000 [ 435.185486][ T9677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.185498][ T9677] R13: 00007f29be7d6038 R14: 00007f29be7d5fa0 R15: 00007ffe3432f708 [ 435.185532][ T9677] [ 435.499649][ T9680] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 435.828799][ T9694] netlink: 'syz.1.1184': attribute type 2 has an invalid length. [ 435.839544][ T48] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 436.002520][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 436.002555][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.002613][ T48] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 436.002638][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.071173][ T48] usb 3-1: config 0 descriptor?? [ 436.072469][ T9696] FAULT_INJECTION: forcing a failure. [ 436.072469][ T9696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.072504][ T9696] CPU: 0 UID: 0 PID: 9696 Comm: syz.0.1187 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 436.072533][ T9696] Tainted: [L]=SOFTLOCKUP [ 436.072540][ T9696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 436.072552][ T9696] Call Trace: [ 436.072560][ T9696] [ 436.072569][ T9696] dump_stack_lvl+0xe8/0x150 [ 436.072609][ T9696] should_fail_ex+0x467/0x600 [ 436.072647][ T9696] _copy_from_user+0x2d/0xb0 [ 436.072671][ T9696] input_event_from_user+0xb1/0x290 [ 436.072821][ T9696] ? __pfx_input_event_from_user+0x10/0x10 [ 436.072859][ T9696] ? rt_spin_unlock+0x163/0x200 [ 436.072887][ T9696] evdev_write+0x2ca/0x4c0 [ 436.072916][ T9696] ? __lock_acquire+0x683/0x2ce0 [ 436.072944][ T9696] ? __pfx_evdev_write+0x10/0x10 [ 436.072976][ T9696] ? bpf_lsm_file_permission+0x9/0x20 [ 436.073070][ T9696] ? security_file_permission+0x75/0x260 [ 436.073094][ T9696] ? rw_verify_area+0x209/0x4d0 [ 436.073122][ T9696] ? __pfx_evdev_write+0x10/0x10 [ 436.073151][ T9696] vfs_write+0x29f/0xbb0 [ 436.073186][ T9696] ? __pfx_vfs_write+0x10/0x10 [ 436.073213][ T9696] ? __fget_files+0x2a/0x420 [ 436.073238][ T9696] ? __fget_files+0x2a/0x420 [ 436.073258][ T9696] ? __fget_files+0x3a8/0x420 [ 436.073278][ T9696] ? __fget_files+0x2a/0x420 [ 436.073309][ T9696] ksys_write+0x156/0x270 [ 436.073339][ T9696] ? __pfx_ksys_write+0x10/0x10 [ 436.073373][ T9696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.073399][ T9696] do_syscall_64+0x174/0x580 [ 436.073430][ T9696] ? trace_irq_disable+0x3b/0x140 [ 436.073452][ T9696] ? clear_bhb_loop+0x40/0x90 [ 436.073478][ T9696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.073518][ T9696] RIP: 0033:0x7f4368d5de59 [ 436.073557][ T9696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.073577][ T9696] RSP: 002b:00007f4366fb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 436.073601][ T9696] RAX: ffffffffffffffda RBX: 00007f4368fe5fa0 RCX: 00007f4368d5de59 [ 436.073618][ T9696] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000005 [ 436.073632][ T9696] RBP: 00007f4366fb6090 R08: 0000000000000000 R09: 0000000000000000 [ 436.073646][ T9696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.073659][ T9696] R13: 00007f4368fe6038 R14: 00007f4368fe5fa0 R15: 00007ffe5ccccab8 [ 436.073695][ T9696] [ 436.583646][ T48] hid (null): unknown global tag 0xe [ 436.603313][ T48] aquacomputer_d5next 0003:0C70:F0B6.0009: unknown global tag 0xe [ 436.603337][ T48] aquacomputer_d5next 0003:0C70:F0B6.0009: item 0 0 1 14 parsing failed [ 436.604165][ T48] aquacomputer_d5next 0003:0C70:F0B6.0009: probe with driver aquacomputer_d5next failed with error -22 [ 436.847771][ T9701] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 437.322667][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.323153][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.353262][ T5812] usb 3-1: USB disconnect, device number 16 [ 437.864792][ T5727] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 438.022001][ T5727] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 438.022031][ T5727] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.022051][ T5727] usb 2-1: config 0 has no interface number 0 [ 438.022095][ T5727] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 5120, setting to 1024 [ 438.022124][ T5727] usb 2-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 438.022150][ T5727] usb 2-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 438.022179][ T5727] usb 2-1: config 0 interface 11 has no altsetting 0 [ 438.022214][ T5727] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 438.022239][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.051117][ T5727] usb 2-1: config 0 descriptor?? [ 438.104009][ T5727] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 438.116987][ T5727] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 87 [ 438.144752][ T5727] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 438.144846][ T5727] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 438.144934][ T5727] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 438.145020][ T5727] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 438.145105][ T5727] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 438.145205][ T5727] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 438.244922][ T5727] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 438.310178][ T5727] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 438.310274][ T5727] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 438.310381][ T5727] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 438.310465][ T5727] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 438.310569][ T5727] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 438.310655][ T5727] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 438.398440][ T5727] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 438.449426][ T5727] usb 2-1: USB disconnect, device number 16 [ 438.621140][ T5727] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 438.644294][ T5727] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 438.659975][ T5727] keyspan 2-1:0.11: device disconnected [ 439.256528][ T9728] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1196'. [ 439.546011][ T9739] FAULT_INJECTION: forcing a failure. [ 439.546011][ T9739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.546071][ T9739] CPU: 0 UID: 0 PID: 9739 Comm: syz.1.1199 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 439.546100][ T9739] Tainted: [L]=SOFTLOCKUP [ 439.546107][ T9739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 439.546119][ T9739] Call Trace: [ 439.546127][ T9739] [ 439.546136][ T9739] dump_stack_lvl+0xe8/0x150 [ 439.546173][ T9739] should_fail_ex+0x467/0x600 [ 439.546214][ T9739] strncpy_from_user+0x36/0x2c0 [ 439.546343][ T9739] do_getname+0x77/0x250 [ 439.546422][ T9739] do_sys_openat2+0xcc/0x200 [ 439.546445][ T9739] ? __pfx_do_sys_openat2+0x10/0x10 [ 439.546466][ T9739] ? ksys_write+0x248/0x270 [ 439.546500][ T9739] __x64_sys_openat+0x138/0x170 [ 439.546523][ T9739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.546546][ T9739] do_syscall_64+0x174/0x580 [ 439.546576][ T9739] ? clear_bhb_loop+0x40/0x90 [ 439.546601][ T9739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.546623][ T9739] RIP: 0033:0x7f3b8897e68e [ 439.546641][ T9739] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 439.546659][ T9739] RSP: 002b:00007f3b86bd3ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 439.546680][ T9739] RAX: ffffffffffffffda RBX: 00007f3b86bd46c0 RCX: 00007f3b8897e68e [ 439.546695][ T9739] RDX: 0000000000000002 RSI: 00007f3b86bd3f90 RDI: ffffffffffffff9c [ 439.546709][ T9739] RBP: 00007f3b86bd4090 R08: 0000000000000000 R09: 0000000000000000 [ 439.546722][ T9739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.546734][ T9739] R13: 00007f3b88c46218 R14: 00007f3b88c46180 R15: 00007ffc9895c228 [ 439.546765][ T9739] [ 439.960272][ T9740] netlink: 'syz.3.1200': attribute type 2 has an invalid length. [ 440.089374][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.089448][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.649823][ T9744] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1202'. [ 440.798681][ T9748] FAULT_INJECTION: forcing a failure. [ 440.798681][ T9748] name failslab, interval 1, probability 0, space 0, times 0 [ 440.798721][ T9748] CPU: 1 UID: 0 PID: 9748 Comm: syz.1.1205 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 440.798752][ T9748] Tainted: [L]=SOFTLOCKUP [ 440.798760][ T9748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 440.798772][ T9748] Call Trace: [ 440.798781][ T9748] [ 440.798791][ T9748] dump_stack_lvl+0xe8/0x150 [ 440.798831][ T9748] should_fail_ex+0x467/0x600 [ 440.798869][ T9748] should_failslab+0xa8/0x100 [ 440.798897][ T9748] kmem_cache_alloc_node_noprof+0xae/0x670 [ 440.798935][ T9748] ? __alloc_skb+0x1d7/0x7a0 [ 440.798969][ T9748] ? __alloc_skb+0x1d7/0x7a0 [ 440.799008][ T9748] __alloc_skb+0x1d7/0x7a0 [ 440.799046][ T9748] netlink_sendmsg+0x5d4/0xb40 [ 440.799079][ T9748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.799104][ T9748] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 440.799137][ T9748] ? __kernel_text_address+0xd/0x30 [ 440.799159][ T9748] ? unwind_get_return_address+0x4d/0x90 [ 440.799187][ T9748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.799210][ T9748] sock_sendmsg_nosec+0x13a/0x180 [ 440.799245][ T9748] ____sys_sendmsg+0x565/0x870 [ 440.799269][ T9748] ? __might_fault+0xaf/0x130 [ 440.799300][ T9748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.799335][ T9748] ? import_iovec+0x73/0xa0 [ 440.799365][ T9748] ___sys_sendmsg+0x2a5/0x360 [ 440.799387][ T9748] ? __lock_acquire+0x683/0x2ce0 [ 440.799417][ T9748] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.799482][ T9748] ? __fget_files+0x2a/0x420 [ 440.799505][ T9748] ? __fget_files+0x3a8/0x420 [ 440.799540][ T9748] __x64_sys_sendmsg+0x1b7/0x290 [ 440.799575][ T9748] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.799620][ T9748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.799648][ T9748] do_syscall_64+0x174/0x580 [ 440.799683][ T9748] ? trace_irq_disable+0x3b/0x140 [ 440.799706][ T9748] ? clear_bhb_loop+0x40/0x90 [ 440.799736][ T9748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.799760][ T9748] RIP: 0033:0x7f3b889bde59 [ 440.799781][ T9748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.799801][ T9748] RSP: 002b:00007f3b86c16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.799825][ T9748] RAX: ffffffffffffffda RBX: 00007f3b88c45fa0 RCX: 00007f3b889bde59 [ 440.799842][ T9748] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 440.799857][ T9748] RBP: 00007f3b86c16090 R08: 0000000000000000 R09: 0000000000000000 [ 440.799872][ T9748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.799886][ T9748] R13: 00007f3b88c46038 R14: 00007f3b88c45fa0 R15: 00007ffc9895c228 [ 440.799922][ T9748] [ 442.427798][ T9753] binder: 9751:9753 ioctl c0306201 0 returned -14 [ 442.503874][ T9762] binder: 9751:9762 ioctl c0306201 0 returned -14 [ 444.309244][ T48] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 444.461936][ T48] usb 4-1: device descriptor read/64, error -71 [ 444.699254][ T48] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 445.797859][ T48] usb 4-1: device descriptor read/64, error -71 [ 445.972689][ T48] usb usb4-port1: attempt power cycle [ 446.184858][ T9783] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 446.742256][ T5617] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 446.742428][ T5617] Bluetooth: hci3: Injecting HCI hardware error event [ 446.743086][ T5617] Bluetooth: hci3: hardware error 0x00 [ 446.923565][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 446.923585][ T36] audit: type=1326 audit(1783429996.409:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 446.923899][ T36] audit: type=1326 audit(1783429996.409:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 447.037375][ T36] audit: type=1326 audit(1783429996.519:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 447.037433][ T36] audit: type=1326 audit(1783429996.519:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 447.037481][ T36] audit: type=1326 audit(1783429996.519:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 447.037536][ T36] audit: type=1326 audit(1783429996.519:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 447.037585][ T36] audit: type=1326 audit(1783429996.519:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 447.037633][ T36] audit: type=1326 audit(1783429996.519:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 447.053698][ T36] audit: type=1326 audit(1783429996.539:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 447.067872][ T36] audit: type=1326 audit(1783429996.539:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.1.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 449.280883][ T5617] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 449.509336][ T9822] batadv_slave_0: entered allmulticast mode [ 453.423077][ T9840] netlink: 'syz.0.1229': attribute type 2 has an invalid length. [ 453.639046][ T5727] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 453.792599][ T5727] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 453.792632][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.824914][ T5727] usb 4-1: config 0 descriptor?? [ 453.859244][ T5727] cp210x 4-1:0.0: cp210x converter detected [ 454.250256][ C1] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 456.039256][ T11] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 456.212574][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 456.212625][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.212712][ T11] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 456.212730][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.317662][ T11] usb 3-1: config 0 descriptor?? [ 457.805807][ T11] hid (null): unknown global tag 0xe [ 458.301125][ T9860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.321767][ T9860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.359247][ T5735] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 458.487203][ T11] aquacomputer_d5next 0003:0C70:F0B6.000A: unknown global tag 0xe [ 458.487244][ T11] aquacomputer_d5next 0003:0C70:F0B6.000A: item 0 0 1 14 parsing failed [ 458.513178][ T11] aquacomputer_d5next 0003:0C70:F0B6.000A: probe with driver aquacomputer_d5next failed with error -22 [ 458.527865][ T5735] usb 2-1: Using ep0 maxpacket: 16 [ 458.553005][ T5735] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 458.573022][ T5735] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 458.573050][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.573070][ T5735] usb 2-1: Product: syz [ 458.573083][ T5735] usb 2-1: Manufacturer: syz [ 458.573097][ T5735] usb 2-1: SerialNumber: syz [ 458.636212][ T5735] r8152-cfgselector 2-1: Unknown version 0x0000 [ 458.636238][ T5735] r8152-cfgselector 2-1: config 0 descriptor?? [ 458.705280][ T11] usb 3-1: USB disconnect, device number 17 [ 458.876622][ T5727] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -110 [ 458.876653][ T5727] cp210x 4-1:0.0: querying part number failed [ 458.901037][ T9870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.044794][ T5727] usb 4-1: cp210x converter now attached to ttyUSB0 [ 459.370621][ T9880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.371176][ T9880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.358596][ T4980] usb 4-1: USB disconnect, device number 14 [ 460.513464][ T11] r8152-cfgselector 2-1: USB disconnect, device number 17 [ 460.552913][ T4980] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 460.556342][ T4980] cp210x 4-1:0.0: device disconnected [ 460.657981][ T9893] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 460.657981][ T9893] program syz.0.1247 not setting count and/or reply_len properly [ 460.869535][ T9899] 9p: Bad value for 'wfdno' [ 461.123891][ T9905] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 461.875759][ T9911] loop5: detected capacity change from 0 to 6 [ 461.923074][ T5735] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 461.941255][ T9911] Dev loop5: unable to read RDB block 6 [ 461.941295][ T9911] loop5: unable to read partition table [ 461.941480][ T9911] loop5: partition table beyond EOD, truncated [ 461.948391][ T9911] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 462.102048][ T5735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 462.102083][ T5735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.102119][ T5735] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 462.102141][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.282536][ T5735] usb 2-1: config 0 descriptor?? [ 462.806535][ T5735] hid (null): unknown global tag 0xe [ 462.887936][ T5735] aquacomputer_d5next 0003:0C70:F0B6.000B: unknown global tag 0xe [ 462.887964][ T5735] aquacomputer_d5next 0003:0C70:F0B6.000B: item 0 0 1 14 parsing failed [ 462.888908][ T5735] aquacomputer_d5next 0003:0C70:F0B6.000B: probe with driver aquacomputer_d5next failed with error -22 [ 462.983252][ T9935] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 463.586864][ T5812] usb 2-1: USB disconnect, device number 18 [ 463.894172][ T9945] netlink: 'syz.0.1262': attribute type 10 has an invalid length. [ 465.580247][ T9960] FAULT_INJECTION: forcing a failure. [ 465.580247][ T9960] name failslab, interval 1, probability 0, space 0, times 0 [ 465.580287][ T9960] CPU: 0 UID: 0 PID: 9960 Comm: syz.1.1267 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 465.580331][ T9960] Tainted: [L]=SOFTLOCKUP [ 465.580339][ T9960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 465.580360][ T9960] Call Trace: [ 465.580369][ T9960] [ 465.580379][ T9960] dump_stack_lvl+0xe8/0x150 [ 465.580429][ T9960] should_fail_ex+0x467/0x600 [ 465.580465][ T9960] should_failslab+0xa8/0x100 [ 465.580492][ T9960] __kmalloc_noprof+0xfe/0x780 [ 465.580514][ T9960] ? tomoyo_encode+0x2ad/0x570 [ 465.580537][ T9960] ? tomoyo_encode+0x2ad/0x570 [ 465.580568][ T9960] tomoyo_encode+0x2ad/0x570 [ 465.580599][ T9960] tomoyo_realpath_from_path+0x5fa/0x640 [ 465.580637][ T9960] ? tomoyo_path_number_perm+0x219/0x5f0 [ 465.580671][ T9960] tomoyo_path_number_perm+0x246/0x5f0 [ 465.580706][ T9960] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 465.580738][ T9960] ? __lock_acquire+0x683/0x2ce0 [ 465.580792][ T9960] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 465.580823][ T9960] ? hook_file_ioctl+0x1f3/0x600 [ 465.580854][ T9960] ? lockdep_hardirqs_on+0x7a/0x110 [ 465.580904][ T9960] ? __fget_files+0x2a/0x420 [ 465.580929][ T9960] ? __fget_files+0x2a/0x420 [ 465.580949][ T9960] ? __fget_files+0x3a8/0x420 [ 465.580968][ T9960] ? __fget_files+0x2a/0x420 [ 465.580994][ T9960] security_file_ioctl+0xc3/0x2a0 [ 465.581019][ T9960] __se_sys_ioctl+0x47/0x170 [ 465.581047][ T9960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.581071][ T9960] do_syscall_64+0x174/0x580 [ 465.581102][ T9960] ? trace_irq_disable+0x3b/0x140 [ 465.581123][ T9960] ? clear_bhb_loop+0x40/0x90 [ 465.581150][ T9960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.581172][ T9960] RIP: 0033:0x7f3b889bde59 [ 465.581192][ T9960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.581211][ T9960] RSP: 002b:00007f3b86c16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.581234][ T9960] RAX: ffffffffffffffda RBX: 00007f3b88c45fa0 RCX: 00007f3b889bde59 [ 465.581250][ T9960] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 465.581264][ T9960] RBP: 00007f3b86c16090 R08: 0000000000000000 R09: 0000000000000000 [ 465.581278][ T9960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.581291][ T9960] R13: 00007f3b88c46038 R14: 00007f3b88c45fa0 R15: 00007ffc9895c228 [ 465.581324][ T9960] [ 465.581420][ T9960] ERROR: Out of memory at tomoyo_realpath_from_path. [ 466.135826][ T5735] libceph: connect (1)[c::]:6789 error -101 [ 466.136747][ T5735] libceph: mon0 (1)[c::]:6789 connect error [ 466.188095][ T5735] libceph: connect (1)[c::]:6789 error -101 [ 466.188229][ T5735] libceph: mon0 (1)[c::]:6789 connect error [ 466.198348][ T9953] ceph: No mds server is up or the cluster is laggy [ 466.442138][ T48] libceph: connect (1)[c::]:6789 error -101 [ 466.442333][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 466.723904][ T36] kauditd_printk_skb: 228 callbacks suppressed [ 466.723924][ T36] audit: type=1326 audit(1783430016.209:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9983 comm="syz.1.1274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 466.725723][ T36] audit: type=1326 audit(1783430016.209:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9983 comm="syz.1.1274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 466.725795][ T36] audit: type=1326 audit(1783430016.209:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9983 comm="syz.1.1274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 466.729146][ T36] audit: type=1326 audit(1783430016.209:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9983 comm="syz.1.1274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 466.729218][ T36] audit: type=1326 audit(1783430016.209:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9983 comm="syz.1.1274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 466.741492][ T48] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 466.757897][ T36] audit: type=1326 audit(1783430016.239:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9983 comm="syz.1.1274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 466.758049][ T36] audit: type=1326 audit(1783430016.239:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9983 comm="syz.1.1274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 466.774801][ T36] audit: type=1326 audit(1783430016.209:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9983 comm="syz.1.1274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b889bde59 code=0x7ffc0000 [ 467.033297][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 467.050414][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.050476][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 467.050498][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 467.050514][ T48] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 467.050531][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 467.051678][ T48] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 467.051711][ T48] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 467.051727][ T48] usb 5-1: Manufacturer: syz [ 467.138069][ T48] usb 5-1: config 0 descriptor?? [ 467.409882][ T9991] sg_write: data in/out 432480/136 bytes for SCSI command 0x0-- guessing data in; [ 467.409882][ T9991] program syz.2.1277 not setting count and/or reply_len properly [ 467.549266][ T48] rc_core: IR keymap rc-hauppauge not found [ 467.549282][ T48] Registered IR keymap rc-empty [ 467.549985][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 467.571677][ T9990] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 467.578178][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 467.758642][ T48] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 467.807419][ T48] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 467.968853][ T36] audit: type=1326 audit(1783430017.449:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.2.1281" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c8bde59 code=0x7ffc0000 [ 467.968908][ T36] audit: type=1326 audit(1783430017.449:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.2.1281" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c8bde59 code=0x7ffc0000 [ 467.993178][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.034637][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.055475][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.066368][T10007] FAULT_INJECTION: forcing a failure. [ 468.066368][T10007] name failslab, interval 1, probability 0, space 0, times 0 [ 468.066395][T10007] CPU: 1 UID: 0 PID: 10007 Comm: syz.2.1281 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 468.066434][T10007] Tainted: [L]=SOFTLOCKUP [ 468.066440][T10007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 468.066449][T10007] Call Trace: [ 468.066455][T10007] [ 468.066462][T10007] dump_stack_lvl+0xe8/0x150 [ 468.066495][T10007] should_fail_ex+0x467/0x600 [ 468.066565][T10007] should_failslab+0xa8/0x100 [ 468.066586][T10007] __kmalloc_cache_noprof+0xa0/0x6b0 [ 468.066604][T10007] ? audit_log_d_path+0xb8/0x1a0 [ 468.066695][T10007] ? audit_log_d_path+0xb8/0x1a0 [ 468.066719][T10007] audit_log_d_path+0xb8/0x1a0 [ 468.066741][T10007] audit_log_d_path_exe+0x45/0x70 [ 468.066763][T10007] audit_log_task+0x2c3/0x3d0 [ 468.066783][T10007] ? __pfx_audit_log_task+0x10/0x10 [ 468.066810][T10007] audit_seccomp+0x85/0x190 [ 468.066831][T10007] __seccomp_filter+0xd14/0x1e00 [ 468.066858][T10007] ? __pfx___seccomp_filter+0x10/0x10 [ 468.066875][T10007] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 468.066899][T10007] ? rt_mutex_slowunlock+0x219/0x460 [ 468.066917][T10007] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 468.066940][T10007] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 468.066965][T10007] ? fput+0xa0/0xd0 [ 468.066994][T10007] ? __pfx_ksys_write+0x10/0x10 [ 468.067017][T10007] ? __secure_computing+0xe7/0x2b0 [ 468.067036][T10007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.067056][T10007] do_syscall_64+0x10e/0x580 [ 468.067079][T10007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.067095][T10007] ? clear_bhb_loop+0x40/0x90 [ 468.067114][T10007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.067130][T10007] RIP: 0033:0x7f756c8bde59 [ 468.067145][T10007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.067158][T10007] RSP: 002b:00007f756ab16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 468.067175][T10007] RAX: ffffffffffffffda RBX: 00007f756cb45fa0 RCX: 00007f756c8bde59 [ 468.067187][T10007] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 468.067197][T10007] RBP: 00007f756ab16090 R08: 0000000000000000 R09: 0000000000000000 [ 468.067206][T10007] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 468.067217][T10007] R13: 00007f756cb46038 R14: 00007f756cb45fa0 R15: 00007ffc25e21cd8 [ 468.067241][T10007] [ 468.074480][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.108579][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.337413][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.349154][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.379145][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.399420][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.425482][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 468.561357][ T48] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 468.561375][ T48] mceusb 5-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 469.549422][ T5735] usb 5-1: USB disconnect, device number 27 [ 469.613696][T10015] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 470.098719][T10026] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20003 [ 470.120491][ T48] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 471.712012][ T48] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 471.712045][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.751368][ T48] usb 4-1: config 0 descriptor?? [ 471.815572][ T48] cp210x 4-1:0.0: cp210x converter detected [ 473.483831][T10049] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 474.393562][ T48] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 474.393584][ T48] cp210x 4-1:0.0: querying part number failed [ 474.433572][ T48] usb 4-1: cp210x converter now attached to ttyUSB0 [ 474.510862][ T48] usb 4-1: USB disconnect, device number 15 [ 474.582221][ T48] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 474.582685][ T48] cp210x 4-1:0.0: device disconnected [ 474.630653][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'. [ 476.274446][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 478.948721][T10080] binder: 10076:10080 ioctl c0306201 0 returned -14 [ 480.784007][T10097] binder: 10095:10097 ioctl c0306201 0 returned -14 [ 480.838587][T10099] binder: 10095:10099 ioctl c0306201 0 returned -14 [ 480.994239][T10101] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 480.994239][T10101] program syz.1.1312 not setting count and/or reply_len properly [ 481.674611][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1313'. [ 483.960829][T10119] fuse: Bad value for 'fd' [ 484.034300][T10120] binder: 10115:10120 ioctl c0306201 0 returned -14 [ 484.141227][T10124] qrtr: Invalid version 16 [ 484.481821][T10130] netlink: 'syz.3.1321': attribute type 2 has an invalid length. [ 486.508229][ T4980] libceph: connect (1)[c::]:6789 error -101 [ 486.508419][ T4980] libceph: mon0 (1)[c::]:6789 connect error [ 486.533663][ T4980] libceph: connect (1)[c::]:6789 error -101 [ 486.533851][ T4980] libceph: mon0 (1)[c::]:6789 connect error [ 486.556929][T10134] ceph: No mds server is up or the cluster is laggy [ 486.737897][T10147] binder: 10142:10147 ioctl c0306201 0 returned -14 [ 486.790147][ T4980] libceph: connect (1)[c::]:6789 error -101 [ 486.790357][ T4980] libceph: mon0 (1)[c::]:6789 connect error [ 487.762518][ T4980] libceph: connect (1)[c::]:6789 error -101 [ 487.762716][ T4980] libceph: mon0 (1)[c::]:6789 connect error [ 487.797656][T10147] binder: 10142:10147 ioctl c0306201 0 returned -14 [ 489.296914][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 489.297049][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 489.805217][T10167] fuse: Bad value for 'fd' [ 489.884322][T10170] qrtr: Invalid version 16 [ 490.239135][ T4980] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 490.451758][ T4980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 490.451858][ T4980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.451900][ T4980] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 490.451925][ T4980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.457351][ T4980] usb 2-1: config 0 descriptor?? [ 491.791049][T10186] sg_write: data in/out 301408/136 bytes for SCSI command 0x0-- guessing data in; [ 491.791049][T10186] program syz.2.1338 not setting count and/or reply_len properly [ 491.831901][ T4980] hid (null): unknown global tag 0xe [ 491.861181][ T4980] aquacomputer_d5next 0003:0C70:F0B6.000C: unknown global tag 0xe [ 491.861207][ T4980] aquacomputer_d5next 0003:0C70:F0B6.000C: item 0 0 1 14 parsing failed [ 491.862000][ T4980] aquacomputer_d5next 0003:0C70:F0B6.000C: probe with driver aquacomputer_d5next failed with error -22 [ 492.169270][ T5812] usb 2-1: USB disconnect, device number 19 [ 493.089159][ T4980] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 493.206047][T10202] qrtr: Invalid version 16 [ 493.249276][ T4980] usb 3-1: Using ep0 maxpacket: 16 [ 493.324136][ T4980] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 493.324167][ T4980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.324188][ T4980] usb 3-1: Product: syz [ 493.324204][ T4980] usb 3-1: Manufacturer: syz [ 493.324305][ T4980] usb 3-1: SerialNumber: syz [ 493.380720][ T4980] usb 3-1: config 0 descriptor?? [ 493.421487][ T4980] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 493.467970][T10207] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 493.467970][T10207] program syz.4.1345 not setting count and/or reply_len properly [ 494.324917][T10193] netlink: 'syz.2.1341': attribute type 39 has an invalid length. [ 496.490946][ T4980] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 496.491171][ T4980] visor 3-1:0.0: probe with driver visor failed with error -71 [ 496.858530][ T4980] usb 3-1: USB disconnect, device number 18 [ 497.082587][T10218] ceph: No mds server is up or the cluster is laggy [ 497.099200][ T5727] libceph: connect (1)[c::]:6789 error -101 [ 497.099412][ T5727] libceph: mon0 (1)[c::]:6789 connect error [ 497.305227][T10230] sg_write: data in/out 301408/136 bytes for SCSI command 0x0-- guessing data in; [ 497.305227][T10230] program syz.2.1351 not setting count and/or reply_len properly [ 497.687316][T10240] qrtr: Invalid version 16 [ 497.694219][T10232] sctp: [Deprecated]: syz.3.1352 (pid 10232) Use of int in max_burst socket option. [ 497.694219][T10232] Use struct sctp_assoc_value instead [ 497.913493][T10246] sg_write: data in/out 301408/136 bytes for SCSI command 0x0-- guessing data in; [ 497.913493][T10246] program syz.0.1357 not setting count and/or reply_len properly [ 498.102019][T10250] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 498.619406][ T4980] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 499.874661][ T4980] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 499.874687][ T4980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.938591][ T4980] usb 4-1: config 0 descriptor?? [ 499.966569][ T4980] cp210x 4-1:0.0: cp210x converter detected [ 501.601349][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 501.601573][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 501.623242][T10266] ceph: No mds server is up or the cluster is laggy [ 501.642190][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.642276][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.697441][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 502.185608][ T5727] libceph: connect (1)[c::]:6789 error -101 [ 502.185810][ T5727] libceph: mon0 (1)[c::]:6789 connect error [ 502.510097][ T4980] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 502.510129][ T4980] cp210x 4-1:0.0: querying part number failed [ 502.591055][ T4980] usb 4-1: cp210x converter now attached to ttyUSB0 [ 502.594797][ T4980] usb 4-1: USB disconnect, device number 16 [ 502.657862][T10277] sg_write: data in/out 301408/136 bytes for SCSI command 0x0-- guessing data in; [ 502.657862][T10277] program syz.1.1364 not setting count and/or reply_len properly [ 502.679434][ T4980] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 502.680668][ T4980] cp210x 4-1:0.0: device disconnected [ 502.940470][T10281] loop4: detected capacity change from 0 to 7 [ 502.965055][T10281] Dev loop4: unable to read RDB block 7 [ 502.965108][T10281] loop4: unable to read partition table [ 502.965323][T10281] loop4: partition table beyond EOD, truncated [ 502.968603][T10281] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 503.375003][T10291] qrtr: Invalid version 16 [ 505.459223][T10297] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 506.276370][T10317] netlink: 'syz.1.1375': attribute type 2 has an invalid length. [ 506.871871][T10325] sctp: [Deprecated]: syz.3.1379 (pid 10325) Use of int in max_burst socket option. [ 506.871871][T10325] Use struct sctp_assoc_value instead [ 508.532600][T10337] qrtr: Invalid version 16 [ 510.326072][T10357] FAULT_INJECTION: forcing a failure. [ 510.326072][T10357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.326110][T10357] CPU: 1 UID: 0 PID: 10357 Comm: syz.3.1389 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 510.326139][T10357] Tainted: [L]=SOFTLOCKUP [ 510.326146][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 510.326165][T10357] Call Trace: [ 510.326173][T10357] [ 510.326182][T10357] dump_stack_lvl+0xe8/0x150 [ 510.326218][T10357] should_fail_ex+0x467/0x600 [ 510.326252][T10357] _copy_from_user+0x2d/0xb0 [ 510.326275][T10357] ___sys_sendmsg+0x1c6/0x360 [ 510.326296][T10357] ? __lock_acquire+0x683/0x2ce0 [ 510.326322][T10357] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.326377][T10357] ? __fget_files+0x2a/0x420 [ 510.326397][T10357] ? __fget_files+0x3a8/0x420 [ 510.326426][T10357] __x64_sys_sendmsg+0x1b7/0x290 [ 510.326450][T10357] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.326489][T10357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.326511][T10357] do_syscall_64+0x174/0x580 [ 510.326541][T10357] ? trace_irq_disable+0x3b/0x140 [ 510.326561][T10357] ? clear_bhb_loop+0x40/0x90 [ 510.326590][T10357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.326610][T10357] RIP: 0033:0x7f663c41de59 [ 510.326687][T10357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.326707][T10357] RSP: 002b:00007f663a676028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.326749][T10357] RAX: ffffffffffffffda RBX: 00007f663c6a5fa0 RCX: 00007f663c41de59 [ 510.326766][T10357] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 510.326780][T10357] RBP: 00007f663a676090 R08: 0000000000000000 R09: 0000000000000000 [ 510.326794][T10357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.326807][T10357] R13: 00007f663c6a6038 R14: 00007f663c6a5fa0 R15: 00007ffc74360158 [ 510.326842][T10357] [ 510.651054][T10353] ppp0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 511.468569][T10367] netlink: 'syz.2.1391': attribute type 2 has an invalid length. [ 512.265879][T10373] sctp: [Deprecated]: syz.4.1393 (pid 10373) Use of int in max_burst socket option. [ 512.265879][T10373] Use struct sctp_assoc_value instead [ 512.472767][T10382] qrtr: Invalid version 16 [ 513.869179][ T48] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 514.023384][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 514.023420][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.023457][ T48] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 514.023481][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.078197][ T48] usb 2-1: config 0 descriptor?? [ 514.575015][ T48] hid (null): unknown global tag 0xe [ 514.636701][ T48] aquacomputer_d5next 0003:0C70:F0B6.000D: unknown global tag 0xe [ 514.636728][ T48] aquacomputer_d5next 0003:0C70:F0B6.000D: item 0 0 1 14 parsing failed [ 514.637552][ T48] aquacomputer_d5next 0003:0C70:F0B6.000D: probe with driver aquacomputer_d5next failed with error -22 [ 514.767616][T10411] sctp: [Deprecated]: syz.2.1407 (pid 10411) Use of int in max_burst socket option. [ 514.767616][T10411] Use struct sctp_assoc_value instead [ 514.801859][T10390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.802454][T10390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.825979][ T48] usb 2-1: USB disconnect, device number 20 [ 515.030917][T10416] netlink: 'syz.2.1408': attribute type 2 has an invalid length. [ 515.202379][T10418] qrtr: Invalid version 16 [ 515.537199][T10423] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 516.420475][T10435] binder: 10434:10435 ioctl c0306201 2000000003c0 returned -14 [ 518.138153][T10445] sctp: [Deprecated]: syz.3.1418 (pid 10445) Use of int in max_burst socket option. [ 518.138153][T10445] Use struct sctp_assoc_value instead [ 522.976516][ T5727] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 524.856922][ T5734] libceph: connect (1)[c::]:6789 error -101 [ 524.857062][ T5734] libceph: mon0 (1)[c::]:6789 connect error [ 524.858531][ T5734] libceph: connect (1)[c::]:6789 error -101 [ 524.858697][ T5734] libceph: mon0 (1)[c::]:6789 connect error [ 524.889924][T10487] FAULT_INJECTION: forcing a failure. [ 524.889924][T10487] name failslab, interval 1, probability 0, space 0, times 0 [ 524.889964][T10487] CPU: 0 UID: 0 PID: 10487 Comm: syz.4.1432 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 524.889996][T10487] Tainted: [L]=SOFTLOCKUP [ 524.890004][T10487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 524.890018][T10487] Call Trace: [ 524.890026][T10487] [ 524.890036][T10487] dump_stack_lvl+0xe8/0x150 [ 524.890079][T10487] should_fail_ex+0x467/0x600 [ 524.890127][T10487] should_failslab+0xa8/0x100 [ 524.890156][T10487] __kmalloc_noprof+0xfe/0x780 [ 524.890178][T10487] ? rcu_is_watching+0x15/0xb0 [ 524.890208][T10487] ? tomoyo_realpath_from_path+0xef/0x640 [ 524.890236][T10487] ? tomoyo_realpath_from_path+0xef/0x640 [ 524.890272][T10487] tomoyo_realpath_from_path+0xef/0x640 [ 524.890324][T10487] ? tomoyo_path_number_perm+0x219/0x5f0 [ 524.890366][T10487] tomoyo_path_number_perm+0x246/0x5f0 [ 524.890416][T10487] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 524.890448][T10487] ? __lock_acquire+0x683/0x2ce0 [ 524.890502][T10487] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 524.890535][T10487] ? hook_file_ioctl+0x1f3/0x600 [ 524.890565][T10487] ? lockdep_hardirqs_on+0x7a/0x110 [ 524.890614][T10487] ? __fget_files+0x2a/0x420 [ 524.890640][T10487] ? __fget_files+0x2a/0x420 [ 524.890659][T10487] ? __fget_files+0x3a8/0x420 [ 524.890679][T10487] ? __fget_files+0x2a/0x420 [ 524.890704][T10487] security_file_ioctl+0xc3/0x2a0 [ 524.890730][T10487] __se_sys_ioctl+0x47/0x170 [ 524.890763][T10487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.890789][T10487] do_syscall_64+0x174/0x580 [ 524.890818][T10487] ? trace_irq_disable+0x3b/0x140 [ 524.890840][T10487] ? clear_bhb_loop+0x40/0x90 [ 524.890868][T10487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.890891][T10487] RIP: 0033:0x7f29be54de59 [ 524.890911][T10487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.890931][T10487] RSP: 002b:00007f29bc7a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 524.890954][T10487] RAX: ffffffffffffffda RBX: 00007f29be7d5fa0 RCX: 00007f29be54de59 [ 524.890970][T10487] RDX: 0000000000000000 RSI: 000000004008af20 RDI: 0000000000000003 [ 524.890983][T10487] RBP: 00007f29bc7a6090 R08: 0000000000000000 R09: 0000000000000000 [ 524.890997][T10487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.891009][T10487] R13: 00007f29be7d6038 R14: 00007f29be7d5fa0 R15: 00007ffe3432f708 [ 524.891043][T10487] [ 524.895229][T10487] ERROR: Out of memory at tomoyo_realpath_from_path. [ 525.017100][T10489] ceph: No mds server is up or the cluster is laggy [ 525.111245][ T5612] libceph: connect (1)[c::]:6789 error -101 [ 525.111736][ T5612] libceph: mon0 (1)[c::]:6789 connect error [ 526.063140][T10509] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 529.358340][T10539] binder: 10538:10539 ioctl c0306201 0 returned -14 [ 529.533980][T10537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1446'. [ 530.005131][ T11] libceph: connect (1)[c::]:6789 error -101 [ 530.154850][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 530.507242][ T5727] libceph: connect (1)[c::]:6789 error -101 [ 530.547818][T10545] ceph: No mds server is up or the cluster is laggy [ 530.562376][ T5727] libceph: mon0 (1)[c::]:6789 connect error [ 531.360187][ T11] libceph: connect (1)[c::]:6789 error -101 [ 531.360376][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 532.004953][T10560] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 532.624635][T10574] binder: 10570:10574 ioctl c0306201 0 returned -14 [ 532.682301][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 532.709015][ T11] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 532.853749][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 533.089441][ T5609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 533.230552][ T5609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 533.286577][ T5609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 533.799069][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 533.801473][ T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.801530][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 533.801560][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 533.801583][ T11] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 533.801605][ T11] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.802977][ T11] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 533.803006][ T11] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 533.803028][ T11] usb 5-1: Manufacturer: syz [ 533.937566][ T11] usb 5-1: config 0 descriptor?? [ 534.068780][T10582] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 534.074274][T10582] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 534.262979][ T11] rc_core: IR keymap rc-hauppauge not found [ 534.263000][ T11] Registered IR keymap rc-empty [ 534.264031][ T11] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 534.285552][ T11] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 534.310128][T10582] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 534.310254][T10582] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 534.314605][ T11] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 534.343451][ T11] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 534.348506][ T11] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 534.370280][ T11] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 534.402351][ T11] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 534.419146][ T11] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 534.449124][ T11] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 534.469275][ T11] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 534.502268][ T11] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 534.502311][T10582] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 534.522433][ T11] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 534.549128][ T11] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 534.579100][ T11] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 534.629455][ T11] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 534.629478][ T11] mceusb 5-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 534.669778][ T11] usb 5-1: USB disconnect, device number 28 [ 534.859211][ T48] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 535.012486][ T48] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 535.012516][ T48] usb 2-1: config 0 has no interface number 0 [ 535.012548][ T48] usb 2-1: too many endpoints for config 0 interface 145 altsetting 57: 197, using maximum allowed: 30 [ 535.012591][ T48] usb 2-1: config 0 interface 145 altsetting 57 has 0 endpoint descriptors, different from the interface descriptor's value: 197 [ 535.012621][ T48] usb 2-1: config 0 interface 145 has no altsetting 0 [ 535.012655][ T48] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 535.012689][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.051620][ T48] usb 2-1: config 0 descriptor?? [ 535.331287][ T48] usb 2-1: string descriptor 0 read error: -71 [ 535.364161][ T48] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 535.364871][ T48] gspca_cpia1: usb_control_msg 05, error -71 [ 535.365284][ T48] gspca_cpia1: usb_control_msg 01, error -71 [ 535.365301][ T48] cpia1 2-1:0.145: only firmware version 1 is supported (got: 0) [ 535.420333][T10604] FAULT_INJECTION: forcing a failure. [ 535.420333][T10604] name failslab, interval 1, probability 0, space 0, times 0 [ 535.420374][T10604] CPU: 0 UID: 0 PID: 10604 Comm: syz.4.1464 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 535.420417][T10604] Tainted: [L]=SOFTLOCKUP [ 535.420425][T10604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 535.420438][T10604] Call Trace: [ 535.420446][T10604] [ 535.420455][T10604] dump_stack_lvl+0xe8/0x150 [ 535.420497][T10604] should_fail_ex+0x467/0x600 [ 535.420534][T10604] should_failslab+0xa8/0x100 [ 535.420560][T10604] __kmalloc_cache_noprof+0xa0/0x6b0 [ 535.420584][T10604] ? rtnl_newlink+0x136/0x1bd0 [ 535.420702][T10604] ? rtnl_newlink+0x136/0x1bd0 [ 535.420739][T10604] rtnl_newlink+0x136/0x1bd0 [ 535.420772][T10604] ? kasan_save_track+0x4f/0x80 [ 535.420791][T10604] ? kasan_save_track+0x3e/0x80 [ 535.420809][T10604] ? kasan_save_free_info+0x40/0x50 [ 535.420854][T10604] ? __kasan_slab_free+0x5c/0x80 [ 535.420874][T10604] ? kmem_cache_free+0x187/0x6c0 [ 535.420896][T10604] ? dev_hard_start_xmit+0x2df/0x870 [ 535.420942][T10604] ? __netlink_deliver_tap+0x5b4/0x860 [ 535.420964][T10604] ? netlink_deliver_tap+0x19c/0x1b0 [ 535.420985][T10604] ? netlink_unicast+0x7b8/0x990 [ 535.421014][T10604] ? netlink_sendmsg+0x813/0xb40 [ 535.421038][T10604] ? __pfx_rtnl_newlink+0x10/0x10 [ 535.421067][T10604] ? do_syscall_64+0x174/0x580 [ 535.421098][T10604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.421147][T10604] ? __lock_acquire+0x683/0x2ce0 [ 535.421176][T10604] ? kasan_quarantine_put+0xbb/0x1f0 [ 535.421210][T10604] ? lockdep_hardirqs_on+0x7a/0x110 [ 535.421244][T10604] ? nlmon_xmit+0xb0/0x100 [ 535.421342][T10604] ? kmem_cache_free+0x187/0x6c0 [ 535.421365][T10604] ? nlmon_xmit+0xb0/0x100 [ 535.421404][T10604] ? __lock_acquire+0x683/0x2ce0 [ 535.421434][T10604] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 535.421462][T10604] ? lockdep_hardirqs_on+0x7a/0x110 [ 535.421493][T10604] ? __dev_queue_xmit+0x291/0x3890 [ 535.421542][T10604] ? __dev_queue_xmit+0x1f31/0x3890 [ 535.421571][T10604] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 535.421604][T10604] ? __pfx_rtnl_newlink+0x10/0x10 [ 535.421647][T10604] ? __pfx_rtnl_newlink+0x10/0x10 [ 535.421678][T10604] rtnetlink_rcv_msg+0x802/0xc00 [ 535.421713][T10604] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 535.421744][T10604] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 535.421773][T10604] ? ref_tracker_free+0x668/0x820 [ 535.421810][T10604] ? __pfx_ref_tracker_free+0x10/0x10 [ 535.421860][T10604] netlink_rcv_skb+0x226/0x4a0 [ 535.421882][T10604] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 535.421916][T10604] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 535.421963][T10604] ? netlink_deliver_tap+0x2e/0x1b0 [ 535.421983][T10604] ? netlink_deliver_tap+0x2e/0x1b0 [ 535.422008][T10604] netlink_unicast+0x7f5/0x990 [ 535.422049][T10604] netlink_sendmsg+0x813/0xb40 [ 535.422079][T10604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.422102][T10604] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 535.422131][T10604] ? __kernel_text_address+0xd/0x30 [ 535.422169][T10604] ? unwind_get_return_address+0x4d/0x90 [ 535.422196][T10604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.422218][T10604] sock_sendmsg_nosec+0x13a/0x180 [ 535.422250][T10604] ____sys_sendmsg+0x565/0x870 [ 535.422271][T10604] ? __might_fault+0xaf/0x130 [ 535.422299][T10604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.422331][T10604] ? import_iovec+0x73/0xa0 [ 535.422358][T10604] ___sys_sendmsg+0x2a5/0x360 [ 535.422378][T10604] ? __lock_acquire+0x683/0x2ce0 [ 535.422405][T10604] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.422463][T10604] ? __fget_files+0x2a/0x420 [ 535.422483][T10604] ? __fget_files+0x3a8/0x420 [ 535.422516][T10604] __x64_sys_sendmsg+0x1b7/0x290 [ 535.422541][T10604] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.422582][T10604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.422606][T10604] do_syscall_64+0x174/0x580 [ 535.422636][T10604] ? trace_irq_disable+0x3b/0x140 [ 535.422657][T10604] ? clear_bhb_loop+0x40/0x90 [ 535.422685][T10604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.422708][T10604] RIP: 0033:0x7f29be54de59 [ 535.422728][T10604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.422747][T10604] RSP: 002b:00007f29bc7a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.422770][T10604] RAX: ffffffffffffffda RBX: 00007f29be7d5fa0 RCX: 00007f29be54de59 [ 535.422786][T10604] RDX: 0000000020000090 RSI: 00002000000000c0 RDI: 0000000000000003 [ 535.422800][T10604] RBP: 00007f29bc7a6090 R08: 0000000000000000 R09: 0000000000000000 [ 535.422813][T10604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.422832][T10604] R13: 00007f29be7d6038 R14: 00007f29be7d5fa0 R15: 00007ffe3432f708 [ 535.422866][T10604] [ 535.790822][ T48] usb 2-1: USB disconnect, device number 22 [ 536.069043][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 536.389359][ T5617] Bluetooth: hci3: command 0x041b tx timeout [ 537.149874][T10615] ceph: No mds server is up or the cluster is laggy [ 537.150433][ T5734] libceph: connect (1)[c::]:6789 error -101 [ 537.150600][ T5734] libceph: mon0 (1)[c::]:6789 connect error [ 537.258079][T10622] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 537.659139][ T5734] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 538.418444][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 538.438410][ T5734] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 538.438479][ T5734] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.444507][ T5734] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 538.444528][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.444543][ T5734] usb 3-1: Product: syz [ 538.444561][ T5734] usb 3-1: Manufacturer: syz [ 538.444572][ T5734] usb 3-1: SerialNumber: syz [ 538.469151][ T5617] Bluetooth: hci3: command 0x041b tx timeout [ 539.121630][ T48] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 539.877684][ T48] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 539.877859][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.983786][ T48] usb 5-1: config 0 descriptor?? [ 540.042721][ T48] cp210x 5-1:0.0: cp210x converter detected [ 540.063763][T10576] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.063975][T10576] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.064237][T10576] bridge_slave_0: entered allmulticast mode [ 540.067111][T10576] bridge_slave_0: entered promiscuous mode [ 540.135816][ T5734] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 540.189400][T10576] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.189761][T10576] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.191573][T10576] bridge_slave_1: entered allmulticast mode [ 540.191593][ T5734] cdc_ncm 3-1:1.0: bind() failure [ 540.194546][T10576] bridge_slave_1: entered promiscuous mode [ 540.766452][ T5617] Bluetooth: hci3: command 0x041b tx timeout [ 541.052019][T10576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.069913][T10576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.161545][ T5734] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 541.161590][ T5734] cdc_ncm 3-1:1.1: bind() failure [ 541.245087][T10649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1476'. [ 541.513367][ T5734] usb 3-1: USB disconnect, device number 19 [ 541.802875][T10576] team0: Port device team_slave_0 added [ 541.874260][T10660] binder: 10659:10660 ioctl 40046205 0 returned -22 [ 541.985001][T10656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1477'. [ 541.985380][T10656] nbd: must specify a device to reconfigure [ 542.039801][T10576] team0: Port device team_slave_1 added [ 542.091792][ T48] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 542.091829][ T48] cp210x 5-1:0.0: querying part number failed [ 542.151993][ T48] usb 5-1: cp210x converter now attached to ttyUSB0 [ 542.227087][ T48] usb 5-1: USB disconnect, device number 29 [ 542.395027][ T48] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 542.407186][ T48] cp210x 5-1:0.0: device disconnected [ 542.949779][ T5617] Bluetooth: hci3: command 0x041b tx timeout [ 543.046656][T10576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.046673][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.046703][T10576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.071770][T10576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.071801][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.071877][T10576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.897984][T10684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1487'. [ 545.050358][ T5609] Bluetooth: hci3: command 0x041b tx timeout [ 545.086666][T10682] sctp: [Deprecated]: syz.0.1486 (pid 10682) Use of int in max_burst socket option. [ 545.086666][T10682] Use struct sctp_assoc_value instead [ 545.298079][T10689] binder: 10678:10689 ioctl c0306201 0 returned -14 [ 545.836919][T10576] hsr_slave_0: entered promiscuous mode [ 545.850438][T10576] hsr_slave_1: entered promiscuous mode [ 545.857834][T10576] debugfs: 'hsr0' already exists in 'hsr' [ 545.857909][T10576] Cannot create hsr debugfs directory [ 546.800000][ T48] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 546.929089][ T48] usb 2-1: device descriptor read/64, error -71 [ 547.110960][ T5617] Bluetooth: hci3: command 0x041b tx timeout [ 547.559175][ T48] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 547.689360][ T48] usb 2-1: device descriptor read/64, error -71 [ 547.799828][ T48] usb usb2-port1: attempt power cycle [ 547.826806][T10708] syz.2.1493 (10708) used greatest stack depth: 17672 bytes left [ 548.153142][ T48] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 548.171982][ T48] usb 2-1: device descriptor read/8, error -71 [ 548.268035][T10719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1498'. [ 548.329898][ T5727] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 548.411513][ T48] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 548.433136][ T48] usb 2-1: device descriptor read/8, error -71 [ 548.501019][ T5727] usb 3-1: Using ep0 maxpacket: 32 [ 548.518564][ T5727] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 548.518589][ T5727] usb 3-1: config 0 has no interface number 0 [ 548.518629][ T5727] usb 3-1: config 0 interface 12 has no altsetting 0 [ 548.595894][T10721] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 548.596775][T10721] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 548.609778][T10576] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 548.701059][ T48] usb usb2-port1: unable to enumerate USB device [ 548.705315][ T5727] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 548.705344][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.705362][ T5727] usb 3-1: Product: syz [ 548.705375][ T5727] usb 3-1: Manufacturer: syz [ 548.705389][ T5727] usb 3-1: SerialNumber: syz [ 548.756563][ T5727] usb 3-1: config 0 descriptor?? [ 549.052630][T10576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 549.060666][T10576] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 549.194316][T10576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 549.197657][T10576] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 549.930799][T10717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.364735][T10717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.509294][ T11] libceph: connect (1)[c::]:6789 error -101 [ 550.591995][T10728] ceph: No mds server is up or the cluster is laggy [ 550.618066][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1501'. [ 550.618581][T10576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 550.678437][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 550.688525][T10576] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 550.691316][ T5617] Bluetooth: hci3: command 0x041b tx timeout [ 550.691568][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 550.939764][ T4980] libceph: connect (1)[c::]:6789 error -101 [ 550.941139][ T4980] libceph: mon0 (1)[c::]:6789 connect error [ 551.047447][T10576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 551.630202][T10717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.631199][T10717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.904126][ T5727] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 551.904252][ T5727] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 551.904279][ T5727] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 551.904346][ T5727] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 552.387701][ T5727] usb 3-1: USB disconnect, device number 20 [ 552.847220][T10576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.082790][T10576] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.103995][T10759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1508'. [ 553.147074][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.147202][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.248272][ T3408] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.248425][ T3408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.494999][T10761] binder: 10760:10761 ioctl c0306201 0 returned -14 [ 553.568312][T10771] binder: 10760:10771 ioctl c0306201 0 returned -14 [ 553.824994][T10768] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 554.782446][ T5735] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 555.089074][ T5735] usb 5-1: device descriptor read/64, error -71 [ 555.359795][ T5735] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 555.615146][ T5735] usb 5-1: device descriptor read/64, error -71 [ 555.773728][ T5735] usb usb5-port1: attempt power cycle [ 556.181380][T10778] ceph: No mds server is up or the cluster is laggy [ 556.364179][ T48] libceph: connect (1)[c::]:6789 error -101 [ 556.364466][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 556.680826][ T48] libceph: connect (1)[c::]:6789 error -101 [ 556.680969][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 560.196189][T10576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.709556][ T48] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 560.839428][ T48] usb 3-1: device descriptor read/64, error -71 [ 561.081240][ T48] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 561.185315][T10576] veth0_vlan: entered promiscuous mode [ 561.209054][ T48] usb 3-1: device descriptor read/64, error -71 [ 561.339385][ T48] usb usb3-port1: attempt power cycle [ 562.716999][T10576] veth1_vlan: entered promiscuous mode [ 563.051518][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.051593][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.116548][ T48] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 563.142352][ T48] usb 3-1: device descriptor read/8, error -71 [ 563.489489][ T48] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 563.584681][ T48] usb 3-1: device descriptor read/8, error -71 [ 564.211269][ T48] usb usb3-port1: unable to enumerate USB device [ 564.312646][ T5609] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 564.312893][ T5609] Bluetooth: hci4: Injecting HCI hardware error event [ 564.327845][ T5617] Bluetooth: hci4: hardware error 0x00 [ 564.504638][T10576] veth0_macvtap: entered promiscuous mode [ 564.615839][T10576] veth1_macvtap: entered promiscuous mode [ 564.774861][T10576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.856942][T10576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.923942][T10854] netlink: 'syz.4.1533': attribute type 2 has an invalid length. [ 564.942791][ T510] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.946242][ T1062] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.954512][ T1062] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.972351][ T1062] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.284064][T10856] input: syz1 as /devices/virtual/input/input13 [ 565.555862][T10856] binder: 10855:10856 ioctl c00c620f 200000000240 returned -22 [ 565.674199][T10862] binder: 10859:10862 ioctl c0306201 0 returned -14 [ 566.353094][ T1062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.353115][ T1062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.480691][ T5617] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 567.927586][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.927608][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.435199][ T5734] libceph: connect (1)[c::]:6789 error -101 [ 568.446830][ T5734] libceph: mon0 (1)[c::]:6789 connect error [ 568.450715][ T5734] libceph: connect (1)[c::]:6789 error -101 [ 568.453086][ T5734] libceph: mon0 (1)[c::]:6789 connect error [ 568.619983][ T5612] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 568.782899][ T5612] usb 5-1: device descriptor read/64, error -71 [ 569.056001][ T5735] libceph: connect (1)[c::]:6789 error -101 [ 569.076618][ T5735] libceph: mon0 (1)[c::]:6789 connect error [ 569.085434][ T5612] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 569.182744][T10891] ceph: No mds server is up or the cluster is laggy [ 569.287059][ T5612] usb 5-1: device descriptor read/64, error -71 [ 569.389672][ T5612] usb usb5-port1: attempt power cycle [ 569.744168][ T5612] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 569.760352][ T5612] usb 5-1: device descriptor read/8, error -71 [ 569.814487][T10905] binder: 10900:10905 ioctl c0306201 0 returned -14 [ 570.326243][ T5612] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 570.339754][ T5612] usb 5-1: device descriptor read/8, error -71 [ 570.449475][ T5612] usb usb5-port1: unable to enumerate USB device [ 570.753471][T10908] sctp: [Deprecated]: syz.5.1551 (pid 10908) Use of int in max_burst socket option. [ 570.753471][T10908] Use struct sctp_assoc_value instead [ 570.862807][T10911] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 571.019046][ T4980] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 571.201351][ T4980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 571.201390][ T4980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.201430][ T4980] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 571.201457][ T4980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.215589][ T4980] usb 2-1: config 0 descriptor?? [ 571.321142][ T5735] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 572.254507][ T5727] libceph: connect (1)[c::]:6789 error -101 [ 572.363721][T10924] ceph: No mds server is up or the cluster is laggy [ 572.440835][ T5727] libceph: mon0 (1)[c::]:6789 connect error [ 572.453017][ T4980] hid (null): unknown global tag 0xe [ 572.466631][ T4980] aquacomputer_d5next 0003:0C70:F0B6.000E: unknown global tag 0xe [ 572.466648][ T4980] aquacomputer_d5next 0003:0C70:F0B6.000E: item 0 0 1 14 parsing failed [ 572.468759][ T4980] aquacomputer_d5next 0003:0C70:F0B6.000E: probe with driver aquacomputer_d5next failed with error -22 [ 572.546196][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 572.546225][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.546258][ T5735] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 572.546280][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.637869][T10913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.638375][T10913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.681092][ T5735] usb 3-1: config 0 descriptor?? [ 572.694403][ T4980] usb 2-1: USB disconnect, device number 27 [ 572.706745][ T11] libceph: connect (1)[c::]:6789 error -101 [ 572.706933][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 572.870518][ T5617] Bluetooth: hci3: command 0x041b tx timeout [ 575.465326][ T5735] hid (null): unknown global tag 0xe [ 575.523301][T10942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.526069][T10942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.344176][ T5735] aquacomputer_d5next 0003:0C70:F0B6.000F: unknown global tag 0xe [ 576.344201][ T5735] aquacomputer_d5next 0003:0C70:F0B6.000F: item 0 0 1 14 parsing failed [ 576.344970][ T5735] aquacomputer_d5next 0003:0C70:F0B6.000F: probe with driver aquacomputer_d5next failed with error -22 [ 576.399714][ T5735] usb 3-1: USB disconnect, device number 25 [ 576.556096][ T11] libceph: connect (1)[c::]:6789 error -101 [ 576.556287][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 577.166694][ T11] libceph: connect (1)[c::]:6789 error -101 [ 577.166883][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 577.174437][T10945] ceph: No mds server is up or the cluster is laggy [ 577.469966][ T4980] libceph: connect (1)[c::]:6789 error -101 [ 577.470111][ T4980] libceph: mon0 (1)[c::]:6789 connect error [ 578.530105][ T11] libceph: connect (1)[c::]:6789 error -101 [ 578.530299][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 579.611902][ T48] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 579.659106][ T5812] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 579.739045][ T48] usb 5-1: device descriptor read/64, error -71 [ 579.814659][ T5812] usb 3-1: unable to get BOS descriptor or descriptor too short [ 579.816732][ T5812] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.816758][ T5812] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 579.852004][ T5812] usb 3-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 579.852034][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.852054][ T5812] usb 3-1: Product: syz [ 579.852069][ T5812] usb 3-1: Manufacturer: syz [ 579.852083][ T5812] usb 3-1: SerialNumber: syz [ 579.905715][ T5812] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 579.909275][ T5735] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 579.979248][ T48] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 580.138751][ T48] usb 5-1: device descriptor read/64, error -71 [ 580.151901][ T5735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 580.151957][ T5735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.152973][ T5735] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 580.153042][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.425575][ T48] usb usb5-port1: attempt power cycle [ 580.825954][T10990] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 580.971070][ T5735] usb 2-1: config 0 descriptor?? [ 581.034610][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 581.034637][ T36] audit: type=1326 audit(1783430130.519:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.5.1574" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c230de59 code=0x7ffc0000 [ 581.034927][ T36] audit: type=1326 audit(1783430130.519:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.5.1574" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c230de59 code=0x7ffc0000 [ 581.095377][ T36] audit: type=1326 audit(1783430130.569:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.5.1574" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c230de59 code=0x7ffc0000 [ 581.095556][ T36] audit: type=1326 audit(1783430130.569:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.5.1574" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c230de59 code=0x7ffc0000 [ 581.095684][ T36] audit: type=1326 audit(1783430130.569:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.5.1574" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f88c230de59 code=0x7ffc0000 [ 581.179016][ T48] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 581.199766][ T48] usb 5-1: device descriptor read/8, error -71 [ 581.289841][ T36] audit: type=1326 audit(1783430130.779:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.5.1574" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c230de59 code=0x7ffc0000 [ 581.289904][ T36] audit: type=1326 audit(1783430130.779:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.5.1574" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f88c230dbc2 code=0x7ffc0000 [ 581.291645][ T36] audit: type=1326 audit(1783430130.779:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.5.1574" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f88c230dc57 code=0x7ffc0000 [ 581.291704][ T36] audit: type=1326 audit(1783430130.779:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.5.1574" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f88c22cab51 code=0x7ffc0000 [ 581.291911][ T36] audit: type=1326 audit(1783430130.779:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.5.1574" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f88c230ec49 code=0x7ffc0000 [ 581.499048][ T48] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 581.520086][ T48] usb 5-1: device descriptor read/8, error -71 [ 581.539172][ T5735] hid (null): unknown global tag 0xe [ 581.544886][ T5735] aquacomputer_d5next 0003:0C70:F0B6.0010: unknown global tag 0xe [ 581.544906][ T5735] aquacomputer_d5next 0003:0C70:F0B6.0010: item 0 0 1 14 parsing failed [ 581.545628][ T5735] aquacomputer_d5next 0003:0C70:F0B6.0010: probe with driver aquacomputer_d5next failed with error -22 [ 581.633279][ T48] usb usb5-port1: unable to enumerate USB device [ 581.745612][T10985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.747314][T10985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.781250][ T5735] usb 2-1: USB disconnect, device number 28 [ 581.881716][ T5812] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 581.907290][ T5812] snd-usb-hiface 3-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 581.925339][ T5812] snd-usb-hiface 3-1:1.1: probe with driver snd-usb-hiface failed with error -22 [ 581.959409][ T48] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 581.987525][ T6327] udevd[6327]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.133001][ T48] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.133065][ T48] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.164561][ T48] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 582.164593][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.164614][ T48] usb 6-1: Product: syz [ 582.164630][ T48] usb 6-1: Manufacturer: syz [ 582.164645][ T48] usb 6-1: SerialNumber: syz [ 582.846509][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 582.847108][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 583.238725][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 584.211381][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 584.369843][T11012] ceph: No mds server is up or the cluster is laggy [ 584.571673][ T48] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 584.615093][ T48] cdc_ncm 6-1:1.0: bind() failure [ 584.747331][ T48] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 584.747380][ T48] cdc_ncm 6-1:1.1: bind() failure [ 584.762274][ T48] usb 6-1: USB disconnect, device number 2 [ 584.787511][ T5735] usb 3-1: USB disconnect, device number 26 [ 585.230480][T11032] loop8: detected capacity change from 0 to 7 [ 585.954795][T11038] program syz.4.1586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 586.074787][ T31] libceph: connect (1)[c::]:6789 error -101 [ 586.139194][T11035] ceph: No mds server is up or the cluster is laggy [ 586.141211][T11032] Dev loop8: unable to read RDB block 7 [ 586.141264][T11032] loop8: unable to read partition table [ 586.141480][T11032] loop8: partition table beyond EOD, truncated [ 586.141500][T11032] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 586.148773][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 587.244196][ T31] libceph: connect (1)[c::]:6789 error -101 [ 587.416678][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 588.311732][T11049] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 588.782921][ T11] libceph: connect (1)[c::]:6789 error -101 [ 588.783212][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 588.840559][T11060] ceph: No mds server is up or the cluster is laggy [ 589.009211][ T48] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 589.039551][ T11] libceph: connect (1)[c::]:6789 error -101 [ 589.039750][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 589.281816][ T48] usb 3-1: unable to get BOS descriptor or descriptor too short [ 589.283372][ T48] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.283396][ T48] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 589.322793][ T11] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 589.322948][ T48] usb 3-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 589.322974][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.322993][ T48] usb 3-1: Product: syz [ 589.323007][ T48] usb 3-1: Manufacturer: syz [ 589.323021][ T48] usb 3-1: SerialNumber: syz [ 589.437000][ T48] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 589.553513][ T11] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 589.553547][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.827609][T11073] sg_write: data in/out 1632/136 bytes for SCSI command 0x0-- guessing data in; [ 589.827609][T11073] program syz.5.1596 not setting count and/or reply_len properly [ 589.885852][ T5617] Bluetooth: hci3: command 0x041b tx timeout [ 590.363126][ T5812] IPVS: starting estimator thread 0... [ 590.479307][T11076] IPVS: using max 8 ests per chain, 19200 per kthread [ 590.503229][ T11] usb 2-1: config 0 descriptor?? [ 590.522716][ T11] cp210x 2-1:0.0: cp210x converter detected [ 591.909037][ T5734] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 591.945553][T11090] [U] #ي)|QP4}RDN"mx>)Na׽y߇g~"ý`U=pb [ 591.945583][T11090] [U] Sz'^iYTi Bzފ&O-x4!!Ft]"HY=.S6:՗" ^^㉂Y7{9B#a89eA>xl54`%'뜾 e-wqx19ԙE;O# =G@{9eJAeDw h3G s!iI2{:WFkXkHN)n,?P$MUvptUf6Zz'q FH;@Z/e+G047Rzp= [ 592.002114][T11090] [U] %NsqfrGo'h2'8@ZRG [ 592.002125][T11090] [U] [ 592.002133][T11090] [U] M3)H- ^5 [ 592.002155][T11090] [U] ;9gK¶1-FgLf B/ģHy3q6):^]f(T"gi7(-Xo^ E-ďb3aŶBfVw$B1C9y৐ww5VPPRb_&_2!B $=uryLQQۇj0FIN/6\ܟXuެ3er?|P`MVrB6J; 8p.tS&N utLnS!厑@Tsе:@ B?D] Nj7]i[i"y1t6劍LŪF߫VP pUgq$hf [ 592.002286][T11090] [U] pyO[uKV|aZ,,'@x\13gy(ː_5X8R'_bFFi]Hc*0/FS~=)|^lE(3(a}C*2m& [ 592.002358][T11090] [U] 2ew (ZDVA:f vԒت9&zٗ ϔHC 3m%PPPYDi(C8,j‡]JxψS(h(ICd#֘R. q#Ark#J B77e3> *kSdT +q F tϽT$*oN8g=L@x=FN&І2w&YU>龽M0N[;?lo񮌼uQƑ [ 592.002442][T11090] [U] ld\^3L@FUK3ǜIWqde0I_d= [ 592.002470][T11090] [U] /Dg0ؓO҂' jœ'ʒ8I$ˮv}g.oT zEtFK2qqM!b>!mM95)U(Ș [ 592.002493][T11090] [U] uDWN(Rs>G'XU6 GD_4|o~=ńѡ?Oʩv蹇vKH;ZG2C [ 592.002515][T11090] [U] w8(l-oYTѕRíH W=G539 PJ3RgnrRw&RlOm50ZabߊIiiA0j$Szv8e+vN2hlݞ [ 592.002601][T11090] [U] MGŜ~d܂+lޒv R޶Bag0to<|?֪7&/@D͕]9VU:X[hD%K3ypѡ4)XJOaa>D=sY=4lYt u۴Oxm\Y/1!5{8xGET~?ZEDK+w\[摓: )X [!,v C+);Q{pIQ/B e6(cuN$8:X!{YQ@Z9f40CO%r6'] [ 592.004707][T11090] [U] lPV [ 592.004724][T11090] [U] (~d [ 592.004738][T11090] [U] 8#&+'gO`*Bq_*1^}nr:4?(gl%]hy~ WW"Ou72!`{_$ͩ~Zk)ut!Q* [ 592.004761][T11090] [U] :TCK(ӷd=l I)-@bWf&.˱6`RRfO(rieCq%=<g1/@zU,$B鿵2gx|Fd` [ 592.004778][T11090] [U] ̓}%/f.!yգ$^eQǢ`g] [ 592.059417][ T5734] usb 5-1: Using ep0 maxpacket: 16 [ 592.064739][ T5734] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 592.064792][ T5734] usb 5-1: config 0 has no interface number 0 [ 592.064884][ T5734] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 592.064923][ T5734] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 592.340249][ T5734] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 592.340282][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 592.340304][ T5734] usb 5-1: Product: syz [ 592.340319][ T5734] usb 5-1: SerialNumber: syz [ 592.443027][ T5734] usb 5-1: config 0 descriptor?? [ 592.478024][T11086] [U] .HYCHvrngdϟ[,k0e#t&y4l*CVҥ\U.A[ [ 592.604758][ T5734] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 592.669980][ T5734] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input16 [ 592.743027][ T48] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 592.766987][ T5734] ------------[ cut here ]------------ [ 592.767027][ T5734] URB ffff888039dbc600 submitted while active [ 592.767107][ T5734] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#1: kworker/1:5/5734 [ 592.767284][ T5734] Modules linked in: [ 592.767320][ T5734] CPU: 1 UID: 0 PID: 5734 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 592.767404][ T5734] Tainted: [L]=SOFTLOCKUP [ 592.767413][ T5734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 592.767428][ T5734] Workqueue: usb_hub_wq hub_event [ 592.767464][ T5734] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 592.767535][ T5734] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 a9 ee 56 fb 49 83 3e 00 74 40 e8 0e 82 ed fa 48 8d 3d d7 87 e4 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 f3 81 ed fa eb 05 e8 ec 81 [ 592.767579][ T5734] RSP: 0018:ffffc9000601ebf8 EFLAGS: 00010283 [ 592.767599][ T5734] RAX: ffffffff86d7b732 RBX: ffff888039dbc600 RCX: 0000000000100000 [ 592.767616][ T5734] RDX: ffffc9001be7b000 RSI: ffff888039dbc600 RDI: ffffffff8fbc3f10 [ 592.767634][ T5734] RBP: dffffc0000000000 R08: ffffffff8faf74f7 R09: 1ffffffff1f5ee9e [ 592.767677][ T5734] R10: dffffc0000000000 R11: fffffbfff1f5ee9f R12: 1ffff1100691710a [ 592.767713][ T5734] R13: ffff8880348b8848 R14: ffff888039dbc608 R15: 0000000000000cc0 [ 592.767741][ T5734] FS: 0000000000000000(0000) GS:ffff888125d4c000(0000) knlGS:0000000000000000 [ 592.767760][ T5734] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.767776][ T5734] CR2: 00007f4368fe7dac CR3: 000000003e946000 CR4: 00000000003526f0 [ 592.767795][ T5734] Call Trace: [ 592.767818][ T5734] [ 592.767839][ T5734] ? lockdep_hardirqs_on+0x7a/0x110 [ 592.767917][ T5734] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 592.767950][ T5734] ? mutex_lock_nested+0x152/0x1d0 [ 592.767974][ T5734] ? cm109_input_open+0x97/0x460 [ 592.768106][ T5734] cm109_input_open+0x1fb/0x460 [ 592.768157][ T5734] input_open_device+0x1f9/0x3b0 [ 592.768246][ T5734] kbd_connect+0xf6/0x150 [ 592.768382][ T5734] input_register_device+0xd08/0x1150 [ 592.768436][ T5734] cm109_usb_probe+0x11e4/0x16f0 [ 592.768553][ T5734] usb_probe_interface+0x653/0xc60 [ 592.768601][ T5734] ? __pfx_usb_probe_interface+0x10/0x10 [ 592.768625][ T5734] really_probe+0x254/0xae0 [ 592.768731][ T5734] __driver_probe_device+0x1e8/0x360 [ 592.768765][ T5734] driver_probe_device+0x4f/0x240 [ 592.768807][ T5734] __device_attach_driver+0x270/0x410 [ 592.768930][ T5734] bus_for_each_drv+0x25b/0x2f0 [ 592.769004][ T5734] ? __pfx___device_attach_driver+0x10/0x10 [ 592.769033][ T5734] ? __pfx_bus_for_each_drv+0x10/0x10 [ 592.769081][ T5734] ? rt_spin_unlock+0x163/0x200 [ 592.769132][ T5734] __device_attach+0x2c7/0x450 [ 592.769178][ T5734] ? rt_spin_unlock+0x157/0x200 [ 592.769264][ T5734] ? __pfx___device_attach+0x10/0x10 [ 592.769307][ T5734] device_initial_probe+0xa1/0xd0 [ 592.769412][ T5734] bus_probe_device+0x12d/0x220 [ 592.769455][ T5734] device_add+0x7d7/0xb80 [ 592.769521][ T5734] usb_set_configuration+0x1ad8/0x2180 [ 592.769627][ T5734] usb_generic_driver_probe+0x8d/0x150 [ 592.769760][ T5734] usb_probe_device+0x1c3/0x3b0 [ 592.769791][ T5734] ? __pfx_usb_probe_device+0x10/0x10 [ 592.769841][ T5734] really_probe+0x254/0xae0 [ 592.769911][ T5734] __driver_probe_device+0x1e8/0x360 [ 592.769946][ T5734] driver_probe_device+0x4f/0x240 [ 592.770022][ T5734] __device_attach_driver+0x270/0x410 [ 592.770079][ T5734] bus_for_each_drv+0x25b/0x2f0 [ 592.770117][ T5734] ? __pfx___device_attach_driver+0x10/0x10 [ 592.770213][ T5734] ? __pfx_bus_for_each_drv+0x10/0x10 [ 592.770250][ T5734] ? rt_spin_unlock+0x163/0x200 [ 592.770308][ T5734] __device_attach+0x2c7/0x450 [ 592.770387][ T5734] ? __pfx___device_attach+0x10/0x10 [ 592.770433][ T5734] device_initial_probe+0xa1/0xd0 [ 592.770514][ T5734] bus_probe_device+0x12d/0x220 [ 592.770576][ T5734] device_add+0x7d7/0xb80 [ 592.770606][ T5734] usb_new_device+0x98d/0x1610 [ 592.770683][ T5734] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 592.770732][ T5734] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 592.770760][ T5734] ? __pfx_usb_new_device+0x10/0x10 [ 592.770874][ T5734] hub_event+0x28cf/0x4cf0 [ 592.771052][ T5734] ? __pfx_hub_event+0x10/0x10 [ 592.771087][ T5734] ? process_scheduled_works+0xa20/0x14e0 [ 592.771211][ T5734] ? rcu_is_watching+0x15/0xb0 [ 592.771244][ T5734] ? process_scheduled_works+0xa20/0x14e0 [ 592.771272][ T5734] process_scheduled_works+0xa8e/0x14e0 [ 592.771398][ T5734] ? __pfx_process_scheduled_works+0x10/0x10 [ 592.771434][ T5734] ? assign_work+0x3cf/0x5d0 [ 592.771533][ T5734] worker_thread+0xa47/0xfb0 [ 592.771579][ T5734] ? __kthread_parkme+0x71/0x1f0 [ 592.771674][ T5734] kthread+0x388/0x470 [ 592.771734][ T5734] ? __pfx_worker_thread+0x10/0x10 [ 592.771760][ T5734] ? __pfx_kthread+0x10/0x10 [ 592.771850][ T5734] ret_from_fork+0x514/0xb70 [ 592.771970][ T5734] ? __pfx_ret_from_fork+0x10/0x10 [ 592.772045][ T5734] ? __switch_to+0xc89/0x1420 [ 592.772144][ T5734] ? __pfx_kthread+0x10/0x10 [ 592.772224][ T5734] ret_from_fork_asm+0x1a/0x30 [ 592.772284][ T5734] [ 592.772331][ T5734] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 592.772368][ T5734] CPU: 1 UID: 0 PID: 5734 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 592.772397][ T5734] Tainted: [L]=SOFTLOCKUP [ 592.772405][ T5734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 592.772418][ T5734] Workqueue: usb_hub_wq hub_event [ 592.772504][ T5734] Call Trace: [ 592.772518][ T5734] [ 592.772527][ T5734] vpanic+0x56c/0xa60 [ 592.772580][ T5734] ? __pfx__printk+0x10/0x10 [ 592.772634][ T5734] ? __pfx_vpanic+0x10/0x10 [ 592.772682][ T5734] ? is_bpf_text_address+0x292/0x2b0 [ 592.772738][ T5734] ? is_bpf_text_address+0x26/0x2b0 [ 592.772797][ T5734] panic+0xc5/0xd0 [ 592.772834][ T5734] ? __pfx_panic+0x10/0x10 [ 592.772877][ T5734] ? ret_from_fork_asm+0x1a/0x30 [ 592.772907][ T5734] __warn+0x315/0x4c0 [ 592.772959][ T5734] ? usb_submit_urb+0x79/0x18b0 [ 592.773022][ T5734] ? usb_submit_urb+0x79/0x18b0 [ 592.773055][ T5734] __report_bug+0x331/0x530 [ 592.773186][ T5734] ? usb_submit_urb+0x79/0x18b0 [ 592.773226][ T5734] ? __pfx___report_bug+0x10/0x10 [ 592.773296][ T5734] ? irqentry_exit+0x218/0x8f0 [ 592.773356][ T5734] ? usb_submit_urb+0x81/0x18b0 [ 592.773385][ T5734] ? usb_submit_urb+0x7c/0x18b0 [ 592.773482][ T5734] report_bug_entry+0x19a/0x290 [ 592.773517][ T5734] ? usb_submit_urb+0x7c/0x18b0 [ 592.773552][ T5734] ? usb_submit_urb+0x81/0x18b0 [ 592.773646][ T5734] handle_bug+0xce/0x200 [ 592.773670][ T5734] exc_invalid_op+0x1a/0x50 [ 592.773692][ T5734] asm_exc_invalid_op+0x1a/0x20 [ 592.773728][ T5734] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 592.773809][ T5734] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 a9 ee 56 fb 49 83 3e 00 74 40 e8 0e 82 ed fa 48 8d 3d d7 87 e4 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 f3 81 ed fa eb 05 e8 ec 81 [ 592.773830][ T5734] RSP: 0018:ffffc9000601ebf8 EFLAGS: 00010283 [ 592.773849][ T5734] RAX: ffffffff86d7b732 RBX: ffff888039dbc600 RCX: 0000000000100000 [ 592.773873][ T5734] RDX: ffffc9001be7b000 RSI: ffff888039dbc600 RDI: ffffffff8fbc3f10 [ 592.773925][ T5734] RBP: dffffc0000000000 R08: ffffffff8faf74f7 R09: 1ffffffff1f5ee9e [ 592.773965][ T5734] R10: dffffc0000000000 R11: fffffbfff1f5ee9f R12: 1ffff1100691710a [ 592.773981][ T5734] R13: ffff8880348b8848 R14: ffff888039dbc608 R15: 0000000000000cc0 [ 592.774007][ T5734] ? usb_submit_urb+0x72/0x18b0 [ 592.774083][ T5734] ? usb_submit_urb+0x72/0x18b0 [ 592.774128][ T5734] ? lockdep_hardirqs_on+0x7a/0x110 [ 592.774157][ T5734] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 592.774235][ T5734] ? mutex_lock_nested+0x152/0x1d0 [ 592.774278][ T5734] ? cm109_input_open+0x97/0x460 [ 592.774312][ T5734] cm109_input_open+0x1fb/0x460 [ 592.774380][ T5734] input_open_device+0x1f9/0x3b0 [ 592.774444][ T5734] kbd_connect+0xf6/0x150 [ 592.774476][ T5734] input_register_device+0xd08/0x1150 [ 592.774554][ T5734] cm109_usb_probe+0x11e4/0x16f0 [ 592.774628][ T5734] usb_probe_interface+0x653/0xc60 [ 592.774722][ T5734] ? __pfx_usb_probe_interface+0x10/0x10 [ 592.774758][ T5734] really_probe+0x254/0xae0 [ 592.774793][ T5734] __driver_probe_device+0x1e8/0x360 [ 592.774835][ T5734] driver_probe_device+0x4f/0x240 [ 592.774909][ T5734] __device_attach_driver+0x270/0x410 [ 592.774945][ T5734] bus_for_each_drv+0x25b/0x2f0 [ 592.775015][ T5734] ? __pfx___device_attach_driver+0x10/0x10 [ 592.775089][ T5734] ? __pfx_bus_for_each_drv+0x10/0x10 [ 592.775126][ T5734] ? rt_spin_unlock+0x163/0x200 [ 592.775207][ T5734] __device_attach+0x2c7/0x450 [ 592.775252][ T5734] ? rt_spin_unlock+0x157/0x200 [ 592.775281][ T5734] ? __pfx___device_attach+0x10/0x10 [ 592.775358][ T5734] device_initial_probe+0xa1/0xd0 [ 592.775414][ T5734] bus_probe_device+0x12d/0x220 [ 592.775455][ T5734] device_add+0x7d7/0xb80 [ 592.775530][ T5734] usb_set_configuration+0x1ad8/0x2180 [ 592.775619][ T5734] usb_generic_driver_probe+0x8d/0x150 [ 592.775717][ T5734] usb_probe_device+0x1c3/0x3b0 [ 592.775746][ T5734] ? __pfx_usb_probe_device+0x10/0x10 [ 592.775768][ T5734] really_probe+0x254/0xae0 [ 592.775847][ T5734] __driver_probe_device+0x1e8/0x360 [ 592.775898][ T5734] driver_probe_device+0x4f/0x240 [ 592.775933][ T5734] __device_attach_driver+0x270/0x410 [ 592.776021][ T5734] bus_for_each_drv+0x25b/0x2f0 [ 592.776071][ T5734] ? __pfx___device_attach_driver+0x10/0x10 [ 592.776101][ T5734] ? __pfx_bus_for_each_drv+0x10/0x10 [ 592.776199][ T5734] ? rt_spin_unlock+0x163/0x200 [ 592.776236][ T5734] __device_attach+0x2c7/0x450 [ 592.776287][ T5734] ? __pfx___device_attach+0x10/0x10 [ 592.776374][ T5734] device_initial_probe+0xa1/0xd0 [ 592.776406][ T5734] bus_probe_device+0x12d/0x220 [ 592.776466][ T5734] device_add+0x7d7/0xb80 [ 592.776494][ T5734] usb_new_device+0x98d/0x1610 [ 592.776541][ T5734] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 592.776582][ T5734] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 592.776610][ T5734] ? __pfx_usb_new_device+0x10/0x10 [ 592.776655][ T5734] hub_event+0x28cf/0x4cf0 [ 592.776753][ T5734] ? __pfx_hub_event+0x10/0x10 [ 592.776790][ T5734] ? process_scheduled_works+0xa20/0x14e0 [ 592.776826][ T5734] ? rcu_is_watching+0x15/0xb0 [ 592.776859][ T5734] ? process_scheduled_works+0xa20/0x14e0 [ 592.776887][ T5734] process_scheduled_works+0xa8e/0x14e0 [ 592.776949][ T5734] ? __pfx_process_scheduled_works+0x10/0x10 [ 592.776984][ T5734] ? assign_work+0x3cf/0x5d0 [ 592.777016][ T5734] worker_thread+0xa47/0xfb0 [ 592.777061][ T5734] ? __kthread_parkme+0x71/0x1f0 [ 592.777098][ T5734] kthread+0x388/0x470 [ 592.777127][ T5734] ? __pfx_worker_thread+0x10/0x10 [ 592.777148][ T5734] ? __pfx_kthread+0x10/0x10 [ 592.777175][ T5734] ret_from_fork+0x514/0xb70 [ 592.777221][ T5734] ? __pfx_ret_from_fork+0x10/0x10 [ 592.777253][ T5734] ? __switch_to+0xc89/0x1420 [ 592.777280][ T5734] ? __pfx_kthread+0x10/0x10 [ 592.777310][ T5734] ret_from_fork_asm+0x1a/0x30 [ 592.777349][ T5734] [ 592.778692][ T5734] Kernel Offset: disabled