last executing test programs: 8.388339375s ago: executing program 2 (id=420): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaff2, 0xa, 0x5, 0xc, 0x1, 0x9, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x8}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf8965607", 0x5f}], 0x1}, 0x41) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f000000000000000000000000000004d36c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000008000003000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000200000026bd7000020000100200000000000000000000000400000005000000bd000800b90008000017b100c82c991322bed3035a88000000000000000037341c43eea0c405b03742d572414284a9f0864d5feec5c58c98a1c04a8a06"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001380)={0x9, {"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", 0x1000}}, 0x1006) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x0, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.748981864s ago: executing program 3 (id=423): sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x4c8c5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffff02ffffffffffffffffffffffff200004"], 0x21c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 7.207589137s ago: executing program 3 (id=424): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x0, 0x0}) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000004c0)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r1, 0x5}) execve(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 7.054636383s ago: executing program 2 (id=425): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x9, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x0, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8000000000000000010000000040100"}) 7.006024662s ago: executing program 0 (id=426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x40}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) r1 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_pidfd_open(r2, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) process_mrelease(r3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000f80), &(0x7f0000000fc0)={'fscrypt:', @desc3}, &(0x7f0000001000)={0x0, "54d8845c105e0b9c18184096c173c4ab137c8772522d787561ead91a5905025e57f75b829f974e502a5c0ba674bb4f97816a0704cafcdba34a8effdca5fc13d2", 0x34}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0x0, 0xffffffffffffffff) syz_usb_control_io(r1, 0x0, 0x0) 6.696031094s ago: executing program 3 (id=427): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'mpc624\x00', [0x100, 0x7, 0x1, 0xfffffffe, 0x4, 0x1000, 0x0, 0x20000004, 0x0, 0xa, 0x0, 0x6, 0x3, 0xb6ac, 0x9, 0xffffffff, 0x20000006, 0x10008, 0xfe9, 0x403, 0xa, 0x6, 0x4, 0x9, 0x48, 0x7, 0x80, 0x0, 0x81, 0x7, 0xff]}) ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0) 5.404270396s ago: executing program 3 (id=428): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x482) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x400206, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x4e, 0x2, 0x0, "b43ddddde5dbbbe40f00f401bbf689000000c67f00000000008000"}) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x22, 0x6, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7800, 0x7, 0x38000, 0x7fff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x29, 0xc, 0xbb, 0xffff86dc, 0x16, @dev={0xfe, 0x80, '\x00', 0xc}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x10, 0x10, 0x6, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x4, 0x6, 0x2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x7800, 0x3fffc0, 0x2}}) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000780)={&(0x7f0000000180), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x9c, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000040) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x3b, 0x0, "6606ca7ce41b346ac33e74fc00d9165a44e86835fec0b518269fd4c21a897da3d787c09dcb8216a272aea67961649d1590065253e07bd0b461b349eb64746d76c42fb2623034078188f0009f9f10d5f0"}, 0xd8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) 4.647307174s ago: executing program 0 (id=429): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049dc) close(r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x200000ffa000) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f00000002c0)=ANY=[@ANYRES16=r2], 0x149) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000000)='\x00', 0x101000, &(0x7f00000000c0)={@_ha_fsid={[0x4, 0x5]}, {0xc, 0x5, 0x4, 0x7}}, 0x400, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x3}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001f4ef442d99b6f44c4fde2e1620a94b3624a4db4acda20518c605e8b1868d3479af40e9e1e642a6cdbe5f4a0d40bd9bad11b79214b522478fa23b27c33f93db2e02548d4745b7a4c1ca791d23f585cca3f491c4b02a50b6981719caec0bf8f6391b8cc2f2ec3b72e72b16a884f1ae3e3adf3e9316417ad4aec2cf554d43ee8294db04fa35fe1cb7120c0387a10a980357d7063191e52b300eaed9eac432186e3c6b9647f341e8f0a8cd4699171d3", @ANYRES16=0x0, @ANYBLOB="10002abd7000fcdbdf25070000000500290001000000b45a247777e120e672e0ddea8a4bddcc696728a11dac37d7c8fd07c094eee264d80c4edbad62a4b8d29bc7c4dbd80ddd1ac53111e7c7d30ff1d8ac7079db6fea2b524f8139911a51bf300cd9c8930b6c0f21c689c9e15bbe86080f5a12045106701e8b77e7"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x24008080) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 4.231093494s ago: executing program 0 (id=432): sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x4c8c5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffff02ffffffffffffffffffffffff200004"], 0x21c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 3.978493286s ago: executing program 0 (id=433): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaff2, 0xa, 0x5, 0xc, 0x1, 0x9, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x8}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf8965607", 0x5f}], 0x1}, 0x41) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f000000000000000000000000000004d36c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000008000003000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000200000026bd7000020000100200000000000000000000000400000005000000bd000800b90008000017b100c82c991322bed3035a88000000000000000037341c43eea0c405b03742d572414284a9f0864d5feec5c58c98a1c04a8a06"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001380)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b333b316d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b3b340d376d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e20100000082719ef5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5263440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f07b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x0, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.473405427s ago: executing program 1 (id=434): ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.104833974s ago: executing program 3 (id=435): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x2}}}}}]}}, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10044840}, 0x4080) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000240)={0xd4, 0x0, 0x9}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[], 0x15) r6 = dup(r5) write$binfmt_elf64(r6, &(0x7f0000000d40)=ANY=[], 0xfe60) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f00000002c0)=0x4) syz_usb_control_io$sierra_net(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="2a23020000000223"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}}, &(0x7f0000000b00)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x9f, "7b191984e981f55f474363a6c89707b6ca75f0df882e196990d3153a3e289d04997299c8c44a78e6a8cdf91f8cdfc77e9d58c051953e76cab9b5384dca9d0586cc2f27e486ae4878d194d4d8bbfbc8a0698b7847248bce69983667cdfba5c166fafb949be363d45dda9d795a4c8d67ab2fa36e007e189e69e58e63e9d514d689a935b532c63ec8316c63f15b4e13948bb2591774d8ae2d9a0ace2265b38166"}, &(0x7f0000000680)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000ac0)={0x21, 0x0, 0x4, "b6264b28"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa8103, 0x0) ioctl$BLKCLOSEZONE(r7, 0x40101287, &(0x7f0000000040)={0x2, 0x8}) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setuid(0xee01) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, 0x0, 0x0, &(0x7f0000000000)) syz_usb_control_io(r0, 0x0, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="69ea4517cc163c2542c063d66f1664f436e4"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x22040004) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000000040)) syz_usb_control_io$uac3(r0, 0x0, 0x0) 3.076631281s ago: executing program 2 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @mcast1, 0x4}}, 0x0, 0x0, 0x35, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x44) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "d3ff2108438086fc", "c8a89f9648c12027d7da6eda54e60554", "c4ba1dc4", "407c5c29d5cd033f"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.640636755s ago: executing program 0 (id=437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xfa, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 2.458679274s ago: executing program 1 (id=438): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1ab0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040044) landlock_restrict_self(r0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x9) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x701, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r1, &(0x7f0000000000)='./file0\x00', 0x4) 2.081097715s ago: executing program 2 (id=439): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = fsmount(r1, 0x0, 0x77) openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x102044, 0x4) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000040)=0x3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x101, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x8404) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f00000002c0)) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480240001800b000100736f636b65740000140002800800024000000003080001400000000228000180080001006e6174001c0002800800054000000003080002400000000208000140000000010900010073797a30000000000900020073797a320000000014000000110001"], 0xa4}}, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000280)={0xf, 0x8, 0xfa00, {r5, 0x3}}, 0x10) (async) r6 = syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x0, 0x40200) (async, rerun: 64) r7 = syz_open_procfs$userns(0x0, &(0x7f0000000140)) (rerun: 64) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000180)) (async) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000180)=0xda) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(r8, 0x807f, 0x1000000, 0x4) 1.923822194s ago: executing program 2 (id=440): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040), &(0x7f000009de80), 0x0) 1.226618675s ago: executing program 1 (id=441): sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x4c8c5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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"], 0x21c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a00000030"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r0, 0x0, 0x0) 1.072218681s ago: executing program 1 (id=442): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) recvmmsg(r0, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x2040, 0x0) epoll_create(0x0) 776.425498ms ago: executing program 0 (id=443): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x482) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x400206, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x4e, 0x2, 0x0, "b43ddddde5dbbbe40f00f401bbf689000000c67f00000000008000"}) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x22, 0x6, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7800, 0x7, 0x38000, 0x7fff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x29, 0xc, 0xbb, 0xffff86dc, 0x16, @dev={0xfe, 0x80, '\x00', 0xc}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x10, 0x10, 0x6, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x4, 0x6, 0x2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x7800, 0x3fffc0, 0x2}}) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000780)={&(0x7f0000000180), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x9c, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000040) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x3b, 0x0, "6606ca7ce41b346ac33e74fc00d9165a44e86835fec0b518269fd4c21a897da3d787c09dcb8216a272aea67961649d1590065253e07bd0b461b349eb64746d76c42fb2623034078188f0009f9f10d5f0"}, 0xd8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) 762.767388ms ago: executing program 1 (id=444): r0 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x0, 0x7c53}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000040)) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r5 = geteuid() (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004280)={0x0, 0x0, 0x0}, &(0x7f00000042c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004300)={0x0, 0x0, 0x0}, &(0x7f0000004340)=0xc) (async) getresgid(&(0x7f0000004380)=0x0, &(0x7f00000043c0)=0x0, &(0x7f0000004400)=0x0) (async) r16 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000004440)={{}, {0x1, 0x4}, [{0x2, 0x1, r2}, {0x2, 0x2, r4}, {0x2, 0x5, r5}], {0x4, 0x1}, [{0x8, 0x4, r7}, {0x8, 0x0, 0xee00}, {0x8, 0x2d96d42be8c84154, r10}, {0x8, 0x1, r12}, {0x8, 0xc, r15}, {0x8, 0x0, r16}], {0x10, 0x7}, {0x20, 0x4}}, 0x6c, 0x1) (async) r17 = openat$procfs(0xffffffffffffff9c, &(0x7f00000044c0)='/proc/schedstat\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(r17, &(0x7f0000004500)={0x3d8, 0x0, r3, [{{0x5, 0x1, 0x8, 0x6, 0x4, 0x40, {0x4, 0xfff, 0xfffffffffffffacf, 0x1, 0x1, 0x7fffffffffffffff, 0x7ff, 0x360d, 0x2, 0x2000, 0x2, r9, r15, 0x1000, 0x80000001}}, {0x2, 0x10001, 0x1, 0x10001, '\x00'}}, {{0x6, 0x1, 0xfffffffffffffffb, 0x7, 0x5, 0x0, {0x2, 0x6, 0x1, 0x9, 0x14de8a44, 0x6, 0x0, 0x7ea2, 0x1, 0xc000, 0xfffffff7, r2, r7}}, {0x1, 0x9, 0x18, 0x9, 'system.posix_acl_access\x00'}}, {{0x0, 0x3, 0x80000001, 0xb, 0x8, 0x0, {0x3, 0x4a15, 0x4, 0x4, 0x7fffffff, 0x7fffffff, 0x1, 0x2, 0x8, 0xc000, 0x7ff, r9, r14, 0x6, 0x1}}, {0x4, 0x9, 0x1, 0x8, '\x00'}}, {{0x5, 0xb8, 0x4, 0xf, 0x81f1569, 0xff, {0x6, 0x0, 0x6, 0x7, 0xfffffffffffffffb, 0x0, 0x3, 0x9, 0x7, 0x1000, 0x4, r4, r14, 0xab6}}, {0x0, 0x4, 0x0, 0xf}}, {{0x6, 0x0, 0xeb36, 0x7f, 0x584db106, 0x1, {0x4, 0x6, 0x1, 0xfd16, 0x1, 0x8001, 0x2, 0x7, 0x9, 0x7000, 0x4, r4, r10, 0xadb, 0x1}}, {0x0, 0x9, 0x1, 0x9, '$'}}, {{0x3, 0x3, 0x1000, 0x2, 0x1, 0xfffff801, {0x5, 0x401, 0x7, 0x8, 0x8, 0x4, 0xfffff882, 0x8, 0x10001, 0x2000, 0x1a00000, r11, r7, 0x0, 0x40}}, {0x4, 0x3, 0x1, 0x3, '\x00'}}]}, 0x3d8) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r17, 0x29, 0x22, &(0x7f0000004900)={{{@in=@multicast1, @in=@broadcast, 0x4e22, 0x5, 0x4e22, 0x9f, 0xa, 0x20, 0xb0, 0x4, r1, r9}, {0x50000, 0x5, 0x697, 0x37, 0x4, 0x0, 0xd, 0x4}, {0xb374, 0x4, 0x6, 0xff}, 0x1, 0x6e6bbb, 0x0, 0x1, 0x3, 0x3}, {{@in=@broadcast, 0x4d4, 0x2b}, 0x2, @in=@multicast2, 0x3501, 0x1, 0x3, 0x4, 0x3, 0x8, 0xfffffffd}}, 0xe8) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r17, 0x8983, &(0x7f0000004a00)={0x3, 'pimreg0\x00', {0x5}, 0x5}) (async) mount$9p_tcp(&(0x7f0000004a40), &(0x7f0000004a80)='./file0\x00', &(0x7f0000004ac0), 0x4000, &(0x7f0000004b00)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@access_client}, {@version_L}, {@noxattr}, {@aname={'aname', 0x3d, '/proc/schedstat\x00'}}, {@cache_readahead}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) (async) syz_kvm_setup_cpu$x86(r17, r17, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000004c40)=[@text64={0x40, &(0x7f0000004bc0)="260f01df65f3440fc2d40681124ecb0000c4a2ad03cfc44101ef910c000000b9980000400f32b9840000c0b800000100ba000000000f30470f07440f20c0350c000000440f22c0c463317f5cb30d2f", 0x4f}], 0x1, 0x24, &(0x7f0000004c80)=[@flags={0x3, 0x2}], 0x1) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r17, &(0x7f0000004d80)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004d40)={&(0x7f0000004d00)={0x20, 0x2, 0x2, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000004dc0)={0x4, 0x4}) (async) r18 = syz_open_dev$vcsu(&(0x7f0000004e00), 0x2, 0x80) fchownat(r18, &(0x7f0000004e40)='./file0\x00', r6, r13, 0x400) r19 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setown(r19, 0x8, r8) ioctl$NBD_CLEAR_SOCK(r17, 0xab04) (async) r20 = accept4$tipc(r17, 0x0, &(0x7f0000004e80), 0x80000) ioctl$sock_netdev_private(r20, 0x89f8, &(0x7f0000004ec0)="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") setregid(r16, 0x0) (async) rt_sigprocmask(0x1, &(0x7f0000004fc0), 0x0, 0x8) (async) r21 = dup3(r17, r19, 0x80000) ppoll(&(0x7f0000005000)=[{r20, 0xa094}, {r20, 0x8004}, {r21, 0x8400}, {r17, 0x8798}, {r17, 0x132}, {r19, 0xc080}], 0x6, &(0x7f0000005040)={0x77359400}, &(0x7f0000005080)={[0x4]}, 0x8) 639.79897ms ago: executing program 2 (id=445): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaff2, 0xa, 0x5, 0xc, 0x1, 0x9, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x8}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f000000000000000000000000000004d36c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000008000003000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000200000026bd7000020000100200000000000000000000000400000005000000bd000800b90008000017b100c82c991322bed3035a88000000000000000037341c43eea0c405b03742d572414284a9f0864d5feec5c58c98a1c04a8a06"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001380)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b333b316d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b3b340d376d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e20100000082719ef5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5263440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f07b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x0, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 566.68336ms ago: executing program 1 (id=446): ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=447): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000240)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000001e40)=[{0x10, 0x11, 0xcd5}], 0x10}}], 0x1, 0x48850) kernel console output (not intermixed with test programs): Engine, BIOS Google 04/18/2026 [ 129.906821][ T6176] Call Trace: [ 129.906828][ T6176] [ 129.906835][ T6176] dump_stack_lvl+0xe8/0x150 [ 129.906863][ T6176] should_fail_ex+0x46b/0x600 [ 129.906902][ T6176] strncpy_from_user+0x36/0x2b0 [ 129.906927][ T6176] do_getname+0x77/0x250 [ 129.906951][ T6176] __x64_sys_execveat+0xad/0xf0 [ 129.906975][ T6176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.906995][ T6176] do_syscall_64+0x15f/0xf80 [ 129.907013][ T6176] ? trace_irq_disable+0x3b/0x140 [ 129.907037][ T6176] ? clear_bhb_loop+0x40/0x90 [ 129.907059][ T6176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.907080][ T6176] RIP: 0033:0x7f62826ecdd9 [ 129.907101][ T6176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.907119][ T6176] RSP: 002b:00007f628091d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 129.907141][ T6176] RAX: ffffffffffffffda RBX: 00007f6282966090 RCX: 00007f62826ecdd9 [ 129.907155][ T6176] RDX: 0000000000000000 RSI: 0000200000001400 RDI: ffffffffffffff9c [ 129.907169][ T6176] RBP: 00007f628091d090 R08: 0000000000000000 R09: 0000000000000000 [ 129.907182][ T6176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.907195][ T6176] R13: 00007f6282966128 R14: 00007f6282966090 R15: 00007fffc091f6c8 [ 129.907229][ T6176] [ 130.717297][ T6184] FAULT_INJECTION: forcing a failure. [ 130.717297][ T6184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.717337][ T6184] CPU: 1 UID: 0 PID: 6184 Comm: syz.1.130 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 130.717369][ T6184] Tainted: [L]=SOFTLOCKUP [ 130.717376][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 130.717389][ T6184] Call Trace: [ 130.717397][ T6184] [ 130.717406][ T6184] dump_stack_lvl+0xe8/0x150 [ 130.717438][ T6184] should_fail_ex+0x46b/0x600 [ 130.717471][ T6184] _copy_from_user+0x2d/0xb0 [ 130.717508][ T6184] sctp_setsockopt+0x1c4/0x12c0 [ 130.717532][ T6184] ? sock_common_setsockopt+0x36/0xc0 [ 130.717560][ T6184] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 130.717590][ T6184] do_sock_setsockopt+0x17c/0x1b0 [ 130.717627][ T6184] __x64_sys_setsockopt+0x143/0x1b0 [ 130.717662][ T6184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.717686][ T6184] do_syscall_64+0x15f/0xf80 [ 130.717708][ T6184] ? trace_irq_disable+0x3b/0x140 [ 130.717740][ T6184] ? clear_bhb_loop+0x40/0x90 [ 130.717768][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.717790][ T6184] RIP: 0033:0x7f928a81cdd9 [ 130.717812][ T6184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.717830][ T6184] RSP: 002b:00007f9288a6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.717854][ T6184] RAX: ffffffffffffffda RBX: 00007f928aa95fa0 RCX: 00007f928a81cdd9 [ 130.717868][ T6184] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000003 [ 130.717881][ T6184] RBP: 00007f9288a6e090 R08: 0000000000000008 R09: 0000000000000000 [ 130.717894][ T6184] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 130.717906][ T6184] R13: 00007f928aa96038 R14: 00007f928aa95fa0 R15: 00007fff5a560738 [ 130.717938][ T6184] [ 131.134645][ T6190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.386596][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 131.560322][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.680544][ T6206] netlink: 128 bytes leftover after parsing attributes in process `syz.1.140'. [ 131.680743][ T6206] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 131.730293][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 131.735566][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 131.735597][ T10] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 131.735621][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.777199][ T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 131.777232][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.777252][ T10] usb 1-1: Product: syz [ 131.777267][ T10] usb 1-1: Manufacturer: syz [ 131.777282][ T10] usb 1-1: SerialNumber: syz [ 131.832399][ T10] usb 1-1: config 0 descriptor?? [ 132.281822][ T10] gs_usb 1-1:0.0: Configuring for 55 interfaces [ 132.505098][ T10] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 132.506650][ T10] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 132.616574][ T10] usb 1-1: USB disconnect, device number 4 [ 133.088253][ T6211] infiniband syz2: set down [ 133.088482][ T6211] infiniband syz2: added team0 [ 133.163301][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.163371][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.284329][ T6211] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 133.284370][ T6211] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 133.284415][ T6211] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 133.451990][ T6211] RDS/IB: syz2: added [ 133.459066][ T6211] smc: adding ib device syz2 with port count 1 [ 133.459830][ T6211] smc: ib device syz2 port 1 has no pnetid [ 133.584291][ T6231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.598414][ T6230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.989839][ T6235] netlink: 5740 bytes leftover after parsing attributes in process `syz.2.151'. [ 134.551547][ T5617] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 134.551581][ T5617] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 135.403375][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.155'. [ 136.239435][ T6268] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.299404][ T6270] netlink: 32 bytes leftover after parsing attributes in process `syz.3.160'. [ 136.359867][ T6272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.379119][ T6271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.589618][ T6276] capability: warning: `syz.3.162' uses deprecated v2 capabilities in a way that may be insecure [ 137.280363][ T10] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 137.437179][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 137.437223][ T10] usb 4-1: can't read configurations, error -71 [ 137.574901][ T6295] FAULT_INJECTION: forcing a failure. [ 137.574901][ T6295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.574929][ T6295] CPU: 0 UID: 0 PID: 6295 Comm: syz.0.169 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 137.574947][ T6295] Tainted: [L]=SOFTLOCKUP [ 137.574952][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 137.574959][ T6295] Call Trace: [ 137.574964][ T6295] [ 137.574970][ T6295] dump_stack_lvl+0xe8/0x150 [ 137.574990][ T6295] should_fail_ex+0x46b/0x600 [ 137.575010][ T6295] _copy_from_user+0x2d/0xb0 [ 137.575030][ T6295] __sys_connect+0x156/0x450 [ 137.575049][ T6295] ? __pfx___sys_connect+0x10/0x10 [ 137.575082][ T6295] ? __pfx_ksys_write+0x10/0x10 [ 137.575103][ T6295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.575116][ T6295] __x64_sys_connect+0x7a/0x90 [ 137.575133][ T6295] do_syscall_64+0x15f/0xf80 [ 137.575146][ T6295] ? trace_irq_disable+0x3b/0x140 [ 137.575170][ T6295] ? clear_bhb_loop+0x40/0x90 [ 137.575185][ T6295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.575197][ T6295] RIP: 0033:0x7f3c969ecdd9 [ 137.575210][ T6295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.575221][ T6295] RSP: 002b:00007f3c94c46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 137.575235][ T6295] RAX: ffffffffffffffda RBX: 00007f3c96c65fa0 RCX: 00007f3c969ecdd9 [ 137.575244][ T6295] RDX: 000000000000001e RSI: 0000200000000000 RDI: 0000000000000003 [ 137.575252][ T6295] RBP: 00007f3c94c46090 R08: 0000000000000000 R09: 0000000000000000 [ 137.575260][ T6295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.575267][ T6295] R13: 00007f3c96c66038 R14: 00007f3c96c65fa0 R15: 00007ffd1af26ed8 [ 137.575286][ T6295] [ 137.885219][ T6297] netlink: 32 bytes leftover after parsing attributes in process `syz.0.170'. [ 137.955150][ T6299] netlink: 20 bytes leftover after parsing attributes in process `syz.1.172'. [ 138.009343][ T6301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.171'. [ 138.132371][ T6305] FAULT_INJECTION: forcing a failure. [ 138.132371][ T6305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.132412][ T6305] CPU: 0 UID: 0 PID: 6305 Comm: syz.1.175 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 138.132443][ T6305] Tainted: [L]=SOFTLOCKUP [ 138.132451][ T6305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.132463][ T6305] Call Trace: [ 138.132471][ T6305] [ 138.132481][ T6305] dump_stack_lvl+0xe8/0x150 [ 138.132513][ T6305] should_fail_ex+0x46b/0x600 [ 138.132547][ T6305] _copy_from_user+0x2d/0xb0 [ 138.132582][ T6305] set_user_sigmask+0xa7/0x1c0 [ 138.132614][ T6305] ? __pfx_set_user_sigmask+0x10/0x10 [ 138.132655][ T6305] __se_sys_epoll_pwait+0x170/0x390 [ 138.132689][ T6305] ? __pfx___se_sys_epoll_pwait+0x10/0x10 [ 138.132720][ T6305] ? __pfx_ksys_write+0x10/0x10 [ 138.132764][ T6305] ? __x64_sys_epoll_pwait+0x21/0xf0 [ 138.132795][ T6305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.132819][ T6305] do_syscall_64+0x15f/0xf80 [ 138.132840][ T6305] ? trace_irq_disable+0x3b/0x140 [ 138.132871][ T6305] ? clear_bhb_loop+0x40/0x90 [ 138.132899][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.132920][ T6305] RIP: 0033:0x7f928a81cdd9 [ 138.132938][ T6305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.132955][ T6305] RSP: 002b:00007f9288a6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 [ 138.132979][ T6305] RAX: ffffffffffffffda RBX: 00007f928aa95fa0 RCX: 00007f928a81cdd9 [ 138.132996][ T6305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 138.133008][ T6305] RBP: 00007f9288a6e090 R08: 0000200000000140 R09: 0000000000000008 [ 138.133022][ T6305] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 138.133036][ T6305] R13: 00007f928aa96038 R14: 00007f928aa95fa0 R15: 00007fff5a560738 [ 138.133068][ T6305] [ 138.570939][ T6315] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 138.570979][ T6315] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 138.730940][ T6322] FAULT_INJECTION: forcing a failure. [ 138.730940][ T6322] name failslab, interval 1, probability 0, space 0, times 0 [ 138.730980][ T6322] CPU: 0 UID: 0 PID: 6322 Comm: syz.1.180 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 138.731010][ T6322] Tainted: [L]=SOFTLOCKUP [ 138.731017][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.731029][ T6322] Call Trace: [ 138.731047][ T6322] [ 138.731056][ T6322] dump_stack_lvl+0xe8/0x150 [ 138.731088][ T6322] should_fail_ex+0x46b/0x600 [ 138.731120][ T6322] should_failslab+0xa8/0x100 [ 138.731158][ T6322] __kmalloc_noprof+0xdf/0x7b0 [ 138.731189][ T6322] ? sock_kmalloc+0xd6/0x160 [ 138.731221][ T6322] ? __local_bh_enable+0x1e1/0x2f0 [ 138.731258][ T6322] sock_kmalloc+0xd6/0x160 [ 138.731294][ T6322] af_alg_alloc_areq+0x99/0x200 [ 138.731320][ T6322] skcipher_recvmsg+0x321/0x1140 [ 138.731362][ T6322] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 138.731385][ T6322] ? __lock_acquire+0x6b5/0x2d10 [ 138.731410][ T6322] ? aa_sock_msg_perm+0x122/0x200 [ 138.731442][ T6322] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 138.731468][ T6322] sock_recvmsg_nosec+0x10c/0x140 [ 138.731495][ T6322] ____sys_recvmsg+0x23d/0x4f0 [ 138.731537][ T6322] ? __pfx_____sys_recvmsg+0x10/0x10 [ 138.731584][ T6322] ? import_iovec+0x73/0xa0 [ 138.731620][ T6322] ___sys_recvmsg+0x215/0x590 [ 138.731650][ T6322] ? get_pid_task+0x20/0x1f0 [ 138.731676][ T6322] ? __pfx____sys_recvmsg+0x10/0x10 [ 138.731713][ T6322] ? __fget_files+0x2a/0x420 [ 138.731756][ T6322] ? __fget_files+0x3a6/0x420 [ 138.731790][ T6322] __x64_sys_recvmsg+0x1c0/0x2a0 [ 138.731826][ T6322] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 138.731868][ T6322] ? __pfx_ksys_write+0x10/0x10 [ 138.731907][ T6322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.731929][ T6322] do_syscall_64+0x15f/0xf80 [ 138.731949][ T6322] ? trace_irq_disable+0x3b/0x140 [ 138.731980][ T6322] ? clear_bhb_loop+0x40/0x90 [ 138.732006][ T6322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.732026][ T6322] RIP: 0033:0x7f928a81cdd9 [ 138.732054][ T6322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.732071][ T6322] RSP: 002b:00007f9288a6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 138.732094][ T6322] RAX: ffffffffffffffda RBX: 00007f928aa95fa0 RCX: 00007f928a81cdd9 [ 138.732109][ T6322] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 138.732122][ T6322] RBP: 00007f9288a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 138.732134][ T6322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.732146][ T6322] R13: 00007f928aa96038 R14: 00007f928aa95fa0 R15: 00007fff5a560738 [ 138.732179][ T6322] [ 138.955985][ T6326] netlink: 72 bytes leftover after parsing attributes in process `syz.3.181'. [ 139.459750][ T6337] syzkaller1: entered promiscuous mode [ 139.459781][ T6337] syzkaller1: entered allmulticast mode [ 139.654586][ T6340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.655248][ T6340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.840965][ T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 139.891681][ T5696] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 140.034612][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 140.034657][ T10] usb 4-1: can't read configurations, error -71 [ 140.060434][ T5696] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 140.060470][ T5696] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 140.060497][ T5696] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 140.064515][ T5696] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 140.064549][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.064585][ T5696] usb 3-1: Product: syz [ 140.064594][ T5696] usb 3-1: Manufacturer: syz [ 140.064603][ T5696] usb 3-1: SerialNumber: syz [ 140.077683][ T5696] usb 3-1: config 0 descriptor?? [ 140.080995][ T6339] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 140.081175][ T6339] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 140.100691][ T5696] usb 3-1: ucan: probing device on interface #0 [ 140.284685][ T6347] netlink: 72 bytes leftover after parsing attributes in process `syz.0.190'. [ 140.294849][ T5696] usb 3-1: ucan: could not read protocol version, ret=-71 [ 140.294875][ T5696] usb 3-1: ucan: probe failed; try to update the device firmware [ 140.348597][ T5696] usb 3-1: USB disconnect, device number 12 [ 140.686298][ T6355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.689531][ T6354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.803459][ T6357] FAULT_INJECTION: forcing a failure. [ 140.803459][ T6357] name failslab, interval 1, probability 0, space 0, times 0 [ 140.803499][ T6357] CPU: 0 UID: 0 PID: 6357 Comm: syz.1.193 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 140.803530][ T6357] Tainted: [L]=SOFTLOCKUP [ 140.803537][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.803550][ T6357] Call Trace: [ 140.803558][ T6357] [ 140.803567][ T6357] dump_stack_lvl+0xe8/0x150 [ 140.803602][ T6357] should_fail_ex+0x46b/0x600 [ 140.803634][ T6357] should_failslab+0xa8/0x100 [ 140.803667][ T6357] __kmalloc_noprof+0xdf/0x7b0 [ 140.803697][ T6357] ? tomoyo_encode+0x28b/0x550 [ 140.803740][ T6357] tomoyo_encode+0x28b/0x550 [ 140.803779][ T6357] tomoyo_realpath_from_path+0x58d/0x5d0 [ 140.803816][ T6357] ? tomoyo_domain+0xd7/0x130 [ 140.803844][ T6357] ? tomoyo_path_number_perm+0x219/0x630 [ 140.803873][ T6357] tomoyo_path_number_perm+0x246/0x630 [ 140.803903][ T6357] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 140.803931][ T6357] ? __lock_acquire+0x6b5/0x2d10 [ 140.803955][ T6357] ? do_raw_spin_lock+0x12b/0x2f0 [ 140.804030][ T6357] ? __fget_files+0x2a/0x420 [ 140.804060][ T6357] ? __fget_files+0x2a/0x420 [ 140.804084][ T6357] ? __fget_files+0x3a6/0x420 [ 140.804108][ T6357] ? __fget_files+0x2a/0x420 [ 140.804139][ T6357] security_file_ioctl+0xc3/0x2a0 [ 140.804169][ T6357] __se_sys_ioctl+0x47/0x170 [ 140.804201][ T6357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.804226][ T6357] do_syscall_64+0x15f/0xf80 [ 140.804247][ T6357] ? trace_irq_disable+0x3b/0x140 [ 140.804279][ T6357] ? clear_bhb_loop+0x40/0x90 [ 140.804307][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.804328][ T6357] RIP: 0033:0x7f928a81cdd9 [ 140.804349][ T6357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.804368][ T6357] RSP: 002b:00007f9288a6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.804390][ T6357] RAX: ffffffffffffffda RBX: 00007f928aa95fa0 RCX: 00007f928a81cdd9 [ 140.804405][ T6357] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 140.804417][ T6357] RBP: 00007f9288a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 140.804430][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.804443][ T6357] R13: 00007f928aa96038 R14: 00007f928aa95fa0 R15: 00007fff5a560738 [ 140.804478][ T6357] [ 140.813132][ T6357] ERROR: Out of memory at tomoyo_realpath_from_path. [ 141.252762][ T6369] process 'syz.2.197' launched './file2' with NULL argv: empty string added [ 141.539379][ T6377] netlink: 72 bytes leftover after parsing attributes in process `syz.3.199'. [ 141.965352][ T6383] FAULT_INJECTION: forcing a failure. [ 141.965352][ T6383] name failslab, interval 1, probability 0, space 0, times 0 [ 141.965386][ T6383] CPU: 0 UID: 0 PID: 6383 Comm: syz.2.202 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 141.965416][ T6383] Tainted: [L]=SOFTLOCKUP [ 141.965423][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 141.965435][ T6383] Call Trace: [ 141.965444][ T6383] [ 141.965453][ T6383] dump_stack_lvl+0xe8/0x150 [ 141.965485][ T6383] should_fail_ex+0x46b/0x600 [ 141.965518][ T6383] should_failslab+0xa8/0x100 [ 141.965551][ T6383] __kmalloc_noprof+0xdf/0x7b0 [ 141.965582][ T6383] ? tomoyo_encode+0x28b/0x550 [ 141.965621][ T6383] tomoyo_encode+0x28b/0x550 [ 141.965660][ T6383] tomoyo_realpath_from_path+0x58d/0x5d0 [ 141.965694][ T6383] ? tomoyo_domain+0xd7/0x130 [ 141.965721][ T6383] ? tomoyo_path_number_perm+0x219/0x630 [ 141.965748][ T6383] tomoyo_path_number_perm+0x246/0x630 [ 141.965776][ T6383] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 141.965803][ T6383] ? __lock_acquire+0x6b5/0x2d10 [ 141.965826][ T6383] ? do_raw_spin_lock+0x12b/0x2f0 [ 141.965890][ T6383] ? __fget_files+0x2a/0x420 [ 141.965920][ T6383] ? __fget_files+0x2a/0x420 [ 141.965943][ T6383] ? __fget_files+0x3a6/0x420 [ 141.965967][ T6383] ? __fget_files+0x2a/0x420 [ 141.966005][ T6383] security_file_ioctl+0xc3/0x2a0 [ 141.966041][ T6383] __se_sys_ioctl+0x47/0x170 [ 141.966073][ T6383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.966097][ T6383] do_syscall_64+0x15f/0xf80 [ 141.966118][ T6383] ? trace_irq_disable+0x3b/0x140 [ 141.966149][ T6383] ? clear_bhb_loop+0x40/0x90 [ 141.966176][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.966199][ T6383] RIP: 0033:0x7fc8ff4fcdd9 [ 141.966220][ T6383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.966237][ T6383] RSP: 002b:00007fc8fd756028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.966260][ T6383] RAX: ffffffffffffffda RBX: 00007fc8ff775fa0 RCX: 00007fc8ff4fcdd9 [ 141.966276][ T6383] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 141.966289][ T6383] RBP: 00007fc8fd756090 R08: 0000000000000000 R09: 0000000000000000 [ 141.966303][ T6383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.966315][ T6383] R13: 00007fc8ff776038 R14: 00007fc8ff775fa0 R15: 00007ffeb5299378 [ 141.966348][ T6383] [ 141.967922][ T6383] ERROR: Out of memory at tomoyo_realpath_from_path. [ 142.264506][ T6390] FAULT_INJECTION: forcing a failure. [ 142.264506][ T6390] name failslab, interval 1, probability 0, space 0, times 0 [ 142.264546][ T6390] CPU: 1 UID: 0 PID: 6390 Comm: syz.0.204 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 142.264576][ T6390] Tainted: [L]=SOFTLOCKUP [ 142.264584][ T6390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.264596][ T6390] Call Trace: [ 142.264606][ T6390] [ 142.264615][ T6390] dump_stack_lvl+0xe8/0x150 [ 142.264649][ T6390] should_fail_ex+0x46b/0x600 [ 142.264682][ T6390] should_failslab+0xa8/0x100 [ 142.264716][ T6390] __kmalloc_noprof+0xdf/0x7b0 [ 142.264747][ T6390] ? tomoyo_encode+0x28b/0x550 [ 142.264786][ T6390] tomoyo_encode+0x28b/0x550 [ 142.264827][ T6390] tomoyo_realpath_from_path+0x58d/0x5d0 [ 142.264874][ T6390] ? tomoyo_path_number_perm+0x219/0x630 [ 142.264905][ T6390] tomoyo_path_number_perm+0x246/0x630 [ 142.264934][ T6390] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.264959][ T6390] ? __lock_acquire+0x6b5/0x2d10 [ 142.264986][ T6390] ? do_raw_spin_lock+0x12b/0x2f0 [ 142.265059][ T6390] ? __fget_files+0x2a/0x420 [ 142.265089][ T6390] ? __fget_files+0x2a/0x420 [ 142.265113][ T6390] ? __fget_files+0x3a6/0x420 [ 142.265137][ T6390] ? __fget_files+0x2a/0x420 [ 142.265167][ T6390] security_file_ioctl+0xc3/0x2a0 [ 142.265197][ T6390] __se_sys_ioctl+0x47/0x170 [ 142.265233][ T6390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.265256][ T6390] do_syscall_64+0x15f/0xf80 [ 142.265277][ T6390] ? trace_irq_disable+0x3b/0x140 [ 142.265309][ T6390] ? clear_bhb_loop+0x40/0x90 [ 142.265334][ T6390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.265356][ T6390] RIP: 0033:0x7f3c969ecdd9 [ 142.265377][ T6390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.265394][ T6390] RSP: 002b:00007f3c94c46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.265417][ T6390] RAX: ffffffffffffffda RBX: 00007f3c96c65fa0 RCX: 00007f3c969ecdd9 [ 142.265433][ T6390] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 142.265448][ T6390] RBP: 00007f3c94c46090 R08: 0000000000000000 R09: 0000000000000000 [ 142.265461][ T6390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.265474][ T6390] R13: 00007f3c96c66038 R14: 00007f3c96c65fa0 R15: 00007ffd1af26ed8 [ 142.265508][ T6390] [ 142.265557][ T6390] ERROR: Out of memory at tomoyo_realpath_from_path. [ 142.352564][ T5759] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 142.500537][ T6392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.205'. [ 142.500563][ T6392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.205'. [ 142.666624][ T5759] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 142.666668][ T5759] usb 4-1: can't read configurations, error -71 [ 142.766433][ T6401] netlink: 72 bytes leftover after parsing attributes in process `syz.2.208'. [ 143.360257][ T37] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 143.484560][ T6422] fuse: Bad value for 'group_id' [ 143.484583][ T6422] fuse: Bad value for 'group_id' [ 143.510555][ T37] usb 2-1: Using ep0 maxpacket: 8 [ 143.513009][ T37] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 143.516126][ T37] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 143.516157][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.516414][ T37] usb 2-1: Product: syz [ 143.516431][ T37] usb 2-1: Manufacturer: syz [ 143.516445][ T37] usb 2-1: SerialNumber: syz [ 143.552286][ T5709] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 143.594552][ T6424] netlink: 72 bytes leftover after parsing attributes in process `syz.3.218'. [ 143.611303][ T37] usb 2-1: config 0 descriptor?? [ 143.656975][ T37] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 143.657048][ T37] usb 2-1: setting power ON [ 143.657443][ T37] dvb-usb: bulk message failed: -22 (2/0) [ 143.684883][ T37] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 143.685798][ T37] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 143.685861][ T37] usb 2-1: media controller created [ 143.722899][ T5709] usb 3-1: Using ep0 maxpacket: 16 [ 143.727000][ T5709] usb 3-1: config index 0 descriptor too short (expected 33627, got 91) [ 143.727029][ T5709] usb 3-1: config 198 has too many interfaces: 51, using maximum allowed: 32 [ 143.727052][ T5709] usb 3-1: config 198 has an invalid descriptor of length 80, skipping remainder of the config [ 143.727073][ T5709] usb 3-1: config 198 has 0 interfaces, different from the descriptor's value: 51 [ 143.733822][ T5709] usb 3-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 143.733855][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.733876][ T5709] usb 3-1: Product: syz [ 143.733891][ T5709] usb 3-1: Manufacturer: syz [ 143.733915][ T5709] usb 3-1: SerialNumber: syz [ 143.752358][ T5617] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 143.883354][ T37] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.013132][ T37] usb 2-1: selecting invalid altsetting 6 [ 144.013160][ T37] usb 2-1: digital interface selection failed (-22) [ 144.013178][ T37] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 144.041193][ T37] usb 2-1: setting power OFF [ 144.044721][ T37] dvb-usb: bulk message failed: -22 (2/0) [ 144.044748][ T37] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 144.044761][ T37] (NULL device *): no alternate interface [ 144.274260][ T5709] usb 3-1: USB disconnect, device number 13 [ 144.390642][ T37] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 144.435893][ T37] usb 2-1: USB disconnect, device number 4 [ 144.510914][ T5696] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 144.641302][ T5696] usb 1-1: device descriptor read/64, error -71 [ 144.870335][ T5709] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 144.882509][ T5696] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 145.006369][ T6445] FAULT_INJECTION: forcing a failure. [ 145.006369][ T6445] name failslab, interval 1, probability 0, space 0, times 0 [ 145.006395][ T6445] CPU: 0 UID: 0 PID: 6445 Comm: syz.1.225 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 145.006413][ T6445] Tainted: [L]=SOFTLOCKUP [ 145.006418][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.006425][ T6445] Call Trace: [ 145.006430][ T6445] [ 145.006435][ T6445] dump_stack_lvl+0xe8/0x150 [ 145.006457][ T6445] should_fail_ex+0x46b/0x600 [ 145.006477][ T6445] should_failslab+0xa8/0x100 [ 145.006496][ T6445] kmem_cache_alloc_noprof+0x87/0x680 [ 145.006514][ T6445] ? io_submit_one+0x130/0x14c0 [ 145.006536][ T6445] io_submit_one+0x130/0x14c0 [ 145.006556][ T6445] ? irqentry_exit+0x218/0x760 [ 145.006569][ T6445] ? lockdep_hardirqs_on+0x7a/0x110 [ 145.006588][ T6445] ? irqentry_exit+0x218/0x760 [ 145.006602][ T6445] ? __pfx_io_submit_one+0x10/0x10 [ 145.006621][ T6445] ? __might_fault+0xaf/0x130 [ 145.006644][ T6445] ? __might_fault+0xaf/0x130 [ 145.006663][ T6445] __se_sys_io_submit+0x195/0x340 [ 145.006682][ T6445] ? __pfx___se_sys_io_submit+0x10/0x10 [ 145.006698][ T6445] ? ksys_write+0x248/0x270 [ 145.006723][ T6445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.006737][ T6445] do_syscall_64+0x15f/0xf80 [ 145.006748][ T6445] ? trace_irq_disable+0x3b/0x140 [ 145.006770][ T6445] ? clear_bhb_loop+0x40/0x90 [ 145.006785][ T6445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.006797][ T6445] RIP: 0033:0x7f928a81cdd9 [ 145.006810][ T6445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.006820][ T6445] RSP: 002b:00007f9288a6e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 145.006835][ T6445] RAX: ffffffffffffffda RBX: 00007f928aa95fa0 RCX: 00007f928a81cdd9 [ 145.006844][ T6445] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 00007f928b5cf000 [ 145.006863][ T6445] RBP: 00007f9288a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 145.006870][ T6445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.006877][ T6445] R13: 00007f928aa96038 R14: 00007f928aa95fa0 R15: 00007fff5a560738 [ 145.006895][ T6445] [ 145.010419][ T5696] usb 1-1: device descriptor read/64, error -71 [ 145.121053][ T5696] usb usb1-port1: attempt power cycle [ 145.140040][ T5709] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 145.140121][ T5709] usb 4-1: can't read configurations, error -71 [ 145.332790][ T6447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.226'. [ 145.436818][ T6451] netlink: 72 bytes leftover after parsing attributes in process `syz.1.228'. [ 145.480249][ T5696] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 145.501123][ T5696] usb 1-1: device descriptor read/8, error -71 [ 145.558255][ T6453] nbd: couldn't find device at index 327680 [ 145.705141][ T6457] binder: BINDER_SET_CONTEXT_MGR already set [ 145.705157][ T6457] binder: 6456:6457 ioctl 4018620d 200000000040 returned -16 [ 145.714941][ T6457] FAULT_INJECTION: forcing a failure. [ 145.714941][ T6457] name failslab, interval 1, probability 0, space 0, times 0 [ 145.714976][ T6457] CPU: 0 UID: 0 PID: 6457 Comm: syz.3.231 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 145.715003][ T6457] Tainted: [L]=SOFTLOCKUP [ 145.715009][ T6457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.715021][ T6457] Call Trace: [ 145.715028][ T6457] [ 145.715036][ T6457] dump_stack_lvl+0xe8/0x150 [ 145.715067][ T6457] should_fail_ex+0x46b/0x600 [ 145.715097][ T6457] should_failslab+0xa8/0x100 [ 145.715126][ T6457] __kmalloc_noprof+0xdf/0x7b0 [ 145.715154][ T6457] ? tomoyo_encode+0x28b/0x550 [ 145.715189][ T6457] tomoyo_encode+0x28b/0x550 [ 145.715223][ T6457] tomoyo_realpath_from_path+0x58d/0x5d0 [ 145.715263][ T6457] ? tomoyo_path_number_perm+0x219/0x630 [ 145.715289][ T6457] tomoyo_path_number_perm+0x246/0x630 [ 145.715317][ T6457] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 145.715341][ T6457] ? __lock_acquire+0x6b5/0x2d10 [ 145.715364][ T6457] ? do_raw_spin_lock+0x12b/0x2f0 [ 145.715421][ T6457] ? __fget_files+0x2a/0x420 [ 145.715447][ T6457] ? __fget_files+0x2a/0x420 [ 145.715468][ T6457] ? __fget_files+0x3a6/0x420 [ 145.715489][ T6457] ? __fget_files+0x2a/0x420 [ 145.715515][ T6457] security_file_ioctl+0xc3/0x2a0 [ 145.715541][ T6457] __se_sys_ioctl+0x47/0x170 [ 145.715568][ T6457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.715589][ T6457] do_syscall_64+0x15f/0xf80 [ 145.715607][ T6457] ? trace_irq_disable+0x3b/0x140 [ 145.715634][ T6457] ? clear_bhb_loop+0x40/0x90 [ 145.715659][ T6457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.715678][ T6457] RIP: 0033:0x7f62826ecdd9 [ 145.715697][ T6457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.715713][ T6457] RSP: 002b:00007f628093e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.715734][ T6457] RAX: ffffffffffffffda RBX: 00007f6282965fa0 RCX: 00007f62826ecdd9 [ 145.715748][ T6457] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 145.715761][ T6457] RBP: 00007f628093e090 R08: 0000000000000000 R09: 0000000000000000 [ 145.715772][ T6457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.715783][ T6457] R13: 00007f6282966038 R14: 00007f6282965fa0 R15: 00007fffc091f6c8 [ 145.715814][ T6457] [ 145.715833][ T6457] ERROR: Out of memory at tomoyo_realpath_from_path. [ 145.750348][ T5696] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 145.770967][ T5696] usb 1-1: device descriptor read/8, error -71 [ 145.882414][ T5696] usb usb1-port1: unable to enumerate USB device [ 145.903511][ T6459] FAULT_INJECTION: forcing a failure. [ 145.903511][ T6459] name failslab, interval 1, probability 0, space 0, times 0 [ 145.903548][ T6459] CPU: 0 UID: 0 PID: 6459 Comm: syz.2.232 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 145.903576][ T6459] Tainted: [L]=SOFTLOCKUP [ 145.903582][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.903593][ T6459] Call Trace: [ 145.903601][ T6459] [ 145.903608][ T6459] dump_stack_lvl+0xe8/0x150 [ 145.903638][ T6459] should_fail_ex+0x46b/0x600 [ 145.903666][ T6459] should_failslab+0xa8/0x100 [ 145.903696][ T6459] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 145.903723][ T6459] ? __alloc_skb+0x1d0/0x7d0 [ 145.903746][ T6459] ? lockdep_hardirqs_on+0x7a/0x110 [ 145.903780][ T6459] __alloc_skb+0x1d0/0x7d0 [ 145.903809][ T6459] _sctp_make_chunk+0x59/0x290 [ 145.903834][ T6459] sctp_make_datafrag_empty+0x12a/0x240 [ 145.903867][ T6459] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 145.903905][ T6459] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 145.903931][ T6459] ? sctp_auth_send_cid+0x69/0x250 [ 145.903964][ T6459] sctp_datamsg_from_user+0x729/0xef0 [ 145.904006][ T6459] ? __genradix_ptr+0x1e1/0x220 [ 145.904028][ T6459] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 145.904059][ T6459] ? lockdep_hardirqs_on+0x7a/0x110 [ 145.904087][ T6459] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 145.904128][ T6459] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 145.904148][ T6459] ? __local_bh_enable+0x1e1/0x2f0 [ 145.904180][ T6459] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 145.904205][ T6459] ? sctp_sendmsg_check_sflags+0x18a/0x330 [ 145.904232][ T6459] sctp_sendmsg+0x170d/0x2990 [ 145.904268][ T6459] ? __pfx_sctp_sendmsg+0x10/0x10 [ 145.904299][ T6459] ? aa_sk_perm+0x703/0x950 [ 145.904334][ T6459] ? __pfx_aa_sk_perm+0x10/0x10 [ 145.904358][ T6459] ? sock_rps_record_flow+0x19/0x350 [ 145.904382][ T6459] ? inet_sendmsg+0x2f4/0x370 [ 145.904400][ T6459] ? aa_sock_msg_perm+0x122/0x200 [ 145.904428][ T6459] ? __pfx_inet_sendmsg+0x10/0x10 [ 145.904445][ T6459] sock_sendmsg_nosec+0xf9/0x150 [ 145.904470][ T6459] sock_write_iter+0x308/0x410 [ 145.904493][ T6459] ? __pfx_sock_write_iter+0x10/0x10 [ 145.904535][ T6459] vfs_write+0x629/0xba0 [ 145.904570][ T6459] ? __pfx_vfs_write+0x10/0x10 [ 145.904606][ T6459] ? __fget_files+0x2a/0x420 [ 145.904637][ T6459] ksys_write+0x156/0x270 [ 145.904666][ T6459] ? __pfx_ksys_write+0x10/0x10 [ 145.904701][ T6459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.904722][ T6459] do_syscall_64+0x15f/0xf80 [ 145.904740][ T6459] ? trace_irq_disable+0x3b/0x140 [ 145.904768][ T6459] ? clear_bhb_loop+0x40/0x90 [ 145.904792][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.904811][ T6459] RIP: 0033:0x7fc8ff4fcdd9 [ 145.904831][ T6459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.904847][ T6459] RSP: 002b:00007fc8fd756028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 145.904868][ T6459] RAX: ffffffffffffffda RBX: 00007fc8ff775fa0 RCX: 00007fc8ff4fcdd9 [ 145.904891][ T6459] RDX: 000000000000fffd RSI: 00002000000000c0 RDI: 0000000000000004 [ 145.904924][ T6459] RBP: 00007fc8fd756090 R08: 0000000000000000 R09: 0000000000000000 [ 145.904936][ T6459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.904947][ T6459] R13: 00007fc8ff776038 R14: 00007fc8ff775fa0 R15: 00007ffeb5299378 [ 145.904978][ T6459] [ 146.104898][ T6463] can: request_module (can-proto-0) failed. [ 146.205788][ T5696] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.360262][ T5696] usb 2-1: Using ep0 maxpacket: 8 [ 146.370731][ T5696] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 146.379357][ T5696] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 146.379388][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.379408][ T5696] usb 2-1: Product: syz [ 146.379421][ T5696] usb 2-1: Manufacturer: syz [ 146.379435][ T5696] usb 2-1: SerialNumber: syz [ 146.398724][ T5696] usb 2-1: config 0 descriptor?? [ 146.418897][ T5696] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 146.418948][ T5696] usb 2-1: setting power ON [ 146.418967][ T5696] dvb-usb: bulk message failed: -22 (2/0) [ 146.464364][ T5696] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.466545][ T5696] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 146.466601][ T5696] usb 2-1: media controller created [ 146.470254][ T5709] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 146.493408][ T5696] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.578368][ T5696] usb 2-1: selecting invalid altsetting 6 [ 146.578395][ T5696] usb 2-1: digital interface selection failed (-22) [ 146.578412][ T5696] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 146.597975][ T5696] usb 2-1: setting power OFF [ 146.598000][ T5696] dvb-usb: bulk message failed: -22 (2/0) [ 146.598017][ T5696] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 146.598029][ T5696] (NULL device *): no alternate interface [ 146.636737][ T5709] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.636774][ T5709] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.636821][ T5709] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.636845][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.836389][ T5696] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 146.851939][ T5696] usb 2-1: USB disconnect, device number 5 [ 146.906699][ T5709] usb 4-1: usb_control_msg returned -32 [ 146.906765][ T5709] usbtmc 4-1:16.0: can't read capabilities [ 147.030420][ T822] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 147.104484][ T6473] netlink: 72 bytes leftover after parsing attributes in process `syz.0.237'. [ 147.194618][ T822] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 147.194651][ T822] usb 3-1: config 0 has too many interfaces: 95, using maximum allowed: 32 [ 147.194674][ T822] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 95 [ 147.194730][ T822] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.194758][ T822] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.194781][ T822] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.194809][ T822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.194846][ T822] usb 3-1: New USB device found, idVendor=444c, idProduct=5015, bcdDevice= 0.00 [ 147.194871][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.206360][ T822] usb 3-1: config 0 descriptor?? [ 147.534230][ T6479] FAULT_INJECTION: forcing a failure. [ 147.534230][ T6479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.534271][ T6479] CPU: 1 UID: 0 PID: 6479 Comm: syz.0.239 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 147.534302][ T6479] Tainted: [L]=SOFTLOCKUP [ 147.534309][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.534322][ T6479] Call Trace: [ 147.534330][ T6479] [ 147.534339][ T6479] dump_stack_lvl+0xe8/0x150 [ 147.534371][ T6479] should_fail_ex+0x46b/0x600 [ 147.534405][ T6479] _copy_from_user+0x2d/0xb0 [ 147.534439][ T6479] sctp_setsockopt+0x1c4/0x12c0 [ 147.534463][ T6479] ? sock_common_setsockopt+0x36/0xc0 [ 147.534491][ T6479] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 147.534520][ T6479] do_sock_setsockopt+0x17c/0x1b0 [ 147.534556][ T6479] __x64_sys_setsockopt+0x143/0x1b0 [ 147.534590][ T6479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.534615][ T6479] do_syscall_64+0x15f/0xf80 [ 147.534645][ T6479] ? trace_irq_disable+0x3b/0x140 [ 147.534677][ T6479] ? clear_bhb_loop+0x40/0x90 [ 147.534704][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.534726][ T6479] RIP: 0033:0x7f3c969ecdd9 [ 147.534746][ T6479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.534765][ T6479] RSP: 002b:00007f3c94c25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 147.534790][ T6479] RAX: ffffffffffffffda RBX: 00007f3c96c66090 RCX: 00007f3c969ecdd9 [ 147.534806][ T6479] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000006 [ 147.534819][ T6479] RBP: 00007f3c94c25090 R08: 000000000000009c R09: 0000000000000000 [ 147.534832][ T6479] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 147.534846][ T6479] R13: 00007f3c96c66128 R14: 00007f3c96c66090 R15: 00007ffd1af26ed8 [ 147.534879][ T6479] [ 148.016605][ T822] hid-generic 0003:444C:5015.0001: item fetching failed at offset 3/5 [ 148.020393][ T822] hid-generic 0003:444C:5015.0001: probe with driver hid-generic failed with error -22 [ 148.039198][ T6470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.042200][ T6470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.096786][ T822] usb 3-1: USB disconnect, device number 14 [ 148.652093][ T5759] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 148.709111][ T6493] FAULT_INJECTION: forcing a failure. [ 148.709111][ T6493] name failslab, interval 1, probability 0, space 0, times 0 [ 148.709156][ T6493] CPU: 1 UID: 0 PID: 6493 Comm: syz.2.245 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 148.709187][ T6493] Tainted: [L]=SOFTLOCKUP [ 148.709194][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 148.709207][ T6493] Call Trace: [ 148.709215][ T6493] [ 148.709225][ T6493] dump_stack_lvl+0xe8/0x150 [ 148.709259][ T6493] should_fail_ex+0x46b/0x600 [ 148.709294][ T6493] should_failslab+0xa8/0x100 [ 148.709329][ T6493] __kmalloc_cache_noprof+0x84/0x690 [ 148.709362][ T6493] ? __genradix_ptr_alloc+0x199/0x4a0 [ 148.709391][ T6493] __genradix_ptr_alloc+0x199/0x4a0 [ 148.709423][ T6493] proc_map_files_readdir+0x52e/0xa50 [ 148.709466][ T6493] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 148.709511][ T6493] ? iterate_dir+0x29e/0x580 [ 148.709543][ T6493] ? down_read_killable+0x14c/0x220 [ 148.709572][ T6493] ? __pfx_down_read_killable+0x10/0x10 [ 148.709604][ T6493] ? apparmor_file_permission+0x1f4/0x300 [ 148.709650][ T6493] iterate_dir+0x3a5/0x580 [ 148.709690][ T6493] __se_sys_getdents64+0xf1/0x280 [ 148.709728][ T6493] ? __pfx___se_sys_getdents64+0x10/0x10 [ 148.709761][ T6493] ? ksys_write+0x248/0x270 [ 148.709790][ T6493] ? __pfx_filldir64+0x10/0x10 [ 148.709814][ T6493] ? __pfx_ksys_write+0x10/0x10 [ 148.709855][ T6493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.709879][ T6493] do_syscall_64+0x15f/0xf80 [ 148.709900][ T6493] ? trace_irq_disable+0x3b/0x140 [ 148.709932][ T6493] ? clear_bhb_loop+0x40/0x90 [ 148.709960][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.709983][ T6493] RIP: 0033:0x7fc8ff4fcdd9 [ 148.710004][ T6493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.710023][ T6493] RSP: 002b:00007fc8fd756028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 148.710046][ T6493] RAX: ffffffffffffffda RBX: 00007fc8ff775fa0 RCX: 00007fc8ff4fcdd9 [ 148.710062][ T6493] RDX: 0000000000001002 RSI: 0000200000002f40 RDI: 0000000000000003 [ 148.710076][ T6493] RBP: 00007fc8fd756090 R08: 0000000000000000 R09: 0000000000000000 [ 148.710088][ T6493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.710100][ T6493] R13: 00007fc8ff776038 R14: 00007fc8ff775fa0 R15: 00007ffeb5299378 [ 148.710136][ T6493] [ 148.901524][ T6495] netlink: 72 bytes leftover after parsing attributes in process `syz.0.246'. [ 149.050229][ T5759] usb 2-1: Using ep0 maxpacket: 32 [ 149.434439][ T5696] usb 4-1: USB disconnect, device number 12 [ 149.669586][ T5759] usb 2-1: unable to get BOS descriptor or descriptor too short [ 149.682394][ T5759] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 149.682438][ T5759] usb 2-1: can't read configurations, error -71 [ 150.786863][ T6554] netlink: 72 bytes leftover after parsing attributes in process `syz.3.256'. [ 150.938151][ T6557] FAULT_INJECTION: forcing a failure. [ 150.938151][ T6557] name failslab, interval 1, probability 0, space 0, times 0 [ 150.938191][ T6557] CPU: 1 UID: 0 PID: 6557 Comm: syz.3.258 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 150.938221][ T6557] Tainted: [L]=SOFTLOCKUP [ 150.938228][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 150.938241][ T6557] Call Trace: [ 150.938249][ T6557] [ 150.938258][ T6557] dump_stack_lvl+0xe8/0x150 [ 150.938289][ T6557] should_fail_ex+0x46b/0x600 [ 150.938322][ T6557] should_failslab+0xa8/0x100 [ 150.938357][ T6557] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 150.938388][ T6557] ? __alloc_skb+0x1d0/0x7d0 [ 150.938414][ T6557] ? lockdep_hardirqs_on+0x7a/0x110 [ 150.938455][ T6557] __alloc_skb+0x1d0/0x7d0 [ 150.938488][ T6557] netlink_sendmsg+0x5d4/0xb40 [ 150.938529][ T6557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.938563][ T6557] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 150.938603][ T6557] ? aa_sock_msg_perm+0x122/0x200 [ 150.938636][ T6557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.938680][ T6557] sock_sendmsg_nosec+0x112/0x150 [ 150.938708][ T6557] ____sys_sendmsg+0x55c/0x870 [ 150.938746][ T6557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.938788][ T6557] ? import_iovec+0x73/0xa0 [ 150.938826][ T6557] ___sys_sendmsg+0x2a5/0x360 [ 150.938856][ T6557] ? __lock_acquire+0x6b5/0x2d10 [ 150.938882][ T6557] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.938950][ T6557] ? __fget_files+0x2a/0x420 [ 150.938976][ T6557] ? __fget_files+0x3a6/0x420 [ 150.939012][ T6557] __x64_sys_sendmsg+0x1c3/0x2a0 [ 150.939047][ T6557] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.939090][ T6557] ? __pfx_ksys_write+0x10/0x10 [ 150.939130][ T6557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.939153][ T6557] do_syscall_64+0x15f/0xf80 [ 150.939173][ T6557] ? trace_irq_disable+0x3b/0x140 [ 150.939204][ T6557] ? clear_bhb_loop+0x40/0x90 [ 150.939230][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.939252][ T6557] RIP: 0033:0x7f62826ecdd9 [ 150.939272][ T6557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.939289][ T6557] RSP: 002b:00007f628093e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.939312][ T6557] RAX: ffffffffffffffda RBX: 00007f6282965fa0 RCX: 00007f62826ecdd9 [ 150.939329][ T6557] RDX: 0000000020008000 RSI: 0000200000000140 RDI: 0000000000000004 [ 150.939342][ T6557] RBP: 00007f628093e090 R08: 0000000000000000 R09: 0000000000000000 [ 150.939354][ T6557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.939365][ T6557] R13: 00007f6282966038 R14: 00007f6282965fa0 R15: 00007fffc091f6c8 [ 150.939397][ T6557] [ 150.950370][ T822] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 151.138783][ T822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.138811][ T822] usb 3-1: config 0 has no interfaces? [ 151.170859][ T822] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 151.170890][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.170910][ T822] usb 3-1: Product: syz [ 151.170924][ T822] usb 3-1: Manufacturer: syz [ 151.170945][ T822] usb 3-1: SerialNumber: syz [ 151.273686][ T822] usb 3-1: config 0 descriptor?? [ 151.656579][ T5709] usb 3-1: USB disconnect, device number 15 [ 151.923042][ T6572] Zero length message leads to an empty skb [ 151.961566][ T38] audit: type=1326 audit(1778547597.402:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.0.263" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c969ecdd9 code=0x7fc00000 [ 151.962443][ T38] audit: type=1326 audit(1778547597.402:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.0.263" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c969ad60e code=0x7fc00000 [ 152.324510][ T6579] FAULT_INJECTION: forcing a failure. [ 152.324510][ T6579] name failslab, interval 1, probability 0, space 0, times 0 [ 152.324550][ T6579] CPU: 1 UID: 0 PID: 6579 Comm: syz.1.265 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 152.324581][ T6579] Tainted: [L]=SOFTLOCKUP [ 152.324589][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 152.324602][ T6579] Call Trace: [ 152.324611][ T6579] [ 152.324620][ T6579] dump_stack_lvl+0xe8/0x150 [ 152.324653][ T6579] should_fail_ex+0x46b/0x600 [ 152.324697][ T6579] should_failslab+0xa8/0x100 [ 152.324732][ T6579] kmem_cache_alloc_noprof+0x87/0x680 [ 152.324763][ T6579] ? io_submit_one+0x130/0x14c0 [ 152.324803][ T6579] io_submit_one+0x130/0x14c0 [ 152.324841][ T6579] ? irqentry_exit+0x218/0x760 [ 152.324862][ T6579] ? lockdep_hardirqs_on+0x7a/0x110 [ 152.324897][ T6579] ? irqentry_exit+0x218/0x760 [ 152.324923][ T6579] ? __pfx_io_submit_one+0x10/0x10 [ 152.324957][ T6579] ? __might_fault+0xaf/0x130 [ 152.325007][ T6579] ? __might_fault+0xaf/0x130 [ 152.325042][ T6579] __se_sys_io_submit+0x195/0x340 [ 152.325076][ T6579] ? __pfx___se_sys_io_submit+0x10/0x10 [ 152.325105][ T6579] ? ksys_write+0x248/0x270 [ 152.325151][ T6579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.325176][ T6579] do_syscall_64+0x15f/0xf80 [ 152.325197][ T6579] ? trace_irq_disable+0x3b/0x140 [ 152.325230][ T6579] ? clear_bhb_loop+0x40/0x90 [ 152.325258][ T6579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.325281][ T6579] RIP: 0033:0x7f928a81cdd9 [ 152.325302][ T6579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.325321][ T6579] RSP: 002b:00007f9288a6e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 152.325346][ T6579] RAX: ffffffffffffffda RBX: 00007f928aa95fa0 RCX: 00007f928a81cdd9 [ 152.325362][ T6579] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 00007f928b5cf000 [ 152.325377][ T6579] RBP: 00007f9288a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 152.325390][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.325403][ T6579] R13: 00007f928aa96038 R14: 00007f928aa95fa0 R15: 00007fff5a560738 [ 152.325437][ T6579] [ 152.669960][ T38] audit: type=1326 audit(1778547598.102:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.0.263" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3c969ee0d7 code=0x7fc00000 [ 152.743771][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 152.743963][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 152.743994][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 152.744021][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 152.744048][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 152.744074][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 152.744101][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 152.744127][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 152.744154][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 152.744180][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 152.859140][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 153.195070][ T6589] fido_id[6589]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 153.361349][ T6598] fuse: Unknown parameter '0x0000000000000004' [ 153.680276][ T5709] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 153.843325][ T5709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.843357][ T5709] usb 2-1: config 0 has no interfaces? [ 153.845872][ T5709] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 153.845901][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.845921][ T5709] usb 2-1: Product: syz [ 153.845931][ T5709] usb 2-1: Manufacturer: syz [ 153.845939][ T5709] usb 2-1: SerialNumber: syz [ 153.849364][ T5709] usb 2-1: config 0 descriptor?? [ 154.030230][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 154.198426][ T5709] usb 2-1: USB disconnect, device number 8 [ 154.207362][ T9] usb 3-1: device descriptor read/64, error -71 [ 154.441648][ T38] audit: type=1326 audit(1778547599.882:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.3.276" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62826ecdd9 code=0x7fc00000 [ 154.442667][ T38] audit: type=1326 audit(1778547599.882:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.3.276" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62826ad60e code=0x7fc00000 [ 154.452933][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 154.630274][ T9] usb 3-1: device descriptor read/64, error -71 [ 154.741907][ T9] usb usb3-port1: attempt power cycle [ 154.939691][ T6624] FAULT_INJECTION: forcing a failure. [ 154.939691][ T6624] name failslab, interval 1, probability 0, space 0, times 0 [ 154.939719][ T6624] CPU: 1 UID: 0 PID: 6624 Comm: syz.1.282 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 154.939737][ T6624] Tainted: [L]=SOFTLOCKUP [ 154.939741][ T6624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.939749][ T6624] Call Trace: [ 154.939753][ T6624] [ 154.939759][ T6624] dump_stack_lvl+0xe8/0x150 [ 154.939780][ T6624] should_fail_ex+0x46b/0x600 [ 154.939799][ T6624] should_failslab+0xa8/0x100 [ 154.939819][ T6624] kmem_cache_alloc_noprof+0x87/0x680 [ 154.939837][ T6624] ? io_submit_one+0x130/0x14c0 [ 154.939860][ T6624] io_submit_one+0x130/0x14c0 [ 154.939881][ T6624] ? irqentry_exit+0x218/0x760 [ 154.939893][ T6624] ? lockdep_hardirqs_on+0x7a/0x110 [ 154.939915][ T6624] ? irqentry_exit+0x218/0x760 [ 154.939929][ T6624] ? __pfx_io_submit_one+0x10/0x10 [ 154.939949][ T6624] ? __might_fault+0xaf/0x130 [ 154.939973][ T6624] ? __might_fault+0xaf/0x130 [ 154.939991][ T6624] __se_sys_io_submit+0x195/0x340 [ 154.940011][ T6624] ? __pfx___se_sys_io_submit+0x10/0x10 [ 154.940027][ T6624] ? ksys_write+0x248/0x270 [ 154.940052][ T6624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.940075][ T6624] do_syscall_64+0x15f/0xf80 [ 154.940094][ T6624] ? trace_irq_disable+0x3b/0x140 [ 154.940123][ T6624] ? clear_bhb_loop+0x40/0x90 [ 154.940149][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.940171][ T6624] RIP: 0033:0x7f928a81cdd9 [ 154.940191][ T6624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.940207][ T6624] RSP: 002b:00007f9288a6e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 154.940229][ T6624] RAX: ffffffffffffffda RBX: 00007f928aa95fa0 RCX: 00007f928a81cdd9 [ 154.940245][ T6624] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 00007f928b5cf000 [ 154.940259][ T6624] RBP: 00007f9288a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 154.940272][ T6624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.940284][ T6624] R13: 00007f928aa96038 R14: 00007f928aa95fa0 R15: 00007fff5a560738 [ 154.940317][ T6624] [ 155.111752][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 155.151884][ T38] audit: type=1326 audit(1778547600.572:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.3.276" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f62826ee0d7 code=0x7fc00000 [ 155.191745][ T9] usb 3-1: device descriptor read/8, error -71 [ 155.340260][ T5709] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 155.433432][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 155.464836][ T9] usb 3-1: device descriptor read/8, error -71 [ 155.496150][ T5709] usb 1-1: Using ep0 maxpacket: 16 [ 155.505282][ T5709] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 155.530418][ T5709] usb 1-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 155.530439][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.530451][ T5709] usb 1-1: Product: syz [ 155.530461][ T5709] usb 1-1: Manufacturer: syz [ 155.530469][ T5709] usb 1-1: SerialNumber: syz [ 155.580391][ T9] usb usb3-port1: unable to enumerate USB device [ 155.744114][ T6639] overlay: Unknown parameter 'fowner' [ 155.779891][ T6639] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 155.779922][ T6639] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 155.893220][ T6628] netlink: 32 bytes leftover after parsing attributes in process `syz.1.284'. [ 156.049738][ T5709] usb 1-1: 1:1 : bogus bTerminalLink 2 [ 156.364147][ T37] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 156.510858][ T37] usb 4-1: Using ep0 maxpacket: 16 [ 156.544097][ T37] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.544304][ T37] usb 4-1: config 0 has no interface number 0 [ 156.544353][ T37] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.544380][ T37] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.544421][ T37] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 156.544445][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.665845][ T37] usb 4-1: config 0 descriptor?? [ 156.912533][ T821] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 157.126836][ T821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.126865][ T821] usb 2-1: config 0 has no interfaces? [ 157.153476][ T821] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 157.153513][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.153535][ T821] usb 2-1: Product: syz [ 157.153552][ T821] usb 2-1: Manufacturer: syz [ 157.153568][ T821] usb 2-1: SerialNumber: syz [ 157.215819][ T821] usb 2-1: config 0 descriptor?? [ 157.357000][ T5709] usb 1-1: USB disconnect, device number 9 [ 157.523536][ T822] usb 2-1: USB disconnect, device number 9 [ 157.542844][ T37] uclogic 0003:28BD:0071.0003: failed retrieving string descriptor #100: -71 [ 157.542915][ T37] uclogic 0003:28BD:0071.0003: failed retrieving pen parameters: -71 [ 157.542932][ T37] uclogic 0003:28BD:0071.0003: pen probing failed: -71 [ 157.542951][ T37] uclogic 0003:28BD:0071.0003: failed probing parameters: -71 [ 157.543068][ T37] uclogic 0003:28BD:0071.0003: probe with driver uclogic failed with error -71 [ 157.561890][ T38] audit: type=1326 audit(1778547603.002:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.293" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c969ecdd9 code=0x7fc00000 [ 157.561945][ T38] audit: type=1326 audit(1778547603.002:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.293" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c969ad60e code=0x7fc00000 [ 157.574796][ T38] audit: type=1326 audit(1778547603.012:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.293" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3c969ee0d7 code=0x7fc00000 [ 157.574851][ T38] audit: type=1326 audit(1778547603.012:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.293" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c969ecdd9 code=0x7fc00000 [ 157.574894][ T38] audit: type=1326 audit(1778547603.012:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.293" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c969ecdd9 code=0x7fc00000 [ 157.574936][ T38] audit: type=1326 audit(1778547603.012:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.293" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c969ecdd9 code=0x7fc00000 [ 157.574979][ T38] audit: type=1326 audit(1778547603.012:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.293" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c969ecdd9 code=0x7fc00000 [ 157.575020][ T38] audit: type=1326 audit(1778547603.012:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.293" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c969ecdd9 code=0x7fc00000 [ 157.575061][ T38] audit: type=1326 audit(1778547603.012:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.293" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c969ecdd9 code=0x7fc00000 [ 157.583770][ T38] audit: type=1326 audit(1778547603.012:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.0.293" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c969ecdd9 code=0x7fc00000 [ 158.003523][ T37] usb 4-1: USB disconnect, device number 13 [ 158.050791][ T6666] FAULT_INJECTION: forcing a failure. [ 158.050791][ T6666] name failslab, interval 1, probability 0, space 0, times 0 [ 158.050831][ T6666] CPU: 0 UID: 0 PID: 6666 Comm: syz.0.298 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 158.050863][ T6666] Tainted: [L]=SOFTLOCKUP [ 158.050870][ T6666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.050883][ T6666] Call Trace: [ 158.050892][ T6666] [ 158.050901][ T6666] dump_stack_lvl+0xe8/0x150 [ 158.050936][ T6666] should_fail_ex+0x46b/0x600 [ 158.050970][ T6666] should_failslab+0xa8/0x100 [ 158.051005][ T6666] __kmalloc_noprof+0xdf/0x7b0 [ 158.051037][ T6666] ? tomoyo_encode+0x28b/0x550 [ 158.051077][ T6666] tomoyo_encode+0x28b/0x550 [ 158.051116][ T6666] tomoyo_realpath_from_path+0x58d/0x5d0 [ 158.051164][ T6666] ? tomoyo_path_number_perm+0x219/0x630 [ 158.051194][ T6666] tomoyo_path_number_perm+0x246/0x630 [ 158.051227][ T6666] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 158.051255][ T6666] ? __lock_acquire+0x6b5/0x2d10 [ 158.051281][ T6666] ? do_raw_spin_lock+0x12b/0x2f0 [ 158.051348][ T6666] ? __fget_files+0x2a/0x420 [ 158.051377][ T6666] ? __fget_files+0x2a/0x420 [ 158.051403][ T6666] ? __fget_files+0x3a6/0x420 [ 158.051427][ T6666] ? __fget_files+0x2a/0x420 [ 158.051459][ T6666] security_file_ioctl+0xc3/0x2a0 [ 158.051489][ T6666] __se_sys_ioctl+0x47/0x170 [ 158.051522][ T6666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.051546][ T6666] do_syscall_64+0x15f/0xf80 [ 158.051568][ T6666] ? trace_irq_disable+0x3b/0x140 [ 158.051600][ T6666] ? clear_bhb_loop+0x40/0x90 [ 158.051638][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.051661][ T6666] RIP: 0033:0x7f3c969ecdd9 [ 158.051682][ T6666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.051701][ T6666] RSP: 002b:00007f3c94c46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.051727][ T6666] RAX: ffffffffffffffda RBX: 00007f3c96c65fa0 RCX: 00007f3c969ecdd9 [ 158.051744][ T6666] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000f [ 158.051759][ T6666] RBP: 00007f3c94c46090 R08: 0000000000000000 R09: 0000000000000000 [ 158.051773][ T6666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.051786][ T6666] R13: 00007f3c96c66038 R14: 00007f3c96c65fa0 R15: 00007ffd1af26ed8 [ 158.051822][ T6666] [ 158.051844][ T6666] ERROR: Out of memory at tomoyo_realpath_from_path. [ 158.398696][ T6669] FAULT_INJECTION: forcing a failure. [ 158.398696][ T6669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.398733][ T6669] CPU: 0 UID: 0 PID: 6669 Comm: syz.0.299 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 158.398759][ T6669] Tainted: [L]=SOFTLOCKUP [ 158.398766][ T6669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.398776][ T6669] Call Trace: [ 158.398782][ T6669] [ 158.398789][ T6669] dump_stack_lvl+0xe8/0x150 [ 158.398823][ T6669] should_fail_ex+0x46b/0x600 [ 158.398850][ T6669] _copy_from_user+0x2d/0xb0 [ 158.398880][ T6669] memdup_user+0x5e/0xd0 [ 158.398901][ T6669] strndup_user+0x68/0xd0 [ 158.398922][ T6669] __se_sys_mount+0x9d/0x420 [ 158.398945][ T6669] ? ksys_write+0x248/0x270 [ 158.398973][ T6669] ? __pfx___se_sys_mount+0x10/0x10 [ 158.398999][ T6669] ? __x64_sys_mount+0x20/0xc0 [ 158.399017][ T6669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.399037][ T6669] do_syscall_64+0x15f/0xf80 [ 158.399053][ T6669] ? trace_irq_disable+0x3b/0x140 [ 158.399078][ T6669] ? clear_bhb_loop+0x40/0x90 [ 158.399100][ T6669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.399119][ T6669] RIP: 0033:0x7f3c969ecdd9 [ 158.399139][ T6669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.399156][ T6669] RSP: 002b:00007f3c94c46028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 158.399178][ T6669] RAX: ffffffffffffffda RBX: 00007f3c96c65fa0 RCX: 00007f3c969ecdd9 [ 158.399191][ T6669] RDX: 0000200000000140 RSI: 0000200000000340 RDI: 0000000000000000 [ 158.399202][ T6669] RBP: 00007f3c94c46090 R08: 0000200000000080 R09: 0000000000000000 [ 158.399214][ T6669] R10: 0000000000200800 R11: 0000000000000246 R12: 0000000000000001 [ 158.399228][ T6669] R13: 00007f3c96c66038 R14: 00007f3c96c65fa0 R15: 00007ffd1af26ed8 [ 158.399260][ T6669] [ 158.707036][ T6671] FAULT_INJECTION: forcing a failure. [ 158.707036][ T6671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.707076][ T6671] CPU: 1 UID: 0 PID: 6671 Comm: syz.1.300 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 158.707110][ T6671] Tainted: [L]=SOFTLOCKUP [ 158.707118][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.707131][ T6671] Call Trace: [ 158.707140][ T6671] [ 158.707151][ T6671] dump_stack_lvl+0xe8/0x150 [ 158.707185][ T6671] should_fail_ex+0x46b/0x600 [ 158.707220][ T6671] _copy_from_user+0x2d/0xb0 [ 158.707255][ T6671] kstrtouint_from_user+0xd6/0x180 [ 158.707287][ T6671] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 158.707336][ T6671] proc_fail_nth_write+0x8e/0x210 [ 158.707366][ T6671] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 158.707401][ T6671] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 158.707437][ T6671] vfs_write+0x2a3/0xba0 [ 158.707478][ T6671] ? __pfx_vfs_write+0x10/0x10 [ 158.707568][ T6671] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 158.707605][ T6671] ? lockdep_hardirqs_on+0x7a/0x110 [ 158.707640][ T6671] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 158.707674][ T6671] ? mutex_lock_nested+0x152/0x1d0 [ 158.707699][ T6671] ? fdget_pos+0x252/0x320 [ 158.707736][ T6671] ksys_write+0x156/0x270 [ 158.707768][ T6671] ? __pfx_ksys_write+0x10/0x10 [ 158.707809][ T6671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.707834][ T6671] do_syscall_64+0x15f/0xf80 [ 158.707856][ T6671] ? trace_irq_disable+0x3b/0x140 [ 158.707889][ T6671] ? clear_bhb_loop+0x40/0x90 [ 158.707916][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.707939][ T6671] RIP: 0033:0x7f928a7dd60e [ 158.707960][ T6671] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 158.707979][ T6671] RSP: 002b:00007f9288a6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.708003][ T6671] RAX: ffffffffffffffda RBX: 00007f9288a6e6c0 RCX: 00007f928a7dd60e [ 158.708020][ T6671] RDX: 0000000000000001 RSI: 00007f9288a6e0a0 RDI: 0000000000000007 [ 158.708033][ T6671] RBP: 00007f9288a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 158.708047][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.708060][ T6671] R13: 00007f928aa96038 R14: 00007f928aa95fa0 R15: 00007fff5a560738 [ 158.708096][ T6671] [ 158.709846][ T5602] udevd[5602]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.417697][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f956400: rx timeout, send abort [ 159.876077][ T6697] FAULT_INJECTION: forcing a failure. [ 159.876077][ T6697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.876118][ T6697] CPU: 1 UID: 0 PID: 6697 Comm: syz.1.307 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 159.876147][ T6697] Tainted: [L]=SOFTLOCKUP [ 159.876154][ T6697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 159.876167][ T6697] Call Trace: [ 159.876176][ T6697] [ 159.876184][ T6697] dump_stack_lvl+0xe8/0x150 [ 159.876217][ T6697] should_fail_ex+0x46b/0x600 [ 159.876250][ T6697] _copy_to_iter+0x404/0x17d0 [ 159.876292][ T6697] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 159.876322][ T6697] ? __pfx__copy_to_iter+0x10/0x10 [ 159.876372][ T6697] ? rt_spin_lock+0x1e0/0x400 [ 159.876402][ T6697] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 159.876441][ T6697] __skb_datagram_iter+0xf8/0x980 [ 159.876478][ T6697] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 159.876534][ T6697] skb_copy_datagram_iter+0xb5/0x240 [ 159.876573][ T6697] netlink_recvmsg+0x2c3/0xa50 [ 159.876615][ T6697] ? __pfx_netlink_recvmsg+0x10/0x10 [ 159.876658][ T6697] ? __pfx_aa_sk_perm+0x10/0x10 [ 159.876683][ T6697] ? __lock_acquire+0x6b5/0x2d10 [ 159.876705][ T6697] ? aa_sock_msg_perm+0x122/0x200 [ 159.876733][ T6697] ? __pfx_netlink_recvmsg+0x10/0x10 [ 159.876828][ T6697] sock_recvmsg_nosec+0x10c/0x140 [ 159.876858][ T6697] ____sys_recvmsg+0x23d/0x4f0 [ 159.876901][ T6697] ? __pfx_____sys_recvmsg+0x10/0x10 [ 159.876943][ T6697] ? import_iovec+0x73/0xa0 [ 159.876975][ T6697] ___sys_recvmsg+0x215/0x590 [ 159.877000][ T6697] ? get_pid_task+0x20/0x1f0 [ 159.877032][ T6697] ? __pfx____sys_recvmsg+0x10/0x10 [ 159.877064][ T6697] ? __fget_files+0x2a/0x420 [ 159.877102][ T6697] ? __fget_files+0x3a6/0x420 [ 159.877132][ T6697] __x64_sys_recvmsg+0x1c0/0x2a0 [ 159.877162][ T6697] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 159.877198][ T6697] ? __pfx_ksys_write+0x10/0x10 [ 159.877231][ T6697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.877251][ T6697] do_syscall_64+0x15f/0xf80 [ 159.877270][ T6697] ? trace_irq_disable+0x3b/0x140 [ 159.877296][ T6697] ? clear_bhb_loop+0x40/0x90 [ 159.877318][ T6697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.877337][ T6697] RIP: 0033:0x7f928a81cdd9 [ 159.877358][ T6697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.877374][ T6697] RSP: 002b:00007f9288a6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 159.877395][ T6697] RAX: ffffffffffffffda RBX: 00007f928aa95fa0 RCX: 00007f928a81cdd9 [ 159.877408][ T6697] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 159.877420][ T6697] RBP: 00007f9288a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 159.877431][ T6697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.877442][ T6697] R13: 00007f928aa96038 R14: 00007f928aa95fa0 R15: 00007fff5a560738 [ 159.877472][ T6697] [ 159.918152][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f227800: rx timeout, send abort [ 159.921102][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f956400: abort rx timeout. Force session deactivation [ 160.389229][ T6710] FAULT_INJECTION: forcing a failure. [ 160.389229][ T6710] name failslab, interval 1, probability 0, space 0, times 0 [ 160.389266][ T6710] CPU: 0 UID: 0 PID: 6710 Comm: syz.3.310 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 160.389291][ T6710] Tainted: [L]=SOFTLOCKUP [ 160.389297][ T6710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.389307][ T6710] Call Trace: [ 160.389314][ T6710] [ 160.389322][ T6710] dump_stack_lvl+0xe8/0x150 [ 160.389350][ T6710] should_fail_ex+0x46b/0x600 [ 160.389378][ T6710] should_failslab+0xa8/0x100 [ 160.389406][ T6710] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 160.389432][ T6710] ? __alloc_skb+0x1d0/0x7d0 [ 160.389454][ T6710] ? lockdep_hardirqs_on+0x7a/0x110 [ 160.389498][ T6710] __alloc_skb+0x1d0/0x7d0 [ 160.389522][ T6710] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 160.389553][ T6710] netlink_sendmsg+0x5d4/0xb40 [ 160.389588][ T6710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.389619][ T6710] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 160.389652][ T6710] ? aa_sock_msg_perm+0x122/0x200 [ 160.389679][ T6710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.389702][ T6710] sock_sendmsg_nosec+0x112/0x150 [ 160.389724][ T6710] ____sys_sendmsg+0x55c/0x870 [ 160.389757][ T6710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.389791][ T6710] ? import_iovec+0x73/0xa0 [ 160.389821][ T6710] ___sys_sendmsg+0x2a5/0x360 [ 160.389847][ T6710] ? __lock_acquire+0x6b5/0x2d10 [ 160.389871][ T6710] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.389929][ T6710] ? __fget_files+0x2a/0x420 [ 160.389948][ T6710] ? __fget_files+0x3a6/0x420 [ 160.389978][ T6710] __x64_sys_sendmsg+0x1c3/0x2a0 [ 160.390006][ T6710] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.390047][ T6710] ? __pfx_ksys_write+0x10/0x10 [ 160.390080][ T6710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.390099][ T6710] do_syscall_64+0x15f/0xf80 [ 160.390116][ T6710] ? trace_irq_disable+0x3b/0x140 [ 160.390141][ T6710] ? clear_bhb_loop+0x40/0x90 [ 160.390162][ T6710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.390181][ T6710] RIP: 0033:0x7f62826ecdd9 [ 160.390198][ T6710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.390216][ T6710] RSP: 002b:00007f628091d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.390236][ T6710] RAX: ffffffffffffffda RBX: 00007f6282966090 RCX: 00007f62826ecdd9 [ 160.390250][ T6710] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000008 [ 160.390261][ T6710] RBP: 00007f628091d090 R08: 0000000000000000 R09: 0000000000000000 [ 160.390273][ T6710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.390284][ T6710] R13: 00007f6282966128 R14: 00007f6282966090 R15: 00007fffc091f6c8 [ 160.390312][ T6710] [ 160.420573][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f227800: abort rx timeout. Force session deactivation [ 161.641758][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 161.749092][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 161.804833][ T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 161.804863][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.804876][ T9] usb 2-1: Product: syz [ 161.804885][ T9] usb 2-1: Manufacturer: syz [ 161.804894][ T9] usb 2-1: SerialNumber: syz [ 161.809069][ T9] usb 2-1: config 0 descriptor?? [ 161.852341][ T9] ch341 2-1:0.0: ch341-uart converter detected [ 161.940351][ T5709] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 161.992107][ T822] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 162.019342][ T9] usb 2-1: failed to receive control message: -121 [ 162.019408][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 162.045300][ T5696] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 162.113422][ T5709] usb 3-1: unable to get BOS descriptor or descriptor too short [ 162.114067][ T5709] usb 3-1: not running at top speed; connect to a high speed hub [ 162.115360][ T5709] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.115386][ T5709] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.119095][ T5709] usb 3-1: string descriptor 0 read error: -22 [ 162.119256][ T5709] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.119282][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.207891][ T5709] usb 3-1: 0:2 : does not exist [ 162.211985][ T822] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 162.212017][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.250785][ T822] usb 1-1: config 0 descriptor?? [ 162.291016][ T5696] usb 4-1: Using ep0 maxpacket: 8 [ 162.299460][ T5696] usb 4-1: unable to get BOS descriptor or descriptor too short [ 162.315762][ T5696] usb 4-1: config 12 has an invalid interface number: 111 but max is 0 [ 162.315795][ T5696] usb 4-1: config 12 has no interface number 0 [ 162.315828][ T5696] usb 4-1: config 12 interface 111 has no altsetting 0 [ 162.344981][ T5696] usb 4-1: New USB device found, idVendor=19d2, idProduct=1535, bcdDevice=8b.90 [ 162.345073][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.345095][ T5696] usb 4-1: Product: syz [ 162.345110][ T5696] usb 4-1: Manufacturer: syz [ 162.345126][ T5696] usb 4-1: SerialNumber: syz [ 162.643151][ T6727] XFS (nbd1): SB validate failed with error -5. [ 162.715502][ T5696] usb 4-1: No union descriptors [ 162.790246][ T5696] usb 4-1: USB disconnect, device number 14 [ 163.388456][ T5709] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 163.405796][ T5696] usb 2-1: USB disconnect, device number 10 [ 163.434648][ T5696] ch341 2-1:0.0: device disconnected [ 163.586237][ T5709] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 163.646004][ T5709] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 163.859128][ T5709] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 163.916144][ T5709] usb 3-1: USB disconnect, device number 20 [ 164.276786][ T6762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.278755][ T6762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.285481][ T38] kauditd_printk_skb: 149 callbacks suppressed [ 164.285501][ T38] audit: type=1326 audit(1778547609.722:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.324" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ff4fcdd9 code=0x7fc00000 [ 164.286535][ T38] audit: type=1326 audit(1778547609.722:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.324" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8ff4bd60e code=0x7fc00000 [ 164.429964][ T6761] FAULT_INJECTION: forcing a failure. [ 164.429964][ T6761] name failslab, interval 1, probability 0, space 0, times 0 [ 164.430005][ T6761] CPU: 1 UID: 0 PID: 6761 Comm: syz.1.325 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 164.430037][ T6761] Tainted: [L]=SOFTLOCKUP [ 164.430045][ T6761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.430063][ T6761] Call Trace: [ 164.430071][ T6761] [ 164.430080][ T6761] dump_stack_lvl+0xe8/0x150 [ 164.430114][ T6761] should_fail_ex+0x46b/0x600 [ 164.430147][ T6761] should_failslab+0xa8/0x100 [ 164.430181][ T6761] __kmalloc_noprof+0xdf/0x7b0 [ 164.430212][ T6761] ? tomoyo_encode+0x28b/0x550 [ 164.430253][ T6761] tomoyo_encode+0x28b/0x550 [ 164.430292][ T6761] tomoyo_realpath_from_path+0x58d/0x5d0 [ 164.430328][ T6761] ? tomoyo_domain+0xd7/0x130 [ 164.430357][ T6761] ? tomoyo_path_number_perm+0x219/0x630 [ 164.430386][ T6761] tomoyo_path_number_perm+0x246/0x630 [ 164.430416][ T6761] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 164.430444][ T6761] ? __lock_acquire+0x6b5/0x2d10 [ 164.430470][ T6761] ? do_raw_spin_lock+0x12b/0x2f0 [ 164.430535][ T6761] ? __fget_files+0x2a/0x420 [ 164.430552][ T6761] ? __fget_files+0x2a/0x420 [ 164.430568][ T6761] ? __fget_files+0x3a6/0x420 [ 164.430592][ T6761] ? __fget_files+0x2a/0x420 [ 164.430621][ T6761] security_file_ioctl+0xc3/0x2a0 [ 164.430651][ T6761] __se_sys_ioctl+0x47/0x170 [ 164.430680][ T6761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.430702][ T6761] do_syscall_64+0x15f/0xf80 [ 164.430714][ T6761] ? trace_irq_disable+0x3b/0x140 [ 164.430733][ T6761] ? clear_bhb_loop+0x40/0x90 [ 164.430754][ T6761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.430776][ T6761] RIP: 0033:0x7f928a81cdd9 [ 164.430797][ T6761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.430817][ T6761] RSP: 002b:00007f9288a6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.430842][ T6761] RAX: ffffffffffffffda RBX: 00007f928aa95fa0 RCX: 00007f928a81cdd9 [ 164.430857][ T6761] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 164.430869][ T6761] RBP: 00007f9288a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 164.430882][ T6761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.430889][ T6761] R13: 00007f928aa96038 R14: 00007f928aa95fa0 R15: 00007fff5a560738 [ 164.430909][ T6761] [ 164.438095][ T6761] ERROR: Out of memory at tomoyo_realpath_from_path. [ 164.902369][ T822] usb 1-1: Cannot set autoneg [ 164.902673][ T822] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 164.955983][ T822] usb 1-1: USB disconnect, device number 10 [ 165.010714][ T38] audit: type=1326 audit(1778547610.452:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.324" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc8ff4fe0d7 code=0x7fc00000 [ 165.011071][ T38] audit: type=1326 audit(1778547610.452:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.324" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ff4fcdd9 code=0x7fc00000 [ 165.011372][ T38] audit: type=1326 audit(1778547610.452:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.324" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ff4fcdd9 code=0x7fc00000 [ 165.011673][ T38] audit: type=1326 audit(1778547610.452:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.324" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ff4fcdd9 code=0x7fc00000 [ 165.011952][ T38] audit: type=1326 audit(1778547610.452:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.324" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ff4fcdd9 code=0x7fc00000 [ 165.012274][ T38] audit: type=1326 audit(1778547610.452:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.324" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ff4fcdd9 code=0x7fc00000 [ 165.013055][ T38] audit: type=1326 audit(1778547610.452:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.2.324" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ff4fcdd9 code=0x7fc00000 [ 165.522921][ T822] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 165.671817][ T821] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 165.693399][ T822] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.693440][ T822] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.693465][ T822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 165.693503][ T822] usb 2-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 165.693530][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.748520][ T822] usb 2-1: config 0 descriptor?? [ 165.801364][ T6786] FAULT_INJECTION: forcing a failure. [ 165.801364][ T6786] name failslab, interval 1, probability 0, space 0, times 0 [ 165.801407][ T6786] CPU: 1 UID: 0 PID: 6786 Comm: syz.2.332 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 165.801437][ T6786] Tainted: [L]=SOFTLOCKUP [ 165.801444][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 165.801467][ T6786] Call Trace: [ 165.801475][ T6786] [ 165.801484][ T6786] dump_stack_lvl+0xe8/0x150 [ 165.801517][ T6786] should_fail_ex+0x46b/0x600 [ 165.801552][ T6786] should_failslab+0xa8/0x100 [ 165.801587][ T6786] kmem_cache_alloc_noprof+0x87/0x680 [ 165.801619][ T6786] ? mm_alloc+0x23/0xc0 [ 165.801652][ T6786] mm_alloc+0x23/0xc0 [ 165.801681][ T6786] alloc_bprm+0x39e/0x5c0 [ 165.801716][ T6786] do_execveat_common+0x175/0x690 [ 165.801751][ T6786] ? do_getname+0x151/0x250 [ 165.801775][ T6786] __x64_sys_execveat+0xc7/0xf0 [ 165.801807][ T6786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.801831][ T6786] do_syscall_64+0x15f/0xf80 [ 165.801852][ T6786] ? trace_irq_disable+0x3b/0x140 [ 165.801884][ T6786] ? clear_bhb_loop+0x40/0x90 [ 165.801912][ T6786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.801934][ T6786] RIP: 0033:0x7fc8ff4fcdd9 [ 165.801955][ T6786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.801975][ T6786] RSP: 002b:00007fc8fd756028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 165.801999][ T6786] RAX: ffffffffffffffda RBX: 00007fc8ff775fa0 RCX: 00007fc8ff4fcdd9 [ 165.802016][ T6786] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 165.802031][ T6786] RBP: 00007fc8fd756090 R08: 0000000000000000 R09: 0000000000000000 [ 165.802046][ T6786] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 165.802060][ T6786] R13: 00007fc8ff776038 R14: 00007fc8ff775fa0 R15: 00007ffeb5299378 [ 165.802099][ T6786] [ 165.811784][ T5709] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 165.828553][ T821] usb 4-1: unable to get BOS descriptor or descriptor too short [ 165.837507][ T821] usb 4-1: not running at top speed; connect to a high speed hub [ 165.848095][ T821] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 165.848128][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.848148][ T821] usb 4-1: Product: syz [ 165.848162][ T821] usb 4-1: Manufacturer: syz [ 165.848177][ T821] usb 4-1: SerialNumber: syz [ 165.962866][ T5709] usb 1-1: Using ep0 maxpacket: 16 [ 165.967256][ T5709] usb 1-1: unable to get BOS descriptor or descriptor too short [ 165.970038][ T5709] usb 1-1: config 1 interface 0 has no altsetting 0 [ 166.048079][ T5709] usb 1-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.40 [ 166.048113][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.048191][ T5709] usb 1-1: Product: syz [ 166.048206][ T5709] usb 1-1: Manufacturer: ᜵脪漍̑겔ʧ츩鲨샶ߔ渘腃럒Ạ浢냷ⶲ䁒쿠꽾櫩찉䆖鉊瑕⟪╢䉏옇뫻䓓둭携푷、闫䆍༔駡鮯睻딩窳燁躢뼍ᴬ㐮믬ᶵ嚣떔켩咷摙ⴤ狴嵯䁜ⷽ咗ꔳ걶昘쾕闆ወ轎໦䧐忘靀넙䀦幎밸ུ迉衷䱞⵹✩﯃ᕤ籰㾷떋쓞﬐揫髅ㇵ᷶夀破䟵ꚛꎋ컆㴛ڋ뭧쒤Ựリ띧张腀ۗ [ 166.048243][ T5709] usb 1-1: SerialNumber: syz [ 166.148718][ T821] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 166.212205][ T822] hid_parser_main: 22 callbacks suppressed [ 166.212233][ T822] logitech-hidpp-device 0003:046D:C088.0004: unknown main item tag 0x0 [ 166.212267][ T822] logitech-hidpp-device 0003:046D:C088.0004: unknown main item tag 0x0 [ 166.212295][ T822] logitech-hidpp-device 0003:046D:C088.0004: unknown main item tag 0x0 [ 166.212324][ T822] logitech-hidpp-device 0003:046D:C088.0004: unknown main item tag 0x0 [ 166.212352][ T822] logitech-hidpp-device 0003:046D:C088.0004: unknown main item tag 0x0 [ 166.212381][ T822] logitech-hidpp-device 0003:046D:C088.0004: unknown main item tag 0x0 [ 166.212409][ T822] logitech-hidpp-device 0003:046D:C088.0004: unknown main item tag 0x0 [ 166.212437][ T822] logitech-hidpp-device 0003:046D:C088.0004: unknown main item tag 0x0 [ 166.212465][ T822] logitech-hidpp-device 0003:046D:C088.0004: unknown main item tag 0x0 [ 166.212492][ T822] logitech-hidpp-device 0003:046D:C088.0004: unknown main item tag 0x0 [ 166.328431][ T822] logitech-hidpp-device 0003:046D:C088.0004: hidraw0: USB HID v0.04 Device [HID 046d:c088] on usb-dummy_hcd.1-1/input0 [ 166.374664][ T6789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.375343][ T6789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.685703][ T38] audit: type=1326 audit(1778547612.122:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.2.335" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ff4fcdd9 code=0x7fc00000 [ 166.758203][ T821] gp8psk: usb in 128 operation failed. [ 166.758693][ T5709] usbhid 1-1:1.0: can't add hid device: -71 [ 166.758825][ T5709] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 166.773348][ T821] gp8psk: usb in 137 operation failed. [ 166.773368][ T821] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 166.773420][ T821] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 166.842477][ T5709] usb 1-1: USB disconnect, device number 11 [ 166.843807][ T821] usb 4-1: USB disconnect, device number 15 [ 167.012106][ T6776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.012846][ T6776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.017654][ T6776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.018490][ T6776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.084322][ T5759] usb 2-1: USB disconnect, device number 11 [ 167.711799][ T6810] FAULT_INJECTION: forcing a failure. [ 167.711799][ T6810] name failslab, interval 1, probability 0, space 0, times 0 [ 167.711841][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.0.339 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 167.711872][ T6810] Tainted: [L]=SOFTLOCKUP [ 167.711880][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.711893][ T6810] Call Trace: [ 167.711902][ T6810] [ 167.711911][ T6810] dump_stack_lvl+0xe8/0x150 [ 167.711950][ T6810] should_fail_ex+0x46b/0x600 [ 167.711986][ T6810] should_failslab+0xa8/0x100 [ 167.712021][ T6810] __kmalloc_noprof+0xdf/0x7b0 [ 167.712053][ T6810] ? tomoyo_encode+0x28b/0x550 [ 167.712094][ T6810] tomoyo_encode+0x28b/0x550 [ 167.712135][ T6810] tomoyo_realpath_from_path+0x58d/0x5d0 [ 167.712181][ T6810] ? tomoyo_path_number_perm+0x219/0x630 [ 167.712212][ T6810] tomoyo_path_number_perm+0x246/0x630 [ 167.712245][ T6810] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 167.712274][ T6810] ? __lock_acquire+0x6b5/0x2d10 [ 167.712300][ T6810] ? do_raw_spin_lock+0x12b/0x2f0 [ 167.712367][ T6810] ? __fget_files+0x2a/0x420 [ 167.712399][ T6810] ? __fget_files+0x2a/0x420 [ 167.712425][ T6810] ? __fget_files+0x3a6/0x420 [ 167.712449][ T6810] ? __fget_files+0x2a/0x420 [ 167.712479][ T6810] security_file_ioctl+0xc3/0x2a0 [ 167.712509][ T6810] __se_sys_ioctl+0x47/0x170 [ 167.712540][ T6810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.712566][ T6810] do_syscall_64+0x15f/0xf80 [ 167.712587][ T6810] ? trace_irq_disable+0x3b/0x140 [ 167.712619][ T6810] ? clear_bhb_loop+0x40/0x90 [ 167.712646][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.712668][ T6810] RIP: 0033:0x7f3c969ecdd9 [ 167.712690][ T6810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.712717][ T6810] RSP: 002b:00007f3c94c46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.712742][ T6810] RAX: ffffffffffffffda RBX: 00007f3c96c65fa0 RCX: 00007f3c969ecdd9 [ 167.712758][ T6810] RDX: 00002000000007c0 RSI: 0000000000003b85 RDI: 0000000000000003 [ 167.712773][ T6810] RBP: 00007f3c94c46090 R08: 0000000000000000 R09: 0000000000000000 [ 167.712786][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.712800][ T6810] R13: 00007f3c96c66038 R14: 00007f3c96c65fa0 R15: 00007ffd1af26ed8 [ 167.712835][ T6810] [ 167.715210][ T6810] ERROR: Out of memory at tomoyo_realpath_from_path. [ 168.709118][ T1456] Bluetooth: hci4: Frame reassembly failed (-84) [ 168.710360][ T5709] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 168.850307][ T37] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 168.860255][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 168.871496][ T5709] usb 1-1: unable to get BOS descriptor or descriptor too short [ 168.872822][ T5709] usb 1-1: config 1 has an invalid interface number: 185 but max is 0 [ 168.872851][ T5709] usb 1-1: config 1 has no interface number 0 [ 168.872886][ T5709] usb 1-1: config 1 interface 185 has no altsetting 0 [ 168.875638][ T5709] usb 1-1: New USB device found, idVendor=067b, idProduct=0000, bcdDevice=e6.05 [ 168.875668][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.875690][ T5709] usb 1-1: Product: syz [ 168.875705][ T5709] usb 1-1: Manufacturer: syz [ 168.875720][ T5709] usb 1-1: SerialNumber: syz [ 169.022510][ T37] usb 4-1: Using ep0 maxpacket: 16 [ 169.047635][ T37] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.047676][ T37] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.070775][ T37] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.070851][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.070866][ T37] usb 4-1: Product: syz [ 169.070875][ T37] usb 4-1: Manufacturer: syz [ 169.070884][ T37] usb 4-1: SerialNumber: syz [ 169.156092][ T6827] sctp: [Deprecated]: syz.0.345 (pid 6827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.156092][ T6827] Use struct sctp_sack_info instead [ 169.282145][ T37] usb 4-1: 0:2 : does not exist [ 169.298598][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 169.298617][ T38] audit: type=1326 audit(1778547614.732:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.346" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f928a81e0d7 code=0x7fc00000 [ 169.298746][ T38] audit: type=1326 audit(1778547614.732:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.346" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928a81cdd9 code=0x7fc00000 [ 169.298797][ T38] audit: type=1326 audit(1778547614.732:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.346" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928a81cdd9 code=0x7fc00000 [ 169.368103][ T6825] ======================================================= [ 169.368103][ T6825] WARNING: The mand mount option has been deprecated and [ 169.368103][ T6825] and is ignored by this kernel. Remove the mand [ 169.368103][ T6825] option from the mount to silence this warning. [ 169.368103][ T6825] ======================================================= [ 169.490772][ T821] IPVS: starting estimator thread 0... [ 169.500445][ T6831] usb usb8: check_ctrlrecip: process 6831 (syz.3.344) requesting ep 01 but needs 81 [ 169.500568][ T6831] usb usb8: usbfs: process 6831 (syz.3.344) did not claim interface 0 before use [ 169.690631][ T6842] IPVS: using max 9 ests per chain, 21600 per kthread [ 169.817924][ T5709] plusb 1-1:1.185: probe with driver plusb failed with error -22 [ 169.928911][ T5709] usb 1-1: USB disconnect, device number 12 [ 170.004405][ T5759] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 170.036166][ T6829] overlayfs: overlapping lowerdir path [ 170.134121][ T37] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 170.171021][ T5759] usb 2-1: Using ep0 maxpacket: 32 [ 170.176114][ T5759] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.197379][ T5759] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 170.197415][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.197479][ T5759] usb 2-1: Product: syz [ 170.197489][ T5759] usb 2-1: Manufacturer: syz [ 170.197498][ T5759] usb 2-1: SerialNumber: syz [ 170.226176][ T5759] usb 2-1: config 0 descriptor?? [ 170.318228][ T5759] smsc95xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 170.318502][ T5759] smsc95xx 2-1:0.0: probe with driver smsc95xx failed with error -22 [ 170.345708][ T6850] netlink: 72 bytes leftover after parsing attributes in process `syz.0.352'. [ 170.532940][ T5709] usb 2-1: USB disconnect, device number 12 [ 170.621013][ T38] audit: type=1326 audit(1778547616.042:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.0.354" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c969ecdd9 code=0x7ff00000 [ 170.621073][ T38] audit: type=1326 audit(1778547616.052:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.0.354" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c969ecdd9 code=0x7ff00000 [ 170.621119][ T38] audit: type=1326 audit(1778547616.052:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.0.354" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c969ecdd9 code=0x7ff00000 [ 170.621167][ T38] audit: type=1326 audit(1778547616.052:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.0.354" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c969ecdd9 code=0x7ff00000 [ 170.621215][ T38] audit: type=1326 audit(1778547616.052:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.0.354" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c969ecdd9 code=0x7ff00000 [ 170.621265][ T38] audit: type=1326 audit(1778547616.052:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.0.354" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c969ecdd9 code=0x7ff00000 [ 170.621310][ T38] audit: type=1326 audit(1778547616.052:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.0.354" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c969ecdd9 code=0x7ff00000 [ 170.750206][ T60] Bluetooth: hci4: command 0x1003 tx timeout [ 170.765314][ T5617] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 170.968235][ T37] usb 4-1: USB disconnect, device number 16 [ 171.228444][ T6860] comedi comedi2: dt2814: I/O base address or length out of range [ 171.438102][ T5602] udevd[5602]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.623710][ T6868] FAULT_INJECTION: forcing a failure. [ 171.623710][ T6868] name failslab, interval 1, probability 0, space 0, times 0 [ 171.623753][ T6868] CPU: 1 UID: 0 PID: 6868 Comm: syz.3.358 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 171.623784][ T6868] Tainted: [L]=SOFTLOCKUP [ 171.623793][ T6868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.623806][ T6868] Call Trace: [ 171.623814][ T6868] [ 171.623823][ T6868] dump_stack_lvl+0xe8/0x150 [ 171.623855][ T6868] should_fail_ex+0x46b/0x600 [ 171.623895][ T6868] should_failslab+0xa8/0x100 [ 171.623930][ T6868] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 171.623964][ T6868] ? xfrm_add_sa+0x1ed3/0x4230 [ 171.623998][ T6868] kmemdup_noprof+0x2b/0x70 [ 171.624024][ T6868] xfrm_add_sa+0x1ed3/0x4230 [ 171.624062][ T6868] ? __pfx_xfrm_add_sa+0x10/0x10 [ 171.624090][ T6868] ? apparmor_capable+0x126/0x170 [ 171.624119][ T6868] ? __nla_parse+0x40/0x60 [ 171.624152][ T6868] xfrm_user_rcv_msg+0x7ae/0xc40 [ 171.624188][ T6868] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 171.624255][ T6868] ? __lock_acquire+0x6b5/0x2d10 [ 171.624281][ T6868] ? netlink_deliver_tap+0x19c/0x1b0 [ 171.624308][ T6868] ? netlink_unicast+0x754/0x920 [ 171.624334][ T6868] ? netlink_sendmsg+0x813/0xb40 [ 171.624363][ T6868] ? sock_sendmsg_nosec+0x112/0x150 [ 171.624385][ T6868] ? ____sys_sendmsg+0x55c/0x870 [ 171.624413][ T6868] ? ___sys_sendmsg+0x2a5/0x360 [ 171.624442][ T6868] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 171.624483][ T6868] netlink_rcv_skb+0x232/0x4b0 [ 171.624516][ T6868] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 171.624551][ T6868] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.624595][ T6868] ? lockdep_hardirqs_on+0x7a/0x110 [ 171.624633][ T6868] ? mutex_lock_nested+0x152/0x1d0 [ 171.624669][ T6868] ? xfrm_netlink_rcv+0x6a/0x90 [ 171.624704][ T6868] xfrm_netlink_rcv+0x79/0x90 [ 171.624736][ T6868] netlink_unicast+0x780/0x920 [ 171.624776][ T6868] netlink_sendmsg+0x813/0xb40 [ 171.624819][ T6868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.624854][ T6868] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 171.624896][ T6868] ? aa_sock_msg_perm+0x122/0x200 [ 171.624931][ T6868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.624961][ T6868] sock_sendmsg_nosec+0x112/0x150 [ 171.624990][ T6868] ____sys_sendmsg+0x55c/0x870 [ 171.625030][ T6868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.625072][ T6868] ? import_iovec+0x73/0xa0 [ 171.625111][ T6868] ___sys_sendmsg+0x2a5/0x360 [ 171.625143][ T6868] ? __lock_acquire+0x6b5/0x2d10 [ 171.625170][ T6868] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.625242][ T6868] ? __fget_files+0x2a/0x420 [ 171.625269][ T6868] ? __fget_files+0x3a6/0x420 [ 171.625308][ T6868] __x64_sys_sendmsg+0x1c3/0x2a0 [ 171.625346][ T6868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 171.625391][ T6868] ? __pfx_ksys_write+0x10/0x10 [ 171.625431][ T6868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.625457][ T6868] do_syscall_64+0x15f/0xf80 [ 171.625478][ T6868] ? trace_irq_disable+0x3b/0x140 [ 171.625510][ T6868] ? clear_bhb_loop+0x40/0x90 [ 171.625539][ T6868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.625562][ T6868] RIP: 0033:0x7f62826ecdd9 [ 171.625584][ T6868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.625605][ T6868] RSP: 002b:00007f628093e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.625630][ T6868] RAX: ffffffffffffffda RBX: 00007f6282965fa0 RCX: 00007f62826ecdd9 [ 171.625654][ T6868] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 171.625669][ T6868] RBP: 00007f628093e090 R08: 0000000000000000 R09: 0000000000000000 [ 171.625683][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.625696][ T6868] R13: 00007f6282966038 R14: 00007f6282965fa0 R15: 00007fffc091f6c8 [ 171.625730][ T6868] [ 171.856910][ T6872] netlink: 72 bytes leftover after parsing attributes in process `syz.3.361'. [ 172.260546][ T5828] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 172.281598][ T6881] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.365'. [ 172.281616][ T6881] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 172.390960][ T5709] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 172.414502][ T5828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.414532][ T5828] usb 4-1: config 0 has no interfaces? [ 172.417512][ T5828] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 172.417541][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.417558][ T5828] usb 4-1: Product: syz [ 172.417567][ T5828] usb 4-1: Manufacturer: syz [ 172.417576][ T5828] usb 4-1: SerialNumber: syz [ 172.436749][ T5828] usb 4-1: config 0 descriptor?? [ 172.562842][ T5709] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 172.562906][ T5709] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 172.562934][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.648680][ T5709] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 172.775970][ T5696] usb 4-1: USB disconnect, device number 17 [ 173.712021][ T5709] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 173.783001][ T6897] netlink: 72 bytes leftover after parsing attributes in process `syz.0.371'. [ 173.914351][ T5709] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 173.914379][ T5709] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 173.961296][ T5709] usb 3-1: USB disconnect, device number 21 [ 174.100333][ T5828] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 174.250220][ T37] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 174.252588][ T5828] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 174.252619][ T5828] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.255194][ T5828] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 174.255222][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.255243][ T5828] usb 4-1: Product: syz [ 174.257064][ T5828] usb 4-1: Manufacturer: syz [ 174.257085][ T5828] usb 4-1: SerialNumber: syz [ 174.402972][ T37] usb 1-1: not running at top speed; connect to a high speed hub [ 174.406955][ T37] usb 1-1: config 2 has an invalid interface number: 56 but max is 0 [ 174.406986][ T37] usb 1-1: config 2 has no interface number 0 [ 174.409555][ T37] usb 1-1: New USB device found, idVendor=0711, idProduct=0903, bcdDevice= 8.2a [ 174.409574][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.409586][ T37] usb 1-1: Product: syz [ 174.409595][ T37] usb 1-1: Manufacturer: syz [ 174.409604][ T37] usb 1-1: SerialNumber: syz [ 174.547868][ T5828] usb 4-1: 0:1 : does not exist [ 174.548014][ T5828] usb 4-1: unit 0 not found! [ 174.779773][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.802418][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.839230][ T5828] usb 4-1: USB disconnect, device number 18 [ 175.020868][ T5602] udevd[5602]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.110408][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 175.263338][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.263369][ T9] usb 3-1: config 0 has no interfaces? [ 175.267173][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 175.267204][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.267374][ T9] usb 3-1: Product: syz [ 175.267392][ T9] usb 3-1: Manufacturer: syz [ 175.267409][ T9] usb 3-1: SerialNumber: syz [ 175.324829][ T9] usb 3-1: config 0 descriptor?? [ 175.659033][ T5828] usb 3-1: USB disconnect, device number 22 [ 176.795547][ T6924] netlink: 72 bytes leftover after parsing attributes in process `syz.2.380'. [ 177.088646][ T37] sisusb 1-1:2.56: Invalid USB2VGA device [ 177.088688][ T37] sisusb 1-1:2.56: probe with driver sisusb failed with error -22 [ 177.110595][ T37] usb 1-1: USB disconnect, device number 13 [ 177.420375][ T5828] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 177.706145][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 177.706228][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 177.726429][ T5828] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 177.726461][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.726481][ T5828] usb 4-1: Product: syz [ 177.726495][ T5828] usb 4-1: Manufacturer: syz [ 177.726509][ T5828] usb 4-1: SerialNumber: syz [ 177.755084][ T5828] usb 4-1: config 0 descriptor?? [ 177.781493][ T5828] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 178.065114][ T6928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.066988][ T6928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.282401][ T6928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.282985][ T6928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.956542][ T5828] usb 4-1: USB disconnect, device number 19 [ 179.224833][ T6956] netlink: 72 bytes leftover after parsing attributes in process `syz.3.389'. [ 180.260279][ T5828] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 180.410204][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 180.412725][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 180.412763][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.412787][ T5828] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 180.412814][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 180.412842][ T5828] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 180.412885][ T5828] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 180.412911][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.427164][ T5828] usb 2-1: config 0 descriptor?? [ 180.435799][ T6968] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 180.924653][ T6982] overlayfs: failed to resolve './file0': -2 [ 181.039697][ T6982] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 6982 comm: syz.3.399) [ 181.322768][ T5617] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 181.340900][ T5828] usb 2-1: USB disconnect, device number 13 [ 181.641541][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 181.807432][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 181.819511][ T9] usb 3-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 181.819543][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.819573][ T9] usb 3-1: Product: syz [ 181.819588][ T9] usb 3-1: Manufacturer: syz [ 181.819603][ T9] usb 3-1: SerialNumber: syz [ 181.863732][ T9] usb 3-1: config 0 descriptor?? [ 182.165159][ T9] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 182.452704][ T9] usb 3-1: USB disconnect, device number 23 [ 183.430341][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 183.512003][ T5696] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 183.620194][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 183.623068][ T9] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 183.645463][ T9] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 183.645496][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.645518][ T9] usb 1-1: Product: ᠼ麠頲㵾䳮鮪磪劂⅜楒脀鄃턭㶞␚惒ꕈꚍร裂崤韤ʣ淰サ䈯㑃쓹ᔪꆯ黷덲炙曄ᗆ˚幩㕳汑꛵鉡ﴥ퉔혖쟸温Ҽ筳瀶黣ꞁ৐ᬊ璥櫯䒚ᷳ놨粹⮘쁧갧⋚ᗸ碋禈︤떜殡鎦勍▐듾㉺ϱ蘛՟샙꺖톸 [ 183.645549][ T9] usb 1-1: Manufacturer: Ⓥḋ剼駵㭁속㍩䨣偉罄ࡱ흓쓊칭碌鶜沌﫼鴂싕傧剣ꐹ鑢콆꟤諒忤䰼펃ⵑऊ昘잽瓹좙ⴒ湝牍쒦茰䖦ﴖṯ왟豲㮘대酂荛䈀혴⡮䀥廮㾵Ⳮ峽蟗셕⍬ꆾ딋␹꓇ᔔ糭樕㆕ԟ䊥顜镨㼣ɶֻ빣䁌벃륎㸥転ꢸ [ 183.645580][ T9] usb 1-1: SerialNumber: ࡠ [ 183.730239][ T5696] usb 3-1: Using ep0 maxpacket: 8 [ 183.749384][ T5696] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 183.768847][ T5696] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 183.768882][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.768904][ T5696] usb 3-1: Product: syz [ 183.768919][ T5696] usb 3-1: Manufacturer: syz [ 183.768935][ T5696] usb 3-1: SerialNumber: syz [ 183.821647][ T5696] usb 3-1: config 0 descriptor?? [ 183.844222][ T5696] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 183.844282][ T5696] usb 3-1: setting power ON [ 183.844551][ T5696] dvb-usb: bulk message failed: -22 (2/0) [ 183.990236][ T5696] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.033399][ T5696] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 184.033470][ T5696] usb 3-1: media controller created [ 184.143584][ T5696] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.292826][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.366064][ T5696] usb 3-1: selecting invalid altsetting 6 [ 184.366092][ T5696] usb 3-1: digital interface selection failed (-22) [ 184.366109][ T5696] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 184.368136][ T5696] usb 3-1: setting power OFF [ 184.368160][ T5696] dvb-usb: bulk message failed: -22 (2/0) [ 184.368179][ T5696] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 184.368192][ T5696] (NULL device *): no alternate interface [ 184.642653][ T5696] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 184.722221][ T5696] usb 3-1: USB disconnect, device number 24 [ 184.794137][ T9] usb 1-1: USB disconnect, device number 14 [ 185.039453][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.210317][ T5709] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 185.385613][ T5709] usb 2-1: Using ep0 maxpacket: 32 [ 185.393227][ T5709] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 185.393258][ T5709] usb 2-1: config 0 has no interface number 0 [ 185.393307][ T5709] usb 2-1: config 0 interface 12 has no altsetting 0 [ 185.507564][ T5709] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 185.507598][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.507621][ T5709] usb 2-1: Product: syz [ 185.507639][ T5709] usb 2-1: Manufacturer: syz [ 185.507655][ T5709] usb 2-1: SerialNumber: syz [ 185.600705][ T5709] usb 2-1: config 0 descriptor?? [ 186.217052][ T7057] netlink: 72 bytes leftover after parsing attributes in process `syz.3.423'. [ 187.120312][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 187.284804][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 187.299072][ T9] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 187.299104][ T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 187.299125][ T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 187.299144][ T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 187.299163][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 187.299185][ T9] usb 1-1: config 0 has no interface number 0 [ 187.350825][ T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 187.350863][ T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 187.350887][ T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 187.350923][ T9] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.350951][ T9] usb 1-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 187.350990][ T9] usb 1-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 187.351017][ T9] usb 1-1: config 0 interface 125 has no altsetting 0 [ 187.351036][ T9] usb 1-1: config 0 interface 125 has no altsetting 2 [ 187.356451][ T9] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 187.356487][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.356509][ T9] usb 1-1: Product: syz [ 187.356525][ T9] usb 1-1: Manufacturer: syz [ 187.356540][ T9] usb 1-1: SerialNumber: syz [ 187.508528][ T9] usb 1-1: config 0 descriptor?? [ 187.521001][ T9] usb 1-1: selecting invalid altsetting 2 [ 187.971013][ T5709] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 187.971073][ T5709] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 187.971091][ T5709] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 187.971184][ T5709] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 188.085069][ T5709] usb 2-1: USB disconnect, device number 14 [ 188.341796][ C0] usb 1-1: async_complete: urb error -71 [ 188.344916][ C0] usb 1-1: async_complete: urb error -71 [ 188.345006][ C0] usb 1-1: async_complete: urb error -71 [ 188.371252][ T9] get_1284_register: usb error -71 [ 188.484598][ T9] usb 1-1: USB disconnect, device number 15 [ 188.781247][ T5709] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 188.930176][ T5709] usb 4-1: Using ep0 maxpacket: 8 [ 188.945559][ T5709] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 188.958289][ T5709] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 188.958324][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.958347][ T5709] usb 4-1: Product: syz [ 188.958363][ T5709] usb 4-1: Manufacturer: syz [ 188.958378][ T5709] usb 4-1: SerialNumber: syz [ 189.091833][ T5709] usb 4-1: config 0 descriptor?? [ 189.106646][ T5709] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 189.110883][ T5709] usb 4-1: setting power ON [ 189.110911][ T5709] dvb-usb: bulk message failed: -22 (2/0) [ 189.186422][ T5709] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.232482][ T5709] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 189.232547][ T5709] usb 4-1: media controller created [ 189.306659][ T5709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.488269][ T7082] netlink: 72 bytes leftover after parsing attributes in process `syz.0.432'. [ 189.539395][ T5709] usb 4-1: selecting invalid altsetting 6 [ 189.539418][ T5709] usb 4-1: digital interface selection failed (-22) [ 189.539434][ T5709] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 189.543976][ T5709] usb 4-1: setting power OFF [ 189.543999][ T5709] dvb-usb: bulk message failed: -22 (2/0) [ 189.544017][ T5709] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 189.544030][ T5709] (NULL device *): no alternate interface [ 189.976497][ T5709] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 190.010324][ T5709] usb 4-1: USB disconnect, device number 20 [ 191.000418][ T5715] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 191.191516][ T5715] usb 4-1: Using ep0 maxpacket: 16 [ 191.207447][ T7107] syz.0.437 uses obsolete (PF_INET,SOCK_PACKET) [ 191.219374][ T5715] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 191.219409][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.219432][ T5715] usb 4-1: Product: syz [ 191.219449][ T5715] usb 4-1: Manufacturer: syz [ 191.219465][ T5715] usb 4-1: SerialNumber: syz [ 192.769421][ T7125] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 193.088870][ T5715] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 193.131787][ T5715] usb 4-1: USB disconnect, device number 21 [ 193.280312][ T5696] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 193.441775][ T5696] usb 1-1: Using ep0 maxpacket: 8 [ 193.455592][ T5696] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 193.458535][ T5696] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 193.458567][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.458588][ T5696] usb 1-1: Product: syz [ 193.458597][ T5696] usb 1-1: Manufacturer: syz [ 193.458607][ T5696] usb 1-1: SerialNumber: syz [ 193.507933][ T5696] usb 1-1: config 0 descriptor?? [ 193.521451][ T5696] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 193.521521][ T5696] usb 1-1: setting power ON [ 193.521546][ T5696] dvb-usb: bulk message failed: -22 (2/0) [ 193.550017][ T5696] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.560909][ T5696] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 193.560976][ T5696] usb 1-1: media controller created [ 193.596815][ T5696] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.639197][ T5696] usb 1-1: selecting invalid altsetting 6 [ 193.639222][ T5696] usb 1-1: digital interface selection failed (-22) [ 193.639237][ T5696] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 193.666036][ T5696] usb 1-1: setting power OFF [ 193.666067][ T5696] dvb-usb: bulk message failed: -22 (2/0) [ 193.666086][ T5696] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 193.666102][ T5696] (NULL device *): no alternate interface [ 193.755093][ T7129] ------------[ cut here ]------------ [ 193.755112][ T7129] refcount_t: addition on 0; use-after-free. [ 193.755121][ T7129] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x9f/0x110, CPU#1: syz.0.443/7129 [ 193.755175][ T7129] Modules linked in: [ 193.755198][ T7129] CPU: 1 UID: 0 PID: 7129 Comm: syz.0.443 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 193.755230][ T7129] Tainted: [L]=SOFTLOCKUP [ 193.755239][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.755253][ T7129] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 193.755290][ T7129] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 1b 00 10 fd 48 8d 3d e4 4c 02 0b 67 48 0f b9 3a eb 4a e8 08 00 10 fd 48 8d 3d e1 4c 02 0b <67> 48 0f b9 3a eb 37 e8 f5 ff 0f fd 48 8d 3d de 4c 02 0b 67 48 0f [ 193.755311][ T7129] RSP: 0018:ffffc90005e7f6d8 EFLAGS: 00010283 [ 193.755333][ T7129] RAX: ffffffff84b51c18 RBX: 0000000000000002 RCX: 0000000000080000 [ 193.755350][ T7129] RDX: ffffc90004b7a000 RSI: 00000000000006a7 RDI: ffffffff8fb76900 [ 193.755376][ T7129] RBP: 0000000000000000 R08: ffff888029485c40 R09: 0000000000000005 [ 193.755392][ T7129] R10: 0000000000000100 R11: 0000000000000004 R12: ffffffff8c0948a8 [ 193.755408][ T7129] R13: dffffc0000000000 R14: ffff888032715188 R15: dffffc0000000000 [ 193.755425][ T7129] FS: 00007f3c94c466c0(0000) GS:ffff888125dc7000(0000) knlGS:0000000000000000 [ 193.755445][ T7129] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.755461][ T7129] CR2: 00007f628349da08 CR3: 000000003b9c4000 CR4: 00000000003526f0 [ 193.755483][ T7129] Call Trace: [ 193.755493][ T7129] [ 193.755505][ T7129] kobject_get+0xfa/0x120 [ 193.755538][ T7129] i2c_get_adapter+0x6d/0xa0 [ 193.755562][ T7129] i2cdev_open+0x48/0x190 [ 193.755588][ T7129] chrdev_open+0x4d0/0x5f0 [ 193.755615][ T7129] ? __pfx_chrdev_open+0x10/0x10 [ 193.755638][ T7129] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 193.755676][ T7129] ? __pfx_chrdev_open+0x10/0x10 [ 193.755698][ T7129] do_dentry_open+0x83d/0x13e0 [ 193.755737][ T7129] vfs_open+0x3b/0x350 [ 193.755758][ T7129] ? path_openat+0x2e2b/0x38a0 [ 193.755792][ T7129] path_openat+0x2e43/0x38a0 [ 193.755859][ T7129] ? __pfx_path_openat+0x10/0x10 [ 193.755894][ T7129] ? kasan_save_track+0x4f/0x80 [ 193.755920][ T7129] ? kasan_save_track+0x3e/0x80 [ 193.755965][ T7129] ? __kasan_slab_alloc+0x6c/0x80 [ 193.756012][ T7129] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 193.756050][ T7129] ? do_raw_spin_lock+0x12b/0x2f0 [ 193.756092][ T7129] do_file_open+0x23e/0x4a0 [ 193.756123][ T7129] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 193.756162][ T7129] ? __pfx_do_file_open+0x10/0x10 [ 193.756191][ T7129] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 193.756246][ T7129] ? alloc_fd+0x64e/0x6c0 [ 193.756284][ T7129] do_sys_openat2+0x113/0x200 [ 193.756312][ T7129] ? __se_sys_futex+0x3a8/0x450 [ 193.756340][ T7129] ? __pfx_do_sys_openat2+0x10/0x10 [ 193.756383][ T7129] ? rcu_is_watching+0x15/0xb0 [ 193.756416][ T7129] __x64_sys_openat+0x138/0x170 [ 193.756448][ T7129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.756473][ T7129] do_syscall_64+0x15f/0xf80 [ 193.756496][ T7129] ? trace_irq_disable+0x3b/0x140 [ 193.756558][ T7129] ? clear_bhb_loop+0x40/0x90 [ 193.756588][ T7129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.756612][ T7129] RIP: 0033:0x7f3c969ad60e [ 193.756635][ T7129] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 193.756656][ T7129] RSP: 002b:00007f3c94c45b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 193.756681][ T7129] RAX: ffffffffffffffda RBX: 00007f3c94c466c0 RCX: 00007f3c969ad60e [ 193.756698][ T7129] RDX: 0000000000000482 RSI: 00007f3c94c45c00 RDI: ffffffffffffff9c [ 193.756715][ T7129] RBP: 00007f3c94c45c00 R08: 0000000000000000 R09: 0000000000000000 [ 193.756731][ T7129] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 193.756747][ T7129] R13: 00007f3c96c66038 R14: 00007f3c96c65fa0 R15: 00007ffd1af26ed8 [ 193.756783][ T7129] [ 193.756795][ T7129] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 193.756816][ T7129] CPU: 1 UID: 0 PID: 7129 Comm: syz.0.443 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 193.756867][ T7129] Tainted: [L]=SOFTLOCKUP [ 193.756875][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.756889][ T7129] Call Trace: [ 193.756899][ T7129] [ 193.756908][ T7129] vpanic+0x56c/0xa60 [ 193.756943][ T7129] ? __pfx__printk+0x10/0x10 [ 193.756967][ T7129] ? __pfx_vpanic+0x10/0x10 [ 193.756998][ T7129] ? is_bpf_text_address+0x292/0x2b0 [ 193.757020][ T7129] ? is_bpf_text_address+0x26/0x2b0 [ 193.757051][ T7129] panic+0xc5/0xd0 [ 193.757082][ T7129] ? __pfx_panic+0x10/0x10 [ 193.757130][ T7129] __warn+0x315/0x4c0 [ 193.757159][ T7129] ? refcount_warn_saturate+0x9f/0x110 [ 193.757194][ T7129] ? refcount_warn_saturate+0x9f/0x110 [ 193.757230][ T7129] __report_bug+0x29a/0x540 [ 193.757252][ T7129] ? rt_mutex_slowlock_block+0x56c/0x680 [ 193.757286][ T7129] ? refcount_warn_saturate+0x9f/0x110 [ 193.757320][ T7129] ? __pfx___report_bug+0x10/0x10 [ 193.757351][ T7129] ? rt_mutex_slowlock+0x420/0x780 [ 193.757390][ T7129] ? rt_mutex_slowlock+0x1fd/0x780 [ 193.757420][ T7129] report_bug_entry+0x19a/0x290 [ 193.757445][ T7129] ? refcount_warn_saturate+0x9f/0x110 [ 193.757478][ T7129] ? refcount_warn_saturate+0xa4/0x110 [ 193.757511][ T7129] handle_bug+0xce/0x200 [ 193.757537][ T7129] exc_invalid_op+0x1a/0x50 [ 193.757564][ T7129] asm_exc_invalid_op+0x1a/0x20 [ 193.757586][ T7129] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 193.757621][ T7129] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 1b 00 10 fd 48 8d 3d e4 4c 02 0b 67 48 0f b9 3a eb 4a e8 08 00 10 fd 48 8d 3d e1 4c 02 0b <67> 48 0f b9 3a eb 37 e8 f5 ff 0f fd 48 8d 3d de 4c 02 0b 67 48 0f [ 193.757640][ T7129] RSP: 0018:ffffc90005e7f6d8 EFLAGS: 00010283 [ 193.757660][ T7129] RAX: ffffffff84b51c18 RBX: 0000000000000002 RCX: 0000000000080000 [ 193.757677][ T7129] RDX: ffffc90004b7a000 RSI: 00000000000006a7 RDI: ffffffff8fb76900 [ 193.757694][ T7129] RBP: 0000000000000000 R08: ffff888029485c40 R09: 0000000000000005 [ 193.757710][ T7129] R10: 0000000000000100 R11: 0000000000000004 R12: ffffffff8c0948a8 [ 193.757725][ T7129] R13: dffffc0000000000 R14: ffff888032715188 R15: dffffc0000000000 [ 193.757749][ T7129] ? refcount_warn_saturate+0x98/0x110 [ 193.757791][ T7129] ? refcount_warn_saturate+0x98/0x110 [ 193.757825][ T7129] kobject_get+0xfa/0x120 [ 193.757852][ T7129] i2c_get_adapter+0x6d/0xa0 [ 193.757877][ T7129] i2cdev_open+0x48/0x190 [ 193.757904][ T7129] chrdev_open+0x4d0/0x5f0 [ 193.757930][ T7129] ? __pfx_chrdev_open+0x10/0x10 [ 193.757952][ T7129] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 193.757990][ T7129] ? __pfx_chrdev_open+0x10/0x10 [ 193.758012][ T7129] do_dentry_open+0x83d/0x13e0 [ 193.758049][ T7129] vfs_open+0x3b/0x350 [ 193.758073][ T7129] ? path_openat+0x2e2b/0x38a0 [ 193.758107][ T7129] path_openat+0x2e43/0x38a0 [ 193.758173][ T7129] ? __pfx_path_openat+0x10/0x10 [ 193.758209][ T7129] ? kasan_save_track+0x4f/0x80 [ 193.758238][ T7129] ? kasan_save_track+0x3e/0x80 [ 193.758266][ T7129] ? __kasan_slab_alloc+0x6c/0x80 [ 193.758295][ T7129] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 193.758334][ T7129] ? do_raw_spin_lock+0x12b/0x2f0 [ 193.758384][ T7129] do_file_open+0x23e/0x4a0 [ 193.758415][ T7129] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 193.758455][ T7129] ? __pfx_do_file_open+0x10/0x10 [ 193.758483][ T7129] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 193.758530][ T7129] ? alloc_fd+0x64e/0x6c0 [ 193.758566][ T7129] do_sys_openat2+0x113/0x200 [ 193.758590][ T7129] ? __se_sys_futex+0x3a8/0x450 [ 193.758617][ T7129] ? __pfx_do_sys_openat2+0x10/0x10 [ 193.758647][ T7129] ? rcu_is_watching+0x15/0xb0 [ 193.758675][ T7129] __x64_sys_openat+0x138/0x170 [ 193.758704][ T7129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.758728][ T7129] do_syscall_64+0x15f/0xf80 [ 193.758748][ T7129] ? trace_irq_disable+0x3b/0x140 [ 193.758780][ T7129] ? clear_bhb_loop+0x40/0x90 [ 193.758808][ T7129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.758832][ T7129] RIP: 0033:0x7f3c969ad60e [ 193.758854][ T7129] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 193.758875][ T7129] RSP: 002b:00007f3c94c45b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 193.758898][ T7129] RAX: ffffffffffffffda RBX: 00007f3c94c466c0 RCX: 00007f3c969ad60e [ 193.758915][ T7129] RDX: 0000000000000482 RSI: 00007f3c94c45c00 RDI: ffffffffffffff9c [ 193.758931][ T7129] RBP: 00007f3c94c45c00 R08: 0000000000000000 R09: 0000000000000000 [ 193.758947][ T7129] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 193.758961][ T7129] R13: 00007f3c96c66038 R14: 00007f3c96c65fa0 R15: 00007ffd1af26ed8 [ 193.758994][ T7129] [ 193.759486][ T7129] Kernel Offset: disabled