last executing test programs: 7m22.137307875s ago: executing program 2 (id=3156): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') shutdown(r0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xe, 0xfffffffffffffffc, 0xd0, 0x79, 0x4, 0x8000, 0x8, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x3, 0xa, 0x80000006, 0xa29}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0x7f7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x1801a, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0xa) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}}, 0x24008004) 7m21.093664484s ago: executing program 2 (id=3158): socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) r4 = io_uring_setup(0x3a1b, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1) syz_create_resource$binfmt(0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x52, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}]}}}]}, 0x96}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 7m18.687142888s ago: executing program 2 (id=3161): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r1, 0x8080583a, &(0x7f0000000000)={0x200, 0x9, 0x3, 0x8, 0x6, 0x0, 0x4}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 7m17.744321854s ago: executing program 2 (id=3164): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000b00)={0x0, 0xfffffffffffffffd, 0x0, 0xf9, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}) chdir(&(0x7f0000000240)='./file0\x00') r2 = syz_clone(0x400e200, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) sendmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000280)=[{0x30, 0x112, 0x3, "1d17c212839d35a2922e640b241b9db6c6e89493c1e167974e5f9af476"}, {0x38, 0x3a, 0x6, "ad908b5a5e5142f4fb72d756b04f46f6316e887bebc593cfcc7bcc779d777184464b3fd19d86fa7a"}], 0x68}}], 0x1, 0x0) tkill(r2, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 7m17.176336517s ago: executing program 2 (id=3166): socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) socket$can_j1939(0x1d, 0x2, 0x7) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r3, 0x107, 0x15, 0x0, &(0x7f0000000000)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000180)={0xfffd, 0xfffb, 0xc, 0x1000, 0x8, "020004044134cfe1"}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004780), 0x80, 0x0) write$UHID_INPUT(r4, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) fanotify_init(0x4000, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6e) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r7, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) setsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r8 = syz_usb_connect$uac1(0x0, 0x92, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4159, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x7, 0x40, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x2a}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x0, 0x4, 0x3, 0x5}, @processing_unit={0x7, 0x24, 0x7, 0x6, 0x4, 0x2}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x1, 0x1, [0x4], 0x13}, @processing_unit={0x7, 0x24, 0x7, 0x1, 0x5, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7e, 0x0, 0x98, {0x7, 0x25, 0x1, 0x6, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xc4, 0x8, 0xe, {0x7, 0x25, 0x1, 0x8, 0x4, 0x401}}}}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='net/netstat\x00') writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f00000009c0)={0x40, 0x5, 0xf1, {0xf1, 0x23, "bc773c60d348496a917720b44e2883a030c7b2ab2d66db3a0bf8927208292286d393b7b87cbff265f841184ffaedb4a90d637d01a7536f0b1acfded7be8dfe0da731c2f70fd5c37cf3434e58220e7b1378960a6a154107ee86cb5f59430d7fc408eba7c970a8d5d06d110d366a53fee579f9a8d86a3be66ba99f23161c83e2fa9f49196ff714418ab2df85896140dc38351b3014420ff4abd06efb2a7dd3836237d10a3bca87fa1f000e15e073b02d464f153721a82ed28ecf678f376b2cf4c361854513447b2c0295ed72eea2aeeece32a386ac9024a6a34be7f0f094ef2ee245bdb887540dd3c9610bc126d9ab36"}}, &(0x7f00000001c0)=ANY=[], &(0x7f0000000ac0)=ANY=[@ANYRESDEC=r8, @ANYBLOB="18068116c420e731422fd7bb4f626f0e8402c90f933009892b7b96f9af62d775d2e2c39405ba356b3d29ccd16135d35f1ff337b52716d4a095e81a73be1752f1d90398c17a43f5b971510835188e0000b5ceb6391de76f80e8c10644fe77f8253384ec295839ee8702419eddffdad23bf42da239d1fec9a68bcc488ba7e9c5abae730c1c4aa1ce604bd45dfcd90405c75e75bcf9a1210c0eb1963806ab5390a955d5c0edd5c7f14f33f1b524344ca0e4840171a4afda4f3cc685d0ce3a2023cb0ce1ea0b0decda74dac9398bf796a3", @ANYRES64=r6], &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0x4, 0x5, "1336eb86", "e6b5b000"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xfffffffffffffe19, 0x2a, 0x6, 0x10, 0x4a, 0x6, 0x5, 0xbb5}}}, &(0x7f0000000900)={0x84, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r5, @ANYRES16=r0], &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1}, 0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r9, @ANYRESDEC=r2, @ANYRES8=r1, @ANYRES16=0x0, @ANYRES16, @ANYRESDEC=r2, @ANYRESHEX, @ANYRES64=0x0, @ANYRESDEC=r9, @ANYRES64], &(0x7f0000000600)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000200)={0x40, 0x9, 0x1, 0xc4}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "da4e"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x43bd}, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x19, 0x2}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x24}, 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000000b0601020000000000000000050000070500010007000000040007800900020073797a31000000003daef80834f808b98c870448950bdfb8b3edb61cd23ed563fc3a1baeafd0e06a13af756e052d9364"], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) socket$phonet(0x23, 0x2, 0x1) 7m16.854562404s ago: executing program 2 (id=3169): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x40000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x3224c1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x208000000000203, {0x7, 0x29, 0xdb56, 0x4040008, 0xfffd, 0x1a7a, 0x2, 0x1801, 0x0, 0x0, 0x20, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) 7m16.557797327s ago: executing program 32 (id=3169): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x40000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x3224c1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x208000000000203, {0x7, 0x29, 0xdb56, 0x4040008, 0xfffd, 0x1a7a, 0x2, 0x1801, 0x0, 0x0, 0x20, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) 11.356099716s ago: executing program 4 (id=4378): unshare(0x8040480) socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000400)={0x0, 0x8, 0x4000, 0x6, 0x0, 0x9}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mkdirat(r0, 0x0, 0x60) socket$rxrpc(0x21, 0x2, 0xa) writev(r0, 0x0, 0x0) socket(0x2c, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5d090932f70e0dd038e7ff7fc6e5539b324c078b089b343b076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b35310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1061}}, 0x1006) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x0, 0x0}) fstat(r3, &(0x7f0000000100)) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4824, 0x0) 11.2199338s ago: executing program 3 (id=4379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 10.996695797s ago: executing program 0 (id=4380): socket$kcm(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) (async) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180)={0x100071, 0xb, 0x100000}, 0x20) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0xf9, 0x49, 0xce, 0x40, 0x3731, 0x113, 0xddb4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x0, 0x7231d0f8ecf8343f, 0x81}}]}}, &(0x7f00000003c0)={0xffffffffffffff7b, 0x0, 0x0, 0x0, 0x23, [{0x38, &(0x7f0000000400)=@string={0x0, 0x3, "91f08b503f313158235fa935998df129b3af42c9a11984feb6e9b28ac0f1a495"}}]}) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r5, @ANYRES32=r6, @ANYRESOCT=r4], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) (async) sendfile(r4, r2, 0x0, 0x100000000) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0801009327000000d9030000084c00000600000000000000000000005bef4d42c64fbf870536187b16721aa59f358106c636de540f5ac98beede7d03366c0647da55d87ebac72d37ddcb563d354b8d059435c24c6eeca96fb862d342697668a73d3748517224a637529757455f7129c2b57ef44f6671182f3bd31f4cf1cb647f08af72d0f006a9aec0a7449eb562bbd71c0f98e2961a04110fd71a9171b4c7f571273c6ac6b77760db105d40a2843924a88e5d33d5e1009b01e0f212d6bd5d53ffdfca61f26f682fd9f6d0e9425e5e1a61abd86cbd92a51c86edc8f6752fb79dc8a7f039f9dd9af514d6d646adfad39d203daed8555bf94371aa2361f6d7323ede8c9cca55b65b161b02b95f69a66ecf8558ac5a5f1650a9647254205e393991b2f29fd7a034235def71ddc24c9512717ad088eb2b"], 0x11e) (async) recvfrom$packet(0xffffffffffffffff, 0x0, 0x5, 0x22, 0x0, 0x0) 10.34279348s ago: executing program 1 (id=4381): syz_emit_ethernet(0xd84, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd76, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xd62, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) 10.185549407s ago: executing program 1 (id=4383): r0 = socket$inet(0x2, 0x6, 0x80) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x16, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) io_uring_setup(0xab1, &(0x7f0000000080)={0x0, 0xdf4, 0x4, 0x0, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff00000000200000007600010008000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x4, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) 10.180736835s ago: executing program 3 (id=4384): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x40c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(0xffffffffffffffff, 0x0, 0x20000010) sendto$inet6(r1, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000100)) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.765499535s ago: executing program 4 (id=4385): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0x5) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) 9.624340996s ago: executing program 3 (id=4386): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc000000190001000000000020010000000000009b9c0000000000000000ac1414aa000000000000a600000004000050f38cce000000000a000000000000000000000029b937df35e9ef6ecb59c3d565f7df26d8afe1f68fae98cb87bede920390f36d8c999d9504d44c2afe6c96dad844dd608aaf169844957d7f28a354e9ed8e31c8e78bb9105f1b74cd567ae36a347626fd4dcebc2205992fc47529c0376500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a9"], 0xfc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001680)={'syztnl2\x00', &(0x7f0000001600)={'ip6tnl0\x00', 0x0, 0x2f, 0x24, 0x7, 0x6, 0x2, @mcast2, @private0, 0x839a, 0x80, 0xf9a, 0x9af}}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000016c0)={@private2={0xfc, 0x2, '\x00', 0x1}, r2}, 0x14) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000380)=""/4096, 0x1000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_flash={0x33, 0x7f, './file0/../file0/file0\x00'}}) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaa00aa429e82211cf886dd6a7abd6a00006701fc000000000000000000000000000000ff020000000000000000000000000001"], 0x0) r5 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400103842, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, r5, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x4, 0x25b, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x100}}}, &(0x7f00000000c0)=0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb\v1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2', &(0x7f0000000300)='\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xc9\xe1\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x17\x81>\t\xc30-\xe2\xb3\xb0r10, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7}, 0x0, 0x0, '\x00', {0x0, 0x399, 0x0, &(0x7f0000001900)=@buf_4k="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"}}, &(0x7f0000002980)) fcntl$dupfd(r3, 0x406, r11) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x20000000001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 9.346471023s ago: executing program 0 (id=4387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="02", 0x1}], 0x1}, 0x40000c4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x100000000005, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x2000000002, 0xfffffffffffffffe, 0x81, 0x9c2, 0x5, 0x1006, 0xc, 0x6, 0x8000, 0x1], 0x1000, 0xc2302}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x5, 0xfffffff8, 0x0, 0xff, 0xff}) mremap(&(0x7f000043b000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.41153139s ago: executing program 0 (id=4389): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x24, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000380)=@bloom_filter={0x1e, 0x10000, 0x5, 0x1, 0x108, 0xffffffffffffffff, 0xae9a, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x6}, 0x50) read(0xffffffffffffffff, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x100) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000181100010009000000000000c60000717596ef70f70e45185126b4c31097ccfcbb5ed7dfb6b10abb9328fde01ff4c41cf410e25e6f8573737c893b49ba65df413ca005fdbc2ee61e47423a126e213a3cf7246098b4c7cba902597f78e49929b05e57d09d7ae2ee2165d8d2ce53fe4a6de96b7f01baa669f9598998d9ba64139b440261e721bfd9a5e8b8b391da41b509b767a9670b879245396f579dc452feedf106e8c403896b992b0f299c069f84fcccc8a3c2779912249f3251f66799a0d7795f8935f49c9b6b2ca97294eec5879c840bb7b629a9e2894b45bd5f27432452e4182acd0baee1911ae7fddf188801df283764502e341d195eb04c29f63da5fed5d70e9145d16d82cddb4505ac23fff6d567381efc696ebafe719d417f7c188c939128fad2aca92c31370c9fb0c89a871deff79ebeb797fae9154186ff21b77723800719d8ff38cad9aef649fed770480263dd5bc2f27853a830e5ad9d1f6f6d66c478538e199af08f871e260dfa713285a4d18270ff7f3b794689297f05165300e66a1c5b79a0dc62fee0730f", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x48}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608204c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.028523559s ago: executing program 0 (id=4390): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0xea}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xf, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.882851505s ago: executing program 5 (id=4391): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x80800) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000580)=ANY=[@ANYBLOB="120100020000002035120382400001020301090269000301082001080b010201052005090400000001012000092401070008090068090401000001022000090401010101022000090501092004028503082501030c07000009040200000102200009040201010102200009058209ff03fc03050825012833960400c80a6741edd78ed6373cb6b32ea0fd859626cf9eb8f2368cfa4e6f82187727433f965508348e4e6cdd4191e199f15aa2f01ad5c5178b9f5bdf4e4ac3ba9666eca77fd6ba6c3ecb41967fe97e946355ec76517104a75a12e99b38239f2999f154207d6eb83a434a850822734f4367f64a056c281cd0a9894429c14f3e79b65f5f70871acb38e2a71a82385b73a16da4917218d790d0f028319eb8d2fce03cfcac503641d099ee28875a4fd73591bea9d0f07c8c663c043a7eba58294f3997b609965a9777c6fcc52d4ee652d915c80aaf62de46960153b76ea2015c05d9000000004aa63189a6166fb3a56e3c710e1b04925e9e58e0706fd5f5a5c058d961a81e52377cbdfec9307cb4dc3e05f09ad19dfb8195a4112721bea56a668b41b0b0e6438c99afe5f7ea1917a3303ef70e0f36974ec4ff177c1ceae78c3391edef5804ab3e79707b64968d9bcc23a6d40acf1b1ab69b"], 0x0) socket$inet6(0xa, 0x1, 0x7) socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRES16=r2], 0x68}, 0x1, 0x7}, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 7.812468867s ago: executing program 4 (id=4392): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x80, 0x3, 0x0, 0x717e387b, 0x42, "1ae34e0626b2fb12daba40794233a5bd00", 0x4, 0x2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000240)="1f31b23ce04048a5442a6bf5b7d23b113c7ac7406e8345d7b32d0de2826036a739b7349de441bc7503fd90647e1e2d3e9b3fa2245c4f07a7a44dae8f92dc6acb11cb41667b87bdf673df3c06855b13bd9457cfc257c3e7333bba9c84252c5c6798bc081aba576709b8ca019a86e4f58ffd412de0b81ed72643174d31ad48809751736dbed47d8522b4d0fb9cbb47eb4c2c491fa72acb42aa272f891984706491c6c395bec43948881d9c3f3d2401ac4a6018ab701cf58462b3a25cc3265dd9889f6780abab9dbcaa2dfcbd6fe42d566cf578ae99a5f3ff64adde9ecfd6350bf6d396c118482e3ef4ba60707488109232e542a1f2a2c6726fafccdd9faef6a301866886ffa494ff19f9e0381663ac3842c8a91c5981237e9fa847cbdb18ac73ec09cd8164105b6d28c50fd19963230b04efdaee80542e93cc3db078ad0eaaa6d050e59b77fa5e9d5f8c50998820727d838506f125cb38fd49762e870f7afbd92c116d32ffdebcf02305857f7be8f419d5418e6e398f6d328a74149e02adddd015b0d45d75f332f4e7d62a534f09bbba29081946787c5b5ff4cf0d3153cf47182bbb1991592d7549653548302cf781f9163c4c869910dbc505db0c9c7b813a2798a85b898fa3384654e452546dafd40fe12466b9703fc77714eb5dc278820eef984f71b81ff27b0ee726dc298b1aed81fa29cb5e3bbc0aa82e5f82a69bfa024c94e78e9bb99064acca658de0d6d878f729ea352b166b986101213dd4e1baa0cb10a7855f7eef0d491f5f84d0f0a64a7b05c99b1cfcfc5ee301bcdff0ad511f72062f531d940a74794506759fff6dae6867cfe5db10a06c855dfaeddda32c14559db43843d16613dd4174e1243fe1b50c16a7d8aea0832493a451136702dc1e9b538d762b527a4be3358704791c21da1c6c5453f9b9c4fada993585bae52c7387ccf44980c2003a51d3d30c14b7afe205ac838adce91d14a98520d2cd565953e991d2446640f078e57ecfdca6225f76ca24d9d5", 0x2d2}, {0x0}], 0x2, &(0x7f0000001300)=[@rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0, r0]}}], 0x24, 0xc010}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) timerfd_create(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/consoles\x00', 0x0, 0x0) preadv2(r5, &(0x7f0000004140)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x33, 0x4, 0x0) 6.785075895s ago: executing program 4 (id=4393): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002300)={&(0x7f00000000c0)=[{0x90, 0x1011, 0x0, 0x0}], 0x1}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000980), 0xfdef) splice(r1, 0x0, r3, 0x0, 0x80, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004011) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000000c0)=0x7) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f00000001c0)={0x1f, 0xffff, 0x2}, 0x6) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 6.446085s ago: executing program 3 (id=4394): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x60}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x80) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0x5) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) 6.048895847s ago: executing program 1 (id=4395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$read(0x2, 0x0, &(0x7f00000020c0)=""/4096, 0xfebe) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 6.018971176s ago: executing program 5 (id=4396): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x40c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(0xffffffffffffffff, 0x0, 0x20000010) sendto$inet6(r1, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000100)) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.568684257s ago: executing program 0 (id=4397): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10010, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b510f210950b2a777382010203010902240001000000000904220002895395"], 0x0) 5.455101278s ago: executing program 5 (id=4398): r0 = memfd_secret(0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000a40)='./cgroup\x00', &(0x7f0000000440), 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) prlimit64(r2, 0xb, &(0x7f0000000040)={0xd, 0x8f}, 0x0) setrlimit(0x3, &(0x7f0000000100)={0xffffffffffffc4aa, 0x5}) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r4, 0x8004500f, &(0x7f0000000080)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_setup(0x5e9, &(0x7f0000000080)={0x0, 0x1539, 0x1, 0x2, 0x175}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000), 0x560c89bb) 3.163587354s ago: executing program 1 (id=4399): bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@o_path={0x0, 0x0, 0x10}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) 3.079954532s ago: executing program 3 (id=4400): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x24, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000380)=@bloom_filter={0x1e, 0x10000, 0x5, 0x1, 0x108, 0xffffffffffffffff, 0xae9a, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x6}, 0x50) read(0xffffffffffffffff, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x100) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x48}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608204c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.934721522s ago: executing program 1 (id=4401): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00002a6000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xb) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd70000000000003000000100001800b0001000d92c3caf49279"], 0x24}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000140)=""/24, &(0x7f00000001c0)=0x18) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.463154787s ago: executing program 3 (id=4402): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x5, &(0x7f0000000040)=[{0xff, 0x7, 0x0, 0xb4}, {0x101, 0x0, 0xf0, 0x7ff}, {0x9, 0x5, 0x6, 0x3}, {0x10, 0x5, 0x81, 0x1}, {0x6, 0x3, 0x0, 0x6}]}) r0 = syz_usb_connect(0x2, 0x490, &(0x7f0000000b80)={{0x12, 0x1, 0x300, 0xbd, 0x30, 0x38, 0x8, 0x15c2, 0x40, 0xe197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47e, 0x3, 0xd, 0x9, 0x80, 0x6, "", [{{0x9, 0x4, 0x53, 0x5, 0x0, 0x98, 0xf4, 0x36, 0x4, [@hid_hid={0x9, 0x21, 0x10, 0xff, 0x1, {0x22, 0x961}}, @hid_hid={0x9, 0x21, 0x7, 0xa0, 0x1, {0x22, 0x20f}}]}}, {{0x9, 0x4, 0x46, 0x5, 0xd, 0xf, 0x3b, 0x1f, 0x1a, [@hid_hid={0x9, 0x21, 0xff, 0x6, 0x1, {0x22, 0xa0a}}], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x5, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x59, 0x5}]}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x8, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x5, 0x80, 0x1, [@generic={0x5c, 0xe, "bcf9ab55dffce1ce77ef9260baaf1e9d30f3b97e209e2e0f50ac3b0ba3c65c0e0cce09730c0e6241873bcfec51f77035f1fb35ef3cdacfb04ee865342655805e0018c21fd50d36fa78bd455c0316372e1cd5a45c39be6b30330b"}, @generic={0xf8, 0xf, "ef12f108e9cf537e5b92841b825cd7139bd09e5b14898c757aec0936fae2d1de1cca6bf5182ab854b58add49d90c3da40969331f7ea0e3b6778bfd7695eb2958174f9f0ab4ca4e3c89b305dcb9a3dbbc2e183672a1022c59c807313e5167a9470dfdcdef650814db524e0eec17b666a92a4333cecbc8ccbd278a2d9cbc365e1aa73314d7dedc2f8d5dd3ae70f775d623b4c6b6cdd69d13e1732ed48fcc2ed037407cdd71621e7eafb68f121cd3d5e8f73495529f075a4646e3376fa06411d5a17e4eec74fc6ae524f60fafa30c32de14ceb4c24203eb5f022bce8ea6b8b0b9c7045f0aed2469755b34539274a6a5ad9bc3712d7a52b3"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x6, 0x8, 0x95, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x40}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x8, 0x40, 0x93, 0x1, 0x3, [@generic={0x48, 0x2, "a3f1b4b26e04236f29f06266f1e7018eda110e39b9f457da66220a51b16d1683399a48161975d5f9786b7154a9b0bfe07e01fbffbcc891d76ee1e67b92841bcc07919498f00d"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x65, 0x8, 0x2}}, {{0x9, 0x5, 0xd, 0x2, 0x210, 0xa4, 0x81, 0x2}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x8, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1d, 0x1}, @generic={0x58, 0x21, "667a4a68ed28e26862d1834217ad3e60db26a5d4e7a1caaa1d96f30fbad3870db5fc41c9685af57e90ae4f35ee3e060ccf9b9124fae262cbc9fe93582a8f85aa9de44005547db55faa5839169ed386908bcf8e64411a"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x5, 0x7, 0x2}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x3, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x4}, @generic={0xb2, 0x9, "628a1f5cd37b742dc2c86f9e0f26124a71be10c62195e3ad05ff29353811b71a9ad11d3c1b3fbc8821c231caf06a91ed8e867be044c868b9866292dce89b24b85bd4ee43427569901186a49cb97a1cd34d806806fe4124784e3a90048c97556a545b6ae225d11b6332f00b8958a678823aefc684388c569e3e9cb563f8e9bd5ada244c531f269a7b96098382548ac93223765c87c4a1ffa03ec45475cc69adebb2e28f6754cd834f702cbf5627d91ac0"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0xff, 0x8f, 0xb, [@generic={0x35, 0x6, "b167fb0f4dd687127aa32b9f700bf76ccea6ea5e9521bc73f9137f053b2e3ebf0b6741036d3563a7b3d089c34e4a0e4a4f996a"}]}}, {{0x9, 0x5, 0x109, 0x0, 0x40, 0x9, 0xb, 0xfd, [@generic={0xd3, 0xc, "b29105f753859383d99eefa47a0a7481f90e78a5d033b1ffca1e0d7cb9c6cfd502aa46d00d72c2daa9d3019a116a672951a9ec75fdbf813dc22dce736302a107687db3c84c5cb2cbc7bb6268f03ce8c321988c5335cb4c3d00a14157ca432193acdf9858a93ba0d3c65d9759fe478c6adead1ef04c05268b0392f0e17b3cdd2341da07359346c8b2052766d67fda10ea9eafaf56cbfae3e62697c410b2d623dd665df4b377bd3796a171d16974466d2a33c93586f27943ce9f9a763a2959bed83f52cd12459cf31191d1767dc26e78fba1"}]}}]}}, {{0x9, 0x4, 0xc5, 0xb, 0x0, 0x87, 0x39, 0xc3, 0x7f}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x310, 0x9, 0x3, 0x6, 0x40, 0xf}, 0x119, &(0x7f00000010c0)={0x5, 0xf, 0x119, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x40, 0x51, 0xffff}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "a670161a18f0256aeb5a81122a23fa1c"}, @generic={0xe8, 0x10, 0x91db15fc6a4a33d7, "b62926c5bdaa5b41cd2f0c7d1930cd8009ae82f42bf4e4af6795169496e5c8c9579dbd04e7ed3c0cc56466fd35e5967f39f87fd97075395e8be6896d141e8c586072b7b087aa49f97e9d7f8784a5a0426dcd71cfd3ed6b35c6ce0c3170bad250c718ff5ec01f5fd4d8a60d085e18c5e9496c5d142b0a3ffeaeabd66d83bb9cd881e3dcd88216d3527b9d2d9fee7f5bdd0a836085d840dfb687401c24598941e0ab5156f4c3b71adeae824922c042113a020f21423831d0688d3f3d3ad9052cf9466f43d52c71e1b0430407d1844757eb8b70dd3ffd6624944f3e9d465050db9f4bef556d8d"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x6, 0x6, 0xfffa, 0x3d}]}, 0x4, [{0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x439}}, {0x66, &(0x7f0000001240)=@string={0x66, 0x3, "5e1c2dab42767aa74cfa0206fb27c5c3ca8e5ae990eed46dd53795db9d3ab01579bfb38a88d2dff9d60c95abcf25dba1b5d5a4a058b9d703006404172b1f14354264ff61d01640490d42801e779ad092c6e00737db5fb6cafa5364a58afc8065693e0f6a"}}, {0x78, &(0x7f00000012c0)=@string={0x78, 0x3, "076eceb7226cc80bb7596281e7a851a3c4d1647225cf9948028743a55cf298faba17dbf52ba465ef05f274aa7349be4dcb555d0edd9bf0e1be1015db6caf56a493291282b753e2473b0134864000c838e13fa26ef28f8a7170c417131d85831c81cdd94f6e744bb35353470d6ed5de44872e36be764a"}}, {0xab, &(0x7f0000001340)=@string={0xab, 0x3, "ba6861272791f3948ca863dc8b28bbf8ef1d63146eac01180524567ed625fbabbbc035702c849a32b257872459545c826427e8a728a79d514dfe59339422c2a59e0b0529349cdf48db6e37f6a6404659fa9eedf7eafc768005503806c5aff2687455a44d9e611b2e3ef0ddbf9184322f6e4d3071168e4c2fa06cc5c57776479c4d70f59b92c4ab02628ee36da1750473d14a4c8aeb5040664d9093e2016a423feceefbc7ddfb24441b"}}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) listxattr(&(0x7f0000001cc0)='./bus\x00', 0x0, 0x0) chroot(&(0x7f00000001c0)='./bus\x00') syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="000e06fe00000602c39aed3c"], 0x0}, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x2, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0xda, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x40, 0x5, 0x66}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0xae, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x3, 0xe, 0x1, 0x40, 0x5}, 0xdd, &(0x7f0000000340)={0x5, 0xf, 0xdd, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0xbb, 0x0, 0x8}, @generic={0xce, 0x10, 0xb, "3d81bc797039cb50db2d4a72454fbc7bbf70e5cd8f68a1464822edc4717a5ac68dafbc8d7d34cdb5bbfe49e881bdd5060fdd78126fccda1254fef09f1f5efb55e766a4b3f3c11ec75e7d125bbeb4c8bbaa7583d161339bcc00bb860aa46eced58b6730b2874ae9d66eddf5810eda585acb92b7b9307b8045ad4cf4dbe7d66bd74b08a0c29c5e89c56a5b15520d9d2314dd2e1a335208541d26c9aedab2fcc649659a836815f5a0f149302005619d29ccfbade1dc8971c8b97e2d91378e2c3a2e063f2ee90c6a811308cf13"}]}, 0x3, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x83e}}, {0xa0, &(0x7f0000000900)=@string={0xa0, 0x3, "e097383c27e54cc5fe91d124cbc180dce304909e926e5d6c9ebb50b696b6231e8d3d2e49fbf05197e25d2246eaac0af4c4bc641162237f4674a65dc3eb6244b30b05def98b513ad546b52a6ada94314220b6431f0d5d8cb33a02747b01a251dd29a338629403b6cee194acf3b6fa3629f6694168f3705bda51035f8768ffb38d447dc718100a10f254ee48eea49a20aa773882c7f28da7ba8b8fb4555d70"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x405}}]}) syz_usb_control_io$printer(r1, &(0x7f00000008c0)={0x14, &(0x7f0000000800)={0x0, 0xc, 0x57, {0x57, 0xb, "fd0d59205c4806eb1a63bcb35959e5ca83b29095484edda9ce68e3d66a32567929717241266d716d857166f6942f5b02f1cd255b9a8d5d643c12d0a040d2adb41ffb998e8736eda02315a7677f080dfd48d9857944"}}, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003000000000000d1770005"]}, &(0x7f0000000b40)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="4016810000006cd45cba344cd42a3272b30d198f8f3fcd1b87fe8c9cffc5378126f668c204d10eef3a585f3ea86ee59b30326f5dab258c8d613c41e881d6157df1243de3d419f8cb8bebe46250be1ce797db67d43d66fa779ffad5bdd73991169010e6ae5f7a90dcfab3aa03265b4de5b774b1668f2f04363d98b8dfebcbd52c4cac321e5e225ba40ee6b5f237708a956e545d3bd6d449d4a40045d5d00800ab4e35f489"], &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a40)={0x20, 0x0, 0x6e, {0x6c, "db856f5bb1a7308eeaa419e57e7cfe3437e4b86f72b4c6bb33d3590e5050b4e625c84ff9d613b3d395f7e578aaa47b4ac05fdbfa10f75602aad052a89f74c5a05002ffb06f0ac1e0ec030d8ac91328a12b020b77c0261026624b9fece335bac94e454e2242e0a4108adf5afd"}}, &(0x7f0000000ac0)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000b00)={0x20, 0x0, 0x1, 0xd}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000740)={0x14, &(0x7f0000000640)={0x20, 0xa, 0x95, {0x95, 0x23, "e0bda9e40791be364b05bff6d5817ddf3a35ba1dde8407adf016297582405e28a31bc18591fb0f0133cd36627517ba09b129d0ae283d3b37f22f4a810a6162eb64c238249e7c1c381060fe95f16079843d08419c36b109f589bbbfb1fdb103f11429ff555d18d98d59d2ef4c9925c2a47f7e631f96cc6a3d900e52c0a27dd0bbc18f97c358758238de5c7abb6128a09cc0a690"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001500)={0x1c, &(0x7f0000000780)={0x0, 0xd, 0x1c, "c3b21678fee4914c1267b2707bb774094b9d73aefa2b33a82e200d01"}, &(0x7f0000001480)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000014c0)={0x0, 0x8, 0x1}}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000080)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5475d, 0xfd6f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 2.290012568s ago: executing program 5 (id=4403): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') pselect6(0x40, &(0x7f0000000000)={0xe, 0xfffffffffffffffc, 0xd0, 0x79, 0x4, 0x8000, 0x8, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x3, 0xa, 0x80000006, 0xa29}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x7f7) landlock_create_ruleset(&(0x7f0000000040)={0x1801a, 0x2, 0x3}, 0x18, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}}, 0x24008004) 2.034256709s ago: executing program 0 (id=4404): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee400090508"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000080)=ANY=[]) 1.682857834s ago: executing program 4 (id=4405): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x60}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x80) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0x5) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) 1.205562664s ago: executing program 5 (id=4406): unshare(0x8040480) socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000400)={0x0, 0x8, 0x4000, 0x6, 0x0, 0x9}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mkdirat(r0, 0x0, 0x60) socket$rxrpc(0x21, 0x2, 0xa) writev(r0, 0x0, 0x0) socket(0x2c, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5d090932f70e0dd038e7ff7fc6e5539b324c078b089b343b076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b35310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1061}}, 0x1006) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x0, 0x0}) fstat(r3, &(0x7f0000000100)) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4824, 0x0) fanotify_init(0x0, 0x0) 1.122876407s ago: executing program 1 (id=4407): syz_clone3(&(0x7f0000000080)={0x10f100, 0x0, 0x0, 0x0, {}, &(0x7f0000000280)=""/208, 0xffffffffffffffee, 0x0, 0x0}, 0x58) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYRES64], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) 49.22732ms ago: executing program 5 (id=4408): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 0s ago: executing program 4 (id=4409): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r5 = getpid() ptrace$getregs(0xc, r5, 0x7, &(0x7f0000000080)=""/64) write$binfmt_script(r4, &(0x7f0000000000)={'#! ', './file1/file0', [{}]}, 0x12) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x810) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) kernel console output (not intermixed with test programs): acketSize 0 [ 1213.932095][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1213.943016][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1213.964673][ T24] usb 4-1: string descriptor 0 read error: -71 [ 1214.085719][T20410] bridge4: entered promiscuous mode [ 1214.929542][ T24] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1214.938908][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.961207][T20409] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4003'. [ 1214.976532][T20409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4003'. [ 1215.043442][ T24] usb 4-1: config 0 descriptor?? [ 1215.319316][ T24] usb 4-1: can't set config #0, error -71 [ 1215.373254][ T24] usb 4-1: USB disconnect, device number 84 [ 1216.723661][T20429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4008'. [ 1216.739461][T20429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4008'. [ 1216.771737][T20429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4008'. [ 1216.788053][T20429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4008'. [ 1216.809327][T20431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4010'. [ 1218.151039][T15609] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 1218.270913][T15609] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1218.451813][T17377] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1218.631995][T17377] usb 4-1: Using ep0 maxpacket: 32 [ 1218.649081][T17377] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1218.671379][T17377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1218.701888][T17377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1218.725247][T17377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1218.753798][T17377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1218.793726][T17377] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1218.818032][T17377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.826525][T17377] usb 4-1: Product: syz [ 1218.831284][T17377] usb 4-1: Manufacturer: syz [ 1218.867309][T17377] usb 4-1: SerialNumber: syz [ 1218.901130][T17377] usb 4-1: config 0 descriptor?? [ 1218.912461][ T5718] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1219.082199][ T5718] usb 2-1: Using ep0 maxpacket: 32 [ 1219.087906][T20458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4018'. [ 1219.114092][ T5718] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1219.134062][T20458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4018'. [ 1219.148847][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1219.168162][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1219.190736][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1219.341259][T17377] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1219.349081][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1219.361551][ T5718] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1219.364244][T17377] input input151: Device does not respond to id packet M [ 1219.372663][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.386203][ T5718] usb 2-1: Product: syz [ 1219.789765][ T5718] usb 2-1: Manufacturer: syz [ 1219.794741][ T5718] usb 2-1: SerialNumber: syz [ 1219.810714][ T5718] usb 2-1: config 0 descriptor?? [ 1219.910102][T17377] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1219.938289][T17377] input input151: Device does not respond to id packet P [ 1220.081911][T17377] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1220.502010][T17377] input input151: Device does not respond to id packet B [ 1220.520547][T17377] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1220.533425][ T5718] input input152: Device does not respond to id packet M [ 1220.541492][T17377] input input151: Device does not respond to id packet N [ 1220.556810][T17377] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1220.624438][T17377] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1220.655023][T17377] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1220.671335][T17377] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1220.691897][T17377] iforce 4-1:0.0: usb_submit_urb failed -90 [ 1220.716571][T17377] iforce 4-1:0.0: usb_submit_urb failed -90 [ 1220.734709][ T5718] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1220.737701][T17377] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input151 [ 1220.781472][ T5718] input input152: Device does not respond to id packet P [ 1220.809370][ T5718] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1220.836471][ T5718] input input152: Device does not respond to id packet B [ 1220.891845][ T5718] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1220.894617][T17377] usb 4-1: USB disconnect, device number 85 [ 1220.944586][ T5718] input input152: Device does not respond to id packet N [ 1221.228382][ T5718] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1221.262626][ T5718] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1221.281604][ T5718] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1221.307666][ T5718] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1221.339362][ T5718] iforce 2-1:0.0: usb_submit_urb failed -90 [ 1221.362598][ T5718] iforce 2-1:0.0: usb_submit_urb failed -90 [ 1221.399293][ T5718] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input152 [ 1221.462380][T15854] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1221.494891][ T5718] usb 2-1: USB disconnect, device number 74 [ 1221.641778][T15854] usb 1-1: Using ep0 maxpacket: 8 [ 1221.650319][T15854] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1221.676066][T15854] usb 1-1: config 0 has no interface number 0 [ 1221.698580][T15854] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1221.740318][T15854] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1221.752895][ T24] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1221.796336][T15854] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1221.807919][T15854] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1221.821921][T15854] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1221.831206][T15854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.884326][T15854] usb 1-1: config 0 descriptor?? [ 1221.915894][T15854] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1221.927860][ T24] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 1221.953235][ T24] usb 5-1: config 0 has no interface number 0 [ 1221.973058][ T5718] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1221.988914][ T24] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1222.032570][ T24] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1222.088220][ T24] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1222.115794][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.152404][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 1222.164960][ T24] usb 5-1: Product: syz [ 1222.174493][ T5718] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.190632][ T24] usb 5-1: Manufacturer: syz [ 1222.222563][ T24] usb 5-1: SerialNumber: syz [ 1222.233602][ T5718] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1222.268781][ T24] usb 5-1: config 0 descriptor?? [ 1222.302621][ T5718] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1222.319745][T20487] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1222.337997][T15609] usb 1-1: USB disconnect, device number 104 [ 1222.355282][ T24] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1222.366753][ T5718] usb 2-1: config 1 interface 2 has no altsetting 0 [ 1222.392763][ T5718] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1222.402803][ T24] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1222.413409][T15609] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1222.438937][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.464066][ T5718] usb 2-1: Product: syz [ 1222.473077][ T5718] usb 2-1: Manufacturer: syz [ 1222.478272][ T5718] usb 2-1: SerialNumber: syz [ 1222.496790][ T5718] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1222.508813][ T5718] usb 2-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1222.517809][ T5718] usb 2-1: found format II with max.bitrate = 3, frame size=7 [ 1222.563329][ T5718] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1222.632196][ T5718] usb 2-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1222.661042][ T5750] usb 5-1: USB disconnect, device number 94 [ 1222.688871][ T5718] usb 2-1: found format II with max.bitrate = 3, frame size=7 [ 1222.706536][ T5750] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1222.719197][ T5718] usb 2-1: selecting invalid altsetting 0 [ 1222.726692][ T5750] cyberjack 5-1:0.69: device disconnected [ 1222.886522][ T30] audit: type=1400 audit(1780201065.280:890): avc: denied { kexec_image_load } for pid=20488 comm="syz.1.4026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1223.016862][T20500] IPv6: NLM_F_CREATE should be specified when creating new route [ 1223.025214][T20500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1223.032465][T20500] IPv6: NLM_F_CREATE should be set when creating new route [ 1223.048731][T20500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1223.056042][T20500] IPv6: NLM_F_CREATE should be set when creating new route [ 1223.845326][ T5718] usb 2-1: selecting invalid altsetting 0 [ 1224.120220][ T5718] usb 2-1: USB disconnect, device number 75 [ 1225.304761][ T8639] udevd[8639]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1225.450317][T20531] FAULT_INJECTION: forcing a failure. [ 1225.450317][T20531] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.463202][T20531] CPU: 0 UID: 0 PID: 20531 Comm: syz.1.4040 Tainted: G L syzkaller #0 PREEMPT(full) [ 1225.463233][T20531] Tainted: [L]=SOFTLOCKUP [ 1225.463240][T20531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1225.463251][T20531] Call Trace: [ 1225.463258][T20531] [ 1225.463265][T20531] dump_stack_lvl+0x100/0x190 [ 1225.463293][T20531] should_fail_ex.cold+0x5/0xa [ 1225.463318][T20531] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1225.463348][T20531] should_failslab+0xc2/0x120 [ 1225.463369][T20531] __kmalloc_noprof+0xe0/0x850 [ 1225.463396][T20531] ? kfree+0x1dd/0x6c0 [ 1225.463425][T20531] tomoyo_realpath_from_path+0xb6/0x690 [ 1225.463459][T20531] tomoyo_path_number_perm+0x23c/0x580 [ 1225.463484][T20531] ? tomoyo_path_number_perm+0x22e/0x580 [ 1225.463511][T20531] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1225.463561][T20531] ? find_held_lock+0x2b/0x80 [ 1225.463578][T20531] ? __fget_files+0x215/0x3d0 [ 1225.463600][T20531] ? hook_file_ioctl_common+0x149/0x410 [ 1225.463618][T20531] ? __fget_files+0x215/0x3d0 [ 1225.463646][T20531] ? __fget_files+0x21f/0x3d0 [ 1225.463672][T20531] security_file_ioctl+0xd3/0x230 [ 1225.463700][T20531] __x64_sys_ioctl+0xb7/0x210 [ 1225.463722][T20531] do_syscall_64+0x115/0x870 [ 1225.463752][T20531] ? clear_bhb_loop+0x40/0x90 [ 1225.463776][T20531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.463795][T20531] RIP: 0033:0x7fc50e39ce59 [ 1225.463811][T20531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.463828][T20531] RSP: 002b:00007fc50f305028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1225.463847][T20531] RAX: ffffffffffffffda RBX: 00007fc50e615fa0 RCX: 00007fc50e39ce59 [ 1225.463859][T20531] RDX: 0000200000000240 RSI: 0000000040086f52 RDI: 0000000000000003 [ 1225.463870][T20531] RBP: 00007fc50f305090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.463881][T20531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.463891][T20531] R13: 00007fc50e616038 R14: 00007fc50e615fa0 R15: 00007ffc35b5d258 [ 1225.463916][T20531] [ 1225.463925][T20531] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1225.501781][ T5750] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1225.513514][T17377] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1225.683210][ T5750] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 1225.710964][ T5750] usb 1-1: config 0 has no interface number 0 [ 1225.750899][ T5750] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1225.764399][ T5750] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1225.781447][ T5750] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1225.790792][ T5750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.800980][ T5750] usb 1-1: Product: syz [ 1225.805529][ T5750] usb 1-1: Manufacturer: syz [ 1225.810218][ T5750] usb 1-1: SerialNumber: syz [ 1225.830134][ T5750] usb 1-1: config 0 descriptor?? [ 1225.841836][T17377] usb 4-1: Using ep0 maxpacket: 32 [ 1225.851274][T17377] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1225.863370][T20522] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1225.873614][T17377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1225.875520][ T5750] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1225.894997][T17377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1225.936572][ T5750] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1225.950545][T17377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1225.973140][T17377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1226.005350][T17377] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1226.018176][T17377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.031936][T17377] usb 4-1: Product: syz [ 1226.036607][T17377] usb 4-1: Manufacturer: syz [ 1226.052105][T17377] usb 4-1: SerialNumber: syz [ 1226.071942][ T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1226.086734][T17377] usb 4-1: config 0 descriptor?? [ 1226.232276][ T10] usb 2-1: device descriptor read/64, error -71 [ 1226.326873][T15609] usb 1-1: USB disconnect, device number 105 [ 1226.356335][T15609] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1226.396273][T15609] cyberjack 1-1:0.69: device disconnected [ 1226.502901][ T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1226.516585][T17377] input input153: Device does not respond to id packet M [ 1226.651939][ T10] usb 2-1: device descriptor read/64, error -71 [ 1226.719240][T17377] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1226.730688][T17377] input input153: Device does not respond to id packet P [ 1226.739012][T17377] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1226.748901][T17377] input input153: Device does not respond to id packet B [ 1226.757345][T17377] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1226.764613][T17377] input input153: Device does not respond to id packet N [ 1226.781800][T10941] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1226.790876][ T10] usb usb2-port1: attempt power cycle [ 1226.796966][T17377] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1226.805612][T17377] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1226.812449][T17377] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1226.819056][T17377] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1226.825956][T17377] iforce 4-1:0.0: usb_submit_urb failed -90 [ 1226.832450][T17377] iforce 4-1:0.0: usb_submit_urb failed -90 [ 1226.847278][T17377] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input153 [ 1226.888729][T17377] usb 4-1: USB disconnect, device number 86 [ 1227.891090][T20544] netlink: 'syz.5.4044': attribute type 10 has an invalid length. [ 1227.925140][ T10] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1228.328330][T10941] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1228.336535][T10941] usb 6-1: can't read configurations, error -71 [ 1228.345104][ T10] usb 2-1: device descriptor read/8, error -71 [ 1228.613182][T20571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1228.625649][T20571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1228.990641][ T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1229.262542][ T10] usb 2-1: device not accepting address 79, error -71 [ 1229.279050][ T10] usb usb2-port1: unable to enumerate USB device [ 1229.488537][T20580] bridge5: entered promiscuous mode [ 1229.721796][ T10] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1229.881773][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1229.893363][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1229.911751][ T10] usb 2-1: config 0 has no interface number 0 [ 1229.924926][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1229.947272][T10941] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1229.965073][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1229.998017][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1230.021541][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1230.058167][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1230.077212][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.097135][ T10] usb 2-1: config 0 descriptor?? [ 1230.115990][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1230.153402][T10941] usb 1-1: Using ep0 maxpacket: 8 [ 1230.165228][T10941] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.185398][T10941] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1230.226402][T10941] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1230.255224][T10941] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1230.299529][T10941] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1230.326916][T10941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.386544][T10941] hub 1-1:1.0: bad descriptor, ignoring hub [ 1230.410952][T10941] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1230.440116][T10941] cdc_wdm 1-1:1.0: skipping garbage [ 1230.458260][T10941] cdc_wdm 1-1:1.0: skipping garbage [ 1230.468168][T10941] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1230.515954][T10941] cdc_wdm 1-1:1.0: Unknown control protocol [ 1230.706186][T10941] usb 2-1: USB disconnect, device number 80 [ 1230.712214][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 1230.731066][T10941] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1230.807775][T20589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4056'. [ 1230.854963][T20589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1231.429399][ T5615] usb 1-1: USB disconnect, device number 106 [ 1231.991766][ T5718] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1232.038135][T20608] syzkaller0: entered promiscuous mode [ 1232.044068][T20608] syzkaller0: entered allmulticast mode [ 1232.092157][ T5750] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1232.165228][ T5718] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1232.173673][ T5718] usb 4-1: config 0 has no interface number 0 [ 1232.180005][ T5718] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1232.198775][ T5718] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1232.212866][ T5718] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1232.222086][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.230131][ T5718] usb 4-1: Product: syz [ 1232.234785][ T5718] usb 4-1: Manufacturer: syz [ 1232.239415][ T5718] usb 4-1: SerialNumber: syz [ 1232.251099][ T5718] usb 4-1: config 0 descriptor?? [ 1232.257960][T20612] FAULT_INJECTION: forcing a failure. [ 1232.257960][T20612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1232.273872][ T5750] usb 2-1: Using ep0 maxpacket: 32 [ 1232.279428][T20604] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1232.290829][T20612] CPU: 0 UID: 0 PID: 20612 Comm: syz.5.4063 Tainted: G L syzkaller #0 PREEMPT(full) [ 1232.290860][T20612] Tainted: [L]=SOFTLOCKUP [ 1232.290867][T20612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1232.290877][T20612] Call Trace: [ 1232.290883][T20612] [ 1232.290891][T20612] dump_stack_lvl+0x100/0x190 [ 1232.290915][T20612] should_fail_ex.cold+0x5/0xa [ 1232.290939][T20612] _copy_from_user+0x2e/0xd0 [ 1232.290961][T20612] copy_msghdr_from_user+0x9f/0x4f0 [ 1232.290984][T20612] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1232.291015][T20612] ___sys_sendmsg+0x106/0x1e0 [ 1232.291038][T20612] ? __pfx____sys_sendmsg+0x10/0x10 [ 1232.291088][T20612] __sys_sendmsg+0x170/0x220 [ 1232.291114][T20612] ? __pfx___sys_sendmsg+0x10/0x10 [ 1232.291150][T20612] ? rcu_is_watching+0x12/0xc0 [ 1232.291180][T20612] do_syscall_64+0x115/0x870 [ 1232.291203][T20612] ? clear_bhb_loop+0x40/0x90 [ 1232.291223][T20612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.291242][T20612] RIP: 0033:0x7faf7719ce59 [ 1232.291266][T20612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1232.291283][T20612] RSP: 002b:00007faf78141028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1232.291302][T20612] RAX: ffffffffffffffda RBX: 00007faf77415fa0 RCX: 00007faf7719ce59 [ 1232.291314][T20612] RDX: 000000000000c010 RSI: 0000200000000780 RDI: 0000000000000004 [ 1232.291325][T20612] RBP: 00007faf78141090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.291336][T20612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1232.291346][T20612] R13: 00007faf77416038 R14: 00007faf77415fa0 R15: 00007fff0c62e628 [ 1232.291370][T20612] [ 1232.298210][ T5750] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1232.362493][T20618] xt_hashlimit: size too large, truncated to 1048576 [ 1232.365044][ T5718] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1232.495096][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1232.507004][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1232.518310][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1232.529301][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1232.541757][ T5615] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 1232.612635][T10941] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 1232.661022][ T5750] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1232.676436][ T5750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.918139][T20616] netlink: 'syz.0.4065': attribute type 10 has an invalid length. [ 1232.927980][ T5615] usb 5-1: not running at top speed; connect to a high speed hub [ 1232.936849][ T5615] usb 5-1: config 13 has an invalid interface number: 83 but max is 2 [ 1232.947718][ T5615] usb 5-1: config 13 has an invalid interface number: 70 but max is 2 [ 1232.963313][ T5718] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1232.969718][ T5615] usb 5-1: config 13 contains an unexpected descriptor of type 0x2, skipping [ 1232.991799][ T5615] usb 5-1: config 13 has an invalid interface number: 197 but max is 2 [ 1232.999670][ T5750] usb 2-1: Product: syz [ 1233.026750][ T5615] usb 5-1: config 13 has no interface number 0 [ 1233.036612][ T5750] usb 2-1: Manufacturer: syz [ 1233.050477][ T5615] usb 5-1: config 13 has no interface number 1 [ 1233.088551][ T5615] usb 5-1: config 13 has no interface number 2 [ 1233.098976][ T5750] usb 2-1: SerialNumber: syz [ 1233.112690][ T5615] usb 5-1: config 13 interface 70 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1233.147890][ T5615] usb 5-1: config 13 interface 70 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1233.170817][ T5615] usb 5-1: config 13 interface 70 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1233.188262][T10941] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1233.208539][T10941] usb 1-1: can't read configurations, error -71 [ 1233.215703][ T5750] usb 2-1: config 0 descriptor?? [ 1233.257826][ T5615] usb 5-1: config 13 interface 70 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 1233.285992][ T5718] usb 4-1: USB disconnect, device number 87 [ 1233.298894][ T5718] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1233.316829][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.331419][ T5615] usb 5-1: config 13 interface 70 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1233.354969][ T5718] cyberjack 4-1:0.69: device disconnected [ 1233.364936][ T5615] usb 5-1: config 13 interface 70 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1233.376348][ T5615] usb 5-1: config 13 interface 70 altsetting 5 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1233.394389][ T5615] usb 5-1: config 13 interface 70 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 1233.410416][ T5615] usb 5-1: config 13 interface 197 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 1233.425450][ T5615] usb 5-1: config 13 interface 197 altsetting 11 has a duplicate endpoint with address 0x7, skipping [ 1233.438806][ T5615] usb 5-1: config 13 interface 197 altsetting 11 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1233.450942][ T5615] usb 5-1: config 13 interface 83 has no altsetting 0 [ 1233.457906][ T5615] usb 5-1: config 13 interface 70 has no altsetting 0 [ 1233.467033][ T5615] usb 5-1: config 13 interface 197 has no altsetting 0 [ 1233.476047][ T5615] usb 5-1: Dual-Role OTG device on HNP port [ 1233.482254][ T5615] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=e1.97 [ 1233.491271][ T5615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.499337][ T5615] usb 5-1: Product: 渇럎氢ை妷腢꣧ꍑ퇄牤켥䢙蜂ꕃ滛ឺꐫꩴ䥳䶾嗋๝鯝Ⴞ꽬ꑖ⦓舒厷䟢Ļ蘴@㣈㿡溢迲熊쑰጗蔝ᲃ춁俙瑮덋卓േ핮䓞⺇븶䩶 [ 1233.520191][ T5615] usb 5-1: Manufacturer: ᱞꬭ療ꝺ社؂⟻쏅車淔㟕㪝ᖰ뽹誳튈履ೖꮕ●ꇛ햵ꂤ류ϗ搀ᜄἫ㔔摂懿ᛐ䥀䈍Ẁ驷鋐㜇忛쪶叺ꕤﲊ斀㹩樏 [ 1233.537274][ T5615] usb 5-1: SerialNumber: 梺❡鄧铳ꢌ⢋ᷯᑣ걮᠁␅繖◖꯻삻瀵萬㊚垲⒇呙艜❤꟨Ꜩ冝﹍㍙⊔ꗂஞ⤅鰴䣟滛䂦奆黺ﳪ聶倅ظ꿅棲啴䶤憞⸛뿝蒑⼲䵮焰踖⽌沠업癷鱇灍鯵쒒ʫ蹢淣疡猄䫑詌僫晀遍樁㽂쟻ﯝ䐤 [ 1233.652855][ T5750] input input154: Device does not respond to id packet M [ 1233.933602][ T5750] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1233.941508][ T5750] input input154: Device does not respond to id packet P [ 1233.951162][ T5750] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1233.958128][ T5750] input input154: Device does not respond to id packet B [ 1233.966284][ T5750] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1233.973631][ T5750] input input154: Device does not respond to id packet N [ 1234.523717][T20614] macvtap6: entered promiscuous mode [ 1234.544731][ T5750] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1234.564498][T20614] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 1234.595985][ T5750] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1234.693767][ T5750] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1234.777096][ T5750] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1234.839331][ T5750] iforce 2-1:0.0: usb_submit_urb failed -90 [ 1234.949876][ T5750] iforce 2-1:0.0: usb_submit_urb failed -90 [ 1235.237276][ T5750] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input154 [ 1235.410908][ T5615] imon 5-1:13.83: unable to register, err -19 [ 1236.010899][ T5615] imon 5-1:13.70: unable to register, err -19 [ 1236.023785][ T5750] usb 2-1: USB disconnect, device number 81 [ 1236.030026][ T5615] imon 5-1:13.197: unable to register, err -19 [ 1236.143349][ T5615] usb 5-1: USB disconnect, device number 95 [ 1237.110048][T20683] bridge5: entered promiscuous mode [ 1237.277442][T20688] syzkaller0: entered promiscuous mode [ 1237.295692][T20688] syzkaller0: entered allmulticast mode [ 1238.061221][T20707] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 1238.151832][T10941] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1239.453767][T20702] netlink: 'syz.5.4079': attribute type 10 has an invalid length. [ 1239.851522][T20713] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 1240.225894][T10941] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1240.912172][ T5750] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1241.122578][ T5750] usb 2-1: Using ep0 maxpacket: 32 [ 1241.183026][ T5750] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1241.293412][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1241.378713][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1241.436181][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1241.503720][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1241.531434][T10941] usb 6-1: can't read configurations, error -71 [ 1242.500065][ T5750] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1242.509579][ T5750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.517636][ T5750] usb 2-1: Product: syz [ 1242.521948][ T5750] usb 2-1: Manufacturer: syz [ 1242.526545][ T5750] usb 2-1: SerialNumber: syz [ 1242.539723][ T5750] usb 2-1: config 0 descriptor?? [ 1242.951334][ T5750] input input155: Device does not respond to id packet M [ 1243.340710][ T5750] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1243.370639][ T5750] input input155: Device does not respond to id packet P [ 1243.397688][ T5750] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1243.422618][ T5750] input input155: Device does not respond to id packet B [ 1243.430750][ T5750] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1243.439405][ T5750] input input155: Device does not respond to id packet N [ 1243.448280][ T5750] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1243.457151][ T5750] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1243.463836][ T5750] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1243.470922][ T5750] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1243.477323][ T5750] iforce 2-1:0.0: usb_submit_urb failed -90 [ 1243.524414][ T5750] iforce 2-1:0.0: usb_submit_urb failed -90 [ 1243.539653][ T5750] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input155 [ 1243.629049][ T5750] usb 2-1: USB disconnect, device number 82 [ 1243.887391][ T5726] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1244.375490][ T5726] usb 4-1: Using ep0 maxpacket: 32 [ 1244.385473][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.397670][ T5726] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1244.511514][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.622526][ T5726] usb 4-1: config 0 descriptor?? [ 1245.216454][T20734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.268444][T20734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.445143][ T5726] lua 0003:1E7D:2C2E.0034: unknown main item tag 0x0 [ 1246.461213][ T5726] lua 0003:1E7D:2C2E.0034: unknown main item tag 0x0 [ 1246.468391][ T5726] lua 0003:1E7D:2C2E.0034: unknown main item tag 0x0 [ 1246.593553][ T5726] lua 0003:1E7D:2C2E.0034: unknown main item tag 0x0 [ 1246.601178][ T5726] lua 0003:1E7D:2C2E.0034: unknown main item tag 0x0 [ 1246.610368][ T5726] lua 0003:1E7D:2C2E.0034: unknown main item tag 0x0 [ 1246.684764][ T5726] lua 0003:1E7D:2C2E.0034: unknown main item tag 0x0 [ 1246.941811][ T5726] lua 0003:1E7D:2C2E.0034: unknown main item tag 0x0 [ 1246.948629][ T5726] lua 0003:1E7D:2C2E.0034: unknown main item tag 0x0 [ 1246.957117][ T5726] lua 0003:1E7D:2C2E.0034: unknown main item tag 0x0 [ 1246.972786][ T5726] lua 0003:1E7D:2C2E.0034: bogus close delimiter [ 1246.980849][ T30] audit: type=1804 audit(1780201089.190:891): pid=20766 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.4093" name="bus" dev="ramfs" ino=96211 res=1 errno=0 [ 1247.055582][ T5726] lua 0003:1E7D:2C2E.0034: item 0 0 2 10 parsing failed [ 1247.064573][ T5726] lua 0003:1E7D:2C2E.0034: parse failed [ 1247.070671][ T5726] lua 0003:1E7D:2C2E.0034: probe with driver lua failed with error -22 [ 1247.093134][ T5726] usb 4-1: USB disconnect, device number 88 [ 1247.309790][ T30] audit: type=1400 audit(1780201089.700:892): avc: denied { getopt } for pid=20767 comm="syz.0.4094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1247.399997][T20769] netlink: 'syz.0.4094': attribute type 3 has an invalid length. [ 1247.407981][T20769] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4094'. [ 1248.734095][T20771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4095'. [ 1249.624792][T20784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1250.492784][T20790] bridge6: entered promiscuous mode [ 1252.185707][T20818] syz2: rxe_newlink: already configured on ipvlan0 [ 1253.973958][ T30] audit: type=1804 audit(1780201096.330:893): pid=20835 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.4113" name="bus" dev="ramfs" ino=97398 res=1 errno=0 [ 1255.203744][ T30] audit: type=1804 audit(1780201097.560:894): pid=20846 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.4115" name="bus" dev="ramfs" ino=97409 res=1 errno=0 [ 1255.372216][T17377] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1255.561810][T17377] usb 4-1: Using ep0 maxpacket: 8 [ 1255.601023][T17377] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1255.678885][T17377] usb 4-1: config 0 has no interface number 0 [ 1255.703942][T17377] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1255.856875][T17377] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1256.296097][T17377] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1256.314161][T17377] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1256.363595][T17377] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1256.393813][T17377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.432918][T17377] usb 4-1: config 0 descriptor?? [ 1256.468223][T17377] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1256.551788][ T5726] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1256.701736][ T5726] usb 2-1: Using ep0 maxpacket: 32 [ 1256.725801][ T5726] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1256.748844][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.770159][ T5726] usb 2-1: Product: syz [ 1256.786337][ T5726] usb 2-1: Manufacturer: syz [ 1256.791453][T20855] trusted_key: encrypted_key: insufficient parameters specified [ 1256.814774][ T5726] usb 2-1: SerialNumber: syz [ 1256.856019][ T5726] usb 2-1: config 0 descriptor?? [ 1256.875531][ T5726] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1256.893341][ T5726] dvb-usb: bulk message failed: -22 (4/0) [ 1256.920632][ T5726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1256.938982][ T5750] usb 4-1: USB disconnect, device number 89 [ 1256.945009][ T5726] dvb-usb: bulk message failed: -22 (5/0) [ 1256.945028][ T5726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1256.955001][ T5750] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1256.973776][ T5726] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1256.984108][ T5726] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1256.993173][ T5726] usb 2-1: media controller created [ 1257.007904][ T5726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1257.092947][T20851] dvb-usb: bulk message failed: -22 (7/0) [ 1257.100735][T20857] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1257.101328][ T5726] usb 2-1: selecting invalid altsetting 3 [ 1257.151171][T20851] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1257.164672][ T5726] ttusb2: set interface to alts=3 failed [ 1257.211136][T20851] ttusb2: i2c transfer failed. [ 1257.247373][ T5726] DVB: Unable to find symbol tda10086_attach() [ 1257.280789][ T5726] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1257.376202][ T5726] dvb-usb: bulk message failed: -22 (4/0) [ 1257.428434][ T5726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1257.501336][ T5726] dvb-usb: bulk message failed: -22 (5/0) [ 1257.548240][ T5726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1257.618000][ T5726] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1259.040040][ T5615] usb 2-1: USB disconnect, device number 83 [ 1260.200117][ T5615] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1260.622537][ T30] audit: type=1804 audit(1780201103.010:895): pid=20918 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.4130" name="bus" dev="ramfs" ino=97550 res=1 errno=0 [ 1260.846147][T20922] bridge7: entered promiscuous mode [ 1261.641776][ T5718] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1261.732633][T20930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1261.822164][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 1262.048161][ T5718] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1262.131263][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1262.162110][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1262.182610][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1262.203535][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1262.218961][ T5718] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1262.230295][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.241612][ T5718] usb 5-1: Product: syz [ 1262.247863][ T5718] usb 5-1: Manufacturer: syz [ 1262.252851][ T5718] usb 5-1: SerialNumber: syz [ 1262.266997][ T5718] usb 5-1: config 0 descriptor?? [ 1262.871245][ T5718] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1262.920152][ T5718] input input157: Device does not respond to id packet M [ 1263.036875][ T5718] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1263.094975][ T5718] input input157: Device does not respond to id packet P [ 1263.177148][ T5718] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1263.264313][ T5718] input input157: Device does not respond to id packet B [ 1263.369148][ T5718] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1263.460858][ T5718] input input157: Device does not respond to id packet N [ 1263.581159][ T5718] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1263.663488][ T5718] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1263.698465][ T5718] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1263.776193][ T5718] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1264.603382][ T5718] iforce 5-1:0.0: usb_submit_urb failed -90 [ 1264.609382][ T5718] iforce 5-1:0.0: usb_submit_urb failed -90 [ 1264.617653][ T5718] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input157 [ 1264.640198][ T5718] usb 5-1: USB disconnect, device number 96 [ 1265.178615][T20991] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 1265.844645][T20993] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1270.142966][ T30] audit: type=1804 audit(1780201112.280:896): pid=21027 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.4154" name="bus" dev="ramfs" ino=97728 res=1 errno=0 [ 1271.578399][T21045] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1271.586797][T21045] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1271.595887][T21045] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1271.603690][T21045] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1272.391786][ T30] audit: type=1804 audit(1780201114.700:897): pid=21060 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.4164" name="bus" dev="ramfs" ino=97780 res=1 errno=0 [ 1273.195136][T21070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1274.969284][T21073] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1275.377057][T21087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1275.385552][T21087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1275.524670][T21090] loop7: detected capacity change from 0 to 7 [ 1275.632230][T21090] Dev loop7: unable to read RDB block 7 [ 1275.638459][T21090] loop7: unable to read partition table [ 1275.647150][T21090] loop7: partition table beyond EOD, truncated [ 1275.655294][T21090] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1276.711190][T21102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4176'. [ 1276.730735][T21102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4176'. [ 1277.112161][T15854] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 1277.355504][T15854] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1277.391736][T15854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1277.819844][T15854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1277.859527][T15854] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1277.882137][T15854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.903321][T15854] usb 2-1: Product: syz [ 1277.915961][T15854] usb 2-1: Manufacturer: syz [ 1277.931415][T15854] usb 2-1: SerialNumber: syz [ 1277.958261][T15854] usb 2-1: config 0 descriptor?? [ 1277.984126][T21109] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1278.142918][T15854] rc_core: IR keymap rc-streamzap not found [ 1278.212287][T15854] Registered IR keymap rc-empty [ 1278.260109][T15854] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1278.325005][T15854] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input158 [ 1278.417231][T15854] usb 2-1: USB disconnect, device number 84 [ 1278.561916][T17377] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1279.006721][T17377] usb 6-1: not running at top speed; connect to a high speed hub [ 1279.019016][T17377] usb 6-1: config 13 has an invalid interface number: 83 but max is 2 [ 1279.028586][T17377] usb 6-1: config 13 has an invalid interface number: 70 but max is 2 [ 1279.039673][T17377] usb 6-1: config 13 contains an unexpected descriptor of type 0x2, skipping [ 1279.049515][T17377] usb 6-1: config 13 has an invalid interface number: 197 but max is 2 [ 1279.058931][T17377] usb 6-1: config 13 has no interface number 0 [ 1279.066669][T17377] usb 6-1: config 13 has no interface number 1 [ 1279.081202][T17377] usb 6-1: config 13 has no interface number 2 [ 1279.127518][T17377] usb 6-1: config 13 interface 70 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1279.164705][T17377] usb 6-1: config 13 interface 70 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1279.210522][T17377] usb 6-1: config 13 interface 70 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1279.260271][T17377] usb 6-1: config 13 interface 70 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 1279.275555][T17377] usb 6-1: config 13 interface 70 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1279.287797][T17377] usb 6-1: config 13 interface 70 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1279.306669][T17377] usb 6-1: config 13 interface 70 altsetting 5 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1279.321292][T17377] usb 6-1: config 13 interface 70 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 1279.336231][T17377] usb 6-1: config 13 interface 197 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 1279.350593][T17377] usb 6-1: config 13 interface 197 altsetting 11 has a duplicate endpoint with address 0x7, skipping [ 1279.363906][T17377] usb 6-1: config 13 interface 197 altsetting 11 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1279.378619][T17377] usb 6-1: config 13 interface 83 has no altsetting 0 [ 1279.414465][T17377] usb 6-1: config 13 interface 70 has no altsetting 0 [ 1279.445196][T17377] usb 6-1: config 13 interface 197 has no altsetting 0 [ 1279.617674][T17377] usb 6-1: Dual-Role OTG device on HNP port [ 1279.680277][T17377] usb 6-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=e1.97 [ 1279.763333][T17377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.848329][T17377] usb 6-1: Product: 渇럎氢ை妷腢꣧ꍑ퇄牤켥䢙蜂ꕃ滛ឺꐫꩴ䥳䶾嗋๝鯝Ⴞ꽬ꑖ⦓舒厷䟢Ļ蘴@㣈㿡溢迲熊쑰጗蔝ᲃ춁俙瑮덋卓േ핮䓞⺇븶䩶 [ 1280.005572][T17377] usb 6-1: Manufacturer: ᱞꬭ療ꝺ社؂⟻쏅車淔㟕㪝ᖰ뽹誳튈履ೖꮕ●ꇛ햵ꂤ류ϗ搀ᜄἫ㔔摂懿ᛐ䥀䈍Ẁ驷鋐㜇忛쪶叺ꕤﲊ斀㹩樏 [ 1280.480073][T21156] input: syz0 as /devices/virtual/input/input159 [ 1280.486522][T17377] usb 6-1: SerialNumber: 梺❡鄧铳ꢌ⢋ᷯᑣ걮᠁␅繖◖꯻삻瀵萬㊚垲⒇呙艜❤꟨Ꜩ冝﹍㍙⊔ꗂஞ⤅鰴䣟滛䂦奆黺ﳪ聶倅ظ꿅棲啴䶤憞⸛뿝蒑⼲䵮焰踖⽌沠업癷鱇灍鯵쒒ʫ蹢淣疡猄䫑詌僫晀遍樁㽂쟻ﯝ䐤 [ 1280.518367][T21156] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.4195'. [ 1280.911213][T21167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4198'. [ 1281.298901][T21167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4198'. [ 1281.347386][T21133] macvtap1: entered promiscuous mode [ 1281.366428][T21133] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1281.407697][T21133] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1281.487228][T17377] imon 6-1:13.83: unable to register, err -19 [ 1281.509225][T17377] imon 6-1:13.70: unable to register, err -19 [ 1281.567770][T17377] imon 6-1:13.197: unable to register, err -19 [ 1281.640497][T17377] usb 6-1: USB disconnect, device number 44 [ 1281.746205][T21176] FAULT_INJECTION: forcing a failure. [ 1281.746205][T21176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1281.792729][T21176] CPU: 1 UID: 0 PID: 21176 Comm: syz.3.4201 Tainted: G L syzkaller #0 PREEMPT(full) [ 1281.792760][T21176] Tainted: [L]=SOFTLOCKUP [ 1281.792766][T21176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1281.792776][T21176] Call Trace: [ 1281.792782][T21176] [ 1281.792790][T21176] dump_stack_lvl+0x100/0x190 [ 1281.792814][T21176] should_fail_ex.cold+0x5/0xa [ 1281.792840][T21176] _copy_to_user+0x32/0xd0 [ 1281.792863][T21176] simple_read_from_buffer+0xcb/0x170 [ 1281.792886][T21176] proc_fail_nth_read+0x1af/0x230 [ 1281.792901][T21176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1281.792913][T21176] ? rw_verify_area+0xce/0x6d0 [ 1281.792926][T21176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1281.792937][T21176] vfs_read+0x1e4/0xb30 [ 1281.792951][T21176] ? __pfx_vfs_read+0x10/0x10 [ 1281.792961][T21176] ? do_sys_openat2+0x157/0x1e0 [ 1281.792978][T21176] ? __pfx_do_sys_openat2+0x10/0x10 [ 1281.793000][T21176] ksys_read+0x12a/0x250 [ 1281.793011][T21176] ? __pfx_ksys_read+0x10/0x10 [ 1281.793024][T21176] ? rcu_is_watching+0x12/0xc0 [ 1281.793042][T21176] do_syscall_64+0x115/0x870 [ 1281.793056][T21176] ? clear_bhb_loop+0x40/0x90 [ 1281.793071][T21176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.793082][T21176] RIP: 0033:0x7f37c995d68e [ 1281.793091][T21176] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1281.793102][T21176] RSP: 002b:00007f37ca840fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1281.793114][T21176] RAX: ffffffffffffffda RBX: 00007f37ca8416c0 RCX: 00007f37c995d68e [ 1281.793120][T21176] RDX: 000000000000000f RSI: 00007f37ca8410a0 RDI: 0000000000000004 [ 1281.793127][T21176] RBP: 00007f37ca841090 R08: 0000000000000000 R09: 0000000000000000 [ 1281.793133][T21176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1281.793139][T21176] R13: 00007f37c9c16038 R14: 00007f37c9c15fa0 R15: 00007fffa6cc3c48 [ 1281.793153][T21176] [ 1282.226007][T21183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1283.610967][T21197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1283.619537][T21197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1283.731002][ T30] audit: type=1804 audit(1780201126.120:898): pid=21198 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.4206" name="bus" dev="ramfs" ino=98069 res=1 errno=0 [ 1284.901803][T17377] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1285.001706][T21222] FAULT_INJECTION: forcing a failure. [ 1285.001706][T21222] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.051312][T21222] CPU: 1 UID: 0 PID: 21222 Comm: syz.1.4214 Tainted: G L syzkaller #0 PREEMPT(full) [ 1285.051342][T21222] Tainted: [L]=SOFTLOCKUP [ 1285.051347][T21222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1285.051356][T21222] Call Trace: [ 1285.051362][T21222] [ 1285.051369][T21222] dump_stack_lvl+0x100/0x190 [ 1285.051398][T21222] should_fail_ex.cold+0x5/0xa [ 1285.051423][T21222] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1285.051448][T21222] should_failslab+0xc2/0x120 [ 1285.051469][T21222] __kmalloc_noprof+0xe0/0x850 [ 1285.051493][T21222] ? kfree+0x1dd/0x6c0 [ 1285.051521][T21222] tomoyo_realpath_from_path+0xb6/0x690 [ 1285.051555][T21222] tomoyo_path_number_perm+0x23c/0x580 [ 1285.051578][T21222] ? tomoyo_path_number_perm+0x22e/0x580 [ 1285.051602][T21222] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1285.051646][T21222] ? find_held_lock+0x2b/0x80 [ 1285.051661][T21222] ? __fget_files+0x215/0x3d0 [ 1285.051680][T21222] ? hook_file_ioctl_common+0x149/0x410 [ 1285.051697][T21222] ? __fget_files+0x215/0x3d0 [ 1285.051720][T21222] ? __fget_files+0x21f/0x3d0 [ 1285.051745][T21222] security_file_ioctl+0xd3/0x230 [ 1285.051771][T21222] __x64_sys_ioctl+0xb7/0x210 [ 1285.051792][T21222] do_syscall_64+0x115/0x870 [ 1285.051814][T21222] ? clear_bhb_loop+0x40/0x90 [ 1285.051834][T21222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.051852][T21222] RIP: 0033:0x7fc50e39ce59 [ 1285.051868][T21222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.051884][T21222] RSP: 002b:00007fc50f305028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1285.051903][T21222] RAX: ffffffffffffffda RBX: 00007fc50e615fa0 RCX: 00007fc50e39ce59 [ 1285.051921][T21222] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000004 [ 1285.051931][T21222] RBP: 00007fc50f305090 R08: 0000000000000000 R09: 0000000000000000 [ 1285.051941][T21222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.051950][T21222] R13: 00007fc50e616038 R14: 00007fc50e615fa0 R15: 00007ffc35b5d258 [ 1285.051973][T21222] [ 1285.071765][T17377] usb 1-1: Using ep0 maxpacket: 16 [ 1285.087962][T21222] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1285.109796][T17377] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 1285.244172][T21231] netlink: 'syz.5.4216': attribute type 1 has an invalid length. [ 1285.247444][T17377] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.254710][T21229] netlink: 'syz.5.4216': attribute type 1 has an invalid length. [ 1285.264016][T17377] usb 1-1: config 0 has no interface number 0 [ 1285.323648][T17377] usb 1-1: config 0 interface 34 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1285.345254][T17377] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1285.356100][T17377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.364791][T17377] usb 1-1: Product: syz [ 1285.369766][T17377] usb 1-1: Manufacturer: syz [ 1285.375069][T17377] usb 1-1: SerialNumber: syz [ 1285.384964][T21230] FAULT_INJECTION: forcing a failure. [ 1285.384964][T21230] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.398137][T21230] CPU: 1 UID: 0 PID: 21230 Comm: syz.1.4217 Tainted: G L syzkaller #0 PREEMPT(full) [ 1285.398170][T21230] Tainted: [L]=SOFTLOCKUP [ 1285.398177][T21230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1285.398188][T21230] Call Trace: [ 1285.398194][T21230] [ 1285.398201][T21230] dump_stack_lvl+0x100/0x190 [ 1285.398228][T21230] should_fail_ex.cold+0x5/0xa [ 1285.398254][T21230] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1285.398284][T21230] should_failslab+0xc2/0x120 [ 1285.398304][T21230] __kmalloc_noprof+0xe0/0x850 [ 1285.398331][T21230] ? kfree+0x1dd/0x6c0 [ 1285.398358][T21230] tomoyo_realpath_from_path+0xb6/0x690 [ 1285.398392][T21230] tomoyo_path_number_perm+0x23c/0x580 [ 1285.398416][T21230] ? tomoyo_path_number_perm+0x22e/0x580 [ 1285.398441][T21230] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1285.398489][T21230] ? find_held_lock+0x2b/0x80 [ 1285.398507][T21230] ? __fget_files+0x215/0x3d0 [ 1285.398529][T21230] ? hook_file_ioctl_common+0x149/0x410 [ 1285.398548][T21230] ? __fget_files+0x215/0x3d0 [ 1285.398575][T21230] ? __fget_files+0x21f/0x3d0 [ 1285.398602][T21230] security_file_ioctl+0xd3/0x230 [ 1285.398630][T21230] __x64_sys_ioctl+0xb7/0x210 [ 1285.398651][T21230] do_syscall_64+0x115/0x870 [ 1285.398674][T21230] ? clear_bhb_loop+0x40/0x90 [ 1285.398697][T21230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.398715][T21230] RIP: 0033:0x7fc50e39ce59 [ 1285.398731][T21230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.398748][T21230] RSP: 002b:00007fc50f305028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1285.398767][T21230] RAX: ffffffffffffffda RBX: 00007fc50e615fa0 RCX: 00007fc50e39ce59 [ 1285.398779][T21230] RDX: 0000200000000040 RSI: 00000000401870c8 RDI: 0000000000000004 [ 1285.398790][T21230] RBP: 00007fc50f305090 R08: 0000000000000000 R09: 0000000000000000 [ 1285.398800][T21230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.398811][T21230] R13: 00007fc50e616038 R14: 00007fc50e615fa0 R15: 00007ffc35b5d258 [ 1285.398836][T21230] [ 1285.398843][T21230] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1285.412006][ T30] audit: type=1400 audit(1780201127.770:899): avc: denied { read } for pid=21228 comm="syz.1.4217" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1285.446997][T21230] sd 0:0:1:0: PR command failed: 1026 [ 1285.456499][T17377] usb 1-1: config 0 descriptor?? [ 1285.469779][ T30] audit: type=1400 audit(1780201127.780:900): avc: denied { open } for pid=21228 comm="syz.1.4217" path="/177/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1285.494411][T21230] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1285.714299][T17377] asix 1-1:0.34: probe with driver asix failed with error -22 [ 1285.995796][ T30] audit: type=1400 audit(1780201127.840:901): avc: denied { ioctl } for pid=21228 comm="syz.1.4217" path="/177/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1286.492215][T21230] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1286.493717][ T30] audit: type=1804 audit(1780201128.640:902): pid=21239 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.4219" name="bus" dev="ramfs" ino=98154 res=1 errno=0 [ 1286.852738][T17377] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1286.887887][T21248] syzkaller0: entered promiscuous mode [ 1286.991820][T21248] syzkaller0: entered allmulticast mode [ 1287.445312][T17377] usb 6-1: Using ep0 maxpacket: 32 [ 1287.454718][T17377] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1287.463043][T17377] usb 6-1: config 0 has no interface number 0 [ 1287.469183][T17377] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1287.478146][T17377] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1287.487918][T17377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.496028][T17377] usb 6-1: Product: syz [ 1287.500203][T17377] usb 6-1: Manufacturer: syz [ 1287.504890][T17377] usb 6-1: SerialNumber: syz [ 1287.519042][T17377] usb 6-1: config 0 descriptor?? [ 1287.534481][T15854] usb 1-1: USB disconnect, device number 109 [ 1287.576053][T21259] syzkaller0: entered promiscuous mode [ 1287.581717][T21259] syzkaller0: entered allmulticast mode [ 1287.590438][T21259] FAULT_INJECTION: forcing a failure. [ 1287.590438][T21259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1287.607449][T21259] CPU: 1 UID: 0 PID: 21259 Comm: syz.1.4226 Tainted: G L syzkaller #0 PREEMPT(full) [ 1287.607478][T21259] Tainted: [L]=SOFTLOCKUP [ 1287.607484][T21259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1287.607494][T21259] Call Trace: [ 1287.607501][T21259] [ 1287.607508][T21259] dump_stack_lvl+0x100/0x190 [ 1287.607534][T21259] should_fail_ex.cold+0x5/0xa [ 1287.607558][T21259] _copy_from_user+0x2e/0xd0 [ 1287.607581][T21259] move_addr_to_kernel+0x65/0x170 [ 1287.607606][T21259] __sys_sendto+0x1c9/0x4b0 [ 1287.607632][T21259] ? __pfx___sys_sendto+0x10/0x10 [ 1287.607674][T21259] ? ksys_write+0x1ac/0x250 [ 1287.607694][T21259] ? __pfx_ksys_write+0x10/0x10 [ 1287.607717][T21259] __x64_sys_sendto+0xe0/0x1c0 [ 1287.607741][T21259] ? do_syscall_64+0x90/0x870 [ 1287.607764][T21259] ? lockdep_hardirqs_on+0x78/0x100 [ 1287.607788][T21259] do_syscall_64+0x115/0x870 [ 1287.607809][T21259] ? clear_bhb_loop+0x40/0x90 [ 1287.607831][T21259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.607849][T21259] RIP: 0033:0x7fc50e39ce59 [ 1287.607865][T21259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.607882][T21259] RSP: 002b:00007fc50f305028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1287.607900][T21259] RAX: ffffffffffffffda RBX: 00007fc50e615fa0 RCX: 00007fc50e39ce59 [ 1287.607909][T21259] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007 [ 1287.607918][T21259] RBP: 00007fc50f305090 R08: 0000200000000200 R09: 0000000000000014 [ 1287.607927][T21259] R10: 00000000000400c0 R11: 0000000000000246 R12: 0000000000000001 [ 1287.607936][T21259] R13: 00007fc50e616038 R14: 00007fc50e615fa0 R15: 00007ffc35b5d258 [ 1287.607956][T21259] [ 1287.836640][T17377] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 1287.845354][T17377] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1287.853271][T17377] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1287.860920][T17377] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1287.875710][T17377] usb 6-1: USB disconnect, device number 45 [ 1288.151840][T15854] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1288.167129][T21272] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4230'. [ 1288.184831][T21272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4230'. [ 1288.322193][T15854] usb 1-1: Using ep0 maxpacket: 8 [ 1288.363800][T15854] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1288.395622][T15854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.326824][T15854] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1289.333978][T15854] pvrusb2: ********** [ 1289.337953][T15854] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1289.369378][T15854] pvrusb2: Important functionality might not be entirely working. [ 1289.381783][T15854] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1289.393703][T15854] pvrusb2: ********** [ 1289.661759][ T5726] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1289.674164][ T2361] pvrusb2: Invalid write control endpoint [ 1289.686599][T15854] usb 1-1: USB disconnect, device number 110 [ 1289.968341][ T30] audit: type=1400 audit(1780201132.360:903): avc: denied { mount } for pid=21287 comm="syz.0.4235" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1289.973731][ T30] audit: type=1400 audit(1780201132.370:904): avc: denied { remount } for pid=21287 comm="syz.0.4235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1290.048342][ T5726] usb 2-1: Using ep0 maxpacket: 32 [ 1290.143264][ T2361] pvrusb2: Invalid write control endpoint [ 1290.178226][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1290.239841][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1290.304119][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1290.348748][ T2361] pvrusb2: Device being rendered inoperable [ 1290.367444][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1290.382950][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1290.568196][ T5726] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1290.643321][ T2361] pvrusb2: Attached sub-driver cx25840 [ 1290.659227][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.659826][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1290.690591][ T5726] usb 2-1: Product: syz [ 1290.704222][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1290.704224][ T5726] usb 2-1: Manufacturer: syz [ 1290.704247][ T5726] usb 2-1: SerialNumber: syz [ 1290.740719][ T30] audit: type=1400 audit(1780201133.130:905): avc: denied { unmount } for pid=16052 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1290.763855][ T5726] usb 2-1: config 0 descriptor?? [ 1290.775169][ T5726] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1290.785119][ T5726] dvb-usb: bulk message failed: -22 (4/0) [ 1290.790896][ T5726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1290.802599][ T5726] dvb-usb: bulk message failed: -22 (5/0) [ 1290.808922][ T5726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1290.822002][ T5726] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1290.831884][ T5726] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1290.839941][ T5726] usb 2-1: media controller created [ 1290.857827][ T5726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1290.938309][T21295] xt_hashlimit: size too large, truncated to 1048576 [ 1290.950227][ T5726] usb 2-1: selecting invalid altsetting 3 [ 1291.079533][ T5726] ttusb2: set interface to alts=3 failed [ 1292.354815][T21311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1292.370429][T21307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1292.428047][ T5726] DVB: Unable to find symbol tda10086_attach() [ 1292.466767][ T5726] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1292.557917][ T5726] dvb-usb: bulk message failed: -22 (4/0) [ 1292.600713][ T5726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1292.653124][ T5726] dvb-usb: bulk message failed: -22 (5/0) [ 1292.681964][ T5726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1292.782619][ T5726] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1293.526169][T15854] usb 2-1: USB disconnect, device number 85 [ 1293.687678][T15854] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1293.726215][T21322] xt_hashlimit: size too large, truncated to 1048576 [ 1294.026700][T21330] bridge8: entered promiscuous mode [ 1294.743821][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1296.158007][T17377] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1296.321769][T17377] usb 1-1: Using ep0 maxpacket: 32 [ 1296.865284][T17377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.876393][T17377] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1296.928902][T17377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.965476][T17377] usb 1-1: config 0 descriptor?? [ 1298.423300][T17377] usbhid 1-1:0.0: can't add hid device: -71 [ 1298.447345][T17377] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1298.623186][T17377] usb 1-1: USB disconnect, device number 111 [ 1299.291235][T21372] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 1299.624829][T21369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=21369 comm=syz.3.4253 [ 1300.747050][T21386] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1300.795405][T21386] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 1301.462588][T21394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4258'. [ 1301.581757][T17377] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1301.774847][T17377] usb 2-1: Using ep0 maxpacket: 32 [ 1301.894650][T17377] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1302.882286][T17377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1302.913301][T17377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1303.032814][T17377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1303.078869][T17377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1303.188211][T17377] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1303.246071][T17377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.288676][T17377] usb 2-1: Product: syz [ 1303.301521][T17377] usb 2-1: Manufacturer: syz [ 1303.317189][T17377] usb 2-1: SerialNumber: syz [ 1303.337457][T17377] usb 2-1: config 0 descriptor?? [ 1304.196574][T17377] input input161: Device does not respond to id packet M [ 1304.402128][T17377] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1304.454264][T17377] input input161: Device does not respond to id packet P [ 1304.495334][T17377] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1304.523150][T17377] input input161: Device does not respond to id packet B [ 1304.546378][T17377] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1304.574499][T17377] input input161: Device does not respond to id packet N [ 1304.618543][T17377] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1304.635600][T17377] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1304.644613][T17377] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1304.651446][T17377] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1304.663897][T17377] iforce 2-1:0.0: usb_submit_urb failed -90 [ 1304.676995][T17377] iforce 2-1:0.0: usb_submit_urb failed -90 [ 1304.686183][T17377] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input161 [ 1304.725114][T17377] usb 2-1: USB disconnect, device number 86 [ 1304.971716][ T5750] psmouse serio4: Failed to reset mouse on : -5 [ 1305.433843][T21429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1305.453938][T21429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1307.497375][T21438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=21438 comm=syz.0.4273 [ 1308.048872][T21444] overlayfs: missing 'lowerdir' [ 1308.851783][ T5750] misc userio: Buffer overflowed, userio client isn't keeping up [ 1310.184120][T21456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1310.192426][T21456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1310.373850][ T5750] input: PS/2 Generic Mouse as /devices/serio4/input/input162 [ 1310.677890][T21462] FAULT_INJECTION: forcing a failure. [ 1310.677890][T21462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1310.692673][T21462] CPU: 1 UID: 0 PID: 21462 Comm: syz.1.4279 Tainted: G L syzkaller #0 PREEMPT(full) [ 1310.692702][T21462] Tainted: [L]=SOFTLOCKUP [ 1310.692708][T21462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1310.692718][T21462] Call Trace: [ 1310.692724][T21462] [ 1310.692730][T21462] dump_stack_lvl+0x100/0x190 [ 1310.692757][T21462] should_fail_ex.cold+0x5/0xa [ 1310.692781][T21462] _copy_from_user+0x2e/0xd0 [ 1310.692803][T21462] copy_msghdr_from_user+0x9f/0x4f0 [ 1310.692824][T21462] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1310.692840][T21462] ? __lock_acquire+0x4a5/0x2630 [ 1310.692856][T21462] ___sys_recvmsg+0xdd/0x1a0 [ 1310.692870][T21462] ? __pfx____sys_recvmsg+0x10/0x10 [ 1310.692894][T21462] __sys_recvmsg+0x16d/0x220 [ 1310.692911][T21462] ? __pfx___sys_recvmsg+0x10/0x10 [ 1310.692933][T21462] ? rcu_is_watching+0x12/0xc0 [ 1310.692951][T21462] do_syscall_64+0x115/0x870 [ 1310.692965][T21462] ? clear_bhb_loop+0x40/0x90 [ 1310.692978][T21462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.692989][T21462] RIP: 0033:0x7fc50e39ce59 [ 1310.692999][T21462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1310.693010][T21462] RSP: 002b:00007fc50f2e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1310.693021][T21462] RAX: ffffffffffffffda RBX: 00007fc50e616090 RCX: 00007fc50e39ce59 [ 1310.693028][T21462] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1310.693035][T21462] RBP: 00007fc50f2e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1310.693041][T21462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1310.693047][T21462] R13: 00007fc50e616128 R14: 00007fc50e616090 R15: 00007ffc35b5d258 [ 1310.693061][T21462] [ 1310.935391][ T5750] psmouse serio4: Failed to enable mouse on [ 1311.728692][T17377] hid_parser_main: 67 callbacks suppressed [ 1311.728717][T17377] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 1311.824368][T17377] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1312.039900][T17377] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1312.077127][T17377] hid-generic 0000:0000:0000.0036: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1312.513880][T21481] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1312.881755][ T5750] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1313.071849][ T5750] usb 4-1: Using ep0 maxpacket: 16 [ 1313.451590][ T5750] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.489977][ T5750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1313.495538][T21491] fuse: Unknown parameter 'f' [ 1313.529201][ T5750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1313.563342][ T5750] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1313.592353][ T5750] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1313.718003][ T5750] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1313.755315][ T5750] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1313.789959][ T5750] usb 4-1: Manufacturer: syz [ 1313.818397][ T5750] usb 4-1: config 0 descriptor?? [ 1313.871842][ T10] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1314.055070][ T10] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 1314.081887][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.108279][ T10] usb 1-1: config 0 has no interfaces? [ 1314.120620][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1314.140097][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.151789][ T5750] rc_core: IR keymap rc-hauppauge not found [ 1314.159240][ T5750] Registered IR keymap rc-empty [ 1314.161516][ T10] usb 1-1: config 0 descriptor?? [ 1314.183820][ T5750] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1314.221763][ T5750] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1314.355355][ T5750] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1314.406361][ T5750] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input163 [ 1314.439024][ T5750] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1314.491847][ T5750] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1314.519984][T21506] overlayfs: missing 'lowerdir' [ 1314.523061][ T5750] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1314.562508][ T5750] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1314.622469][ T5750] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1314.671793][ T5750] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1314.723618][ T5750] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1314.782631][ T5750] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1314.833534][ T5750] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1314.902242][ T5750] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1314.964624][ T5750] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1315.016681][ T5750] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1315.056597][T21512] syzkaller0: entered promiscuous mode [ 1315.085285][ T5750] usb 4-1: USB disconnect, device number 90 [ 1315.095117][T21512] syzkaller0: entered allmulticast mode [ 1315.691746][T17377] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 1315.838268][ T10] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1315.866103][T17377] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1315.877162][ T10] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1315.893705][T17377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.925980][T17377] usb 5-1: config 0 descriptor?? [ 1315.946688][T17377] cp210x 5-1:0.0: cp210x converter detected [ 1316.491097][ T5615] usb 1-1: USB disconnect, device number 112 [ 1316.543062][T21534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4300'. [ 1316.566696][T21534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4300'. [ 1316.580831][T21534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4300'. [ 1316.612510][T21534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4300'. [ 1316.632693][T17377] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1316.947476][T21543] overlayfs: missing 'lowerdir' [ 1317.381890][ T24] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 1317.635703][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1317.662213][ T24] usb 6-1: not running at top speed; connect to a high speed hub [ 1317.736545][T21554] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1318.094854][ T24] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4 [ 1318.144586][ T24] usb 6-1: language id specifier not provided by device, defaulting to English [ 1318.173147][ T24] usb 6-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40 [ 1318.207587][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.219315][ T24] usb 6-1: Product: syz [ 1318.229448][ T24] usb 6-1: Manufacturer: 鴪ꋾ犪䍌甩㪖Ᶎ䑕炗ꃗ㯑ꚕ䄝隇텝⽺䰸㰚힇阚电둰₶헒ⷡ셌孾種⺗⟗轈헴ꄦ큠㷽ꮓኍ㞪噞ഐ㏯쨀行袡ᒏ檧鐞澁ﮱ쏑݇䱮괙ᮋ汖ႋँ錎㜇䊠⑱ຐꨣ衟ꁭ悝粈赤㶯춎敧 [ 1318.280443][ T24] usb 6-1: SerialNumber: syz [ 1318.478215][T21556] overlayfs: missing 'lowerdir' [ 1318.574194][ T24] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1318.588000][T15854] usb 5-1: USB disconnect, device number 97 [ 1318.626097][ T24] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1318.674945][T15854] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1318.749379][T15854] cp210x 5-1:0.0: device disconnected [ 1318.764633][ T24] usb 6-1: USB disconnect, device number 46 [ 1318.791871][ T30] audit: type=1400 audit(1780201161.170:906): avc: denied { ioctl } for pid=21562 comm="syz.4.4309" path="/dev/usbmon5" dev="devtmpfs" ino=732 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1318.849493][T21565] input: syz1 as /devices/virtual/input/input164 [ 1319.002536][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device [ 1319.901716][ T5615] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1320.011760][T17377] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1320.072037][ T5615] usb 1-1: Using ep0 maxpacket: 32 [ 1320.095957][ T5615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1320.122333][ T5615] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1320.193043][T17377] usb 5-1: device descriptor read/64, error -71 [ 1320.291540][ T30] audit: type=1804 audit(1780201162.680:907): pid=21576 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.4311" name="bus" dev="ramfs" ino=100055 res=1 errno=0 [ 1320.437475][ T5615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.457856][ T5615] usb 1-1: config 0 descriptor?? [ 1320.591789][ T5718] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1320.650240][ T5718] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1320.681799][T17377] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1320.705284][T21568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.729208][T21568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.811856][T17377] usb 5-1: device descriptor read/64, error -71 [ 1320.926070][T17377] usb usb5-port1: attempt power cycle [ 1320.957660][T21582] FAULT_INJECTION: forcing a failure. [ 1320.957660][T21582] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.970892][T21582] CPU: 0 UID: 0 PID: 21582 Comm: syz.1.4313 Tainted: G L syzkaller #0 PREEMPT(full) [ 1320.970922][T21582] Tainted: [L]=SOFTLOCKUP [ 1320.970929][T21582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1320.970941][T21582] Call Trace: [ 1320.970947][T21582] [ 1320.970955][T21582] dump_stack_lvl+0x100/0x190 [ 1320.970981][T21582] should_fail_ex.cold+0x5/0xa [ 1320.971007][T21582] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1320.971035][T21582] should_failslab+0xc2/0x120 [ 1320.971057][T21582] __kmalloc_noprof+0xe0/0x850 [ 1320.971083][T21582] ? kfree+0x1dd/0x6c0 [ 1320.971111][T21582] tomoyo_realpath_from_path+0xb6/0x690 [ 1320.971144][T21582] tomoyo_path_number_perm+0x23c/0x580 [ 1320.971168][T21582] ? tomoyo_path_number_perm+0x22e/0x580 [ 1320.971193][T21582] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1320.971242][T21582] ? find_held_lock+0x2b/0x80 [ 1320.971259][T21582] ? __fget_files+0x215/0x3d0 [ 1320.971281][T21582] ? hook_file_ioctl_common+0x149/0x410 [ 1320.971300][T21582] ? __fget_files+0x215/0x3d0 [ 1320.971326][T21582] ? __fget_files+0x21f/0x3d0 [ 1320.971353][T21582] security_file_ioctl+0xd3/0x230 [ 1320.971381][T21582] __x64_sys_ioctl+0xb7/0x210 [ 1320.971403][T21582] do_syscall_64+0x115/0x870 [ 1320.971427][T21582] ? clear_bhb_loop+0x40/0x90 [ 1320.971450][T21582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.971470][T21582] RIP: 0033:0x7fc50e39ce59 [ 1320.971486][T21582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1320.971502][T21582] RSP: 002b:00007fc50f2e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1320.971522][T21582] RAX: ffffffffffffffda RBX: 00007fc50e616090 RCX: 00007fc50e39ce59 [ 1320.971534][T21582] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 1320.971545][T21582] RBP: 00007fc50f2e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.971556][T21582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.971566][T21582] R13: 00007fc50e616128 R14: 00007fc50e616090 R15: 00007ffc35b5d258 [ 1320.971591][T21582] [ 1320.971605][T21582] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1321.189554][T21582] input: syz1 as /devices/virtual/input/input165 [ 1321.278546][ T5615] usbhid 1-1:0.0: can't add hid device: -71 [ 1321.284618][ T5615] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1321.318501][ T5615] usb 1-1: USB disconnect, device number 113 [ 1321.420408][T21588] xt_hashlimit: size too large, truncated to 1048576 [ 1321.611892][T17377] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1321.633134][T17377] usb 5-1: device descriptor read/8, error -71 [ 1322.020834][T21598] xt_hashlimit: size too large, truncated to 1048576 [ 1322.082171][T17377] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1322.102380][T17377] usb 5-1: device descriptor read/8, error -71 [ 1322.417501][T17377] usb usb5-port1: unable to enumerate USB device [ 1322.670960][T21605] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1323.209632][ T30] audit: type=1804 audit(1780201165.600:908): pid=21611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.4319" name="bus" dev="ramfs" ino=99290 res=1 errno=0 [ 1326.360801][T21620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4321'. [ 1326.390440][T21613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1326.493144][T21620] bond0 (unregistering): (slave bond1): Releasing backup interface [ 1326.533898][T21620] bond0 (unregistering): Released all slaves [ 1326.619291][T21627] FAULT_INJECTION: forcing a failure. [ 1326.619291][T21627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.660640][T21627] CPU: 0 UID: 0 PID: 21627 Comm: syz.5.4324 Tainted: G L syzkaller #0 PREEMPT(full) [ 1326.660669][T21627] Tainted: [L]=SOFTLOCKUP [ 1326.660675][T21627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1326.660684][T21627] Call Trace: [ 1326.660690][T21627] [ 1326.660698][T21627] dump_stack_lvl+0x100/0x190 [ 1326.660720][T21627] should_fail_ex.cold+0x5/0xa [ 1326.660740][T21627] _copy_to_user+0x32/0xd0 [ 1326.660755][T21627] simple_read_from_buffer+0xcb/0x170 [ 1326.660770][T21627] proc_fail_nth_read+0x1af/0x230 [ 1326.660783][T21627] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1326.660795][T21627] ? rw_verify_area+0xce/0x6d0 [ 1326.660805][T21627] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1326.660817][T21627] vfs_read+0x1e4/0xb30 [ 1326.660831][T21627] ? __pfx_vfs_read+0x10/0x10 [ 1326.660842][T21627] ? __fget_files+0x215/0x3d0 [ 1326.660858][T21627] ? __fget_files+0x21f/0x3d0 [ 1326.660875][T21627] ksys_read+0x12a/0x250 [ 1326.660887][T21627] ? __pfx_ksys_read+0x10/0x10 [ 1326.660900][T21627] ? rcu_is_watching+0x12/0xc0 [ 1326.660918][T21627] do_syscall_64+0x115/0x870 [ 1326.660932][T21627] ? clear_bhb_loop+0x40/0x90 [ 1326.660946][T21627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.660957][T21627] RIP: 0033:0x7faf7715d68e [ 1326.660966][T21627] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1326.660977][T21627] RSP: 002b:00007faf78140fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1326.660988][T21627] RAX: ffffffffffffffda RBX: 00007faf781416c0 RCX: 00007faf7715d68e [ 1326.660995][T21627] RDX: 000000000000000f RSI: 00007faf781410a0 RDI: 0000000000000006 [ 1326.661002][T21627] RBP: 00007faf78141090 R08: 0000000000000000 R09: 0000000000000000 [ 1326.661008][T21627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1326.661014][T21627] R13: 00007faf77416038 R14: 00007faf77415fa0 R15: 00007fff0c62e628 [ 1326.661028][T21627] [ 1326.662289][ T5718] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1327.025031][ T5615] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1327.297773][ T5718] usb 1-1: device descriptor read/64, error -71 [ 1327.321757][ T5615] usb 4-1: Using ep0 maxpacket: 32 [ 1327.336182][ T5615] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1327.764224][ T5615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1327.787186][ T5615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1327.804881][ T5615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1327.816240][ T5615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1327.831884][ T5615] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1327.841292][ T5615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.849510][ T5615] usb 4-1: Product: syz [ 1327.854034][ T5615] usb 4-1: Manufacturer: syz [ 1327.858673][ T5615] usb 4-1: SerialNumber: syz [ 1327.866280][ T5615] usb 4-1: config 0 descriptor?? [ 1327.881764][ T5718] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1328.011770][ T5718] usb 1-1: device descriptor read/64, error -71 [ 1328.122026][ T5718] usb usb1-port1: attempt power cycle [ 1328.185378][T21637] xt_hashlimit: size too large, truncated to 1048576 [ 1328.279519][ T5615] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1328.291397][ T5615] input input166: Device does not respond to id packet M [ 1328.299002][ T5615] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1328.305359][ T5615] input input166: Device does not respond to id packet P [ 1328.314092][ T5615] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1328.320334][ T5615] input input166: Device does not respond to id packet B [ 1328.329093][ T5615] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1328.335419][ T5615] input input166: Device does not respond to id packet N [ 1328.366068][ T5615] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1328.428365][ T5615] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1328.454539][ T5615] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1328.461484][ T5615] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1328.468804][ T5615] iforce 4-1:0.0: usb_submit_urb failed -90 [ 1328.487163][ T5615] iforce 4-1:0.0: usb_submit_urb failed -90 [ 1328.500264][ T5615] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input166 [ 1328.565217][ T5615] usb 4-1: USB disconnect, device number 91 [ 1328.672037][T21646] xt_hashlimit: size too large, truncated to 1048576 [ 1329.429517][T21659] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1329.910923][T21663] overlayfs: missing 'lowerdir' [ 1329.971864][T15854] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1330.118039][T21666] FAULT_INJECTION: forcing a failure. [ 1330.118039][T21666] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.156630][T21666] CPU: 0 UID: 0 PID: 21666 Comm: syz.4.4336 Tainted: G L syzkaller #0 PREEMPT(full) [ 1330.156661][T21666] Tainted: [L]=SOFTLOCKUP [ 1330.156667][T21666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1330.156676][T21666] Call Trace: [ 1330.156683][T21666] [ 1330.156698][T21666] dump_stack_lvl+0x100/0x190 [ 1330.156723][T21666] should_fail_ex.cold+0x5/0xa [ 1330.156747][T21666] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1330.156774][T21666] should_failslab+0xc2/0x120 [ 1330.156794][T21666] __kmalloc_noprof+0xe0/0x850 [ 1330.156819][T21666] ? kfree+0x1dd/0x6c0 [ 1330.156846][T21666] tomoyo_realpath_from_path+0xb6/0x690 [ 1330.156876][T21666] tomoyo_path_number_perm+0x23c/0x580 [ 1330.156898][T21666] ? tomoyo_path_number_perm+0x22e/0x580 [ 1330.156922][T21666] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1330.156968][T21666] ? find_held_lock+0x2b/0x80 [ 1330.156985][T21666] ? __fget_files+0x215/0x3d0 [ 1330.157006][T21666] ? hook_file_ioctl_common+0x149/0x410 [ 1330.157023][T21666] ? __fget_files+0x215/0x3d0 [ 1330.157046][T21666] ? __fget_files+0x21f/0x3d0 [ 1330.157063][T21666] security_file_ioctl+0xd3/0x230 [ 1330.157080][T21666] __x64_sys_ioctl+0xb7/0x210 [ 1330.157093][T21666] do_syscall_64+0x115/0x870 [ 1330.157107][T21666] ? clear_bhb_loop+0x40/0x90 [ 1330.157121][T21666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.157132][T21666] RIP: 0033:0x7f381a99ce59 [ 1330.157142][T21666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1330.157153][T21666] RSP: 002b:00007f381b942028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1330.157164][T21666] RAX: ffffffffffffffda RBX: 00007f381ac15fa0 RCX: 00007f381a99ce59 [ 1330.157171][T21666] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000003 [ 1330.157178][T21666] RBP: 00007f381b942090 R08: 0000000000000000 R09: 0000000000000000 [ 1330.157184][T21666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1330.157193][T21666] R13: 00007f381ac16038 R14: 00007f381ac15fa0 R15: 00007ffc3c296d18 [ 1330.157207][T21666] [ 1330.159475][T21666] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1330.462416][T15854] usb 6-1: Using ep0 maxpacket: 16 [ 1330.512199][T15854] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1330.524116][T15854] usb 6-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 1330.571357][T15854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.614875][T15854] usb 6-1: config 0 descriptor?? [ 1330.743606][T21674] input: syz1 as /devices/virtual/input/input167 [ 1330.835969][T21675] bridge5: entered promiscuous mode [ 1331.611309][T21654] input: syz0 as /devices/virtual/input/input168 [ 1331.630634][T15854] usbhid 6-1:0.0: can't add hid device: -71 [ 1331.676623][T15854] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1331.749220][T15854] usb 6-1: USB disconnect, device number 47 [ 1331.853719][T21681] xt_hashlimit: size too large, truncated to 1048576 [ 1333.745446][ T30] audit: type=1804 audit(1780201176.120:909): pid=21697 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.4341" name="bus" dev="ramfs" ino=100253 res=1 errno=0 [ 1334.116144][T21703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4344'. [ 1334.142502][T21704] FAULT_INJECTION: forcing a failure. [ 1334.142502][T21704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1334.177723][T21704] CPU: 1 UID: 0 PID: 21704 Comm: syz.4.4343 Tainted: G L syzkaller #0 PREEMPT(full) [ 1334.177753][T21704] Tainted: [L]=SOFTLOCKUP [ 1334.177758][T21704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1334.177769][T21704] Call Trace: [ 1334.177775][T21704] [ 1334.177782][T21704] dump_stack_lvl+0x100/0x190 [ 1334.177808][T21704] should_fail_ex.cold+0x5/0xa [ 1334.177824][T21704] _copy_from_user+0x2e/0xd0 [ 1334.177840][T21704] copy_msghdr_from_user+0x9f/0x4f0 [ 1334.177856][T21704] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1334.177876][T21704] ___sys_sendmsg+0x106/0x1e0 [ 1334.177890][T21704] ? __pfx____sys_sendmsg+0x10/0x10 [ 1334.177918][T21704] __sys_sendmsg+0x170/0x220 [ 1334.177935][T21704] ? __pfx___sys_sendmsg+0x10/0x10 [ 1334.177956][T21704] ? rcu_is_watching+0x12/0xc0 [ 1334.177975][T21704] do_syscall_64+0x115/0x870 [ 1334.177990][T21704] ? clear_bhb_loop+0x40/0x90 [ 1334.178003][T21704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.178014][T21704] RIP: 0033:0x7f381a99ce59 [ 1334.178025][T21704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1334.178036][T21704] RSP: 002b:00007f381b921028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1334.178048][T21704] RAX: ffffffffffffffda RBX: 00007f381ac16090 RCX: 00007f381a99ce59 [ 1334.178055][T21704] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 1334.178061][T21704] RBP: 00007f381b921090 R08: 0000000000000000 R09: 0000000000000000 [ 1334.178068][T21704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1334.178078][T21704] R13: 00007f381ac16128 R14: 00007f381ac16090 R15: 00007ffc3c296d18 [ 1334.178101][T21704] [ 1334.544442][T21706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4344'. [ 1334.602438][T15854] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1334.714243][T10941] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1334.774385][T15854] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1334.800295][T15854] usb 6-1: config 1 has no interface number 0 [ 1334.827140][T15854] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1334.892760][T15854] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1335.020397][ T30] audit: type=1804 audit(1780201177.400:910): pid=21714 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.4347" name="bus" dev="ramfs" ino=100301 res=1 errno=0 [ 1335.056183][T15854] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1335.095402][T16478] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1335.181338][T15854] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1335.323297][T15854] usb 6-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1335.367144][T15854] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1335.389852][T15854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.410460][T21719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4348'. [ 1335.425374][T15854] usb 6-1: Product: syz [ 1335.440226][T15854] usb 6-1: Manufacturer: syz [ 1335.455306][T15854] usb 6-1: SerialNumber: syz [ 1335.476676][T21699] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1335.714330][T21699] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1335.782017][T10941] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1336.007038][ T30] audit: type=1804 audit(1780201178.400:911): pid=21727 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.4350" name="bus" dev="ramfs" ino=101416 res=1 errno=0 [ 1336.008590][T21699] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1336.297873][T16478] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1336.316662][T16478] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1336.462515][T15854] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 1336.468661][T15854] cdc_ncm 6-1:1.1: bind() failure [ 1336.521338][T15854] usb 6-1: USB disconnect, device number 48 [ 1336.632865][T10941] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1336.976135][ T30] audit: type=1400 audit(1780201179.370:912): avc: denied { map } for pid=21735 comm="syz.0.4353" path="socket:[100622]" dev="sockfs" ino=100622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1337.185541][ T30] audit: type=1400 audit(1780201179.580:913): avc: denied { connect } for pid=21737 comm="syz.0.4354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1337.281087][ T30] audit: type=1400 audit(1780201179.620:914): avc: denied { ioctl } for pid=21737 comm="syz.0.4354" path="socket:[101432]" dev="sockfs" ino=101432 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1337.390278][T21742] FAULT_INJECTION: forcing a failure. [ 1337.390278][T21742] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.404174][T21742] CPU: 1 UID: 0 PID: 21742 Comm: syz.4.4356 Tainted: G L syzkaller #0 PREEMPT(full) [ 1337.404205][T21742] Tainted: [L]=SOFTLOCKUP [ 1337.404212][T21742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1337.404223][T21742] Call Trace: [ 1337.404230][T21742] [ 1337.404237][T21742] dump_stack_lvl+0x100/0x190 [ 1337.404264][T21742] should_fail_ex.cold+0x5/0xa [ 1337.404290][T21742] should_failslab+0xc2/0x120 [ 1337.404311][T21742] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1337.404337][T21742] ? vm_area_dup+0x27/0x8e0 [ 1337.404359][T21742] ? __lock_acquire+0x4a5/0x2630 [ 1337.404386][T21742] vm_area_dup+0x27/0x8e0 [ 1337.404412][T21742] __split_vma+0x18c/0xda0 [ 1337.404441][T21742] ? __pfx___split_vma+0x10/0x10 [ 1337.404471][T21742] ? __pfx_mas_prev+0x10/0x10 [ 1337.404504][T21742] vms_gather_munmap_vmas+0x3a5/0x1720 [ 1337.404535][T21742] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1337.404569][T21742] ? mas_walk+0x6ef/0x9b0 [ 1337.404604][T21742] __mmap_region+0x4aa/0x2dd0 [ 1337.404634][T21742] ? __pfx___mmap_region+0x10/0x10 [ 1337.404663][T21742] ? __pfx___might_resched+0x10/0x10 [ 1337.404689][T21742] ? find_held_lock+0x2b/0x80 [ 1337.404705][T21742] ? process_measurement+0x4c8/0x2350 [ 1337.404731][T21742] ? process_measurement+0x4c8/0x2350 [ 1337.404766][T21742] ? process_measurement+0x1f4/0x2350 [ 1337.404814][T21742] ? __lock_acquire+0x4a5/0x2630 [ 1337.404844][T21742] ? __lock_acquire+0x4a5/0x2630 [ 1337.404868][T21742] ? find_held_lock+0x2b/0x80 [ 1337.404883][T21742] ? is_bpf_text_address+0x8a/0x1a0 [ 1337.404937][T21742] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1337.404965][T21742] mmap_region+0x527/0x620 [ 1337.404993][T21742] ? __pfx_mmap_region+0x10/0x10 [ 1337.405021][T21742] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1337.405044][T21742] ? selinux_mmap_addr+0x2b/0x110 [ 1337.405067][T21742] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1337.405092][T21742] ? security_mmap_addr+0x71/0x1e0 [ 1337.405119][T21742] ? __get_unmapped_area+0x255/0x3e0 [ 1337.405143][T21742] do_mmap+0xc63/0x12f0 [ 1337.405168][T21742] ? __pfx_do_mmap+0x10/0x10 [ 1337.405189][T21742] ? __pfx_down_write_killable+0x10/0x10 [ 1337.405221][T21742] vm_mmap_pgoff+0x29e/0x470 [ 1337.405248][T21742] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1337.405267][T21742] ? __fget_files+0x215/0x3d0 [ 1337.405294][T21742] ? __fget_files+0x21f/0x3d0 [ 1337.405322][T21742] ksys_mmap_pgoff+0x3cb/0x610 [ 1337.405344][T21742] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1337.405363][T21742] ? fput+0x79/0x100 [ 1337.405387][T21742] ? ksys_write+0x1ac/0x250 [ 1337.405406][T21742] ? __pfx_ksys_write+0x10/0x10 [ 1337.405429][T21742] __x64_sys_mmap+0x125/0x190 [ 1337.405454][T21742] do_syscall_64+0x115/0x870 [ 1337.405476][T21742] ? clear_bhb_loop+0x40/0x90 [ 1337.405498][T21742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.405516][T21742] RIP: 0033:0x7f381a99ce59 [ 1337.405532][T21742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1337.405549][T21742] RSP: 002b:00007f381b942028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1337.405567][T21742] RAX: ffffffffffffffda RBX: 00007f381ac15fa0 RCX: 00007f381a99ce59 [ 1337.405584][T21742] RDX: 0000000000000006 RSI: 0000000000002000 RDI: 0000200000000000 [ 1337.405595][T21742] RBP: 00007f381b942090 R08: 0000000000000003 R09: 0000000000000000 [ 1337.405605][T21742] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 1337.405616][T21742] R13: 00007f381ac16038 R14: 00007f381ac15fa0 R15: 00007ffc3c296d18 [ 1337.405640][T21742] [ 1337.471756][T10941] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1337.542148][ T24] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1337.791808][T10941] usb 1-1: Using ep0 maxpacket: 32 [ 1337.932078][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1337.977241][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1337.978398][T10941] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 171, changing to 7 [ 1338.135272][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1338.179407][T10941] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 1338.190123][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1338.210090][T10941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.220199][T10941] usb 1-1: Product: Ꞡᢅ㈎鍫ꄥ䶣밌ւ䬇ᚰ胹鋭轧俸金ཋ䖅扉맖젏鮍⏾٠࢕넬ꕇᤈ奫虰ͤᴨ暓㮥秤⻰잗뙆꾉⡄羪엉ͯ祈⸶ﲅ摡ⓖ埛ꏄ髒໫ݐ為뮶警㹷꠫왬듿쥈㴇夆㕽髛ꩁΛ單⃶椺豙ബゑ쵼췁⹵ꆕ悹㳝沩ⷵ譢憭鸡곌稏䘀픝熱쑯驈唤彿Ѻ侥ῥ뼫뉭꞊筢┑牞⎣拜曦琕ᖒᡜ [ 1338.260254][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1338.260299][T10941] usb 1-1: Manufacturer: 䩴甠紦理鷇韑愗圀銝捓䑢糣ʕ꘸虧逬ﶚ賰⭘酓ۓ∧䓴έൢȡ잞ꍊ핶ꚵ葶旯ც쏜傧喝䓁㼊ꢶ苛䫳㝾굵㞀室腊曣џ뢹ꤣ⣳梋䧲季 [ 1338.300680][T10941] usb 1-1: SerialNumber: ℑ⩥㖧ೢ즯뫕깋ᱰ侔萜妅ເ≈뗢䟒Ｆ縸눨饊殇樗붖竳ꬂᠨᭆ↼펂Ό頋披٦⠤ឣ䙍ⱑ堐貉죡똿 [ 1338.339913][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1338.366703][ T24] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1338.366737][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.366763][ T24] usb 6-1: Product: syz [ 1338.366779][ T24] usb 6-1: Manufacturer: syz [ 1338.366796][ T24] usb 6-1: SerialNumber: syz [ 1338.379635][ T24] usb 6-1: config 0 descriptor?? [ 1338.412067][T15854] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1338.532396][T10941] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1338.562314][T10941] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1338.577677][T15854] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1338.600229][T15854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1338.603658][T16811] udevd[16811]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1338.612996][T15854] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1338.641109][T15854] usb 4-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 1338.650592][T15854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.652374][ T5726] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1338.662697][T15854] usb 4-1: config 0 descriptor?? [ 1338.673153][T21751] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1338.701874][ T5615] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1338.744973][ T5718] usb 1-1: USB disconnect, device number 117 [ 1338.813119][ T24] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1338.819280][ T24] input input169: Device does not respond to id packet M [ 1338.821783][ T5726] usb 5-1: Using ep0 maxpacket: 32 [ 1338.828454][ T24] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1338.834107][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1338.839729][ T24] input input169: Device does not respond to id packet P [ 1338.855222][ T5726] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1338.856536][ T24] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1338.865342][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.870978][ T24] input input169: Device does not respond to id packet B [ 1338.883539][ T5615] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 1338.890068][ T24] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1338.899624][ T5726] usb 5-1: config 0 descriptor?? [ 1338.909217][ T5615] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1338.911741][ T24] input input169: Device does not respond to id packet N [ 1338.923585][ T5615] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1338.936244][ T24] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1338.942551][ T24] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1338.949030][ T24] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1338.950541][ T5615] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1338.961066][ T24] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1338.965613][ T5615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.970568][ T24] iforce 6-1:0.0: usb_submit_urb failed -90 [ 1338.978557][ T5615] usb 2-1: Product: syz [ 1338.985311][ T24] iforce 6-1:0.0: usb_submit_urb failed -90 [ 1338.988508][ T5615] usb 2-1: Manufacturer: syz [ 1338.998515][ T24] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input169 [ 1338.999844][ T5615] usb 2-1: SerialNumber: syz [ 1339.035227][ T24] usb 6-1: USB disconnect, device number 49 [ 1339.094937][T15854] chicony 0003:04F2:0418.0039: item fetching failed at offset 2/40 [ 1339.103645][T15854] chicony 0003:04F2:0418.0039: Chicony hid parse failed: -22 [ 1339.111095][T15854] chicony 0003:04F2:0418.0039: probe with driver chicony failed with error -22 [ 1339.228203][ T5615] cdc_ncm 2-1:1.0: bind() failure [ 1339.236279][ T5615] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1339.243444][ T5615] cdc_ncm 2-1:1.1: bind() failure [ 1339.257803][ T5615] usb 2-1: USB disconnect, device number 87 [ 1339.306190][T10941] usb 4-1: USB disconnect, device number 92 [ 1339.359787][ T5726] lua 0003:1E7D:2C2E.003A: unknown main item tag 0x0 [ 1339.372015][ T5726] lua 0003:1E7D:2C2E.003A: unknown main item tag 0x0 [ 1339.379022][ T5726] lua 0003:1E7D:2C2E.003A: unknown main item tag 0x0 [ 1339.386319][ T5726] lua 0003:1E7D:2C2E.003A: unknown main item tag 0x0 [ 1339.394691][ T5726] lua 0003:1E7D:2C2E.003A: unknown main item tag 0x0 [ 1339.402648][ T5726] lua 0003:1E7D:2C2E.003A: unknown main item tag 0x0 [ 1339.409603][ T5726] lua 0003:1E7D:2C2E.003A: unknown main item tag 0x0 [ 1339.416499][ T5726] lua 0003:1E7D:2C2E.003A: unknown main item tag 0x0 [ 1339.423435][ T5726] lua 0003:1E7D:2C2E.003A: unknown main item tag 0x0 [ 1339.430277][ T5726] lua 0003:1E7D:2C2E.003A: unknown main item tag 0x0 [ 1339.480320][ T5726] lua 0003:1E7D:2C2E.003A: hidraw0: USB HID v0.05 Device [HID 1e7d:2c2e] on usb-dummy_hcd.4-1/input0 [ 1339.484988][T21762] xt_hashlimit: size too large, truncated to 1048576 [ 1339.789731][T15854] usb 5-1: USB disconnect, device number 102 [ 1340.403216][T21773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1340.426901][T21773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1340.502264][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1341.154626][T21788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4368'. [ 1341.164404][T21788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4368'. [ 1341.211794][T21788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4368'. [ 1341.247898][T21788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4368'. [ 1341.322797][T21786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4366'. [ 1341.716583][T21798] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1343.021717][T21797] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1343.030012][T21797] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1344.271934][T21806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4374'. [ 1344.396006][T21809] bridge2: entered promiscuous mode [ 1347.257274][T21834] overlayfs: missing 'lowerdir' [ 1347.850925][T21850] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4386'. [ 1347.911613][ T30] audit: type=1804 audit(1780201190.300:915): pid=21851 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.4385" name="bus" dev="ramfs" ino=100859 res=1 errno=0 [ 1348.201740][T10941] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1348.330014][T21854] kvm: pic: non byte write [ 1348.383068][T10941] usb 4-1: Using ep0 maxpacket: 8 [ 1348.502079][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1348.716688][T10941] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1348.727121][T10941] usb 4-1: config 0 has no interface number 0 [ 1348.735183][T10941] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1348.796379][T10941] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1348.812100][T10941] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1348.825576][T10941] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1348.839391][T10941] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1348.850172][T10941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.872991][T10941] usb 4-1: config 0 descriptor?? [ 1348.897339][T10941] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1349.317640][T21863] netdevsim netdevsim3: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1349.534747][T21863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.555914][T21863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.821781][T10941] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1349.832067][T15854] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1349.971714][T10941] usb 6-1: Using ep0 maxpacket: 32 [ 1349.979489][T10941] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1024 [ 1349.991342][T10941] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 1350.005916][T10941] usb 6-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 1350.012575][T15854] usb 1-1: Using ep0 maxpacket: 32 [ 1350.015549][T10941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.029015][T10941] usb 6-1: Product: syz [ 1350.030140][T15854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1350.034104][T10941] usb 6-1: Manufacturer: syz [ 1350.051973][T10941] usb 6-1: SerialNumber: syz [ 1350.060548][T15854] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1350.080610][T15854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.100838][T15854] usb 1-1: config 0 descriptor?? [ 1350.453184][T10941] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1350.472250][T10941] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1350.492229][T10941] usb 6-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1350.508727][T10941] usb 6-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 1350.583021][T10941] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1350.608847][T10941] usb 6-1: USB disconnect, device number 50 [ 1350.617113][T15854] hid_parser_main: 221 callbacks suppressed [ 1350.617138][T15854] lua 0003:1E7D:2C2E.003B: unknown main item tag 0x0 [ 1350.654785][T15854] lua 0003:1E7D:2C2E.003B: unknown main item tag 0x0 [ 1350.683497][T15854] lua 0003:1E7D:2C2E.003B: unknown main item tag 0x0 [ 1350.694682][T15854] lua 0003:1E7D:2C2E.003B: unknown main item tag 0x0 [ 1350.702661][T15854] lua 0003:1E7D:2C2E.003B: unknown main item tag 0x0 [ 1350.712714][T15854] lua 0003:1E7D:2C2E.003B: unknown main item tag 0x0 [ 1350.729716][T15854] lua 0003:1E7D:2C2E.003B: unknown main item tag 0x0 [ 1350.739547][T15854] lua 0003:1E7D:2C2E.003B: unknown main item tag 0x0 [ 1350.750066][T15854] lua 0003:1E7D:2C2E.003B: unknown main item tag 0x0 [ 1350.759362][T15854] lua 0003:1E7D:2C2E.003B: unknown main item tag 0x0 [ 1350.771134][T15854] lua 0003:1E7D:2C2E.003B: hidraw0: USB HID v0.05 Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0 [ 1350.809704][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1350.837689][ T5726] usb 1-1: USB disconnect, device number 118 [ 1350.897364][T15854] usb 4-1: USB disconnect, device number 93 [ 1350.947353][T15854] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1350.972778][ T24] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1350.998964][T21879] fido_id[21879]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1351.172101][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1351.226042][ T24] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1351.260177][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.334123][ T24] usb 5-1: Product: syz [ 1351.347683][ T24] usb 5-1: Manufacturer: syz [ 1351.352765][ T24] usb 5-1: SerialNumber: syz [ 1351.359673][ T24] usb 5-1: config 0 descriptor?? [ 1351.367102][ T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1351.391842][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 1351.403447][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1351.422827][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 1351.432764][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1351.721952][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1351.734604][T21878] dvb-usb: bulk message failed: -22 (7/0) [ 1351.741508][T21878] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1351.753474][ T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1351.761989][T21878] ttusb2: i2c transfer failed. [ 1351.766874][ T24] usb 5-1: media controller created [ 1351.784782][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1351.946416][ T24] usb 5-1: selecting invalid altsetting 3 [ 1351.995817][ T30] audit: type=1804 audit(1780201194.350:916): pid=21881 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.4394" name="bus" dev="ramfs" ino=100993 res=1 errno=0 [ 1352.063346][T21892] syz2: rxe_newlink: already configured on ipvlan0 [ 1354.226636][ T24] ttusb2: set interface to alts=3 failed [ 1354.292262][T21895] overlayfs: missing 'lowerdir' [ 1354.380469][ T24] DVB: Unable to find symbol tda10086_attach() [ 1354.721724][ T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1354.752809][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 1354.773201][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1354.788186][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 1354.794721][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1354.820490][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1355.129353][ T30] audit: type=1400 audit(1780201197.520:917): avc: denied { create } for pid=21908 comm="syz.1.4401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1355.295773][ T24] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 1355.503444][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 1355.515223][ T24] usb 4-1: config 13 has an invalid interface number: 83 but max is 2 [ 1355.523544][ T24] usb 4-1: config 13 has an invalid interface number: 70 but max is 2 [ 1355.533223][ T24] usb 4-1: config 13 contains an unexpected descriptor of type 0x2, skipping [ 1355.542160][ T24] usb 4-1: config 13 has an invalid interface number: 197 but max is 2 [ 1355.550585][ T24] usb 4-1: config 13 has no interface number 0 [ 1355.556812][ T24] usb 4-1: config 13 has no interface number 1 [ 1355.563099][ T24] usb 4-1: config 13 has no interface number 2 [ 1355.569304][ T24] usb 4-1: config 13 interface 70 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1355.580973][ T24] usb 4-1: config 13 interface 70 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1355.592239][ T24] usb 4-1: config 13 interface 70 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1355.603169][ T24] usb 4-1: config 13 interface 70 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 1355.613919][ T24] usb 4-1: config 13 interface 70 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1355.624706][ T24] usb 4-1: config 13 interface 70 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1355.635455][ T24] usb 4-1: config 13 interface 70 altsetting 5 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1355.646459][ T24] usb 4-1: config 13 interface 70 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 1355.658580][ T24] usb 4-1: config 13 interface 83 has no altsetting 0 [ 1355.665653][ T24] usb 4-1: config 13 interface 70 has no altsetting 0 [ 1355.672581][ T24] usb 4-1: config 13 interface 197 has no altsetting 0 [ 1355.689769][ T5718] usb 5-1: USB disconnect, device number 103 [ 1355.704147][ T24] usb 4-1: Dual-Role OTG device on HNP port [ 1355.733406][ T24] usb 4-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=e1.97 [ 1355.774657][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.788212][ T5718] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1355.802408][ T5726] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1356.021895][ T24] usb 4-1: Product: 渇럎氢ை妷腢꣧ꍑ퇄牤켥䢙蜂ꕃ滛ឺꐫꩴ䥳䶾嗋๝鯝Ⴞ꽬ꑖ⦓舒厷䟢Ļ蘴@㣈㿡溢迲熊쑰጗蔝ᲃ춁俙瑮덋卓േ핮䓞⺇븶䩶 [ 1356.080334][ T30] audit: type=1804 audit(1780201198.420:918): pid=21926 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.4405" name="bus" dev="ramfs" ino=101692 res=1 errno=0 [ 1356.108005][ T24] usb 4-1: Manufacturer: ᱞꬭ療ꝺ社؂⟻쏅車淔㟕㪝ᖰ뽹誳튈履ೖꮕ●ꇛ햵ꂤ류ϗ搀ᜄἫ㔔摂懿ᛐ䥀䈍Ẁ驷鋐㜇忛쪶叺ꕤﲊ斀㹩樏 [ 1356.127512][ T24] usb 4-1: SerialNumber: 梺❡鄧铳ꢌ⢋ᷯᑣ걮᠁␅繖◖꯻삻瀵萬㊚垲⒇呙艜❤꟨Ꜩ冝﹍㍙⊔ꗂஞ⤅鰴䣟滛䂦奆黺ﳪ聶倅ظ꿅棲啴䶤憞⸛뿝蒑⼲䵮焰踖⽌沠업癷鱇灍鯵쒒ʫ蹢淣疡猄䫑詌僫晀遍樁㽂쟻ﯝ䐤 [ 1356.184091][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1356.284418][ T5726] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 1356.793291][T21707] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1357.185339][ T5726] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.236267][T21707] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1357.241604][ T5726] usb 1-1: config 0 has no interface number 0 [ 1357.245361][T21707] usb 2-1: config 0 has no interface number 0 [ 1357.250535][ T5726] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1357.266564][ T5726] usb 1-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1357.284949][ T5726] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1357.294269][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.303210][ T5726] usb 1-1: Product: syz [ 1357.309380][ T5726] usb 1-1: Manufacturer: syz [ 1357.316073][T21911] macvtap2: entered promiscuous mode [ 1357.326455][T21707] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1357.340190][ T5726] usb 1-1: SerialNumber: syz [ 1357.366111][T21911] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1357.375740][ T5726] usb 1-1: config 0 descriptor?? [ 1357.382906][ T5726] cyberjack 1-1:0.69: required endpoints missing [ 1357.415924][T21707] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1357.488374][T21707] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1357.556359][T21707] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1357.621343][T21707] usb 2-1: Product: syz [ 1357.660399][T21707] usb 2-1: SerialNumber: syz [ 1357.777426][T21707] usb 2-1: config 0 descriptor?? [ 1357.849069][T21932] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1357.939443][ T5626] usb 1-1: USB disconnect, device number 119 [ 1358.013532][T21707] cm109 2-1:0.8: invalid payload size 64, expected 4 [ 1358.255726][T21707] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input170 [ 1358.410001][T21707] ------------[ cut here ]------------ [ 1358.410114][T21707] URB ffff88803825e400 submitted while active [ 1358.410135][T21707] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x15fa/0x1910, CPU#1: kworker/1:1/21707 [ 1358.410180][T21707] Modules linked in: [ 1358.410272][T21707] CPU: 1 UID: 0 PID: 21707 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1358.410304][T21707] Tainted: [L]=SOFTLOCKUP [ 1358.410313][T21707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1358.410330][T21707] Workqueue: usb_hub_wq hub_event [ 1358.410373][T21707] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 1358.410424][T21707] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 2d b3 b0 fa 48 8d 3d c6 10 8c 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 1358.410447][T21707] RSP: 0018:ffffc90004fdee50 EFLAGS: 00010287 [ 1358.410466][T21707] RAX: 0000000000089f63 RBX: ffff88803825e400 RCX: ffffc9001aa0c000 [ 1358.410501][T21707] RDX: 0000000000100000 RSI: ffff88803825e400 RDI: ffffffff90e3ee00 [ 1358.410517][T21707] RBP: ffff88802ad4c1c0 R08: 0000000000000000 R09: fffffbfff21ae18a [ 1358.410531][T21707] R10: ffffc90004fdeed8 R11: 0000000000000000 R12: ffff8880774680a0 [ 1358.410564][T21707] R13: ffff888077468010 R14: ffff888077468050 R15: ffff8880760702e0 [ 1358.410580][T21707] FS: 0000000000000000(0000) GS:ffff888124483000(0000) knlGS:0000000000000000 [ 1358.410600][T21707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1358.410615][T21707] CR2: 0000200000003120 CR3: 000000008d929000 CR4: 00000000003526f0 [ 1358.410650][T21707] Call Trace: [ 1358.410660][T21707] [ 1358.410672][T21707] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1358.410719][T21707] ? __pm_runtime_resume+0xc3/0x170 [ 1358.410754][T21707] cm109_input_open+0x273/0x420 [ 1358.410801][T21707] ? __pfx_cm109_input_open+0x10/0x10 [ 1358.410826][T21707] input_open_device+0x24c/0x3d0 [ 1358.410870][T21707] kbd_connect+0x124/0x180 [ 1358.410894][T21707] input_attach_handler.isra.0+0x177/0x1e0 [ 1358.410960][T21707] input_register_device.cold+0x139/0x375 [ 1358.411014][T21707] cm109_usb_probe+0x128d/0x17f0 [ 1358.411053][T21707] usb_probe_interface+0x303/0x8f0 [ 1358.411102][T21707] ? __pfx_usb_probe_interface+0x10/0x10 [ 1358.411153][T21707] really_probe+0x241/0xa60 [ 1358.411187][T21707] __driver_probe_device+0x22e/0x480 [ 1358.411239][T21707] driver_probe_device+0x4c/0x1b0 [ 1358.411289][T21707] __device_attach_driver+0x1df/0x340 [ 1358.411321][T21707] ? __pfx___device_attach_driver+0x10/0x10 [ 1358.411369][T21707] bus_for_each_drv+0x159/0x1e0 [ 1358.411396][T21707] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1358.411446][T21707] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1358.411476][T21707] __device_attach+0x1e4/0x4d0 [ 1358.411539][T21707] ? __pfx___device_attach+0x10/0x10 [ 1358.411587][T21707] ? do_raw_spin_unlock+0x145/0x1e0 [ 1358.411768][T21707] device_initial_probe+0xaf/0xd0 [ 1358.411801][T21707] bus_probe_device+0x64/0x160 [ 1358.411834][T21707] device_add+0x1210/0x1950 [ 1358.411871][T21707] ? __pfx_device_add+0x10/0x10 [ 1358.411918][T21707] usb_set_configuration+0xd97/0x1c60 [ 1358.411971][T21707] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1358.412003][T21707] usb_generic_driver_probe+0xa1/0xe0 [ 1358.412034][T21707] usb_probe_device+0xef/0x400 [ 1358.412056][T21707] ? __pfx_usb_probe_device+0x10/0x10 [ 1358.412080][T21707] really_probe+0x241/0xa60 [ 1358.412113][T21707] __driver_probe_device+0x22e/0x480 [ 1358.412147][T21707] ? usb_driver_applicable+0x1c7/0x220 [ 1358.412174][T21707] driver_probe_device+0x4c/0x1b0 [ 1358.412205][T21707] __device_attach_driver+0x1df/0x340 [ 1358.412236][T21707] ? __pfx___device_attach_driver+0x10/0x10 [ 1358.412264][T21707] bus_for_each_drv+0x159/0x1e0 [ 1358.412290][T21707] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1358.412316][T21707] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1358.412346][T21707] __device_attach+0x1e4/0x4d0 [ 1358.412377][T21707] ? __pfx___device_attach+0x10/0x10 [ 1358.412409][T21707] ? do_raw_spin_unlock+0x145/0x1e0 [ 1358.412445][T21707] device_initial_probe+0xaf/0xd0 [ 1358.412475][T21707] bus_probe_device+0x64/0x160 [ 1358.412505][T21707] device_add+0x1210/0x1950 [ 1358.412540][T21707] ? __pfx_device_add+0x10/0x10 [ 1358.412572][T21707] ? add_device_randomness+0xb7/0xf0 [ 1358.412610][T21707] usb_new_device.cold+0x685/0x115c [ 1358.412643][T21707] ? do_raw_spin_lock+0x128/0x260 [ 1358.412673][T21707] ? __pfx_usb_new_device+0x10/0x10 [ 1358.412707][T21707] ? mark_held_locks+0x40/0x70 [ 1358.412737][T21707] hub_event+0x314d/0x4af0 [ 1358.412785][T21707] ? __pfx_hub_event+0x10/0x10 [ 1358.412815][T21707] ? preempt_schedule_thunk+0x16/0x30 [ 1358.412855][T21707] process_one_work+0xa0e/0x1980 [ 1358.412895][T21707] ? __pfx_process_one_work+0x10/0x10 [ 1358.412931][T21707] ? __pfx_hub_event+0x10/0x10 [ 1358.412955][T21707] worker_thread+0x5ef/0xe50 [ 1358.412990][T21707] ? __pfx_worker_thread+0x10/0x10 [ 1358.413018][T21707] ? kthread+0x13a/0x450 [ 1358.413041][T21707] ? __pfx_worker_thread+0x10/0x10 [ 1358.413066][T21707] kthread+0x370/0x450 [ 1358.413089][T21707] ? __pfx_kthread+0x10/0x10 [ 1358.413115][T21707] ret_from_fork+0x72b/0xd50 [ 1358.413149][T21707] ? __pfx_ret_from_fork+0x10/0x10 [ 1358.413177][T21707] ? __switch_to+0x800/0x1100 [ 1358.413208][T21707] ? __pfx_kthread+0x10/0x10 [ 1358.413234][T21707] ret_from_fork_asm+0x1a/0x30 [ 1358.413318][T21707] [ 1358.413332][T21707] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1358.413352][T21707] CPU: 1 UID: 0 PID: 21707 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1358.413384][T21707] Tainted: [L]=SOFTLOCKUP [ 1358.413393][T21707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1358.413409][T21707] Workqueue: usb_hub_wq hub_event [ 1358.413433][T21707] Call Trace: [ 1358.413441][T21707] [ 1358.413449][T21707] dump_stack_lvl+0x100/0x190 [ 1358.413474][T21707] vpanic+0x552/0x970 [ 1358.413497][T21707] ? __pfx_vpanic+0x10/0x10 [ 1358.413525][T21707] panic+0xd1/0xe0 [ 1358.413544][T21707] ? __pfx_panic+0x10/0x10 [ 1358.413577][T21707] check_panic_on_warn.cold+0x19/0x34 [ 1358.413601][T21707] ? usb_submit_urb+0x15fa/0x1910 [ 1358.413628][T21707] __warn.cold+0x191/0x328 [ 1358.413652][T21707] __report_bug+0x296/0x3d0 [ 1358.413676][T21707] ? usb_submit_urb+0x15fa/0x1910 [ 1358.413705][T21707] ? __pfx___report_bug+0x10/0x10 [ 1358.413728][T21707] ? lockdep_hardirqs_on+0x78/0x100 [ 1358.413763][T21707] ? usb_submit_urb+0x15fd/0x1910 [ 1358.413795][T21707] report_bug_entry+0xe1/0x290 [ 1358.413819][T21707] ? usb_submit_urb+0x15fd/0x1910 [ 1358.413846][T21707] handle_bug+0x1cd/0x2a0 [ 1358.413876][T21707] exc_invalid_op+0x17/0x50 [ 1358.413906][T21707] asm_exc_invalid_op+0x1a/0x20 [ 1358.413926][T21707] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 1358.413954][T21707] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 2d b3 b0 fa 48 8d 3d c6 10 8c 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 1358.413973][T21707] RSP: 0018:ffffc90004fdee50 EFLAGS: 00010287 [ 1358.413989][T21707] RAX: 0000000000089f63 RBX: ffff88803825e400 RCX: ffffc9001aa0c000 [ 1358.414003][T21707] RDX: 0000000000100000 RSI: ffff88803825e400 RDI: ffffffff90e3ee00 [ 1358.414017][T21707] RBP: ffff88802ad4c1c0 R08: 0000000000000000 R09: fffffbfff21ae18a [ 1358.414030][T21707] R10: ffffc90004fdeed8 R11: 0000000000000000 R12: ffff8880774680a0 [ 1358.414044][T21707] R13: ffff888077468010 R14: ffff888077468050 R15: ffff8880760702e0 [ 1358.414072][T21707] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1358.414099][T21707] ? __pm_runtime_resume+0xc3/0x170 [ 1358.414139][T21707] cm109_input_open+0x273/0x420 [ 1358.414169][T21707] ? __pfx_cm109_input_open+0x10/0x10 [ 1358.414208][T21707] input_open_device+0x24c/0x3d0 [ 1358.414234][T21707] kbd_connect+0x124/0x180 [ 1358.414257][T21707] input_attach_handler.isra.0+0x177/0x1e0 [ 1358.414289][T21707] input_register_device.cold+0x139/0x375 [ 1358.414323][T21707] cm109_usb_probe+0x128d/0x17f0 [ 1358.414360][T21707] usb_probe_interface+0x303/0x8f0 [ 1358.414387][T21707] ? __pfx_usb_probe_interface+0x10/0x10 [ 1358.414412][T21707] really_probe+0x241/0xa60 [ 1358.414443][T21707] __driver_probe_device+0x22e/0x480 [ 1358.414474][T21707] driver_probe_device+0x4c/0x1b0 [ 1358.414504][T21707] __device_attach_driver+0x1df/0x340 [ 1358.414534][T21707] ? __pfx___device_attach_driver+0x10/0x10 [ 1358.414561][T21707] bus_for_each_drv+0x159/0x1e0 [ 1358.414586][T21707] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1358.414611][T21707] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1358.414637][T21707] __device_attach+0x1e4/0x4d0 [ 1358.414667][T21707] ? __pfx___device_attach+0x10/0x10 [ 1358.414697][T21707] ? do_raw_spin_unlock+0x145/0x1e0 [ 1358.414730][T21707] device_initial_probe+0xaf/0xd0 [ 1358.414760][T21707] bus_probe_device+0x64/0x160 [ 1358.414787][T21707] device_add+0x1210/0x1950 [ 1358.414820][T21707] ? __pfx_device_add+0x10/0x10 [ 1358.414861][T21707] usb_set_configuration+0xd97/0x1c60 [ 1358.414907][T21707] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1358.414935][T21707] usb_generic_driver_probe+0xa1/0xe0 [ 1358.414965][T21707] usb_probe_device+0xef/0x400 [ 1358.414985][T21707] ? __pfx_usb_probe_device+0x10/0x10 [ 1358.415008][T21707] really_probe+0x241/0xa60 [ 1358.415039][T21707] __driver_probe_device+0x22e/0x480 [ 1358.415067][T21707] ? usb_driver_applicable+0x1c7/0x220 [ 1358.415092][T21707] driver_probe_device+0x4c/0x1b0 [ 1358.415126][T21707] __device_attach_driver+0x1df/0x340 [ 1358.415157][T21707] ? __pfx___device_attach_driver+0x10/0x10 [ 1358.415185][T21707] bus_for_each_drv+0x159/0x1e0 [ 1358.415209][T21707] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1358.415236][T21707] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1358.415265][T21707] __device_attach+0x1e4/0x4d0 [ 1358.415294][T21707] ? __pfx___device_attach+0x10/0x10 [ 1358.415326][T21707] ? do_raw_spin_unlock+0x145/0x1e0 [ 1358.415361][T21707] device_initial_probe+0xaf/0xd0 [ 1358.415394][T21707] bus_probe_device+0x64/0x160 [ 1358.415424][T21707] device_add+0x1210/0x1950 [ 1358.415459][T21707] ? __pfx_device_add+0x10/0x10 [ 1358.415489][T21707] ? add_device_randomness+0xb7/0xf0 [ 1358.415526][T21707] usb_new_device.cold+0x685/0x115c [ 1358.415560][T21707] ? do_raw_spin_lock+0x128/0x260 [ 1358.415588][T21707] ? __pfx_usb_new_device+0x10/0x10 [ 1358.415622][T21707] ? mark_held_locks+0x40/0x70 [ 1358.415649][T21707] hub_event+0x314d/0x4af0 [ 1358.415696][T21707] ? __pfx_hub_event+0x10/0x10 [ 1358.415726][T21707] ? preempt_schedule_thunk+0x16/0x30 [ 1358.415765][T21707] process_one_work+0xa0e/0x1980 [ 1358.415803][T21707] ? __pfx_process_one_work+0x10/0x10 [ 1358.415837][T21707] ? __pfx_hub_event+0x10/0x10 [ 1358.415859][T21707] worker_thread+0x5ef/0xe50 [ 1358.415893][T21707] ? __pfx_worker_thread+0x10/0x10 [ 1358.415919][T21707] ? kthread+0x13a/0x450 [ 1358.415941][T21707] ? __pfx_worker_thread+0x10/0x10 [ 1358.415964][T21707] kthread+0x370/0x450 [ 1358.415987][T21707] ? __pfx_kthread+0x10/0x10 [ 1358.416012][T21707] ret_from_fork+0x72b/0xd50 [ 1358.416039][T21707] ? __pfx_ret_from_fork+0x10/0x10 [ 1358.416066][T21707] ? __switch_to+0x800/0x1100 [ 1358.416096][T21707] ? __pfx_kthread+0x10/0x10 [ 1358.416126][T21707] ret_from_fork_asm+0x1a/0x30 [ 1358.416169][T21707] [ 1358.416404][T21707] Kernel Offset: disabled