last executing test programs: 4.668191608s ago: executing program 2 (id=98): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x1b0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x114, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x42}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_NAT={0x88, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}}}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 4.61197932s ago: executing program 2 (id=99): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000, 0x2000000}, {0xfffffffffffffffc}], 0x2, 0xbfe, 0x38, 0x8, 0x70, 0x6e}) 4.59378811s ago: executing program 2 (id=100): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25250000000e0001006e"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 4.574890311s ago: executing program 2 (id=101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020603000000000000000000070000000c00078008000640000000c80500010006000000050005000200000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) 4.520017993s ago: executing program 2 (id=102): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) sendto$inet6(r0, &(0x7f0000000280)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04"], 0x0) shutdown(r0, 0x1) 3.839644345s ago: executing program 1 (id=112): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0xec776000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, &(0x7f00000018c0)={0x0, 0x989680}) 3.833289395s ago: executing program 1 (id=113): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x8, "", [{{0x9, 0x4, 0x0, 0x5f, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x8, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x20, 0x22, 0x28, {0x28, 0x21, "c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c554438"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.179955399s ago: executing program 1 (id=118): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000004340)=""/4092, 0xffc}, {&(0x7f0000001c40)=""/253, 0xfd}, {&(0x7f0000001840)=""/164, 0xa4}, {&(0x7f0000001700)=""/166, 0xa6}, {&(0x7f0000001a40)=""/65, 0x41}], 0x5}, 0x5}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000003340)=""/4094, 0xffe}, {&(0x7f0000001600)=""/215, 0xd7}, {&(0x7f00000003c0)=""/283, 0x11b}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f00000013c0)=""/246, 0xf6}], 0x5}, 0x81}], 0x4, 0x40012032, 0x0) 2.179776369s ago: executing program 1 (id=119): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x11}, 0x1c) 2.179703099s ago: executing program 1 (id=120): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c) 2.178413339s ago: executing program 1 (id=121): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000440)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.802692331s ago: executing program 3 (id=125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000280)=0x1f5, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.525560351s ago: executing program 2 (id=126): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac2(0x4, 0x9e, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x48, 0x499, 0x1039, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x85, 0xe6d65e2c16ddbb6c, 0x7, {0x8, 0xb, 0x2, 0x2, 0x1, 0x5, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x4, 0x2c, 0x3}, [@feature_unit={0x7, 0x24, 0x6, 0x6, 0x4, [0x1]}, @effect_unit={0x11, 0x24, 0x7, 0x2, 0x4, 0x4, [0x1, 0x2, 0x2, 0x0, 0x2]}, @processing_unit={0xb, 0x24, 0x8, 0x3, 0x1, [0x3, 0x1, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x1, 0x0, {0x8, 0x25, 0x1, 0x2, 0x3c, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x0, 0x28, {0x8, 0x25, 0x1, 0x83, 0x3f, 0x10, 0x8000}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 981.332178ms ago: executing program 0 (id=127): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r3 = dup3(r1, r0, 0x0) fchdir(r3) creat(&(0x7f0000000040)='./bus\x00', 0x0) 887.966971ms ago: executing program 0 (id=128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) 875.408002ms ago: executing program 0 (id=129): r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f00000002c0)={0xa, 0x0, 0xfffffffc, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 863.346462ms ago: executing program 0 (id=130): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 767.954195ms ago: executing program 0 (id=131): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6007f03000000000000040014000d000a000f0000", 0x2b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x43}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 766.512375ms ago: executing program 0 (id=132): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)={0x20, 0xa02da726a9b588e2, 0x1, 'N'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 640.164869ms ago: executing program 3 (id=133): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) 623.96192ms ago: executing program 3 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) close(0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) 364.848738ms ago: executing program 3 (id=135): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000002280)={0x0, 0x0, 0x200000, 0x0, 0x0, 0x3}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x2a, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}}, 0x14}}, 0xc050) 364.705749ms ago: executing program 3 (id=136): inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000021) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) fcntl$addseals(r2, 0x409, 0xc) 0s ago: executing program 3 (id=137): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0xb0}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000004240)=""/4128, 0x1020}, {&(0x7f0000001680)=""/100, 0x64}, {&(0x7f00000002c0)=""/77, 0x4d}, {&(0x7f0000000100)=""/61, 0x3d}], 0x5}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffe}, {{0x0, 0x0, 0x0}, 0xd9f}], 0x9, 0x2030, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts. [ 21.665261][ T36] audit: type=1400 audit(1781683006.340:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.666443][ T286] cgroup: Unknown subsys name 'net' [ 21.687903][ T36] audit: type=1400 audit(1781683006.340:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.715234][ T36] audit: type=1400 audit(1781683006.370:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.715900][ T286] cgroup: Unknown subsys name 'devices' [ 21.839766][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.845363][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.937404][ T36] audit: type=1400 audit(1781683006.610:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.960568][ T36] audit: type=1400 audit(1781683006.610:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.985314][ T36] audit: type=1400 audit(1781683006.610:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.013668][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.022421][ T36] audit: type=1400 audit(1781683006.700:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.047858][ T36] audit: type=1400 audit(1781683006.700:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.080906][ T36] audit: type=1400 audit(1781683006.760:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.106432][ T36] audit: type=1400 audit(1781683006.760:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.106676][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.914928][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.922218][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.929340][ T293] bridge_slave_0: entered allmulticast mode [ 22.935587][ T293] bridge_slave_0: entered promiscuous mode [ 22.943726][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.950787][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.957834][ T293] bridge_slave_1: entered allmulticast mode [ 22.964160][ T293] bridge_slave_1: entered promiscuous mode [ 23.029896][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.036948][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.044068][ T295] bridge_slave_0: entered allmulticast mode [ 23.050308][ T295] bridge_slave_0: entered promiscuous mode [ 23.056675][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.063737][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.070794][ T295] bridge_slave_1: entered allmulticast mode [ 23.076915][ T295] bridge_slave_1: entered promiscuous mode [ 23.101174][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.108243][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.115297][ T294] bridge_slave_0: entered allmulticast mode [ 23.121720][ T294] bridge_slave_0: entered promiscuous mode [ 23.130842][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.137880][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.144937][ T294] bridge_slave_1: entered allmulticast mode [ 23.151127][ T294] bridge_slave_1: entered promiscuous mode [ 23.161157][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.168215][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.175347][ T296] bridge_slave_0: entered allmulticast mode [ 23.181813][ T296] bridge_slave_0: entered promiscuous mode [ 23.190888][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.197948][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.205011][ T296] bridge_slave_1: entered allmulticast mode [ 23.211274][ T296] bridge_slave_1: entered promiscuous mode [ 23.320298][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.327353][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.334658][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.341700][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.369310][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.376364][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.383674][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.390710][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.413076][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.420153][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.427409][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.434451][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.454467][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.461539][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.468817][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.475833][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.490197][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.497432][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.505081][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.512859][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.520183][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.527432][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.534691][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.542045][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.558425][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.565466][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.590503][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.597542][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.605283][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.612311][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.623033][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.630082][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.637604][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.644643][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.655090][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.662146][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.688654][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.695695][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.703182][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.710206][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.727388][ T293] veth0_vlan: entered promiscuous mode [ 23.747170][ T293] veth1_macvtap: entered promiscuous mode [ 23.773211][ T294] veth0_vlan: entered promiscuous mode [ 23.789608][ T295] veth0_vlan: entered promiscuous mode [ 23.797613][ T294] veth1_macvtap: entered promiscuous mode [ 23.817819][ T295] veth1_macvtap: entered promiscuous mode [ 23.827506][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.857814][ T296] veth0_vlan: entered promiscuous mode [ 23.900413][ T296] veth1_macvtap: entered promiscuous mode [ 23.967433][ T326] capability: warning: `syz.1.7' uses deprecated v2 capabilities in a way that may be insecure [ 24.205608][ T365] bridge0: port 3(veth0_macvtap) entered blocking state [ 24.212675][ T365] bridge0: port 3(veth0_macvtap) entered disabled state [ 24.219732][ T365] veth0_macvtap: entered allmulticast mode [ 24.226100][ T365] veth0_macvtap: entered promiscuous mode [ 24.232041][ T365] bridge0: port 3(veth0_macvtap) entered blocking state [ 24.239039][ T365] bridge0: port 3(veth0_macvtap) entered forwarding state [ 24.888068][ T312] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.128030][ T312] usb 4-1: Using ep0 maxpacket: 16 [ 25.341662][ T312] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 25.355326][ T312] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 25.370346][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.379082][ T312] usb 4-1: Product: syz [ 25.383282][ T312] usb 4-1: Manufacturer: syz [ 25.390361][ T312] usb 4-1: SerialNumber: syz [ 25.405347][ T312] r8152-cfgselector 4-1: Unknown version 0x0000 [ 25.416192][ T312] r8152-cfgselector 4-1: config 0 descriptor?? [ 25.701288][ T410] input: syz1 as /devices/virtual/input/input4 [ 25.908277][ T312] r8152-cfgselector 4-1: Needed 1 retries to read version [ 25.915485][ T312] r8152-cfgselector 4-1: Unknown version 0x0000 [ 25.927161][ T312] r8152-cfgselector 4-1: bad CDC descriptors [ 25.952498][ T419] capability: warning: `syz.2.46' uses 32-bit capabilities (legacy support in use) [ 26.124906][ T64] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 26.217992][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.367994][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 26.375739][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 26.385241][ T9] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 26.393609][ T9] usb 1-1: Product: syz [ 26.397892][ T9] usb 1-1: Manufacturer: syz [ 26.402855][ T9] usb 1-1: SerialNumber: syz [ 26.408565][ T9] usb 1-1: config 0 descriptor?? [ 26.807463][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 26.807507][ T36] audit: type=1400 audit(1781683011.480:142): avc: denied { bind } for pid=427 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.673794][ T36] audit: type=1400 audit(1781683012.350:143): avc: denied { write } for pid=413 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.698334][ T36] audit: type=1400 audit(1781683012.380:144): avc: denied { create } for pid=466 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.717787][ T36] audit: type=1400 audit(1781683012.380:145): avc: denied { write } for pid=466 comm="syz.1.63" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.741844][ T36] audit: type=1400 audit(1781683012.380:146): avc: denied { read write } for pid=463 comm="syz.2.62" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.770722][ T36] audit: type=1400 audit(1781683012.380:147): avc: denied { open } for pid=463 comm="syz.2.62" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.794497][ T36] audit: type=1400 audit(1781683012.380:148): avc: denied { mounton } for pid=463 comm="syz.2.62" path="/proc/42/task" dev="proc" ino=3852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 27.816726][ T36] audit: type=1400 audit(1781683012.400:149): avc: denied { create } for pid=471 comm="syz.2.65" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.837873][ T36] audit: type=1400 audit(1781683012.400:150): avc: denied { map } for pid=471 comm="syz.2.65" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.861775][ T36] audit: type=1400 audit(1781683012.400:151): avc: denied { read write } for pid=471 comm="syz.2.65" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.028000][ T436] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.251034][ T436] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 28.260177][ T436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.268175][ T436] usb 3-1: Product: syz [ 28.272370][ T436] usb 3-1: Manufacturer: syz [ 28.276953][ T436] usb 3-1: SerialNumber: syz [ 28.741473][ T436] usb 3-1: MIDIStreaming interface descriptor not found [ 28.751922][ T436] usb 3-1: USB disconnect, device number 2 [ 28.831907][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.925332][ T311] usb 1-1: USB disconnect, device number 2 [ 29.088311][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.158036][ T439] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.258472][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 29.265201][ T31] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 29.274113][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 29.285040][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 29.295694][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 29.306732][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 29.319918][ T439] usb 4-1: Using ep0 maxpacket: 32 [ 29.326082][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 29.337202][ T439] usb 4-1: unable to get BOS descriptor or descriptor too short [ 29.345479][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.355201][ T439] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 8 [ 29.375902][ T439] usb 4-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 29.386531][ T439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.396053][ T439] usb 4-1: Product: syz [ 29.400681][ T439] usb 4-1: Manufacturer: syz [ 29.405353][ T439] usb 4-1: SerialNumber: syz [ 29.410787][ T511] netlink: 140 bytes leftover after parsing attributes in process `syz.2.80'. [ 29.411997][ T497] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 29.658286][ T439] usb 4-1: USB disconnect, device number 3 [ 29.707189][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.077986][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.227999][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 30.234705][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 30.243044][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 30.252846][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 30.262633][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 30.272538][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 30.285506][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 30.294788][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.287978][ T439] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.419851][ T564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.100'. [ 31.437962][ T439] usb 4-1: Using ep0 maxpacket: 32 [ 31.445938][ T439] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 31.455274][ T439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.463352][ T439] usb 4-1: Product: syz [ 31.467508][ T439] usb 4-1: Manufacturer: syz [ 31.472097][ T439] usb 4-1: SerialNumber: syz [ 31.477229][ T439] usb 4-1: config 0 descriptor?? [ 31.687976][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.848355][ T9] usb 3-1: no configurations [ 31.853013][ T9] usb 3-1: can't read configurations, error -22 [ 31.987984][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.018762][ T439] usb 2-1: USB disconnect, device number 2 [ 32.128469][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 32.128485][ T36] audit: type=1400 audit(1781683016.810:167): avc: denied { mount } for pid=587 comm="syz.1.111" name="/" dev="pipefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.156524][ T9] usb 3-1: no configurations [ 32.161400][ T9] usb 3-1: can't read configurations, error -22 [ 32.168459][ T9] usb usb3-port1: attempt power cycle [ 32.477991][ T439] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.517985][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.538667][ T9] usb 3-1: no configurations [ 32.543272][ T9] usb 3-1: can't read configurations, error -22 [ 32.637974][ T439] usb 2-1: Using ep0 maxpacket: 8 [ 32.644037][ T439] usb 2-1: config 0 interface 0 has no altsetting 0 [ 32.650669][ T439] usb 2-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 32.659721][ T439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.668335][ T439] usb 2-1: config 0 descriptor?? [ 32.678004][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 32.698674][ T9] usb 3-1: no configurations [ 32.703299][ T9] usb 3-1: can't read configurations, error -22 [ 32.709770][ T9] usb usb3-port1: unable to enumerate USB device [ 32.852045][ T9] usb 1-1: USB disconnect, device number 3 [ 33.078124][ T439] ntrig 0003:1B96:0005.0001: unknown main item tag 0x2 [ 33.085040][ T439] ntrig 0003:1B96:0005.0001: unknown main item tag 0x6 [ 33.092787][ T439] ntrig 0003:1B96:0005.0001: ignoring exceeding usage max [ 33.102653][ T439] ntrig 0003:1B96:0005.0001: hidraw0: USB HID v0.01 Device [HID 1b96:0005] on usb-dummy_hcd.1-1/input0 [ 33.279275][ T439] usb 2-1: USB disconnect, device number 3 [ 33.737777][ T36] audit: type=1400 audit(1781683018.410:168): avc: denied { setopt } for pid=604 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.796112][ T36] audit: type=1400 audit(1781683018.470:169): avc: denied { create } for pid=611 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.815428][ T36] audit: type=1400 audit(1781683018.470:170): avc: denied { bind } for pid=611 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.017982][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.062485][ T312] usb 4-1: USB disconnect, device number 4 [ 34.078115][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.080366][ T36] audit: type=1400 audit(1781683018.760:171): avc: denied { mount } for pid=619 comm="syz.3.123" name="/" dev="ramfs" ino=4354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 34.204535][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 34.211671][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.221993][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.231648][ T9] usb 1-1: New USB device found, idVendor=0003, idProduct=0000, bcdDevice= 0.00 [ 34.240817][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 34.249034][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.259145][ T9] usb 1-1: SerialNumber: syz [ 34.267060][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 34.277262][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.288507][ T10] usb 2-1: config 0 descriptor?? [ 34.487324][ T9] usb 1-1: 0:1 : does not exist [ 34.515214][ T9] usb 1-1: unit 255 not found! [ 34.542062][ T9] usb 1-1: USB disconnect, device number 4 [ 34.577008][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.878024][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 35.029532][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.041609][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 35.050832][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.060901][ T10] usb 3-1: config 0 descriptor?? [ 35.089300][ T36] audit: type=1400 audit(1781683019.750:172): avc: denied { associate } for pid=630 comm="syz.0.127" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.166035][ T36] audit: type=1400 audit(1781683019.840:173): avc: denied { name_bind } for pid=636 comm="syz.0.130" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 35.210602][ T36] audit: type=1400 audit(1781683019.870:174): avc: denied { node_bind } for pid=636 comm="syz.0.130" saddr=::8001:0:20:0 src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 35.271716][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 35.277689][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 35.287364][ T10] usb 3-1: USB disconnect, device number 7 [ 35.507982][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.668316][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 35.675728][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 35.687891][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 35.699138][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 35.709292][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 35.720727][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 35.731904][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 35.741198][ T9] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 35.750435][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.758612][ T9] usb 1-1: Product: syz [ 35.762933][ T9] usb 1-1: Manufacturer: syz [ 35.767542][ T9] usb 1-1: SerialNumber: syz [ 35.774307][ T9] usb 1-1: config 0 descriptor?? [ 35.889435][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.900689][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 35.909769][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.919983][ T10] usb 3-1: config 0 descriptor?? [ 36.728347][ T10] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 36.736483][ T10] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 36.746478][ T36] audit: type=1400 audit(1781683021.420:175): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=470 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.749818][ C1] ------------[ cut here ]------------ [ 36.770113][ T36] audit: type=1400 audit(1781683021.420:176): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=470 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.774066][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 36.805688][ C1] index 259 is out of range for type 'const int[34]' [ 36.812356][ C1] CPU: 1 UID: 0 PID: 314 Comm: udevd Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 36.812373][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.812383][ C1] Call Trace: [ 36.812387][ C1] [ 36.812392][ C1] __dump_stack+0x21/0x30 [ 36.812415][ C1] dump_stack_lvl+0x140/0x1c0 [ 36.812429][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.812443][ C1] ? x64_sys_call+0x2560/0x2ee0 [ 36.812455][ C1] dump_stack+0x19/0x20 [ 36.812468][ C1] ubsan_epilogue+0xe/0x40 [ 36.812479][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 36.812495][ C1] ? __kasan_check_write+0x18/0x20 [ 36.812507][ C1] aiptek_irq+0x20cb/0x2a00 [ 36.812518][ C1] ? kcov_remote_start+0x1d3/0x3c0 [ 36.812531][ C1] __usb_hcd_giveback_urb+0x375/0x540 [ 36.812543][ C1] usb_hcd_giveback_urb+0x11b/0x410 [ 36.812554][ C1] dummy_timer+0x816/0x4300 [ 36.812565][ C1] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 36.812580][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 36.812592][ C1] ? timerqueue_del+0xd7/0x130 [ 36.812606][ C1] ? __hrtimer_run_queues+0x2c4/0x8e0 [ 36.812622][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 36.812633][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 36.812650][ C1] ? hrtimer_interrupt+0xf00/0xf00 [ 36.812664][ C1] ? read_tsc+0xd/0x20 [ 36.812679][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 36.812693][ C1] hrtimer_run_softirq+0x159/0x560 [ 36.812703][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 36.812718][ C1] handle_softirqs+0x1aa/0x630 [ 36.812744][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 36.812759][ C1] __irq_exit_rcu+0x47/0xb0 [ 36.812769][ C1] irq_exit_rcu+0xd/0x30 [ 36.812779][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 36.812791][ C1] [ 36.812795][ C1] [ 36.812798][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 36.812810][ C1] RIP: 0010:__asan_memset+0x5/0x50 [ 36.812822][ C1] Code: 8b 4d 08 ba 01 00 00 00 e8 68 e4 ff ff 5d c3 cc cc cc cc cc 90 b8 69 e2 35 aa 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 41 57 41 56 53 48 89 d3 41 89 f6 49 89 ff 48 8b 4d 08 48 [ 36.812831][ C1] RSP: 0018:ffffc9000b79fd10 EFLAGS: 00000246 [ 36.812847][ C1] RAX: ffffffff8204ee34 RBX: dffffc0000000000 RCX: ffff88810b769300 [ 36.812855][ C1] RDX: 00000000000000c0 RSI: 0000000000000000 RDI: ffffc9000b79fd60 [ 36.812863][ C1] RBP: ffffc9000b79fec0 R08: ffff888118597287 R09: 1ffff110230b2e50 [ 36.812870][ C1] R10: dffffc0000000000 R11: ffffed10230b2e51 R12: 1ffff110230b2e55 [ 36.812878][ C1] R13: ffff88811175ea40 R14: ffffc9000b79fd60 R15: 1ffff920016f3fa8 [ 36.812887][ C1] ? locks_remove_posix+0xa4/0x570 [ 36.812900][ C1] ? locks_remove_posix+0xf6/0x570 [ 36.812912][ C1] ? __cfi_locks_remove_posix+0x10/0x10 [ 36.812924][ C1] ? __kasan_check_write+0x18/0x20 [ 36.812939][ C1] ? __kasan_check_write+0x18/0x20 [ 36.812949][ C1] ? file_close_fd_locked+0x2c0/0x350 [ 36.812963][ C1] __se_sys_close+0x172/0x240 [ 36.812973][ C1] __x64_sys_close+0x3c/0x60 [ 36.812982][ C1] x64_sys_call+0x2560/0x2ee0 [ 36.812993][ C1] do_syscall_64+0x57/0xf0 [ 36.813007][ C1] ? clear_bhb_loop+0x50/0xa0 [ 36.813018][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.813034][ C1] RIP: 0033:0x7fc4bfca7407 [ 36.813048][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 36.813057][ C1] RSP: 002b:00007ffe88abb290 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 36.813068][ C1] RAX: ffffffffffffffda RBX: 00007fc4c0389880 RCX: 00007fc4bfca7407 [ 36.813075][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 36.813082][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 36.813088][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055faadd0ac80 [ 36.813095][ C1] R13: 000000000000008a R14: 00007ffe88abb770 R15: 00007ffe88abc7d8 [ 36.813103][ C1] [ 36.813107][ C1] ---[ end trace ]--- [ 37.204341][ C1] ------------[ cut here ]------------ [ 37.209777][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 37.218345][ C1] index 260 is out of range for type 'const int[34]' [ 37.225000][ C1] CPU: 1 UID: 0 PID: 314 Comm: udevd Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 37.225018][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.225026][ C1] Call Trace: [ 37.225031][ C1] [ 37.225036][ C1] __dump_stack+0x21/0x30 [ 37.225057][ C1] dump_stack_lvl+0x140/0x1c0 [ 37.225072][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.225086][ C1] ? input_event_dispose+0x2f5/0x6d0 [ 37.225099][ C1] dump_stack+0x19/0x20 [ 37.225114][ C1] ubsan_epilogue+0xe/0x40 [ 37.225125][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 37.225147][ C1] aiptek_irq+0x1f85/0x2a00 [ 37.225169][ C1] __usb_hcd_giveback_urb+0x375/0x540 [ 37.225193][ C1] usb_hcd_giveback_urb+0x11b/0x410 [ 37.225216][ C1] dummy_timer+0x816/0x4300 [ 37.225238][ C1] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 37.225252][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 37.225264][ C1] ? timerqueue_del+0xd7/0x130 [ 37.225278][ C1] ? __hrtimer_run_queues+0x2c4/0x8e0 [ 37.225294][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 37.225305][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 37.225321][ C1] ? hrtimer_interrupt+0xf00/0xf00 [ 37.225336][ C1] ? read_tsc+0xd/0x20 [ 37.225350][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 37.225364][ C1] hrtimer_run_softirq+0x159/0x560 [ 37.225374][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 37.225389][ C1] handle_softirqs+0x1aa/0x630 [ 37.225401][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 37.225415][ C1] __irq_exit_rcu+0x47/0xb0 [ 37.225426][ C1] irq_exit_rcu+0xd/0x30 [ 37.225435][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 37.225450][ C1] [ 37.225454][ C1] [ 37.225457][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 37.225469][ C1] RIP: 0010:__asan_memset+0x5/0x50 [ 37.225482][ C1] Code: 8b 4d 08 ba 01 00 00 00 e8 68 e4 ff ff 5d c3 cc cc cc cc cc 90 b8 69 e2 35 aa 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 41 57 41 56 53 48 89 d3 41 89 f6 49 89 ff 48 8b 4d 08 48 [ 37.225491][ C1] RSP: 0018:ffffc9000b79fd10 EFLAGS: 00000246 [ 37.225501][ C1] RAX: ffffffff8204ee34 RBX: dffffc0000000000 RCX: ffff88810b769300 [ 37.225510][ C1] RDX: 00000000000000c0 RSI: 0000000000000000 RDI: ffffc9000b79fd60 [ 37.225517][ C1] RBP: ffffc9000b79fec0 R08: ffff888118597287 R09: 1ffff110230b2e50 [ 37.225525][ C1] R10: dffffc0000000000 R11: ffffed10230b2e51 R12: 1ffff110230b2e55 [ 37.225533][ C1] R13: ffff88811175ea40 R14: ffffc9000b79fd60 R15: 1ffff920016f3fa8 [ 37.225541][ C1] ? locks_remove_posix+0xa4/0x570 [ 37.225555][ C1] ? locks_remove_posix+0xf6/0x570 [ 37.225567][ C1] ? __cfi_locks_remove_posix+0x10/0x10 [ 37.225580][ C1] ? __kasan_check_write+0x18/0x20 [ 37.225590][ C1] ? __kasan_check_write+0x18/0x20 [ 37.225600][ C1] ? file_close_fd_locked+0x2c0/0x350 [ 37.225614][ C1] __se_sys_close+0x172/0x240 [ 37.225624][ C1] __x64_sys_close+0x3c/0x60 [ 37.225633][ C1] x64_sys_call+0x2560/0x2ee0 [ 37.225643][ C1] do_syscall_64+0x57/0xf0 [ 37.225658][ C1] ? clear_bhb_loop+0x50/0xa0 [ 37.225669][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.225686][ C1] RIP: 0033:0x7fc4bfca7407 [ 37.225695][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 37.225704][ C1] RSP: 002b:00007ffe88abb290 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 37.225714][ C1] RAX: ffffffffffffffda RBX: 00007fc4c0389880 RCX: 00007fc4bfca7407 [ 37.225722][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 37.225728][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 37.225735][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055faadd0ac80 [ 37.225741][ C1] R13: 000000000000008a R14: 00007ffe88abb770 R15: 00007ffe88abc7d8 [ 37.225750][ C1] [ 37.225754][ C1] ---[ end trace ]--- [ 37.622434][ T439] usb 2-1: USB disconnect, device number 4 [ 37.744615][ T9] usb 3-1: USB disconnect, device number 8 [ 37.744646][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 38.256734][ T9] usb 1-1: USB disconnect, device number 5