last executing test programs: 19.228667611s ago: executing program 0 (id=4324): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000f50c001a8004002d809cfc933939df88e1342b28e3619c57c572729f0ea6f475b7700db87148c3bd13daa7f29894cd9e8825faed98a0b2347de058fdbae14cbfde28f087b672af6ddbd0d6965f1c0509f9070910"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 17.928320487s ago: executing program 0 (id=4328): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x4}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000540)={r3, @in={{0x2, 0x4e22, @empty}}}, 0x84) rt_sigpending(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0x0, &(0x7f00000004c0)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r8, 0x0, 0x8}, 0x18) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_FPU(r7, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654}) openat$incfs(r7, &(0x7f0000000040)='.pending_reads\x00', 0x0, 0x40) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r9, 0x0, r1}) 12.092233485s ago: executing program 0 (id=4348): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x24, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0xda71bee8a5a7ee97, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x14984, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb76e, @void, @value}, 0x94) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x1d9242) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x8e429121) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000000)=""/78, 0x9}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x3, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x4d, 0x5b, 0xaf, 0x10, 0x6e0, 0x319, 0x1f59, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xff, 0x0, 0x80, 0x40, [{{0x9, 0x4, 0x7, 0x4e, 0x2, 0xa9, 0x21, 0xb2, 0x7, [], [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x7f, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x60, 0xd, 0x9}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 11.210185732s ago: executing program 4 (id=4349): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f0000000380), 0x0, 0x6) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x0, 0x80, 0x5, 0x80000000, 0x5b, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x20, 0x0, 0x0, 0x1}}) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') r7 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r6, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r7, 0x47f5, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) read$midi(r10, 0x0, 0x43) write(r0, 0x0, 0x0) 10.187594456s ago: executing program 4 (id=4351): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x23, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x5, "f1d598d5"}, @main=@item_012={0x1, 0x0, 0xc, "ff"}, @local=@item_4={0x3, 0x2, 0xa, "d4df8e41"}, @local=@item_4={0x3, 0x2, 0x5, "21e5ebf7"}, @local=@item_4={0x3, 0x2, 0x1, "f8b263d0"}, @local=@item_012={0x2, 0x2, 0x8, "bbed"}, @global=@item_4={0x3, 0x1, 0x0, "6d1c542e"}]}}, 0x0}, 0x0) 9.178501405s ago: executing program 2 (id=4352): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="050000170800000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r2, 0x0, 0x4000090) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xa) fsetxattr$security_ima(r0, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x2, "20653139bd8d14de7f"}, 0xa, 0x3) 8.954554608s ago: executing program 2 (id=4353): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="010b000000000000000011"], 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 8.953703458s ago: executing program 0 (id=4354): mkdir(&(0x7f00000000c0)='./file1\x00', 0x154) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x3, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x402, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x11, 0x5, 0x0, 0xffff, 0x0}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r5, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r5, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x3}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0x7, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="3c00000014000905000000e3606d5cfc600000000000020100fd", @ANYRES32, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac1e0001080004007f000001"], 0x3c}}, 0x0) pipe2$watch_queue(&(0x7f0000002240), 0x80) 7.766671475s ago: executing program 2 (id=4356): r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, &(0x7f00000022c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1, 0x0, 0x6}, 0x18) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x503200, 0x148) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000002"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000030000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002680)={r4, &(0x7f0000002640), 0x0}, 0x20) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000018b3a20110710028a7c010203010902240001d300d00009046201025bfce10409050c0600020a7f0409050202080004dc09"], 0x0) 7.702579573s ago: executing program 1 (id=4357): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) dup3(r2, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x1c, 0x2000, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) r10 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r11 = fcntl$dupfd(r10, 0x0, r10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000730135000000000095000000000000001af5f8cc4266b4c3b876421e2db140a1690c515a0d650c2c7c1bf8972995194ccbeae4070088ad2fe10d64c1194ef8a2e4a56a1baf03902f1bdba34cbaa20234b455eb653d1acee4923e58c0002f51b8d33ae5c7c6863a68165939968da34ac80e"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000400000d65550caa6c81a6880509937c"], &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0xa, 0xffffffff, 0x0, @void, @value}, 0x28) ioctl$USBDEVFS_REAPURBNDELAY(r11, 0x4008550d, &(0x7f0000000280)) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 7.469524282s ago: executing program 3 (id=4358): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x40000) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x0, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"4c97aef4", 0x7f, 0x5, 0x8a, 0x3, 0x6, "5b0004000001040000000000009400", "1575a859", "fa5aabde", '\'q6O', ["5a535857c62224475793eca7", "7f9ce2d2c4f439ff80e1d1c8", "fa89bbe62b42a3023be516d1", "969a13a6806ad2b97b77791a"]}) 7.254015685s ago: executing program 3 (id=4359): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="010b000000000000000011"], 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 6.984628908s ago: executing program 4 (id=4360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x3, 0x9, &(0x7f00000004c0)="bcd51aa83dcc14ebb517e65fb2a25ea18bda2ee9ed6119059398e8582ff7a8bb8924aabbfb30f6f5640d4886a57c602a50317f6b70779c00a249338975b6efb98b11c4d2c7b7d6cbec6b25111c67b9857556bba3e4b2c2d12d4bdc8e9cae21f3bce4c93f60e7c170281a7b4c26740a7818f8cecefbe8dedc164844b3f6d1cb112ce0114392427f0b55e103de3ea035086c23f525b434ac669330515ceb47c5abe00467a6a149550a22ef51a64200cbb4fe3d28625cac52229624a61397ae5e325caf1b6fb0011d6652d20eba039bf41f9f2b90d568d3863352c1bf9fc167107b9d22e7d9d0a65736bd430704944fa6c2d14fbce06766"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_XOR={0x8, 0x7, 0x7ff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 6.658855167s ago: executing program 1 (id=4361): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x0, 0x208}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 6.440560865s ago: executing program 1 (id=4362): io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) write$sndseq(r1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @time=@time={0x7, 0xe}}, {0x0, 0x0, 0x0, 0x5, @time={0xb, 0x8}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x70) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x18) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 5.25168724s ago: executing program 4 (id=4363): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x23, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x5, "f1d598d5"}, @main=@item_012={0x1, 0x0, 0xc, "ff"}, @local=@item_4={0x3, 0x2, 0xa, "d4df8e41"}, @local=@item_4={0x3, 0x2, 0x5, "21e5ebf7"}, @local=@item_4={0x3, 0x2, 0x1, "f8b263d0"}, @local=@item_012={0x2, 0x2, 0x8, "bbed"}, @global=@item_4={0x3, 0x1, 0x0, "6d1c542e"}]}}, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.201439419s ago: executing program 0 (id=4364): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x24, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0xda71bee8a5a7ee97, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x14984, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb76e, @void, @value}, 0x94) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x1d9242) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x8e429121) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000000)=""/78, 0x9}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x3, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x4d, 0x5b, 0xaf, 0x10, 0x6e0, 0x319, 0x1f59, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xff, 0x0, 0x80, 0x40, [{{0x9, 0x4, 0x7, 0x4e, 0x2, 0xa9, 0x21, 0xb2, 0x7, [], [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x7f, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x60, 0xd, 0x9}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 5.118675874s ago: executing program 2 (id=4365): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0x23, 0x4c, {0x4c, 0x6, "22308045bba3115764be2286885e057acff487a8c36566dccc31c6d663630c510a85165bfbefa13a3ac30dc51fab314d48e8217bffbfb85b2cf90cdab641cbb9ceda3f4a456cbf7afef3"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}, &(0x7f0000000440)={0x0, 0xf, 0x66, {0x5, 0xf, 0x66, 0x1, [@generic={0x61, 0x10, 0x4, "8711e5ef9fe358f1bab1c3bf2ab552cf129bb30fdf179ccfdbbb5933916a6f0dddad6efcee19bbcc4f0f3e31937c8340dd18f6a1ce7dbee15ccfa792a7980a8bb1712374de19e646fa7b4c23eada74a9fa5c7b14108687bfc9832e5e3de2"}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x4, 0xf, "51457f7d", "ded54034"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x71, 0x1, 0x9, 0x2, 0x4, 0xffff, 0x5}}}, &(0x7f00000009c0)={0x84, &(0x7f00000005c0)={0x40, 0xb, 0x2b, "3805bfe0337fa6a316d93c1800d74e4bbea08724b87ed2abc35957f48d8fa54338d55a8df4d6955c909840"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x100, 0x1}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0xb, 0x2, "7195"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000800)={0x40, 0x13, 0x6}, &(0x7f0000000840)={0x40, 0x17, 0x6, @local}, &(0x7f0000000880)={0x40, 0x19, 0x2, "55ad"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0xd4}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x4}}) 4.916859861s ago: executing program 3 (id=4366): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.842874891s ago: executing program 1 (id=4367): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x551841, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x8, &(0x7f0000000300)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x1813c1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000040000000400000022000000000000002d7923efb074cb0b267134d5020ab7b3777eaf57a7c1b1e4652dee3e3ae8c3fcc74b7e438122d3ad47ee6a377075f3612d40fd13972a0f308e6b7ef3e77f48034190a317ace66015", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) close(r5) socket(0x1d, 0x2, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r4, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r5}, 0x20) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500001008000a00", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000086) 3.757598727s ago: executing program 1 (id=4368): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) flistxattr(r2, &(0x7f0000001640)=""/66, 0x42) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x10000, 0x1, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.989794603s ago: executing program 0 (id=4369): socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f00000003c0), &(0x7f0000000280)={0x0, 0xf, 0x8, 0xfffffffd, 0x0, 0x80}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000045000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000200)="0f09b8010000000f01d98fc9509a266767660f3881a04600b940000000b804000000ba000000000f300f06650fc775860f01c30f01c20f20d835200000000f22d8", 0x41}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r4, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=""/4096, 0x1000}, 0x10000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000540)={0x82, "fb8442b010ee9582e6f416bf3824efb333dfee84ca4d0952bf6d1f0d8718a6af168c31c54e1a77673c0f19fa5ca409a8f9e0e06956f1b1050da104665b755e725c3ff6487549d1e5a41df1d179fc1f85b711261d19f04fcbca1a025b934931a8d67f0238e0ce09cd851f1d485987854754e153c206b1f77aa46c4c605f6a65642987"}) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000042}, 0x20000080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000200008d"], 0x0, 0x36, 0x0, 0x0, 0x7f400000, 0x0, @void, @value}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_clone(0xc040600, 0x0, 0x0, 0x0, 0x0, 0x0) 1.933970101s ago: executing program 2 (id=4370): r0 = io_uring_setup(0x25f5, &(0x7f0000000340)={0x0, 0x0, 0x2, 0xfffffffd, 0x257}) io_uring_enter(r0, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) 1.932828255s ago: executing program 4 (id=4371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x3, 0x9, &(0x7f00000004c0)="bcd51aa83dcc14ebb517e65fb2a25ea18bda2ee9ed6119059398e8582ff7a8bb8924aabbfb30f6f5640d4886a57c602a50317f6b70779c00a249338975b6efb98b11c4d2c7b7d6cbec6b25111c67b9857556bba3e4b2c2d12d4bdc8e9cae21f3bce4c93f60e7c170281a7b4c26740a7818f8cecefbe8dedc164844b3f6d1cb112ce0114392427f0b55e103de3ea035086c23f525b434ac669330515ceb47c5abe00467a6a149550a22ef51a64200cbb4fe3d28625cac52229624a61397ae5e325caf1b6fb0011d6652d20eba039bf41f9f2b90d568d3863352c1bf9fc167107b9d22e7d9d0a65736bd430704944fa6c2d14fbce06766"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@mpls_newroute={0x30, 0x18, 0x200, 0x70bd25, 0x25dfdbfd, {0x1c, 0x20, 0x80, 0x1, 0xfe, 0x3, 0xfd, 0x2, 0x3c00}, [@RTA_VIA={0x14, 0x12, {0xa, "ce4d4b441424f8c69655d9d03a7c"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000804) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000140)=0x5) 1.558816431s ago: executing program 3 (id=4372): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x0, 0x208}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 938.780644ms ago: executing program 2 (id=4373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x3, 0x9, &(0x7f00000004c0)="bcd51aa83dcc14ebb517e65fb2a25ea18bda2ee9ed6119059398e8582ff7a8bb8924aabbfb30f6f5640d4886a57c602a50317f6b70779c00a249338975b6efb98b11c4d2c7b7d6cbec6b25111c67b9857556bba3e4b2c2d12d4bdc8e9cae21f3bce4c93f60e7c170281a7b4c26740a7818f8cecefbe8dedc164844b3f6d1cb112ce0114392427f0b55e103de3ea035086c23f525b434ac669330515ceb47c5abe00467a6a149550a22ef51a64200cbb4fe3d28625cac52229624a61397ae5e325caf1b6fb0011d6652d20eba039bf41f9f2b90d568d3863352c1bf9fc167107b9d22e7d9d0a65736bd430704944fa6c2d14fbce06766"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_XOR={0x8, 0x7, 0x7ff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 862.248062ms ago: executing program 3 (id=4374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x2000, 0xb5, 0x3, 0xeffffdff, 0x0, [{0x0, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x3, 0x3, '\x00', 0x2}, {0x8, 0x2, 0x5, '\x00', 0x9}, {0x0, 0x0, 0x1}, {0x0, 0x2, 0xbe}, {0x0, 0x6}, {0x0, 0x1, 0x0, '\x00', 0xff}, {0x8, 0x86, 0xfe, '\x00', 0x42}, {0x0, 0x2}, {0x3, 0x50}, {0x8b, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x4e}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {0x0, 0x80}, {0x1, 0x0, 0x4, '\x00', 0x4}, {0x0, 0xff, 0x0, '\x00', 0xdd}, {0x1, 0x3, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x5}, {0x5, 0x4}, {0x0, 0x40, 0x0, '\x00', 0x70}, {0x1, 0x0, 0xfe, '\x00', 0xe}, {0x10, 0x83, 0xe}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2, 0xa, 0x7, 0x2, 0x27, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb2, 0x6, {0x6, 0x32, 0x25, 0x2, 0x0, 0x4, 0x0, @in6=@local, @in=@multicast2}}, @sadb_sa={0x2, 0x1, 0x4d5, 0x9, 0xfd, 0x40, 0x1, 0x40000000}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x6e6bb5, 0x80, {0x6, 0x6c, 0x40, 0x0, 0x0, 0xfffff801, 0x0, @in=@multicast2, @in=@empty}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, @in6={0xa, 0x4e22, 0x8, @empty, 0x8}}, @sadb_x_sa2={0x2, 0x13, 0x9, 0x0, 0x0, 0x70bd28, 0x34ff}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d5}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_ident={0x2, 0xa, 0xa1, 0x0, 0x1}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}}]}, 0x138}}, 0x20000000) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2(&(0x7f0000000240), 0x84000) fsmount(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 670.226801ms ago: executing program 4 (id=4375): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) flistxattr(r2, &(0x7f0000001640)=""/66, 0x42) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x10000, 0x1, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 517.33804ms ago: executing program 1 (id=4376): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000003c0)=""/193, 0xc1}], 0x3, &(0x7f00000004c0)=""/198, 0xc6}, 0xc2}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@reiserfs_2={0x8, 0x2, {0x2, 0x8350}}, 0x6942) r2 = io_uring_setup(0x25f5, &(0x7f0000000340)={0x0, 0x0, 0x2, 0xfffffffd, 0x257}) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) 0s ago: executing program 3 (id=4377): io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) write$sndseq(r1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @time=@time={0x7, 0xe}}, {0x0, 0x0, 0x0, 0x5, @time={0xb, 0x8}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x70) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x18) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): er now disconnected from ttyUSB0 [ 1517.290775][T10534] elecom 0003:056E:011C.001E: probe with driver elecom failed with error -22 [ 1517.366352][ T10] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1517.405344][T13179] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1517.423953][ T10] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1517.459523][ T10] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1517.460448][T19571] udevd[19571]: Error opening device "/dev/input/event4": No such file or directory [ 1517.472339][ T10] keyspan 2-1:0.0: device disconnected [ 1517.496700][T19571] udevd[19571]: Unable to EVIOCGABS device "/dev/input/event4" [ 1517.504853][T19571] udevd[19571]: Unable to EVIOCGABS device "/dev/input/event4" [ 1517.591448][T20945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1517.646506][T20945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1517.664019][T20945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1517.680560][T20945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1517.693724][T19571] udevd[19571]: Unable to EVIOCGABS device "/dev/input/event4" [ 1517.701810][T19571] udevd[19571]: Unable to EVIOCGABS device "/dev/input/event4" [ 1517.711217][T13179] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1517.720385][T13179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.742697][T13179] usb 5-1: config 0 descriptor?? [ 1517.752296][T13179] cp210x 5-1:0.0: cp210x converter detected [ 1517.960499][T13179] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1518.159663][T10534] usb 5-1: USB disconnect, device number 3 [ 1518.195332][T10534] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1518.222331][T10534] cp210x 5-1:0.0: device disconnected [ 1518.236603][T20980] FAULT_INJECTION: forcing a failure. [ 1518.236603][T20980] name failslab, interval 1, probability 0, space 0, times 0 [ 1518.278575][T20980] CPU: 0 UID: 0 PID: 20980 Comm: syz.3.4102 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 1518.278602][T20980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1518.278614][T20980] Call Trace: [ 1518.278622][T20980] [ 1518.278630][T20980] dump_stack_lvl+0x189/0x250 [ 1518.278668][T20980] ? __pfx____ratelimit+0x10/0x10 [ 1518.278693][T20980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1518.278716][T20980] ? __pfx__printk+0x10/0x10 [ 1518.278746][T20980] should_fail_ex+0x414/0x560 [ 1518.278771][T20980] should_failslab+0xa8/0x100 [ 1518.278795][T20980] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1518.278816][T20980] ? __alloc_skb+0x112/0x2d0 [ 1518.278839][T20980] __alloc_skb+0x112/0x2d0 [ 1518.278861][T20980] nr_write_internal+0xe2/0xc60 [ 1518.278884][T20980] nr_establish_data_link+0x62/0xb0 [ 1518.278909][T20980] nr_connect+0x6e6/0xde0 [ 1518.278935][T20980] ? __pfx_nr_connect+0x10/0x10 [ 1518.278955][T20980] ? tomoyo_socket_connect_permission+0x164/0x290 [ 1518.278989][T20980] ? bpf_lsm_socket_connect+0x9/0x20 [ 1518.279012][T20980] __sys_connect+0x316/0x440 [ 1518.279029][T20980] ? __fget_files+0x3a0/0x420 [ 1518.279051][T20980] ? __pfx___sys_connect+0x10/0x10 [ 1518.279082][T20980] ? __pfx_ksys_write+0x10/0x10 [ 1518.279098][T20980] ? rcu_is_watching+0x15/0xb0 [ 1518.279129][T20980] __x64_sys_connect+0x7a/0x90 [ 1518.279148][T20980] do_syscall_64+0xfa/0x3b0 [ 1518.279170][T20980] ? lockdep_hardirqs_on+0x9c/0x150 [ 1518.279193][T20980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.279210][T20980] ? clear_bhb_loop+0x60/0xb0 [ 1518.279231][T20980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.279248][T20980] RIP: 0033:0x7fee8018e929 [ 1518.279265][T20980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1518.279280][T20980] RSP: 002b:00007fee810c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1518.279299][T20980] RAX: ffffffffffffffda RBX: 00007fee803b5fa0 RCX: 00007fee8018e929 [ 1518.279313][T20980] RDX: 0000000000000048 RSI: 0000200000000300 RDI: 0000000000000005 [ 1518.279324][T20980] RBP: 00007fee810c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1518.279336][T20980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1518.279346][T20980] R13: 0000000000000000 R14: 00007fee803b5fa0 R15: 00007fff5d5bf368 [ 1518.279376][T20980] [ 1519.760628][T20990] dlm: no local IP address has been set [ 1519.766665][T20990] dlm: cannot start dlm midcomms -107 [ 1520.035449][T10534] usb 1-1: USB disconnect, device number 99 [ 1520.082519][T20994] FAULT_INJECTION: forcing a failure. [ 1520.082519][T20994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1520.099759][T20994] CPU: 0 UID: 0 PID: 20994 Comm: syz.3.4106 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 1520.099785][T20994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1520.099796][T20994] Call Trace: [ 1520.099804][T20994] [ 1520.099813][T20994] dump_stack_lvl+0x189/0x250 [ 1520.099841][T20994] ? __pfx____ratelimit+0x10/0x10 [ 1520.099862][T20994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1520.099886][T20994] ? __pfx__printk+0x10/0x10 [ 1520.099903][T20994] ? __might_fault+0xb0/0x130 [ 1520.099934][T20994] should_fail_ex+0x414/0x560 [ 1520.099960][T20994] _copy_from_user+0x2d/0xb0 [ 1520.099977][T20994] ___sys_sendmsg+0x158/0x2a0 [ 1520.100000][T20994] ? __pfx____sys_sendmsg+0x10/0x10 [ 1520.100054][T20994] ? __fget_files+0x2a/0x420 [ 1520.100075][T20994] ? __fget_files+0x3a0/0x420 [ 1520.100105][T20994] __sys_sendmmsg+0x227/0x430 [ 1520.100130][T20994] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1520.100147][T20994] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1520.100196][T20994] ? ksys_write+0x22a/0x250 [ 1520.100218][T20994] ? __pfx_ksys_write+0x10/0x10 [ 1520.100234][T20994] ? rcu_is_watching+0x15/0xb0 [ 1520.100272][T20994] __x64_sys_sendmmsg+0xa0/0xc0 [ 1520.100293][T20994] do_syscall_64+0xfa/0x3b0 [ 1520.100316][T20994] ? lockdep_hardirqs_on+0x9c/0x150 [ 1520.100337][T20994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.100354][T20994] ? clear_bhb_loop+0x60/0xb0 [ 1520.100375][T20994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.100392][T20994] RIP: 0033:0x7fee8018e929 [ 1520.100407][T20994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1520.100422][T20994] RSP: 002b:00007fee810c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1520.100440][T20994] RAX: ffffffffffffffda RBX: 00007fee803b5fa0 RCX: 00007fee8018e929 [ 1520.100452][T20994] RDX: 0000000000000001 RSI: 0000200000004580 RDI: 0000000000000003 [ 1520.100464][T20994] RBP: 00007fee810c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1520.100474][T20994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1520.100485][T20994] R13: 0000000000000000 R14: 00007fee803b5fa0 R15: 00007fff5d5bf368 [ 1520.100512][T20994] [ 1520.364609][T20996] block nbd0: not configured, cannot reconfigure [ 1521.625080][T19864] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1521.776886][T19864] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1521.917092][T19864] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1521.958934][T19864] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1521.993209][T19864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.298220][T19864] usb 2-1: config 0 descriptor?? [ 1522.373367][T19864] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1522.570086][T21014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1522.668030][ T30] audit: type=1400 audit(1750721212.475:345): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21024 comm="syz.2.4118" dest=2 [ 1523.455046][T19864] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1523.575120][ T10] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1523.607047][T19864] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1523.619146][T19864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.684846][T19864] usb 4-1: config 0 descriptor?? [ 1523.695329][T19864] cp210x 4-1:0.0: cp210x converter detected [ 1523.747606][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1523.757011][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.784350][ T10] usb 3-1: config 0 descriptor?? [ 1523.799341][ T10] cp210x 3-1:0.0: cp210x converter detected [ 1524.131421][T21043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4122'. [ 1524.541316][T10534] usb 2-1: USB disconnect, device number 111 [ 1524.626108][ T10] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1524.668575][ T10] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1524.676936][T19864] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1524.706277][T19864] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1524.716473][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1524.726240][T19864] usb 4-1: cp210x converter now attached to ttyUSB1 [ 1524.764540][ T10] usb 3-1: USB disconnect, device number 99 [ 1524.773357][T19864] usb 4-1: USB disconnect, device number 100 [ 1524.794385][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1524.857388][T19864] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 1524.865876][ T10] cp210x 3-1:0.0: device disconnected [ 1524.951091][T19864] cp210x 4-1:0.0: device disconnected [ 1525.357274][T21054] dlm: no local IP address has been set [ 1525.362924][T21054] dlm: cannot start dlm midcomms -107 [ 1525.818802][T21058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1525.997870][T21059] netlink: 'syz.2.4127': attribute type 1 has an invalid length. [ 1526.006025][T21059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4127'. [ 1526.478659][ T30] audit: type=1400 audit(1750721216.285:346): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21062 comm="syz.3.4130" dest=2 [ 1526.601221][T21063] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4129'. [ 1526.834074][T21069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4131'. [ 1526.863838][T21069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4131'. [ 1527.149184][T21072] netlink: 'syz.2.4131': attribute type 10 has an invalid length. [ 1527.474052][T21063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1527.631535][T21063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1527.661720][T21080] FAULT_INJECTION: forcing a failure. [ 1527.661720][T21080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1527.680427][T21063] bond0 (unregistering): Released all slaves [ 1527.697072][T21080] CPU: 1 UID: 0 PID: 21080 Comm: syz.4.4133 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 1527.697099][T21080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1527.697110][T21080] Call Trace: [ 1527.697117][T21080] [ 1527.697126][T21080] dump_stack_lvl+0x189/0x250 [ 1527.697155][T21080] ? __pfx____ratelimit+0x10/0x10 [ 1527.697178][T21080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1527.697201][T21080] ? __pfx__printk+0x10/0x10 [ 1527.697219][T21080] ? __might_fault+0xb0/0x130 [ 1527.697251][T21080] should_fail_ex+0x414/0x560 [ 1527.697276][T21080] _copy_from_user+0x2d/0xb0 [ 1527.697294][T21080] ___sys_recvmsg+0x12e/0x510 [ 1527.697319][T21080] ? __pfx____sys_recvmsg+0x10/0x10 [ 1527.697361][T21080] ? __fget_files+0x3a0/0x420 [ 1527.697389][T21080] do_recvmmsg+0x307/0x770 [ 1527.697411][T21080] ? __pfx_do_recvmmsg+0x10/0x10 [ 1527.697436][T21080] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1527.697469][T21080] __x64_sys_recvmmsg+0x190/0x240 [ 1527.697488][T21080] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1527.697502][T21080] ? rcu_is_watching+0x15/0xb0 [ 1527.697524][T21080] ? do_syscall_64+0xbe/0x3b0 [ 1527.697545][T21080] do_syscall_64+0xfa/0x3b0 [ 1527.697561][T21080] ? lockdep_hardirqs_on+0x9c/0x150 [ 1527.697578][T21080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.697591][T21080] ? clear_bhb_loop+0x60/0xb0 [ 1527.697607][T21080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.697620][T21080] RIP: 0033:0x7fe2d858e929 [ 1527.697633][T21080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1527.697645][T21080] RSP: 002b:00007fe2d93a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1527.697661][T21080] RAX: ffffffffffffffda RBX: 00007fe2d87b6160 RCX: 00007fe2d858e929 [ 1527.697680][T21080] RDX: 0000000000001003 RSI: 00002000000048c0 RDI: 0000000000000003 [ 1527.697689][T21080] RBP: 00007fe2d93a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1527.697698][T21080] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 1527.697706][T21080] R13: 0000000000000001 R14: 00007fe2d87b6160 R15: 00007fffc5022bd8 [ 1527.697728][T21080] [ 1530.985579][T21110] FAULT_INJECTION: forcing a failure. [ 1530.985579][T21110] name failslab, interval 1, probability 0, space 0, times 0 [ 1531.032409][T21110] CPU: 0 UID: 0 PID: 21110 Comm: syz.4.4141 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 1531.032436][T21110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1531.032448][T21110] Call Trace: [ 1531.032456][T21110] [ 1531.032464][T21110] dump_stack_lvl+0x189/0x250 [ 1531.032492][T21110] ? __pfx____ratelimit+0x10/0x10 [ 1531.032514][T21110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1531.032534][T21110] ? __pfx__printk+0x10/0x10 [ 1531.032556][T21110] ? __pfx___might_resched+0x10/0x10 [ 1531.032578][T21110] ? fs_reclaim_acquire+0x7d/0x100 [ 1531.032605][T21110] should_fail_ex+0x414/0x560 [ 1531.032629][T21110] should_failslab+0xa8/0x100 [ 1531.032650][T21110] __kmalloc_noprof+0xcb/0x4f0 [ 1531.032668][T21110] ? kfree+0x4d/0x440 [ 1531.032682][T21110] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1531.032709][T21110] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1531.032734][T21110] ? tomoyo_domain+0xda/0x130 [ 1531.032760][T21110] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1531.032777][T21110] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1531.032793][T21110] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1531.032822][T21110] ? __lock_acquire+0xab9/0xd20 [ 1531.032853][T21110] ? __fget_files+0x2a/0x420 [ 1531.032871][T21110] ? __fget_files+0x2a/0x420 [ 1531.032884][T21110] ? __fget_files+0x3a0/0x420 [ 1531.032898][T21110] ? __fget_files+0x2a/0x420 [ 1531.032917][T21110] security_file_ioctl+0xcb/0x2d0 [ 1531.032935][T21110] __se_sys_ioctl+0x47/0x170 [ 1531.032950][T21110] do_syscall_64+0xfa/0x3b0 [ 1531.032967][T21110] ? lockdep_hardirqs_on+0x9c/0x150 [ 1531.032983][T21110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.032996][T21110] ? clear_bhb_loop+0x60/0xb0 [ 1531.033011][T21110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.033023][T21110] RIP: 0033:0x7fe2d858e929 [ 1531.033036][T21110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1531.033047][T21110] RSP: 002b:00007fe2d93e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1531.033061][T21110] RAX: ffffffffffffffda RBX: 00007fe2d87b5fa0 RCX: 00007fe2d858e929 [ 1531.033072][T21110] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1531.033079][T21110] RBP: 00007fe2d93e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1531.033087][T21110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1531.033094][T21110] R13: 0000000000000000 R14: 00007fe2d87b5fa0 R15: 00007fffc5022bd8 [ 1531.033116][T21110] [ 1531.033123][T21110] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1531.245109][T12510] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1531.294262][ T925] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1531.404986][T10534] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 1531.457592][ T925] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1531.466761][ T925] usb 2-1: config 0 has no interface number 0 [ 1531.487315][T12510] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1531.496449][T12510] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.515273][T12510] usb 3-1: Product: syz [ 1531.535215][ T925] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1531.544311][ T925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.566892][T12510] usb 3-1: Manufacturer: syz [ 1531.571549][T12510] usb 3-1: SerialNumber: syz [ 1531.589284][ T925] usb 2-1: Product: syz [ 1531.593504][ T925] usb 2-1: Manufacturer: syz [ 1531.599245][T12510] usb 3-1: config 0 descriptor?? [ 1531.625708][T12510] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1531.632119][ T925] usb 2-1: SerialNumber: syz [ 1531.643092][ T925] usb 2-1: config 0 descriptor?? [ 1531.651223][T10534] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 1531.675580][T10534] usb 1-1: config 0 has no interface number 0 [ 1531.723057][T10534] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1531.752123][T10534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.767847][T10534] usb 1-1: Product: syz [ 1531.772802][T10534] usb 1-1: Manufacturer: syz [ 1531.777852][T10534] usb 1-1: SerialNumber: syz [ 1531.789115][T10534] usb 1-1: config 0 descriptor?? [ 1531.819142][T21113] binder: 21112:21113 ioctl 5501 0 returned -22 [ 1531.931198][ T30] audit: type=1400 audit(1750721221.735:347): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21114 comm="syz.1.4142" dest=2 [ 1532.008602][ T925] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1532.260535][T12510] gspca_sunplus: reg_r err -110 [ 1532.287965][ T925] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1532.405788][ T925] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1532.478702][ T925] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1532.553444][ T925] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1532.835949][T19864] usb 2-1: USB disconnect, device number 112 [ 1532.888385][T19864] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1532.967204][T19864] keyspan 2-1:0.133: device disconnected [ 1533.730832][ T30] audit: type=1400 audit(1750721223.535:348): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21103 comm="syz.0.4128" dest=2 [ 1533.876337][T19864] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1533.970668][T10534] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 1533.990387][T10534] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 1534.004483][T10534] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 1534.013465][T10534] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 1534.028832][T10534] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1534.065430][T19864] usb 5-1: Using ep0 maxpacket: 8 [ 1534.077691][T19864] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 1534.086852][T21154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4153'. [ 1534.096049][T19864] usb 5-1: config 0 has no interface number 0 [ 1534.109859][T21154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4153'. [ 1534.119373][T19864] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1534.132988][T19864] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1534.173621][T19864] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1534.207415][T21155] netlink: 'syz.3.4153': attribute type 10 has an invalid length. [ 1534.221660][T19864] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1534.267910][T19864] usb 5-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=b8.c5 [ 1534.294848][T19864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.320904][T19864] usb 5-1: Product: syz [ 1534.335965][T19864] usb 5-1: Manufacturer: syz [ 1534.353362][T19864] usb 5-1: SerialNumber: syz [ 1534.375987][T19864] usb 5-1: config 0 descriptor?? [ 1534.611461][T19864] iowarrior 5-1:0.186: IOWarrior product=0x1501, serial=42424242 interface=186 now attached to iowarrior0 [ 1534.634215][T10534] usb 3-1: USB disconnect, device number 100 [ 1534.855053][T21144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1534.891721][T21144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1535.104129][ C0] iowarrior 5-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 1535.116229][T19864] usb 5-1: USB disconnect, device number 4 [ 1535.454571][ T977] usb 1-1: USB disconnect, device number 100 [ 1535.464857][ T977] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1535.479669][ T977] keyspan 1-1:0.133: device disconnected [ 1535.973362][T21170] kvm: apic: phys broadcast and lowest prio [ 1535.995297][T19864] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1536.156977][T19864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1536.172904][T19864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1536.185163][T19864] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.4d [ 1536.194559][T19864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.204823][T19864] usb 5-1: config 0 descriptor?? [ 1536.466303][T21172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4160'. [ 1536.484385][T21172] openvswitch: netlink: nsh attribute has 5260 unknown bytes. [ 1536.492632][T21172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1536.509677][T21172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1536.523498][T21172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1536.544275][T19864] usb 5-1: string descriptor 0 read error: -71 [ 1536.559785][T19864] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 1536.566736][T19864] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 1536.586688][T19864] usb 5-1: USB disconnect, device number 5 [ 1536.875248][T12510] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1537.055804][T12510] usb 3-1: Using ep0 maxpacket: 8 [ 1537.108024][T12510] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 1537.137269][T12510] usb 3-1: config 11 has no interface number 0 [ 1537.200976][T12510] usb 3-1: config 11 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1537.270283][T12510] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1537.319215][T12510] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1537.370562][T12510] usb 3-1: config 11 interface 95 has no altsetting 0 [ 1537.400243][T12510] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1537.419966][T12510] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.436825][T12510] usb 3-1: Product: syz [ 1537.441117][T12510] usb 3-1: Manufacturer: syz [ 1537.446441][T12510] usb 3-1: SerialNumber: syz [ 1537.656473][ T977] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1538.188013][ T30] audit: type=1800 audit(1750721227.995:349): pid=21179 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.4161" name="/" dev="9p" ino=2 res=0 errno=0 [ 1538.214303][T12510] usbtouchscreen 3-1:11.95: probe with driver usbtouchscreen failed with error -90 [ 1538.227539][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 1538.234160][T12510] usb 3-1: USB disconnect, device number 101 [ 1538.260314][ T977] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1538.282634][ T977] usb 5-1: config 0 has no interface number 0 [ 1538.301401][ T977] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1538.317660][ T977] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1538.332197][ T977] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1538.357379][ T977] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1538.371882][ T977] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1538.380576][ T977] usb 5-1: Product: syz [ 1538.384769][ T977] usb 5-1: SerialNumber: syz [ 1538.392524][ T977] usb 5-1: config 0 descriptor?? [ 1538.402276][T21189] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1538.421676][ T977] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 1538.429018][T19864] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1538.441489][ T977] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input43 [ 1538.566793][T19864] usb 4-1: device descriptor read/64, error -71 [ 1538.661783][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1538.815137][T19864] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1538.861902][T21189] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4163'. [ 1538.885416][T21189] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4163'. [ 1538.903669][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1538.911327][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1538.914979][T12510] usb 5-1: USB disconnect, device number 6 [ 1538.918291][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1538.965051][T19864] usb 4-1: device descriptor read/64, error -71 [ 1538.979578][T12510] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1538.999497][ T30] audit: type=1326 audit(1750721228.795:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21207 comm="syz.2.4169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb54758e929 code=0x0 [ 1539.075720][T19864] usb usb4-port1: attempt power cycle [ 1539.415200][T19864] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1539.435875][T19864] usb 4-1: device descriptor read/8, error -71 [ 1539.471532][T21220] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4173'. [ 1539.545092][T10534] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1539.647209][T21223] netlink: 'syz.4.4174': attribute type 11 has an invalid length. [ 1539.755468][T13179] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1539.770364][T19864] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1539.785078][T10534] usb 2-1: device descriptor read/64, error -71 [ 1539.895465][T19864] usb 4-1: device descriptor read/8, error -71 [ 1540.076203][T19864] usb usb4-port1: unable to enumerate USB device [ 1540.119609][T13179] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1540.135184][T10534] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1540.142950][T13179] usb 1-1: config 0 has no interface number 0 [ 1540.159048][T13179] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1540.180791][T13179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.194539][T13179] usb 1-1: config 0 descriptor?? [ 1540.235523][T13179] usb 1-1: selecting invalid altsetting 1 [ 1540.243985][T13179] dvb_ttusb_budget: ttusb_init_controller: error [ 1540.254305][T13179] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1540.275639][T10534] usb 2-1: device descriptor read/64, error -71 [ 1540.335786][T19864] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1540.344138][T13179] DVB: Unable to find symbol cx22700_attach() [ 1540.389305][T13179] DVB: Unable to find symbol tda10046_attach() [ 1540.397246][T13179] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1540.405709][T10534] usb usb2-port1: attempt power cycle [ 1540.499450][T21239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4177'. [ 1540.510981][T19864] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1540.525815][T19864] usb 3-1: not running at top speed; connect to a high speed hub [ 1540.538885][T21239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4177'. [ 1540.549945][T19864] usb 3-1: config 1 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1540.566741][T19864] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1540.577728][T19864] usb 3-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1540.594983][T19864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.614571][T19864] usb 3-1: Product: syz [ 1540.625336][T19864] usb 3-1: Manufacturer: syz [ 1540.630047][T21240] netlink: 'syz.4.4177': attribute type 10 has an invalid length. [ 1540.644394][T19864] usb 3-1: SerialNumber: syz [ 1540.835088][T10534] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1540.910936][T10534] usb 2-1: device descriptor read/8, error -71 [ 1541.245213][T10534] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1541.277600][T19864] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input44 [ 1541.295004][T10534] usb 2-1: device descriptor read/8, error -71 [ 1541.314160][ T5177] bcm5974 3-1:1.0: could not read from device [ 1541.336346][ T5177] bcm5974 3-1:1.0: could not read from device [ 1541.351312][ T5177] bcm5974 3-1:1.0: could not read from device [ 1541.359038][ T5177] bcm5974 3-1:1.0: could not read from device [ 1541.362185][T19864] usb 3-1: USB disconnect, device number 102 [ 1541.422153][T10534] usb usb2-port1: unable to enumerate USB device [ 1541.524996][ T24] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1541.696673][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1541.707722][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1541.719300][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1541.732550][ T24] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1541.741709][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.751032][ T24] usb 4-1: Product: syz [ 1541.755292][ T24] usb 4-1: Manufacturer: syz [ 1541.759999][ T24] usb 4-1: SerialNumber: syz [ 1541.768446][ T24] usb 4-1: config 0 descriptor?? [ 1541.774089][T21249] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1541.781990][T21249] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1541.790955][ T24] usb 4-1: ucan: probing device on interface #0 [ 1542.346878][T21249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4179'. [ 1542.389488][ T24] usb 4-1: ucan: device protocol version 1627456515 is not supported [ 1542.424136][ T24] usb 4-1: ucan: probe failed; try to update the device firmware [ 1542.548752][ T30] audit: type=1400 audit(1750721232.355:351): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21257 comm="syz.2.4182" dest=2 [ 1542.580067][ T24] usb 1-1: USB disconnect, device number 101 [ 1542.672947][T21262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1542.938657][T21263] netlink: 'syz.0.4183': attribute type 1 has an invalid length. [ 1542.950573][T21263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4183'. [ 1543.814667][T19864] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1544.110765][T19864] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1544.123322][T19864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.141617][T19864] usb 1-1: Product: syz [ 1544.152341][T19864] usb 1-1: Manufacturer: syz [ 1544.158113][T19864] usb 1-1: SerialNumber: syz [ 1544.165272][T19864] usb 1-1: config 0 descriptor?? [ 1544.304687][T21299] kvm: apic: phys broadcast and lowest prio [ 1544.341453][T10534] usb 4-1: USB disconnect, device number 105 [ 1544.355104][T13179] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1544.382747][T19864] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1544.441270][T21304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1544.520377][T13179] usb 3-1: device descriptor read/64, error -71 [ 1544.704977][T21305] netlink: 'syz.3.4198': attribute type 1 has an invalid length. [ 1544.713613][T21305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4198'. [ 1544.835297][T13179] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1544.975117][T13179] usb 3-1: device descriptor read/64, error -71 [ 1544.998243][ T30] audit: type=1400 audit(1750721234.805:352): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21276 comm="syz.0.4188" dest=2 [ 1545.084879][T21311] netlink: 588 bytes leftover after parsing attributes in process `syz.1.4200'. [ 1545.637180][T13179] usb usb3-port1: attempt power cycle [ 1545.647397][ T925] usb 1-1: USB disconnect, device number 102 [ 1545.989401][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.998171][T13179] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 1546.168986][T13179] usb 3-1: device descriptor read/8, error -71 [ 1546.527894][T13179] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 1546.561402][T13179] usb 3-1: device descriptor read/8, error -71 [ 1547.205915][T13179] usb usb3-port1: unable to enumerate USB device [ 1547.606278][T21327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4204'. [ 1547.924570][T21341] FAULT_INJECTION: forcing a failure. [ 1547.924570][T21341] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.937500][T21341] CPU: 0 UID: 0 PID: 21341 Comm: syz.4.4207 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 1547.937524][T21341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1547.937536][T21341] Call Trace: [ 1547.937543][T21341] [ 1547.937548][T21341] dump_stack_lvl+0x189/0x250 [ 1547.937568][T21341] ? __pfx____ratelimit+0x10/0x10 [ 1547.937583][T21341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1547.937597][T21341] ? __pfx__printk+0x10/0x10 [ 1547.937609][T21341] ? __pfx___might_resched+0x10/0x10 [ 1547.937625][T21341] ? fs_reclaim_acquire+0x7d/0x100 [ 1547.937651][T21341] should_fail_ex+0x414/0x560 [ 1547.937674][T21341] should_failslab+0xa8/0x100 [ 1547.937695][T21341] __kmalloc_noprof+0xcb/0x4f0 [ 1547.937714][T21341] ? tomoyo_encode+0x28b/0x550 [ 1547.937742][T21341] tomoyo_encode+0x28b/0x550 [ 1547.937762][T21341] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1547.937782][T21341] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1547.937794][T21341] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1547.937807][T21341] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1547.937821][T21341] ? __pfx___schedule+0x10/0x10 [ 1547.937834][T21341] ? irqentry_exit+0x74/0x90 [ 1547.937852][T21341] ? __lock_acquire+0xab9/0xd20 [ 1547.937883][T21341] ? __fget_files+0x2a/0x420 [ 1547.937907][T21341] ? __fget_files+0x2a/0x420 [ 1547.937925][T21341] ? __fget_files+0x3a0/0x420 [ 1547.937943][T21341] ? __fget_files+0x2a/0x420 [ 1547.937966][T21341] security_file_ioctl+0xcb/0x2d0 [ 1547.937988][T21341] __se_sys_ioctl+0x47/0x170 [ 1547.938009][T21341] do_syscall_64+0xfa/0x3b0 [ 1547.938031][T21341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.938048][T21341] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1547.938058][T21341] ? clear_bhb_loop+0x60/0xb0 [ 1547.938069][T21341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.938078][T21341] RIP: 0033:0x7fe2d858e929 [ 1547.938089][T21341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1547.938098][T21341] RSP: 002b:00007fe2d93a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1547.938109][T21341] RAX: ffffffffffffffda RBX: 00007fe2d87b6160 RCX: 00007fe2d858e929 [ 1547.938118][T21341] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 1547.938126][T21341] RBP: 00007fe2d93a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1547.938132][T21341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1547.938137][T21341] R13: 0000000000000000 R14: 00007fe2d87b6160 R15: 00007fffc5022bd8 [ 1547.938153][T21341] [ 1547.938193][T21341] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1548.225732][T21341] input: syz1 as /devices/virtual/input/input45 [ 1548.645633][T21350] netlink: 588 bytes leftover after parsing attributes in process `syz.1.4208'. [ 1550.755385][ T925] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 1550.925206][ T925] usb 3-1: device descriptor read/64, error -71 [ 1551.175227][ T925] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1551.295453][T12510] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 1551.315149][ T925] usb 3-1: device descriptor read/64, error -71 [ 1551.428347][ T925] usb usb3-port1: attempt power cycle [ 1551.517059][T12510] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1551.569037][T12510] usb 4-1: not running at top speed; connect to a high speed hub [ 1551.596812][T12510] usb 4-1: config 1 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1551.610249][T12510] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1551.619898][T12510] usb 4-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1551.631794][T12510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.640376][T12510] usb 4-1: Product: syz [ 1551.645618][T12510] usb 4-1: Manufacturer: syz [ 1551.653032][T12510] usb 4-1: SerialNumber: syz [ 1551.795019][ T925] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1551.825916][ T925] usb 3-1: device descriptor read/8, error -71 [ 1552.026267][T12510] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input46 [ 1552.047019][ T5177] bcm5974 4-1:1.0: could not read from device [ 1552.063240][ T5177] bcm5974 4-1:1.0: could not read from device [ 1552.069615][ T925] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1552.079559][T12510] usb 4-1: USB disconnect, device number 106 [ 1552.088440][ T5177] bcm5974 4-1:1.0: could not read from device [ 1552.088981][ T5177] bcm5974 4-1:1.0: could not read from device [ 1552.109237][ T925] usb 3-1: device descriptor read/8, error -71 [ 1552.249241][ T925] usb usb3-port1: unable to enumerate USB device [ 1552.575031][T15811] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1552.711853][T21385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1552.961861][T21388] netlink: 'syz.3.4221': attribute type 1 has an invalid length. [ 1552.969871][T21388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4221'. [ 1553.200952][T15811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1553.211962][T15811] usb 1-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1553.227372][T15811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.238334][T15811] usb 1-1: config 0 descriptor?? [ 1553.506722][T21392] create_pit_timer: 17 callbacks suppressed [ 1553.506736][T21392] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1553.611653][T21392] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1553.622342][T21392] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1553.834375][T19864] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1554.081102][T21392] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1554.095938][T21392] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1554.104118][T21397] kvm: apic: phys broadcast and lowest prio [ 1554.118545][T21392] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1554.129947][T21392] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1554.138575][T21392] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1554.147963][T21392] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1554.165178][T21392] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1554.199293][T15811] elecom 0003:056E:011C.001F: item fetching failed at offset 1/3 [ 1554.222278][T15811] elecom 0003:056E:011C.001F: probe with driver elecom failed with error -22 [ 1554.239168][T19864] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1554.274755][T19864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.294417][T19864] usb 5-1: Product: syz [ 1554.318125][T19864] usb 5-1: Manufacturer: syz [ 1554.322795][T19864] usb 5-1: SerialNumber: syz [ 1554.356697][T19864] usb 5-1: config 0 descriptor?? [ 1554.381380][T21408] FAULT_INJECTION: forcing a failure. [ 1554.381380][T21408] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.394719][T21408] CPU: 0 UID: 0 PID: 21408 Comm: syz.2.4228 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 1554.394744][T21408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1554.394755][T21408] Call Trace: [ 1554.394763][T21408] [ 1554.394771][T21408] dump_stack_lvl+0x189/0x250 [ 1554.394803][T21408] ? __pfx____ratelimit+0x10/0x10 [ 1554.394833][T21408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1554.394856][T21408] ? __pfx__printk+0x10/0x10 [ 1554.394879][T21408] ? __pfx___might_resched+0x10/0x10 [ 1554.394904][T21408] should_fail_ex+0x414/0x560 [ 1554.394928][T21408] should_failslab+0xa8/0x100 [ 1554.394951][T21408] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1554.394972][T21408] ? __alloc_skb+0x112/0x2d0 [ 1554.394994][T21408] __alloc_skb+0x112/0x2d0 [ 1554.395016][T21408] netlink_sendmsg+0x5c6/0xb30 [ 1554.395042][T21408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1554.395069][T21408] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1554.395087][T21408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1554.395106][T21408] __sock_sendmsg+0x21c/0x270 [ 1554.395132][T21408] ____sys_sendmsg+0x52d/0x830 [ 1554.395156][T21408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1554.395185][T21408] ? import_iovec+0x74/0xa0 [ 1554.395204][T21408] ___sys_sendmsg+0x21f/0x2a0 [ 1554.395224][T21408] ? __pfx____sys_sendmsg+0x10/0x10 [ 1554.395320][T21408] ? __fget_files+0x2a/0x420 [ 1554.395339][T21408] ? __fget_files+0x3a0/0x420 [ 1554.395368][T21408] __sys_sendmmsg+0x227/0x430 [ 1554.395392][T21408] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1554.395410][T21408] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1554.395459][T21408] ? ksys_write+0x22a/0x250 [ 1554.395480][T21408] ? __pfx_ksys_write+0x10/0x10 [ 1554.395506][T21408] __x64_sys_sendmmsg+0xa0/0xc0 [ 1554.395528][T21408] do_syscall_64+0xfa/0x3b0 [ 1554.395551][T21408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.395567][T21408] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1554.395583][T21408] ? clear_bhb_loop+0x60/0xb0 [ 1554.395603][T21408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.395619][T21408] RIP: 0033:0x7fb54758e929 [ 1554.395634][T21408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1554.395648][T21408] RSP: 002b:00007fb54844c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1554.395665][T21408] RAX: ffffffffffffffda RBX: 00007fb5477b5fa0 RCX: 00007fb54758e929 [ 1554.395678][T21408] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1554.395689][T21408] RBP: 00007fb54844c090 R08: 0000000000000000 R09: 0000000000000000 [ 1554.395700][T21408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1554.395710][T21408] R13: 0000000000000000 R14: 00007fb5477b5fa0 R15: 00007ffff4461cf8 [ 1554.395737][T21408] [ 1554.680727][T19864] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1554.690058][T21382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1554.698797][T21382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1554.710894][T21382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1554.719759][T21382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1554.829405][T21414] FAULT_INJECTION: forcing a failure. [ 1554.829405][T21414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1554.863242][T21414] CPU: 1 UID: 0 PID: 21414 Comm: syz.2.4230 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 1554.863268][T21414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1554.863280][T21414] Call Trace: [ 1554.863288][T21414] [ 1554.863297][T21414] dump_stack_lvl+0x189/0x250 [ 1554.863324][T21414] ? __pfx____ratelimit+0x10/0x10 [ 1554.863347][T21414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1554.863370][T21414] ? __pfx__printk+0x10/0x10 [ 1554.863389][T21414] ? __might_fault+0xb0/0x130 [ 1554.863421][T21414] should_fail_ex+0x414/0x560 [ 1554.863447][T21414] _copy_from_iter+0x1db/0x16f0 [ 1554.863484][T21414] ? __pfx__copy_from_iter+0x10/0x10 [ 1554.863510][T21414] ? rcu_is_watching+0x15/0xb0 [ 1554.863535][T21414] ? trace_kmalloc+0x1f/0xd0 [ 1554.863554][T21414] ? kernfs_fop_write_iter+0x158/0x4f0 [ 1554.863577][T21414] kernfs_fop_write_iter+0x19f/0x4f0 [ 1554.863604][T21414] vfs_write+0x548/0xa90 [ 1554.863628][T21414] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1554.863647][T21414] ? __pfx_vfs_write+0x10/0x10 [ 1554.863675][T21414] ? __fget_files+0x2a/0x420 [ 1554.863706][T21414] ksys_write+0x145/0x250 [ 1554.863727][T21414] ? __pfx_ksys_write+0x10/0x10 [ 1554.863743][T21414] ? rcu_is_watching+0x15/0xb0 [ 1554.863777][T21414] ? do_syscall_64+0xbe/0x3b0 [ 1554.863805][T21414] do_syscall_64+0xfa/0x3b0 [ 1554.863827][T21414] ? lockdep_hardirqs_on+0x9c/0x150 [ 1554.863850][T21414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.863867][T21414] ? clear_bhb_loop+0x60/0xb0 [ 1554.863889][T21414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.863906][T21414] RIP: 0033:0x7fb54758e929 [ 1554.863923][T21414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1554.863939][T21414] RSP: 002b:00007fb54844c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1554.863958][T21414] RAX: ffffffffffffffda RBX: 00007fb5477b5fa0 RCX: 00007fb54758e929 [ 1554.863972][T21414] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000005 [ 1554.863983][T21414] RBP: 00007fb54844c090 R08: 0000000000000000 R09: 0000000000000000 [ 1554.863994][T21414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1554.864004][T21414] R13: 0000000000000000 R14: 00007fb5477b5fa0 R15: 00007ffff4461cf8 [ 1554.864032][T21414] [ 1555.097365][T21417] FAULT_INJECTION: forcing a failure. [ 1555.097365][T21417] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.110125][T21417] CPU: 1 UID: 0 PID: 21417 Comm: syz.3.4229 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 1555.110149][T21417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1555.110160][T21417] Call Trace: [ 1555.110168][T21417] [ 1555.110176][T21417] dump_stack_lvl+0x189/0x250 [ 1555.110207][T21417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1555.110230][T21417] ? __pfx__printk+0x10/0x10 [ 1555.110260][T21417] should_fail_ex+0x414/0x560 [ 1555.110284][T21417] should_failslab+0xa8/0x100 [ 1555.110307][T21417] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1555.110322][T21417] ? getname_flags+0xb8/0x540 [ 1555.110342][T21417] getname_flags+0xb8/0x540 [ 1555.110362][T21417] do_mq_open+0x19d/0x780 [ 1555.110385][T21417] ? __pfx_do_mq_open+0x10/0x10 [ 1555.110411][T21417] __x64_sys_mq_open+0x16a/0x1c0 [ 1555.110428][T21417] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 1555.110456][T21417] do_syscall_64+0xfa/0x3b0 [ 1555.110476][T21417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.110489][T21417] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1555.110502][T21417] ? clear_bhb_loop+0x60/0xb0 [ 1555.110518][T21417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.110532][T21417] RIP: 0033:0x7fee8018e929 [ 1555.110545][T21417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1555.110556][T21417] RSP: 002b:00007fee8107e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1555.110571][T21417] RAX: ffffffffffffffda RBX: 00007fee803b6160 RCX: 00007fee8018e929 [ 1555.110581][T21417] RDX: 0000000000000096 RSI: 0000000000000080 RDI: 0000000000000000 [ 1555.110590][T21417] RBP: 00007fee8107e090 R08: 0000000000000000 R09: 0000000000000000 [ 1555.110599][T21417] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 1555.110608][T21417] R13: 0000000000000000 R14: 00007fee803b6160 R15: 00007fff5d5bf368 [ 1555.110629][T21417] [ 1555.798648][ T30] audit: type=1400 audit(1750721245.605:353): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21393 comm="syz.4.4225" dest=2 [ 1555.824317][ T925] usb 5-1: USB disconnect, device number 7 [ 1555.981538][T21422] FAULT_INJECTION: forcing a failure. [ 1555.981538][T21422] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.999612][T21422] CPU: 0 UID: 0 PID: 21422 Comm: syz.3.4231 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 1555.999635][T21422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1555.999645][T21422] Call Trace: [ 1555.999651][T21422] [ 1555.999657][T21422] dump_stack_lvl+0x189/0x250 [ 1555.999678][T21422] ? __pfx____ratelimit+0x10/0x10 [ 1555.999696][T21422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1555.999710][T21422] ? __pfx__printk+0x10/0x10 [ 1555.999721][T21422] ? __pfx___might_resched+0x10/0x10 [ 1555.999742][T21422] ? fs_reclaim_acquire+0x7d/0x100 [ 1555.999758][T21422] should_fail_ex+0x414/0x560 [ 1555.999774][T21422] should_failslab+0xa8/0x100 [ 1555.999788][T21422] __kmalloc_noprof+0xcb/0x4f0 [ 1555.999799][T21422] ? tomoyo_encode+0x28b/0x550 [ 1555.999816][T21422] tomoyo_encode+0x28b/0x550 [ 1555.999832][T21422] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1555.999847][T21422] ? tomoyo_domain+0xda/0x130 [ 1555.999864][T21422] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1555.999876][T21422] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1555.999889][T21422] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1555.999910][T21422] ? __lock_acquire+0xab9/0xd20 [ 1555.999933][T21422] ? __fget_files+0x2a/0x420 [ 1555.999948][T21422] ? __fget_files+0x2a/0x420 [ 1555.999959][T21422] ? __fget_files+0x3a0/0x420 [ 1555.999971][T21422] ? __fget_files+0x2a/0x420 [ 1555.999985][T21422] security_file_ioctl+0xcb/0x2d0 [ 1555.999999][T21422] __se_sys_ioctl+0x47/0x170 [ 1556.000011][T21422] do_syscall_64+0xfa/0x3b0 [ 1556.000026][T21422] ? lockdep_hardirqs_on+0x9c/0x150 [ 1556.000040][T21422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.000049][T21422] ? clear_bhb_loop+0x60/0xb0 [ 1556.000061][T21422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.000071][T21422] RIP: 0033:0x7fee8018e929 [ 1556.000081][T21422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1556.000090][T21422] RSP: 002b:00007fee810c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1556.000102][T21422] RAX: ffffffffffffffda RBX: 00007fee803b5fa0 RCX: 00007fee8018e929 [ 1556.000108][T21422] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1556.000114][T21422] RBP: 00007fee810c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1556.000121][T21422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1556.000126][T21422] R13: 0000000000000000 R14: 00007fee803b5fa0 R15: 00007fff5d5bf368 [ 1556.000141][T21422] [ 1556.000203][T21422] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1557.206921][T21430] lo speed is unknown, defaulting to 1000 [ 1557.329778][ T30] audit: type=1400 audit(1750721247.135:354): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21429 comm="syz.1.4235" daddr=fe80::aa dest=20003 [ 1557.358477][T21431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4235'. [ 1557.442755][ T30] audit: type=1400 audit(1750721247.245:355): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21429 comm="syz.1.4235" daddr=fe80::aa dest=20001 [ 1557.547334][ T24] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1557.553991][T15811] usb 1-1: USB disconnect, device number 103 [ 1557.744822][ T24] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1557.764650][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.773473][ T24] usb 3-1: Product: syz [ 1557.785826][ T24] usb 3-1: Manufacturer: syz [ 1557.791890][ T24] usb 3-1: SerialNumber: syz [ 1557.799864][ T24] usb 3-1: config 0 descriptor?? [ 1557.810415][T21445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4236'. [ 1558.383511][ T24] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1558.462216][T21451] kvm: apic: phys broadcast and lowest prio [ 1558.484638][T21445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4236'. [ 1558.605916][ T30] audit: type=1400 audit(1750721248.415:356): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21433 comm="syz.2.4233" dest=2 [ 1558.626252][ T977] usb 3-1: USB disconnect, device number 111 [ 1558.651206][T21457] netlink: 'syz.0.4236': attribute type 10 has an invalid length. [ 1559.750999][T21470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4243'. [ 1560.061284][T21477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1561.146199][T15811] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1561.288023][T21502] kvm: apic: phys broadcast and lowest prio [ 1561.315030][T15811] usb 5-1: Using ep0 maxpacket: 32 [ 1561.486756][T15811] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1561.700776][T15811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.716096][T15811] usb 5-1: config 0 descriptor?? [ 1561.749621][T15811] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1562.604418][T21523] kvm: apic: phys broadcast and lowest prio [ 1562.842996][T21529] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4261'. [ 1562.921462][T21491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1562.953254][T21534] 9pnet_fd: Insufficient options for proto=fd [ 1562.964453][T21491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1563.019053][T21491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4250'. [ 1563.266875][T15811] gspca_sunplus: reg_w_riv err -110 [ 1563.334986][T15811] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 1563.503954][T19864] usb 5-1: USB disconnect, device number 8 [ 1563.558651][T15811] kernel write not supported for file /815/projid_map (pid: 15811 comm: kworker/0:4) [ 1563.803472][T21548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4267'. [ 1563.825042][T15811] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1563.975028][T15811] usb 4-1: device descriptor read/64, error -71 [ 1564.040985][T21550] kvm: apic: phys broadcast and lowest prio [ 1564.225250][T15811] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1564.338978][T21561] netlink: 588 bytes leftover after parsing attributes in process `syz.2.4270'. [ 1564.365275][T15811] usb 4-1: device descriptor read/64, error -71 [ 1564.925499][ T925] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1565.097665][T15811] usb usb4-port1: attempt power cycle [ 1565.223834][ T925] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1565.457213][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4272'. [ 1565.477344][ T925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1565.493001][ T925] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1565.502823][ T925] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1565.515208][T15811] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1565.528208][ T925] usb 5-1: Manufacturer: syz [ 1565.536576][T15811] usb 4-1: device descriptor read/8, error -71 [ 1565.538702][ T925] usb 5-1: config 0 descriptor?? [ 1565.626462][ T925] rc_core: IR keymap rc-hauppauge not found [ 1565.641186][ T925] Registered IR keymap rc-empty [ 1565.648415][ T925] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1565.661212][ T925] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input47 [ 1565.762661][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 1565.773129][T21555] FAULT_INJECTION: forcing a failure. [ 1565.773129][T21555] name failslab, interval 1, probability 0, space 0, times 0 [ 1565.775115][T19864] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1565.792820][T21555] CPU: 1 UID: 0 PID: 21555 Comm: syz.4.4269 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 1565.792846][T21555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1565.792860][T21555] Call Trace: [ 1565.792867][T21555] [ 1565.792875][T21555] dump_stack_lvl+0x189/0x250 [ 1565.792904][T21555] ? __pfx____ratelimit+0x10/0x10 [ 1565.792927][T21555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1565.792949][T21555] ? __pfx__printk+0x10/0x10 [ 1565.792968][T21555] ? __pfx___might_resched+0x10/0x10 [ 1565.792990][T21555] ? fs_reclaim_acquire+0x7d/0x100 [ 1565.793017][T21555] should_fail_ex+0x414/0x560 [ 1565.793042][T21555] should_failslab+0xa8/0x100 [ 1565.793065][T21555] __kmalloc_noprof+0xcb/0x4f0 [ 1565.793083][T21555] ? tomoyo_encode+0x28b/0x550 [ 1565.793109][T21555] tomoyo_encode+0x28b/0x550 [ 1565.793136][T21555] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1565.793169][T21555] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1565.793188][T21555] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1565.793211][T21555] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1565.793247][T21555] ? __lock_acquire+0xab9/0xd20 [ 1565.793285][T21555] ? __fget_files+0x2a/0x420 [ 1565.793308][T21555] ? __fget_files+0x2a/0x420 [ 1565.793327][T21555] ? __fget_files+0x3a0/0x420 [ 1565.793345][T21555] ? __fget_files+0x2a/0x420 [ 1565.793369][T21555] security_file_ioctl+0xcb/0x2d0 [ 1565.793392][T21555] __se_sys_ioctl+0x47/0x170 [ 1565.793412][T21555] do_syscall_64+0xfa/0x3b0 [ 1565.793435][T21555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.793451][T21555] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1565.793467][T21555] ? clear_bhb_loop+0x60/0xb0 [ 1565.793486][T21555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.793502][T21555] RIP: 0033:0x7fe2d858e929 [ 1565.793519][T21555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1565.793533][T21555] RSP: 002b:00007fe2d93e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1565.793551][T21555] RAX: ffffffffffffffda RBX: 00007fe2d87b5fa0 RCX: 00007fe2d858e929 [ 1565.793564][T21555] RDX: 0000200000000040 RSI: 0000000080284504 RDI: 0000000000000004 [ 1565.793575][T21555] RBP: 00007fe2d93e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1565.793585][T21555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1565.793595][T21555] R13: 0000000000000000 R14: 00007fe2d87b5fa0 R15: 00007fffc5022bd8 [ 1565.793624][T21555] [ 1565.793659][T21555] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1566.046183][T15811] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1566.047230][ T925] usb 5-1: USB disconnect, device number 9 [ 1566.085827][T15811] usb 4-1: device descriptor read/8, error -71 [ 1566.344993][T15811] usb usb4-port1: unable to enumerate USB device [ 1566.597811][T19864] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1566.611229][T19864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.619574][T19864] usb 1-1: Product: syz [ 1566.623806][T19864] usb 1-1: Manufacturer: syz [ 1566.630201][T19864] usb 1-1: SerialNumber: syz [ 1566.639757][T19864] usb 1-1: config 0 descriptor?? [ 1567.093050][T21584] netlink: 'syz.3.4277': attribute type 2 has an invalid length. [ 1567.104575][T21584] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4277'. [ 1567.342426][T21596] netlink: 588 bytes leftover after parsing attributes in process `syz.3.4280'. [ 1567.773397][T21597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4278'. [ 1567.811317][T19864] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1567.822005][T21597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4278'. [ 1567.866485][T21599] kvm: apic: phys broadcast and lowest prio [ 1567.970591][T21597] netlink: 'syz.1.4278': attribute type 10 has an invalid length. [ 1568.195738][T21610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4285'. [ 1568.414464][T21614] FAULT_INJECTION: forcing a failure. [ 1568.414464][T21614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1568.427918][T21614] CPU: 0 UID: 0 PID: 21614 Comm: syz.2.4283 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 1568.427941][T21614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1568.427952][T21614] Call Trace: [ 1568.427957][T21614] [ 1568.427963][T21614] dump_stack_lvl+0x189/0x250 [ 1568.427983][T21614] ? __pfx____ratelimit+0x10/0x10 [ 1568.427998][T21614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1568.428012][T21614] ? __pfx__printk+0x10/0x10 [ 1568.428022][T21614] ? __might_fault+0xb0/0x130 [ 1568.428040][T21614] should_fail_ex+0x414/0x560 [ 1568.428055][T21614] _copy_from_user+0x2d/0xb0 [ 1568.428065][T21614] kstrtouint_from_user+0xc4/0x170 [ 1568.428079][T21614] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1568.428101][T21614] proc_fail_nth_write+0x88/0x240 [ 1568.428117][T21614] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1568.428134][T21614] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1568.428148][T21614] vfs_write+0x27e/0xa90 [ 1568.428165][T21614] ? __pfx_vfs_write+0x10/0x10 [ 1568.428176][T21614] ? __fget_files+0x2a/0x420 [ 1568.428192][T21614] ? __fget_files+0x3a0/0x420 [ 1568.428204][T21614] ? __fget_files+0x2a/0x420 [ 1568.428221][T21614] ksys_write+0x145/0x250 [ 1568.428233][T21614] ? __pfx_ksys_write+0x10/0x10 [ 1568.428247][T21614] ? do_syscall_64+0xbe/0x3b0 [ 1568.428264][T21614] do_syscall_64+0xfa/0x3b0 [ 1568.428279][T21614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.428288][T21614] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1568.428298][T21614] ? clear_bhb_loop+0x60/0xb0 [ 1568.428310][T21614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.428319][T21614] RIP: 0033:0x7fb54758d3df [ 1568.428330][T21614] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1568.428338][T21614] RSP: 002b:00007fb54840a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1568.428350][T21614] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb54758d3df [ 1568.428357][T21614] RDX: 0000000000000001 RSI: 00007fb54840a0a0 RDI: 0000000000000007 [ 1568.428363][T21614] RBP: 00007fb54840a090 R08: 0000000000000000 R09: 0000000000000000 [ 1568.428369][T21614] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1568.428375][T21614] R13: 0000000000000000 R14: 00007fb5477b6160 R15: 00007ffff4461cf8 [ 1568.428390][T21614] [ 1568.669569][T21613] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1568.844535][ T30] audit: type=1400 audit(1750721258.645:357): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21568 comm="syz.0.4274" dest=2 [ 1568.864989][ T10] usb 1-1: USB disconnect, device number 104 [ 1569.525099][T21623] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1570.191894][T21629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4287'. [ 1572.120759][T21649] dlm: non-version read from control device 211 [ 1572.136888][T21649] dlm: non-version read from control device 211 [ 1572.143340][T21649] dlm: non-version read from control device 211 [ 1572.150247][T21649] dlm: non-version read from control device 211 [ 1572.156678][T21649] dlm: non-version read from control device 211 [ 1572.163832][T21649] dlm: non-version read from control device 211 [ 1572.171043][T21649] dlm: non-version read from control device 211 [ 1572.177556][T21649] dlm: non-version read from control device 211 [ 1572.184071][T21649] dlm: non-version read from control device 211 [ 1572.190594][T21649] dlm: non-version read from control device 211 [ 1572.197070][T21649] dlm: non-version read from control device 211 [ 1572.204196][T21649] dlm: non-version read from control device 211 [ 1572.210866][T21649] dlm: non-version read from control device 211 [ 1572.217378][T21649] dlm: non-version read from control device 211 [ 1572.223836][T21649] dlm: non-version read from control device 211 [ 1572.230335][T21649] dlm: non-version read from control device 211 [ 1572.236875][T21649] dlm: non-version read from control device 211 [ 1572.243330][T21649] dlm: non-version read from control device 211 [ 1572.249834][T21649] dlm: non-version read from control device 211 [ 1572.256997][T21649] dlm: non-version read from control device 211 [ 1572.263475][T21649] dlm: non-version read from control device 211 [ 1572.270738][T21649] dlm: non-version read from control device 211 [ 1572.277779][T21649] dlm: non-version read from control device 211 [ 1572.284365][T21649] dlm: non-version read from control device 211 [ 1572.291002][T21649] dlm: non-version read from control device 211 [ 1572.297556][T21649] dlm: non-version read from control device 211 [ 1572.304014][T21649] dlm: non-version read from control device 211 [ 1572.310965][T21649] dlm: non-version read from control device 211 [ 1572.317477][T21649] dlm: non-version read from control device 211 [ 1572.323940][T21649] dlm: non-version read from control device 211 [ 1572.330451][T21649] dlm: non-version read from control device 211 [ 1572.336994][T21649] dlm: non-version read from control device 211 [ 1572.343494][T21649] dlm: non-version read from control device 211 [ 1572.350071][T21649] dlm: non-version read from control device 211 [ 1572.356583][T21649] dlm: non-version read from control device 211 [ 1572.363861][T21649] dlm: non-version read from control device 211 [ 1572.371231][T21649] dlm: non-version read from control device 211 [ 1572.377530][T21649] dlm: non-version read from control device 211 [ 1572.383771][T21649] dlm: non-version read from control device 211 [ 1572.390046][T21649] dlm: non-version read from control device 211 [ 1572.396320][T21649] dlm: non-version read from control device 211 [ 1572.402560][T21649] dlm: non-version read from control device 211 [ 1572.408830][T21649] dlm: non-version read from control device 211 [ 1572.415181][T21649] dlm: non-version read from control device 211 [ 1572.421430][T21649] dlm: non-version read from control device 211 [ 1572.427708][T21649] dlm: non-version read from control device 211 [ 1572.433947][T21649] dlm: non-version read from control device 211 [ 1572.440223][T21649] dlm: non-version read from control device 211 [ 1572.446523][T21649] dlm: non-version read from control device 211 [ 1572.452774][T21649] dlm: non-version read from control device 211 [ 1572.459063][T21649] dlm: non-version read from control device 211 [ 1572.465404][T21649] dlm: non-version read from control device 211 [ 1572.472393][T21649] dlm: non-version read from control device 211 [ 1572.478687][T21649] dlm: non-version read from control device 211 [ 1572.484994][T21649] dlm: non-version read from control device 211 [ 1572.491239][T21649] dlm: non-version read from control device 211 [ 1572.497531][T21649] dlm: non-version read from control device 211 [ 1572.503768][T21649] dlm: non-version read from control device 211 [ 1572.510035][T21649] dlm: non-version read from control device 211 [ 1572.516382][T21649] dlm: non-version read from control device 211 [ 1572.522619][T21649] dlm: non-version read from control device 211 [ 1572.528889][T21649] dlm: non-version read from control device 211 [ 1572.535162][T21649] dlm: non-version read from control device 211 [ 1572.541401][T21649] dlm: non-version read from control device 211 [ 1572.547667][T21649] dlm: non-version read from control device 211 [ 1572.553907][T21649] dlm: non-version read from control device 211 [ 1572.560169][T21649] dlm: non-version read from control device 211 [ 1572.566518][T21649] dlm: non-version read from control device 211 [ 1572.573580][T21649] dlm: non-version read from control device 211 [ 1572.579893][T21649] dlm: non-version read from control device 211 [ 1572.586164][T21649] dlm: non-version read from control device 211 [ 1572.592416][T21649] dlm: non-version read from control device 211 [ 1572.598680][T21649] dlm: non-version read from control device 211 [ 1572.605013][T21649] dlm: non-version read from control device 211 [ 1572.611254][T21649] dlm: non-version read from control device 211 [ 1572.617565][T21649] dlm: non-version read from control device 211 [ 1572.623799][T21649] dlm: non-version read from control device 211 [ 1572.630071][T21649] dlm: non-version read from control device 211 [ 1572.636332][T21649] dlm: non-version read from control device 211 [ 1572.642568][T21649] dlm: non-version read from control device 211 [ 1572.648835][T21649] dlm: non-version read from control device 211 [ 1572.655101][T21649] dlm: non-version read from control device 211 [ 1572.661342][T21649] dlm: non-version read from control device 211 [ 1572.667688][T21649] dlm: non-version read from control device 211 [ 1572.675169][T21649] dlm: non-version read from control device 211 [ 1573.140991][T21662] PKCS7: Unknown OID: [4] 0.0 [ 1573.163898][T21662] PKCS7: Only support pkcs7_signedData type [ 1573.960720][T21666] kvm: apic: phys broadcast and lowest prio [ 1574.022825][ T925] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1574.030377][ T6006] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1574.068814][ T925] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1574.195008][ T6006] usb 2-1: Using ep0 maxpacket: 8 [ 1574.221682][ T6006] usb 2-1: config index 0 descriptor too short (expected 30482, got 18) [ 1574.258389][ T6006] usb 2-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 1574.287776][ T6006] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 1574.314871][ T6006] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 1574.344510][ T6006] usb 2-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 1574.364788][ T6006] usb 2-1: Product: syz [ 1574.369071][ T6006] usb 2-1: Manufacturer: syz [ 1574.386745][ T6006] usb 2-1: config 0 descriptor?? [ 1574.419669][ T6006] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1574.441782][ T6006] usb 2-1: Detected FT2232C/D [ 1574.600922][T21673] FAULT_INJECTION: forcing a failure. [ 1574.600922][T21673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1574.720004][T21673] CPU: 0 UID: 0 PID: 21673 Comm: syz.3.4298 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 1574.720030][T21673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1574.720042][T21673] Call Trace: [ 1574.720049][T21673] [ 1574.720064][T21673] dump_stack_lvl+0x189/0x250 [ 1574.720088][T21673] ? __pfx____ratelimit+0x10/0x10 [ 1574.720111][T21673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1574.720134][T21673] ? __pfx__printk+0x10/0x10 [ 1574.720152][T21673] ? __might_fault+0xb0/0x130 [ 1574.720181][T21673] should_fail_ex+0x414/0x560 [ 1574.720198][T21673] _copy_from_user+0x2d/0xb0 [ 1574.720208][T21673] core_sys_select+0x604/0xa20 [ 1574.720226][T21673] ? __pfx_core_sys_select+0x10/0x10 [ 1574.720262][T21673] ? __pfx_set_user_sigmask+0x10/0x10 [ 1574.720297][T21673] __se_sys_pselect6+0x27a/0x300 [ 1574.720323][T21673] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1574.720338][T21673] ? __pfx_ksys_write+0x10/0x10 [ 1574.720349][T21673] ? rcu_is_watching+0x15/0xb0 [ 1574.720366][T21673] ? __x64_sys_pselect6+0x21/0xf0 [ 1574.720380][T21673] do_syscall_64+0xfa/0x3b0 [ 1574.720398][T21673] ? lockdep_hardirqs_on+0x9c/0x150 [ 1574.720421][T21673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.720438][T21673] ? clear_bhb_loop+0x60/0xb0 [ 1574.720459][T21673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.720475][T21673] RIP: 0033:0x7fee8018e929 [ 1574.720488][T21673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1574.720496][T21673] RSP: 002b:00007fee8109f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1574.720508][T21673] RAX: ffffffffffffffda RBX: 00007fee803b6080 RCX: 00007fee8018e929 [ 1574.720515][T21673] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000040 [ 1574.720521][T21673] RBP: 00007fee8109f090 R08: 0000000000000000 R09: 0000000000000000 [ 1574.720527][T21673] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 1574.720533][T21673] R13: 0000000000000000 R14: 00007fee803b6080 R15: 00007fff5d5bf368 [ 1574.720557][T21673] [ 1574.965782][ T6006] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1574.974456][ T6006] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1574.996445][ T6006] usb 2-1: USB disconnect, device number 117 [ 1575.038368][ T6006] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1575.081315][ T6006] ftdi_sio 2-1:0.0: device disconnected [ 1575.675126][ T925] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1575.849759][ T925] usb 5-1: Using ep0 maxpacket: 16 [ 1575.887677][ T925] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1575.908944][ T925] usb 5-1: config 255 has an invalid interface number: 7 but max is 0 [ 1575.952384][ T925] usb 5-1: config 255 has no interface number 0 [ 1575.979083][ T925] usb 5-1: config 255 interface 7 altsetting 78 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1575.999470][ T925] usb 5-1: config 255 interface 7 has no altsetting 0 [ 1576.836040][T21686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4302'. [ 1576.852753][ T925] usb 5-1: New USB device found, idVendor=06e0, idProduct=0319, bcdDevice=1f.59 [ 1576.862358][ T925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.870785][ T925] usb 5-1: Product: syz [ 1576.877793][ T925] usb 5-1: Manufacturer: syz [ 1576.882409][ T925] usb 5-1: SerialNumber: syz [ 1576.896843][T21680] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1578.181231][ T925] ti_usb_3410_5052 5-1:255.7: TI USB 3410 1 port adapter converter detected [ 1578.213509][ T925] ti_usb_3410_5052 5-1:255.7: missing endpoints [ 1578.249177][ T925] usb 5-1: USB disconnect, device number 10 [ 1578.300957][T21695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1579.465673][T21695] netlink: 'syz.3.4304': attribute type 1 has an invalid length. [ 1579.504003][T21695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4304'. [ 1579.538893][T21709] dlm: non-version read from control device 211 [ 1579.546204][T21709] dlm: non-version read from control device 211 [ 1579.552460][T21709] dlm: non-version read from control device 211 [ 1579.558827][T21709] dlm: non-version read from control device 211 [ 1579.565162][T21709] dlm: non-version read from control device 211 [ 1579.571413][T21709] dlm: non-version read from control device 211 [ 1579.577726][T21709] dlm: non-version read from control device 211 [ 1579.583964][T21709] dlm: non-version read from control device 211 [ 1579.590256][T21709] dlm: non-version read from control device 211 [ 1579.596536][T21709] dlm: non-version read from control device 211 [ 1579.602844][T21709] dlm: non-version read from control device 211 [ 1579.609202][T21709] dlm: non-version read from control device 211 [ 1579.615502][T21709] dlm: non-version read from control device 211 [ 1579.621808][T21709] dlm: non-version read from control device 211 [ 1579.628124][T21709] dlm: non-version read from control device 211 [ 1579.634375][T21709] dlm: non-version read from control device 211 [ 1579.641220][T21709] dlm: non-version read from control device 211 [ 1579.647682][T21709] dlm: non-version read from control device 211 [ 1579.653929][T21709] dlm: non-version read from control device 211 [ 1579.660289][T21709] dlm: non-version read from control device 211 [ 1579.666554][T21709] dlm: non-version read from control device 211 [ 1579.672798][T21709] dlm: non-version read from control device 211 [ 1579.679075][T21709] dlm: non-version read from control device 211 [ 1579.685335][T21709] dlm: non-version read from control device 211 [ 1579.691578][T21709] dlm: non-version read from control device 211 [ 1579.697868][T21709] dlm: non-version read from control device 211 [ 1579.704106][T21709] dlm: non-version read from control device 211 [ 1579.710463][T21709] dlm: non-version read from control device 211 [ 1579.716741][T21709] dlm: non-version read from control device 211 [ 1579.722979][T21709] dlm: non-version read from control device 211 [ 1579.729279][T21709] dlm: non-version read from control device 211 [ 1579.735557][T21709] dlm: non-version read from control device 211 [ 1579.742246][T21709] dlm: non-version read from control device 211 [ 1579.748525][T21709] dlm: non-version read from control device 211 [ 1579.754763][T21709] dlm: non-version read from control device 211 [ 1579.761085][T21709] dlm: non-version read from control device 211 [ 1579.767354][T21709] dlm: non-version read from control device 211 [ 1579.773599][T21709] dlm: non-version read from control device 211 [ 1579.779870][T21709] dlm: non-version read from control device 211 [ 1579.786137][T21709] dlm: non-version read from control device 211 [ 1579.792370][T21709] dlm: non-version read from control device 211 [ 1579.798625][T21709] dlm: non-version read from control device 211 [ 1579.804868][T21709] dlm: non-version read from control device 211 [ 1579.811241][T21709] dlm: non-version read from control device 211 [ 1579.817527][T21709] dlm: non-version read from control device 211 [ 1579.823912][T21709] dlm: non-version read from control device 211 [ 1579.830192][T21709] dlm: non-version read from control device 211 [ 1579.836467][T21709] dlm: non-version read from control device 211 [ 1579.843334][T21709] dlm: non-version read from control device 211 [ 1579.849631][T21709] dlm: non-version read from control device 211 [ 1579.855899][T21709] dlm: non-version read from control device 211 [ 1579.862224][T21709] dlm: non-version read from control device 211 [ 1579.868727][T21709] dlm: non-version read from control device 211 [ 1579.875020][T21709] dlm: non-version read from control device 211 [ 1579.881285][T21709] dlm: non-version read from control device 211 [ 1579.887632][T21709] dlm: non-version read from control device 211 [ 1579.893872][T21709] dlm: non-version read from control device 211 [ 1579.900160][T21709] dlm: non-version read from control device 211 [ 1579.906444][T21709] dlm: non-version read from control device 211 [ 1579.912734][T21709] dlm: non-version read from control device 211 [ 1579.919019][T21709] dlm: non-version read from control device 211 [ 1579.925290][T21709] dlm: non-version read from control device 211 [ 1579.931537][T21709] dlm: non-version read from control device 211 [ 1579.937822][T21709] dlm: non-version read from control device 211 [ 1579.944087][T21709] dlm: non-version read from control device 211 [ 1579.950838][T21709] dlm: non-version read from control device 211 [ 1579.957124][T21709] dlm: non-version read from control device 211 [ 1579.963444][T21709] dlm: non-version read from control device 211 [ 1579.969739][T21709] dlm: non-version read from control device 211 [ 1579.976095][T21709] dlm: non-version read from control device 211 [ 1579.982363][T21709] dlm: non-version read from control device 211 [ 1579.988624][T21709] dlm: non-version read from control device 211 [ 1579.994860][T21709] dlm: non-version read from control device 211 [ 1580.001157][T21709] dlm: non-version read from control device 211 [ 1580.007432][T21709] dlm: non-version read from control device 211 [ 1580.013754][T21709] dlm: non-version read from control device 211 [ 1580.020040][T21709] dlm: non-version read from control device 211 [ 1580.026298][T21709] dlm: non-version read from control device 211 [ 1580.032555][T21709] dlm: non-version read from control device 211 [ 1580.038840][T21709] dlm: non-version read from control device 211 [ 1580.045179][T21709] dlm: non-version read from control device 211 [ 1580.051915][T21709] dlm: non-version read from control device 211 [ 1580.058219][T21709] dlm: non-version read from control device 211 [ 1580.064526][T21709] dlm: non-version read from control device 211 [ 1580.070811][T21709] dlm: non-version read from control device 211 [ 1580.077096][T21709] dlm: non-version read from control device 211 [ 1580.083340][T21709] dlm: non-version read from control device 211 [ 1580.089666][T21709] dlm: non-version read from control device 211 [ 1580.275109][T21710] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4309'. [ 1580.646725][T21718] dlm: non-version read from control device 211 [ 1580.654991][T21718] dlm: non-version read from control device 211 [ 1580.662062][T21718] dlm: non-version read from control device 211 [ 1580.668550][T21718] dlm: non-version read from control device 211 [ 1580.674829][T21718] dlm: non-version read from control device 211 [ 1580.681207][T21718] dlm: non-version read from control device 211 [ 1580.687928][T21718] dlm: non-version read from control device 211 [ 1580.694447][T21718] dlm: non-version read from control device 211 [ 1580.701197][T21718] dlm: non-version read from control device 211 [ 1580.708472][T21718] dlm: non-version read from control device 211 [ 1580.716418][T21718] dlm: non-version read from control device 211 [ 1580.725759][T21718] dlm: non-version read from control device 211 [ 1580.734530][T21718] dlm: non-version read from control device 211 [ 1580.741852][T21718] dlm: non-version read from control device 211 [ 1580.750254][T21718] dlm: non-version read from control device 211 [ 1580.764698][T21718] dlm: non-version read from control device 211 [ 1580.771404][T21718] dlm: non-version read from control device 211 [ 1580.778074][T21718] dlm: non-version read from control device 211 [ 1580.784724][T21718] dlm: non-version read from control device 211 [ 1580.791966][T21718] dlm: non-version read from control device 211 [ 1580.798625][T21718] dlm: non-version read from control device 211 [ 1580.805302][T21718] dlm: non-version read from control device 211 [ 1580.811882][T21718] dlm: non-version read from control device 211 [ 1580.818540][T21718] dlm: non-version read from control device 211 [ 1580.825633][T21718] dlm: non-version read from control device 211 [ 1580.832252][T21718] dlm: non-version read from control device 211 [ 1580.838909][T21718] dlm: non-version read from control device 211 [ 1580.846539][T21718] dlm: non-version read from control device 211 [ 1580.853124][T21718] dlm: non-version read from control device 211 [ 1580.859748][T21718] dlm: non-version read from control device 211 [ 1580.866696][T21718] dlm: non-version read from control device 211 [ 1580.873557][T21718] dlm: non-version read from control device 211 [ 1580.880201][T21718] dlm: non-version read from control device 211 [ 1580.887070][T21718] dlm: non-version read from control device 211 [ 1580.893678][T21718] dlm: non-version read from control device 211 [ 1580.901294][T21718] dlm: non-version read from control device 211 [ 1580.907986][T21718] dlm: non-version read from control device 211 [ 1580.914586][T21718] dlm: non-version read from control device 211 [ 1580.921199][T21718] dlm: non-version read from control device 211 [ 1580.927918][T21718] dlm: non-version read from control device 211 [ 1580.934513][T21718] dlm: non-version read from control device 211 [ 1580.941155][T21718] dlm: non-version read from control device 211 [ 1580.947831][T21718] dlm: non-version read from control device 211 [ 1580.955012][T21718] dlm: non-version read from control device 211 [ 1580.961665][T21718] dlm: non-version read from control device 211 [ 1580.969130][T21718] dlm: non-version read from control device 211 [ 1580.975712][T21718] dlm: non-version read from control device 211 [ 1580.982093][T21718] dlm: non-version read from control device 211 [ 1580.988473][T21718] dlm: non-version read from control device 211 [ 1580.995087][T21718] dlm: non-version read from control device 211 [ 1581.001449][T21718] dlm: non-version read from control device 211 [ 1581.008173][T21718] dlm: non-version read from control device 211 [ 1581.014846][T21718] dlm: non-version read from control device 211 [ 1581.021353][T21718] dlm: non-version read from control device 211 [ 1581.027865][T21718] dlm: non-version read from control device 211 [ 1581.034233][T21718] dlm: non-version read from control device 211 [ 1581.040653][T21718] dlm: non-version read from control device 211 [ 1581.047195][T21718] dlm: non-version read from control device 211 [ 1581.053640][T21718] dlm: non-version read from control device 211 [ 1581.060174][T21718] dlm: non-version read from control device 211 [ 1581.066649][T21718] dlm: non-version read from control device 211 [ 1581.073812][T21718] dlm: non-version read from control device 211 [ 1581.080226][T21718] dlm: non-version read from control device 211 [ 1581.087012][T21718] dlm: non-version read from control device 211 [ 1581.093406][T21718] dlm: non-version read from control device 211 [ 1581.100032][T21718] dlm: non-version read from control device 211 [ 1581.106483][T21718] dlm: non-version read from control device 211 [ 1581.112912][T21718] dlm: non-version read from control device 211 [ 1581.119298][T21718] dlm: non-version read from control device 211 [ 1581.125727][T21718] dlm: non-version read from control device 211 [ 1581.132074][T21718] dlm: non-version read from control device 211 [ 1581.138505][T21718] dlm: non-version read from control device 211 [ 1581.144866][T21718] dlm: non-version read from control device 211 [ 1581.151245][T21718] dlm: non-version read from control device 211 [ 1581.157803][T21718] dlm: non-version read from control device 211 [ 1581.164222][T21718] dlm: non-version read from control device 211 [ 1581.170751][T21718] dlm: non-version read from control device 211 [ 1581.177771][T21718] dlm: non-version read from control device 211 [ 1581.184209][T21718] dlm: non-version read from control device 211 [ 1581.190615][T21718] dlm: non-version read from control device 211 [ 1581.197167][T21718] dlm: non-version read from control device 211 [ 1581.203577][T21718] dlm: non-version read from control device 211 [ 1581.210222][T21718] dlm: non-version read from control device 211 [ 1581.217152][T21718] dlm: non-version read from control device 211 [ 1581.223497][T21718] dlm: non-version read from control device 211 [ 1581.231401][T21718] dlm: non-version read from control device 211 [ 1581.237917][T21718] dlm: non-version read from control device 211 [ 1581.246491][T21718] dlm: non-version read from control device 211 [ 1581.253064][T21718] dlm: non-version read from control device 211 [ 1581.259964][T21718] dlm: non-version read from control device 211 [ 1581.266349][T21718] dlm: non-version read from control device 211 [ 1581.272815][T21718] dlm: non-version read from control device 211 [ 1581.279769][T21718] dlm: non-version read from control device 211 [ 1581.286434][T21718] dlm: non-version read from control device 211 [ 1581.292831][T21718] dlm: non-version read from control device 211 [ 1581.299179][T21718] dlm: non-version read from control device 211 [ 1581.305961][T21718] dlm: non-version read from control device 211 [ 1581.312323][T21718] dlm: non-version read from control device 211 [ 1581.318872][T21718] dlm: non-version read from control device 211 [ 1581.515301][T21723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4308'. [ 1581.582218][T21730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1581.594869][T21730] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1581.645259][ T977] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1582.649761][ T977] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1582.666085][ T977] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1582.695174][ T977] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1582.720065][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.763062][ T977] usb 4-1: config 0 descriptor?? [ 1583.441420][ T977] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1583.645299][ T10] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1583.825215][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1583.833017][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1583.844818][ T10] usb 1-1: config 255 has an invalid interface number: 7 but max is 0 [ 1583.865085][ T925] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1583.994643][T21753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4321'. [ 1584.003815][T21753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4321'. [ 1584.350931][ T10] usb 1-1: config 255 has no interface number 0 [ 1584.357439][ T10] usb 1-1: config 255 interface 7 altsetting 78 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1584.373866][ T10] usb 1-1: config 255 interface 7 has no altsetting 0 [ 1584.383363][ T10] usb 1-1: New USB device found, idVendor=06e0, idProduct=0319, bcdDevice=1f.59 [ 1584.392770][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.400928][ T10] usb 1-1: Product: syz [ 1584.405533][ T10] usb 1-1: Manufacturer: syz [ 1584.410258][ T10] usb 1-1: SerialNumber: syz [ 1584.419305][T21741] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1584.516922][ T925] usb 2-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 1584.619731][ T925] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1584.650152][ T925] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 1584.675648][ T925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.700403][ T925] usb 2-1: Product: syz [ 1584.799751][ T925] usb 2-1: Manufacturer: syz [ 1584.813820][ T925] usb 2-1: SerialNumber: syz [ 1584.820263][ T24] usb 4-1: USB disconnect, device number 111 [ 1585.519371][ T30] audit: type=1400 audit(1750721275.325:358): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21743 comm="syz.1.4319" dest=20004 [ 1585.525535][T21744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4319'. [ 1585.736184][ T10] ti_usb_3410_5052 1-1:255.7: TI USB 3410 1 port adapter converter detected [ 1585.747728][T21744] sock: sock_set_timeout: `syz.1.4319' (pid 21744) tries to set negative timeout [ 1585.775654][ T10] ti_usb_3410_5052 1-1:255.7: missing endpoints [ 1585.792298][ T10] usb 1-1: USB disconnect, device number 105 [ 1585.801399][T21763] netlink: 312 bytes leftover after parsing attributes in process `syz.4.4322'. [ 1585.854375][T21744] tipc: Enabling of bearer rejected, failed to enable media [ 1586.225694][T21772] dlm: non-version read from control device 211 [ 1586.243846][T21772] dlm: non-version read from control device 211 [ 1586.250491][T21772] dlm: non-version read from control device 211 [ 1586.257888][T21772] dlm: non-version read from control device 211 [ 1586.264391][T21772] dlm: non-version read from control device 211 [ 1586.270923][T21772] dlm: non-version read from control device 211 [ 1586.277561][T21772] dlm: non-version read from control device 211 [ 1586.284095][T21772] dlm: non-version read from control device 211 [ 1586.290734][T21772] dlm: non-version read from control device 211 [ 1586.297843][T21772] dlm: non-version read from control device 211 [ 1586.304675][T21772] dlm: non-version read from control device 211 [ 1586.312403][T21772] dlm: non-version read from control device 211 [ 1586.319086][T21772] dlm: non-version read from control device 211 [ 1586.325737][T21772] dlm: non-version read from control device 211 [ 1586.332279][T21772] dlm: non-version read from control device 211 [ 1586.338840][T21772] dlm: non-version read from control device 211 [ 1586.345501][T21772] dlm: non-version read from control device 211 [ 1586.352025][T21772] dlm: non-version read from control device 211 [ 1586.358608][T21772] dlm: non-version read from control device 211 [ 1586.365820][T21772] dlm: non-version read from control device 211 [ 1586.372405][T21772] dlm: non-version read from control device 211 [ 1586.379034][T21772] dlm: non-version read from control device 211 [ 1586.385607][T21772] dlm: non-version read from control device 211 [ 1586.392207][T21772] dlm: non-version read from control device 211 [ 1586.399322][T21772] dlm: non-version read from control device 211 [ 1586.406178][T21772] dlm: non-version read from control device 211 [ 1586.412726][T21772] dlm: non-version read from control device 211 [ 1586.420286][T21772] dlm: non-version read from control device 211 [ 1586.426972][T21772] dlm: non-version read from control device 211 [ 1586.433558][T21772] dlm: non-version read from control device 211 [ 1586.440150][T21772] dlm: non-version read from control device 211 [ 1586.446728][T21772] dlm: non-version read from control device 211 [ 1586.453294][T21772] dlm: non-version read from control device 211 [ 1586.459863][T21772] dlm: non-version read from control device 211 [ 1586.466529][T21772] dlm: non-version read from control device 211 [ 1586.473115][T21772] dlm: non-version read from control device 211 [ 1586.479510][T21772] dlm: non-version read from control device 211 [ 1586.485881][T21772] dlm: non-version read from control device 211 [ 1586.492190][T21772] dlm: non-version read from control device 211 [ 1586.499114][T21772] dlm: non-version read from control device 211 [ 1586.505443][T21772] dlm: non-version read from control device 211 [ 1586.511717][T21772] dlm: non-version read from control device 211 [ 1586.518030][T21772] dlm: non-version read from control device 211 [ 1586.524347][T21772] dlm: non-version read from control device 211 [ 1586.530675][T21772] dlm: non-version read from control device 211 [ 1586.536965][T21772] dlm: non-version read from control device 211 [ 1586.543233][T21772] dlm: non-version read from control device 211 [ 1586.549517][T21772] dlm: non-version read from control device 211 [ 1586.555852][T21772] dlm: non-version read from control device 211 [ 1586.562113][T21772] dlm: non-version read from control device 211 [ 1586.568390][T21772] dlm: non-version read from control device 211 [ 1586.574728][T21772] dlm: non-version read from control device 211 [ 1586.581027][T21772] dlm: non-version read from control device 211 [ 1586.587398][T21772] dlm: non-version read from control device 211 [ 1586.593678][T21772] dlm: non-version read from control device 211 [ 1586.599992][T21772] dlm: non-version read from control device 211 [ 1586.606804][T21772] dlm: non-version read from control device 211 [ 1586.613072][T21772] dlm: non-version read from control device 211 [ 1586.619370][T21772] dlm: non-version read from control device 211 [ 1586.625729][T21772] dlm: non-version read from control device 211 [ 1586.632003][T21772] dlm: non-version read from control device 211 [ 1586.638338][T21772] dlm: non-version read from control device 211 [ 1586.644597][T21772] dlm: non-version read from control device 211 [ 1586.650865][T21772] dlm: non-version read from control device 211 [ 1586.657158][T21772] dlm: non-version read from control device 211 [ 1586.663412][T21772] dlm: non-version read from control device 211 [ 1586.669764][T21772] dlm: non-version read from control device 211 [ 1586.676106][T21772] dlm: non-version read from control device 211 [ 1586.682365][T21772] dlm: non-version read from control device 211 [ 1586.688922][T21772] dlm: non-version read from control device 211 [ 1586.695236][T21772] dlm: non-version read from control device 211 [ 1586.701510][T21772] dlm: non-version read from control device 211 [ 1586.708299][T21772] dlm: non-version read from control device 211 [ 1586.714606][T21772] dlm: non-version read from control device 211 [ 1586.720940][T21772] dlm: non-version read from control device 211 [ 1586.727337][T21772] dlm: non-version read from control device 211 [ 1586.733599][T21772] dlm: non-version read from control device 211 [ 1586.739905][T21772] dlm: non-version read from control device 211 [ 1586.746191][T21772] dlm: non-version read from control device 211 [ 1586.752454][T21772] dlm: non-version read from control device 211 [ 1586.758756][T21772] dlm: non-version read from control device 211 [ 1586.765083][T21772] dlm: non-version read from control device 211 [ 1586.771375][T21772] dlm: non-version read from control device 211 [ 1586.777764][T21772] dlm: non-version read from control device 211 [ 1586.784056][T21772] dlm: non-version read from control device 211 [ 1586.790427][T21772] dlm: non-version read from control device 211 [ 1586.981370][ T925] usb 2-1: USB disconnect, device number 118 [ 1587.037699][T21774] dlm: non-version read from control device 211 [ 1587.064155][T21774] dlm: non-version read from control device 211 [ 1587.080911][T21774] dlm: non-version read from control device 211 [ 1587.090225][T21774] dlm: non-version read from control device 211 [ 1587.108443][T21774] dlm: non-version read from control device 211 [ 1587.141409][T21774] dlm: non-version read from control device 211 [ 1587.162427][T21774] dlm: non-version read from control device 211 [ 1587.172423][T21774] dlm: non-version read from control device 211 [ 1587.183085][T21774] dlm: non-version read from control device 211 [ 1587.189997][T21774] dlm: non-version read from control device 211 [ 1587.199813][T21774] dlm: non-version read from control device 211 [ 1587.208559][T21774] dlm: non-version read from control device 211 [ 1587.230359][T21774] dlm: non-version read from control device 211 [ 1587.237233][T21774] dlm: non-version read from control device 211 [ 1587.244553][T21774] dlm: non-version read from control device 211 [ 1587.251346][T21774] dlm: non-version read from control device 211 [ 1587.260820][T21774] dlm: non-version read from control device 211 [ 1587.282123][T21774] dlm: non-version read from control device 211 [ 1587.313853][T21774] dlm: non-version read from control device 211 [ 1587.343143][T21774] dlm: non-version read from control device 211 [ 1587.365166][T21774] dlm: non-version read from control device 211 [ 1587.372497][T21774] dlm: non-version read from control device 211 [ 1587.382045][T21774] dlm: non-version read from control device 211 [ 1587.389275][T21774] dlm: non-version read from control device 211 [ 1587.398848][T21774] dlm: non-version read from control device 211 [ 1587.405860][T21774] dlm: non-version read from control device 211 [ 1587.412725][T21774] dlm: non-version read from control device 211 [ 1587.421383][ T925] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1587.431497][T21774] dlm: non-version read from control device 211 [ 1587.438652][T21774] dlm: non-version read from control device 211 [ 1587.445441][T21774] dlm: non-version read from control device 211 [ 1587.452170][T21774] dlm: non-version read from control device 211 [ 1587.459093][T21774] dlm: non-version read from control device 211 [ 1587.465888][T21774] dlm: non-version read from control device 211 [ 1587.472635][T21774] dlm: non-version read from control device 211 [ 1587.479486][T21774] dlm: non-version read from control device 211 [ 1587.487380][T21774] dlm: non-version read from control device 211 [ 1587.494413][T21774] dlm: non-version read from control device 211 [ 1587.502461][T21774] dlm: non-version read from control device 211 [ 1587.509925][T21774] dlm: non-version read from control device 211 [ 1587.517473][T21774] dlm: non-version read from control device 211 [ 1587.526200][T21774] dlm: non-version read from control device 211 [ 1587.533364][T21774] dlm: non-version read from control device 211 [ 1587.544741][T21774] dlm: non-version read from control device 211 [ 1587.562715][T21774] dlm: non-version read from control device 211 [ 1587.584169][T21774] dlm: non-version read from control device 211 [ 1587.610671][T21774] dlm: non-version read from control device 211 [ 1587.748449][ T925] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1587.762736][ T925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.770895][T21774] dlm: non-version read from control device 211 [ 1587.779887][T21774] dlm: non-version read from control device 211 [ 1587.786460][ T925] usb 2-1: Product: syz [ 1587.790646][ T925] usb 2-1: Manufacturer: syz [ 1587.801392][T21774] dlm: non-version read from control device 211 [ 1587.808437][ T925] usb 2-1: SerialNumber: syz [ 1587.817375][ T925] usb 2-1: config 0 descriptor?? [ 1587.823462][T21774] dlm: non-version read from control device 211 [ 1587.838078][T21774] dlm: non-version read from control device 211 [ 1587.845422][T21774] dlm: non-version read from control device 211 [ 1587.853275][T21774] dlm: non-version read from control device 211 [ 1587.859756][T21774] dlm: non-version read from control device 211 [ 1587.866437][T21774] dlm: non-version read from control device 211 [ 1587.873144][T21774] dlm: non-version read from control device 211 [ 1587.985052][T21796] mkiss: ax0: crc mode is auto. [ 1588.082137][ T925] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1588.155015][T12510] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1588.685380][T19864] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1588.796509][ T30] audit: type=1400 audit(1750721278.605:359): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21775 comm="syz.1.4327" dest=2 [ 1588.816626][ T10] usb 2-1: USB disconnect, device number 119 [ 1588.869266][T12510] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1588.876209][T19864] usb 4-1: Using ep0 maxpacket: 16 [ 1588.883558][T12510] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1588.902902][T12510] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1588.906954][T19864] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1588.919932][T12510] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.946332][T19864] usb 4-1: config 255 has an invalid interface number: 7 but max is 0 [ 1588.947126][T12510] usb 5-1: config 0 descriptor?? [ 1588.969753][T19864] usb 4-1: config 255 has no interface number 0 [ 1588.982117][T19864] usb 4-1: config 255 interface 7 altsetting 78 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1588.986997][T12510] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1589.002866][T19864] usb 4-1: config 255 interface 7 has no altsetting 0 [ 1589.030997][T19864] usb 4-1: New USB device found, idVendor=06e0, idProduct=0319, bcdDevice=1f.59 [ 1589.045602][T19864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.064007][T19864] usb 4-1: Product: syz [ 1589.074169][T19864] usb 4-1: Manufacturer: syz [ 1589.084311][T19864] usb 4-1: SerialNumber: syz [ 1589.103679][T21803] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1590.308732][T21815] dlm: non-version read from control device 211 [ 1590.328760][T21815] dlm: non-version read from control device 211 [ 1590.335517][T21815] dlm: non-version read from control device 211 [ 1590.342691][T21815] dlm: non-version read from control device 211 [ 1590.349240][T21815] dlm: non-version read from control device 211 [ 1590.355838][T21815] dlm: non-version read from control device 211 [ 1590.362439][T21815] dlm: non-version read from control device 211 [ 1590.369279][T21815] dlm: non-version read from control device 211 [ 1590.375790][T21815] dlm: non-version read from control device 211 [ 1590.382297][T21815] dlm: non-version read from control device 211 [ 1590.388880][T21815] dlm: non-version read from control device 211 [ 1590.397107][T21815] dlm: non-version read from control device 211 [ 1590.404405][T21815] dlm: non-version read from control device 211 [ 1590.411059][T21815] dlm: non-version read from control device 211 [ 1590.417604][T21815] dlm: non-version read from control device 211 [ 1590.424139][T21815] dlm: non-version read from control device 211 [ 1590.430785][T21815] dlm: non-version read from control device 211 [ 1590.437394][T21815] dlm: non-version read from control device 211 [ 1590.443898][T21815] dlm: non-version read from control device 211 [ 1590.451557][T21815] dlm: non-version read from control device 211 [ 1590.458274][T21815] dlm: non-version read from control device 211 [ 1590.464986][T21815] dlm: non-version read from control device 211 [ 1590.471651][T21815] dlm: non-version read from control device 211 [ 1590.478318][T21815] dlm: non-version read from control device 211 [ 1590.484862][T21815] dlm: non-version read from control device 211 [ 1590.492972][T21815] dlm: non-version read from control device 211 [ 1590.499703][T21815] dlm: non-version read from control device 211 [ 1590.507016][T21815] dlm: non-version read from control device 211 [ 1590.513566][T21815] dlm: non-version read from control device 211 [ 1590.520214][T21815] dlm: non-version read from control device 211 [ 1590.527034][T21815] dlm: non-version read from control device 211 [ 1590.533675][T21815] dlm: non-version read from control device 211 [ 1590.540356][T21815] dlm: non-version read from control device 211 [ 1590.547007][T21815] dlm: non-version read from control device 211 [ 1590.553493][T21815] dlm: non-version read from control device 211 [ 1590.559982][T21815] dlm: non-version read from control device 211 [ 1590.566298][T21815] dlm: non-version read from control device 211 [ 1590.572572][T21815] dlm: non-version read from control device 211 [ 1590.578905][T21815] dlm: non-version read from control device 211 [ 1590.585239][T21815] dlm: non-version read from control device 211 [ 1590.591547][T21815] dlm: non-version read from control device 211 [ 1590.598714][T21815] dlm: non-version read from control device 211 [ 1590.605134][T21815] dlm: non-version read from control device 211 [ 1590.611489][T21815] dlm: non-version read from control device 211 [ 1590.617816][T21815] dlm: non-version read from control device 211 [ 1590.624084][T21815] dlm: non-version read from control device 211 [ 1590.630387][T21815] dlm: non-version read from control device 211 [ 1590.636707][T21815] dlm: non-version read from control device 211 [ 1590.642986][T21815] dlm: non-version read from control device 211 [ 1590.649294][T21815] dlm: non-version read from control device 211 [ 1590.655608][T21815] dlm: non-version read from control device 211 [ 1590.661918][T21815] dlm: non-version read from control device 211 [ 1590.668211][T21815] dlm: non-version read from control device 211 [ 1590.674475][T21815] dlm: non-version read from control device 211 [ 1590.680774][T21815] dlm: non-version read from control device 211 [ 1590.687068][T21815] dlm: non-version read from control device 211 [ 1590.693328][T21815] dlm: non-version read from control device 211 [ 1590.700388][T21815] dlm: non-version read from control device 211 [ 1590.706716][T21815] dlm: non-version read from control device 211 [ 1590.713056][T21815] dlm: non-version read from control device 211 [ 1590.719352][T21815] dlm: non-version read from control device 211 [ 1590.725642][T21815] dlm: non-version read from control device 211 [ 1590.731910][T21815] dlm: non-version read from control device 211 [ 1590.738210][T21815] dlm: non-version read from control device 211 [ 1590.744483][T21815] dlm: non-version read from control device 211 [ 1590.750887][T21815] dlm: non-version read from control device 211 [ 1590.757293][T21815] dlm: non-version read from control device 211 [ 1590.763701][T21815] dlm: non-version read from control device 211 [ 1590.770070][T21815] dlm: non-version read from control device 211 [ 1590.776366][T21815] dlm: non-version read from control device 211 [ 1590.782656][T21815] dlm: non-version read from control device 211 [ 1590.788980][T21815] dlm: non-version read from control device 211 [ 1590.795375][T21815] dlm: non-version read from control device 211 [ 1590.802375][T21815] dlm: non-version read from control device 211 [ 1590.808688][T21815] dlm: non-version read from control device 211 [ 1590.815139][T21815] dlm: non-version read from control device 211 [ 1591.164214][T19864] ti_usb_3410_5052 4-1:255.7: TI USB 3410 1 port adapter converter detected [ 1591.350602][T19864] ti_usb_3410_5052 4-1:255.7: missing endpoints [ 1591.367869][T19864] usb 4-1: USB disconnect, device number 112 [ 1591.497340][T15811] usb 5-1: USB disconnect, device number 11 [ 1591.651427][T21818] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4339'. [ 1592.025432][ T977] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1592.618236][ T977] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1592.644983][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.653028][ T977] usb 4-1: Product: syz [ 1592.665203][ T977] usb 4-1: Manufacturer: syz [ 1592.684221][ T977] usb 4-1: SerialNumber: syz [ 1592.716033][ T977] usb 4-1: config 0 descriptor?? [ 1592.755259][T21838] dlm: non-version read from control device 211 [ 1592.768476][T21838] dlm: non-version read from control device 211 [ 1592.769355][T21840] overlayfs: failed to resolve './file0': -2 [ 1592.774826][T21838] dlm: non-version read from control device 211 [ 1592.825189][T21838] dlm: non-version read from control device 211 [ 1592.831563][T21838] dlm: non-version read from control device 211 [ 1592.860552][T21838] dlm: non-version read from control device 211 [ 1592.901292][T21838] dlm: non-version read from control device 211 [ 1592.918431][T21838] dlm: non-version read from control device 211 [ 1592.924790][T21838] dlm: non-version read from control device 211 [ 1592.935800][ T977] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1592.946333][T21838] dlm: non-version read from control device 211 [ 1592.979797][T21838] dlm: non-version read from control device 211 [ 1592.987934][T21838] dlm: non-version read from control device 211 [ 1592.994243][T21838] dlm: non-version read from control device 211 [ 1593.002207][T21838] dlm: non-version read from control device 211 [ 1593.021173][T21838] dlm: non-version read from control device 211 [ 1593.031895][T21838] dlm: non-version read from control device 211 [ 1593.039908][T21838] dlm: non-version read from control device 211 [ 1593.047212][T21838] dlm: non-version read from control device 211 [ 1593.055151][T21838] dlm: non-version read from control device 211 [ 1593.061711][T21838] dlm: non-version read from control device 211 [ 1593.071648][T21838] dlm: non-version read from control device 211 [ 1593.078151][T21838] dlm: non-version read from control device 211 [ 1593.084445][T21838] dlm: non-version read from control device 211 [ 1593.094640][T21838] dlm: non-version read from control device 211 [ 1593.101313][T21838] dlm: non-version read from control device 211 [ 1593.110912][T21838] dlm: non-version read from control device 211 [ 1593.117757][T21838] dlm: non-version read from control device 211 [ 1593.124320][T21838] dlm: non-version read from control device 211 [ 1593.133859][T21838] dlm: non-version read from control device 211 [ 1593.140911][T21838] dlm: non-version read from control device 211 [ 1593.150451][T21838] dlm: non-version read from control device 211 [ 1593.159398][T21838] dlm: non-version read from control device 211 [ 1593.168856][T21838] dlm: non-version read from control device 211 [ 1593.178807][ T30] audit: type=1400 audit(1750721282.985:360): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21822 comm="syz.3.4338" dest=2 [ 1593.197614][ T977] usb 4-1: USB disconnect, device number 113 [ 1593.206603][T21838] dlm: non-version read from control device 211 [ 1593.212895][T21838] dlm: non-version read from control device 211 [ 1593.246592][T21838] dlm: non-version read from control device 211 [ 1593.252898][T21838] dlm: non-version read from control device 211 [ 1593.261338][T21838] dlm: non-version read from control device 211 [ 1593.269034][T21838] dlm: non-version read from control device 211 [ 1593.275582][T21838] dlm: non-version read from control device 211 [ 1593.281834][T21838] dlm: non-version read from control device 211 [ 1593.288517][T21838] dlm: non-version read from control device 211 [ 1593.294876][T21838] dlm: non-version read from control device 211 [ 1593.295227][T12510] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1593.489865][ T925] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1593.604030][T12510] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1593.716752][T12510] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1593.788441][T12510] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1593.811364][T12510] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.821841][ T925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1593.838140][ T925] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1593.849779][T12510] usb 3-1: config 0 descriptor?? [ 1593.868767][T12510] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1593.877504][ T925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.895084][ T6006] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1593.903521][ T925] usb 2-1: config 0 descriptor?? [ 1594.054991][ T6006] usb 1-1: Using ep0 maxpacket: 16 [ 1594.063007][ T6006] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1594.072281][ T6006] usb 1-1: config 255 has an invalid interface number: 7 but max is 0 [ 1594.081709][ T6006] usb 1-1: config 255 has no interface number 0 [ 1594.088325][ T6006] usb 1-1: config 255 interface 7 altsetting 78 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1594.113280][ T6006] usb 1-1: config 255 interface 7 has no altsetting 0 [ 1594.137236][ T6006] usb 1-1: New USB device found, idVendor=06e0, idProduct=0319, bcdDevice=1f.59 [ 1594.149674][ T6006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.158198][ T6006] usb 1-1: Product: syz [ 1594.162465][ T6006] usb 1-1: Manufacturer: syz [ 1594.170633][ T6006] usb 1-1: SerialNumber: syz [ 1594.183980][T21850] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1594.350863][ T925] elecom 0003:056E:011C.0021: item fetching failed at offset 1/3 [ 1594.379155][ T925] elecom 0003:056E:011C.0021: probe with driver elecom failed with error -22 [ 1594.564307][T21846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1594.586171][T21846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1594.622360][T21846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1594.643309][T21846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1594.735058][ T977] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1594.896202][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 1594.907883][ T977] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1594.919803][ T977] usb 4-1: config 0 has no interface number 0 [ 1594.945305][ T977] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1594.962899][ T977] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1595.015944][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.024133][ T977] usb 4-1: Product: syz [ 1595.038239][ T977] usb 4-1: Manufacturer: syz [ 1595.043010][ T977] usb 4-1: SerialNumber: syz [ 1595.059098][ T977] usb 4-1: config 0 descriptor?? [ 1595.075403][ T977] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1595.087496][ T977] em28xx 4-1:0.132: Video interface 132 found: [ 1595.215225][T15811] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1595.472010][ T977] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1595.487283][T15811] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1595.526920][T15811] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1595.540324][T15811] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1595.552109][T15811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.563633][T15811] usb 5-1: config 0 descriptor?? [ 1595.577056][T15811] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1595.624913][ C0] hrtimer: interrupt took 47092 ns [ 1595.880258][T15811] usb 3-1: USB disconnect, device number 112 [ 1595.899078][ T977] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1595.946808][ T977] em28xx 4-1:0.132: board has no eeprom [ 1596.093941][ T6006] ti_usb_3410_5052 1-1:255.7: TI USB 3410 1 port adapter converter detected [ 1596.117296][ T6006] ti_usb_3410_5052 1-1:255.7: missing endpoints [ 1596.143667][ T6006] usb 1-1: USB disconnect, device number 106 [ 1596.157910][T15811] usb 2-1: USB disconnect, device number 120 [ 1596.217668][ T977] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1596.330583][ T977] em28xx 4-1:0.132: analog set to bulk mode. [ 1596.554985][ T10] em28xx 4-1:0.132: Registering V4L2 extension [ 1597.556531][ T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1597.568494][ T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1597.577436][T15811] usb 4-1: USB disconnect, device number 114 [ 1597.584248][T15811] em28xx 4-1:0.132: Disconnecting em28xx [ 1597.998820][ T977] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1598.089029][T19864] usb 5-1: USB disconnect, device number 12 [ 1598.154416][ T10] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1598.161585][ T10] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1598.169171][ T10] em28xx 4-1:0.132: No AC97 audio processor [ 1598.181761][ T10] usb 4-1: Decoder not found [ 1598.188050][ T10] em28xx 4-1:0.132: failed to create media graph [ 1598.197276][ T10] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1598.212902][ T10] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1598.242275][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 1598.251331][ T977] usb 3-1: config 211 has an invalid interface number: 98 but max is 0 [ 1598.262409][ T977] usb 3-1: config 211 has no interface number 0 [ 1598.278770][T15811] em28xx 4-1:0.132: Closing input extension [ 1598.292267][ T977] usb 3-1: config 211 interface 98 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 1598.331838][T15811] em28xx 4-1:0.132: Freeing device [ 1598.345702][ T977] usb 3-1: config 211 interface 98 has no altsetting 0 [ 1598.410935][ T977] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 1598.423673][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.462176][ T977] usb 3-1: Product: syz [ 1598.477851][ T977] usb 3-1: Manufacturer: syz [ 1598.500841][ T977] usb 3-1: SerialNumber: syz [ 1598.594001][T21883] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1599.256139][ T977] mct_u232 3-1:211.98: MCT U232 converter detected [ 1599.277391][ T977] mct_u232 ttyUSB0: expected endpoint missing [ 1599.314448][ T977] usb 3-1: USB disconnect, device number 113 [ 1599.357649][ T977] mct_u232 3-1:211.98: device disconnected [ 1600.205396][T12510] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1600.395213][ T6006] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1600.501650][T12510] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1600.535222][ T6006] usb 3-1: device descriptor read/64, error -71 [ 1600.625075][ T925] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1600.775211][ T6006] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1600.822743][T12510] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1600.913786][T12510] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1600.945104][ T925] usb 1-1: Using ep0 maxpacket: 16 [ 1600.962524][T12510] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.987116][ T925] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1601.008406][ T6006] usb 3-1: device descriptor read/64, error -71 [ 1601.033436][ T925] usb 1-1: config 255 has an invalid interface number: 7 but max is 0 [ 1601.070083][ T925] usb 1-1: config 255 has no interface number 0 [ 1601.095651][T12510] usb 5-1: config 0 descriptor?? [ 1601.095737][ T977] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1601.106083][T12510] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1601.125154][ T925] usb 1-1: config 255 interface 7 altsetting 78 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1601.166885][ T6006] usb usb3-port1: attempt power cycle [ 1601.203528][ T925] usb 1-1: config 255 interface 7 has no altsetting 0 [ 1601.267676][ T925] usb 1-1: New USB device found, idVendor=06e0, idProduct=0319, bcdDevice=1f.59 [ 1601.302954][ T925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.311650][ T925] usb 1-1: Product: syz [ 1601.317436][ T925] usb 1-1: Manufacturer: syz [ 1601.322093][ T925] usb 1-1: SerialNumber: syz [ 1601.337313][T21916] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1601.368041][ T977] usb 4-1: config 0 has no interfaces? [ 1601.373586][ T977] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1601.382803][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.400197][ T977] usb 4-1: config 0 descriptor?? [ 1601.525069][ T6006] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1601.571200][ T6006] usb 3-1: device descriptor read/8, error -71 [ 1601.705168][T12510] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1601.816217][ T6006] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1601.846874][ T6006] usb 3-1: device descriptor read/8, error -71 [ 1601.865175][T12510] usb 2-1: Using ep0 maxpacket: 32 [ 1601.873964][T12510] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1601.882845][T12510] usb 2-1: config 0 has no interface number 0 [ 1601.890297][T12510] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1601.907476][T12510] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1601.917740][T12510] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.927282][T12510] usb 2-1: Product: syz [ 1601.931564][T12510] usb 2-1: Manufacturer: syz [ 1601.936766][T12510] usb 2-1: SerialNumber: syz [ 1601.943964][T12510] usb 2-1: config 0 descriptor?? [ 1601.953472][T12510] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1601.964335][T12510] em28xx 2-1:0.132: Video interface 132 found: [ 1601.971064][ T6006] usb usb3-port1: unable to enumerate USB device [ 1602.357227][T12510] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1602.768040][T12510] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1602.782306][T12510] em28xx 2-1:0.132: board has no eeprom [ 1603.060710][T12510] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1603.069902][ T925] ti_usb_3410_5052 1-1:255.7: TI USB 3410 1 port adapter converter detected [ 1603.079248][T12510] em28xx 2-1:0.132: analog set to bulk mode. [ 1603.089638][ T925] ti_usb_3410_5052 1-1:255.7: missing endpoints [ 1603.097193][ T6006] em28xx 2-1:0.132: Registering V4L2 extension [ 1603.119344][ T10] usb 5-1: USB disconnect, device number 13 [ 1603.169105][ T925] usb 1-1: USB disconnect, device number 107 [ 1603.501959][ T977] usb 4-1: USB disconnect, device number 115 [ 1603.906664][T21938] mkiss: ax0: crc mode is auto. [ 1604.206562][ T6006] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1604.220616][ T6006] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1604.239879][ T6006] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1604.262792][ T6006] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1604.475239][ T6006] em28xx 2-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1604.502092][ T6006] em28xx 2-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1604.523454][T21948] kvm: apic: phys broadcast and lowest prio [ 1604.529760][ T925] usb 2-1: USB disconnect, device number 121 [ 1604.531008][ T925] em28xx 2-1:0.132: Disconnecting em28xx [ 1604.542486][ T6006] em28xx 2-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1604.795527][ T6006] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1604.830550][ T6006] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1604.859750][ T6006] em28xx 2-1:0.132: No AC97 audio processor [ 1604.888181][ T6006] usb 2-1: Decoder not found [ 1604.911187][ T6006] em28xx 2-1:0.132: failed to create media graph [ 1604.931401][ T977] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1604.951437][ T6006] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1605.116972][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 1605.177919][ T6006] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1605.192392][ T977] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1605.196923][T21964] ================================================================== [ 1605.208746][T21964] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 1605.216151][T21964] Read of size 8 at addr ffff8880597f8738 by task v4l_id/21964 [ 1605.223691][T21964] [ 1605.226026][T21964] CPU: 1 UID: 0 PID: 21964 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 1605.226044][T21964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1605.226054][T21964] Call Trace: [ 1605.226062][T21964] [ 1605.226069][T21964] dump_stack_lvl+0x189/0x250 [ 1605.226091][T21964] ? __virt_addr_valid+0x1c8/0x5c0 [ 1605.226104][T21964] ? rcu_is_watching+0x15/0xb0 [ 1605.226123][T21964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1605.226140][T21964] ? rcu_is_watching+0x15/0xb0 [ 1605.226156][T21964] ? lock_release+0x4b/0x3e0 [ 1605.226174][T21964] ? __virt_addr_valid+0x1c8/0x5c0 [ 1605.226186][T21964] ? __virt_addr_valid+0x4a5/0x5c0 [ 1605.226199][T21964] print_report+0xd2/0x2b0 [ 1605.226214][T21964] ? v4l2_fh_open+0xc7/0x430 [ 1605.226232][T21964] kasan_report+0x118/0x150 [ 1605.226249][T21964] ? v4l2_fh_open+0xc7/0x430 [ 1605.226268][T21964] v4l2_fh_open+0xc7/0x430 [ 1605.226285][T21964] ? __pfx___mutex_lock+0x10/0x10 [ 1605.226306][T21964] em28xx_v4l2_open+0x157/0x9a0 [ 1605.226328][T21964] v4l2_open+0x20f/0x360 [ 1605.226341][T21964] chrdev_open+0x4c9/0x5e0 [ 1605.226358][T21964] ? __pfx_chrdev_open+0x10/0x10 [ 1605.226377][T21964] ? __pfx_chrdev_open+0x10/0x10 [ 1605.226392][T21964] do_dentry_open+0xdf0/0x1970 [ 1605.226415][T21964] vfs_open+0x3b/0x340 [ 1605.226431][T21964] ? path_openat+0x2ecd/0x3830 [ 1605.226444][T21964] path_openat+0x2ee5/0x3830 [ 1605.226457][T21964] ? arch_stack_walk+0xfc/0x150 [ 1605.226482][T21964] ? rcu_is_watching+0x15/0xb0 [ 1605.226502][T21964] ? __pfx_path_openat+0x10/0x10 [ 1605.226514][T21964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.226534][T21964] do_filp_open+0x1fa/0x410 [ 1605.226547][T21964] ? __lock_acquire+0xab9/0xd20 [ 1605.226563][T21964] ? __pfx_do_filp_open+0x10/0x10 [ 1605.226583][T21964] ? _raw_spin_unlock+0x28/0x50 [ 1605.226598][T21964] ? alloc_fd+0x64c/0x6c0 [ 1605.226616][T21964] do_sys_openat2+0x121/0x1c0 [ 1605.226635][T21964] ? __pfx_do_sys_openat2+0x10/0x10 [ 1605.226657][T21964] __x64_sys_openat+0x138/0x170 [ 1605.226677][T21964] do_syscall_64+0xfa/0x3b0 [ 1605.226695][T21964] ? lockdep_hardirqs_on+0x9c/0x150 [ 1605.226711][T21964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.226724][T21964] ? clear_bhb_loop+0x60/0xb0 [ 1605.226739][T21964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.226752][T21964] RIP: 0033:0x7fd0b16a7407 [ 1605.226765][T21964] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1605.226778][T21964] RSP: 002b:00007ffdba1ef150 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1605.226792][T21964] RAX: ffffffffffffffda RBX: 00007fd0b1e43880 RCX: 00007fd0b16a7407 [ 1605.226808][T21964] RDX: 0000000000000000 RSI: 00007ffdba1eff1b RDI: ffffffffffffff9c [ 1605.226817][T21964] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1605.226825][T21964] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1605.226834][T21964] R13: 00007ffdba1ef3a0 R14: 00007fd0b1faa000 R15: 00005595a877d4d8 [ 1605.226849][T21964] [ 1605.226854][T21964] [ 1605.523372][T21964] Allocated by task 6006: [ 1605.527699][T21964] kasan_save_track+0x3e/0x80 [ 1605.532371][T21964] __kasan_kmalloc+0x93/0xb0 [ 1605.536947][T21964] __kmalloc_cache_noprof+0x230/0x3d0 [ 1605.542336][T21964] em28xx_v4l2_init+0x10b/0x2e70 [ 1605.547315][T21964] em28xx_init_extension+0x11d/0x1c0 [ 1605.552615][T21964] process_scheduled_works+0xade/0x17b0 [ 1605.558166][T21964] worker_thread+0x8a0/0xda0 [ 1605.562752][T21964] kthread+0x70e/0x8a0 [ 1605.566813][T21964] ret_from_fork+0x3fc/0x770 [ 1605.571392][T21964] ret_from_fork_asm+0x1a/0x30 [ 1605.576145][T21964] [ 1605.578460][T21964] Freed by task 6006: [ 1605.582452][T21964] kasan_save_track+0x3e/0x80 [ 1605.587116][T21964] kasan_save_free_info+0x46/0x50 [ 1605.592132][T21964] __kasan_slab_free+0x62/0x70 [ 1605.596889][T21964] kfree+0x18e/0x440 [ 1605.600782][T21964] em28xx_v4l2_init+0x1683/0x2e70 [ 1605.605807][T21964] em28xx_init_extension+0x11d/0x1c0 [ 1605.611082][T21964] process_scheduled_works+0xade/0x17b0 [ 1605.616623][T21964] worker_thread+0x8a0/0xda0 [ 1605.621205][T21964] kthread+0x70e/0x8a0 [ 1605.625273][T21964] ret_from_fork+0x3fc/0x770 [ 1605.629854][T21964] ret_from_fork_asm+0x1a/0x30 [ 1605.634605][T21964] [ 1605.636919][T21964] The buggy address belongs to the object at ffff8880597f8000 [ 1605.636919][T21964] which belongs to the cache kmalloc-8k of size 8192 [ 1605.650989][T21964] The buggy address is located 1848 bytes inside of [ 1605.650989][T21964] freed 8192-byte region [ffff8880597f8000, ffff8880597fa000) [ 1605.664966][T21964] [ 1605.667301][T21964] The buggy address belongs to the physical page: [ 1605.673717][T21964] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x597f8 [ 1605.682491][T21964] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1605.690989][T21964] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1605.698530][T21964] page_type: f5(slab) [ 1605.702500][T21964] raw: 00fff00000000040 ffff88801a442280 ffffea0001f85400 dead000000000004 [ 1605.711171][T21964] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1605.719749][T21964] head: 00fff00000000040 ffff88801a442280 ffffea0001f85400 dead000000000004 [ 1605.728409][T21964] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1605.737071][T21964] head: 00fff00000000003 ffffea000165fe01 00000000ffffffff 00000000ffffffff [ 1605.745758][T21964] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1605.754428][T21964] page dumped because: kasan: bad access detected [ 1605.760844][T21964] page_owner tracks the page as allocated [ 1605.766552][T21964] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13239, tgid 13238 (syz.2.2117), ts 812584080884, free_ts 812576462582 [ 1605.788092][T21964] post_alloc_hook+0x240/0x2a0 [ 1605.792859][T21964] get_page_from_freelist+0x21d5/0x22b0 [ 1605.798463][T21964] __alloc_frozen_pages_noprof+0x181/0x370 [ 1605.804281][T21964] alloc_pages_mpol+0x232/0x4a0 [ 1605.809129][T21964] allocate_slab+0x8a/0x3b0 [ 1605.813629][T21964] ___slab_alloc+0xbfc/0x1480 [ 1605.818328][T21964] __kmalloc_noprof+0x305/0x4f0 [ 1605.823167][T21964] vhost_dev_set_owner+0x2a6/0x9b0 [ 1605.828271][T21964] vhost_dev_ioctl+0xa7/0xbc0 [ 1605.832941][T21964] vhost_vsock_dev_ioctl+0x21f/0xdc0 [ 1605.838216][T21964] __se_sys_ioctl+0xfc/0x170 [ 1605.842796][T21964] do_syscall_64+0xfa/0x3b0 [ 1605.847299][T21964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.853198][T21964] page last free pid 7246 tgid 7246 stack trace: [ 1605.859517][T21964] __free_frozen_pages+0xc65/0xe60 [ 1605.864980][T21964] __slab_free+0x326/0x400 [ 1605.869476][T21964] qlist_free_all+0x97/0x140 [ 1605.874056][T21964] kasan_quarantine_reduce+0x148/0x160 [ 1605.879505][T21964] __kasan_slab_alloc+0x22/0x80 [ 1605.884362][T21964] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1605.889813][T21964] getname_flags+0xb8/0x540 [ 1605.894306][T21964] do_sys_openat2+0xbc/0x1c0 [ 1605.898891][T21964] __x64_sys_openat+0x138/0x170 [ 1605.903913][T21964] do_syscall_64+0xfa/0x3b0 [ 1605.908498][T21964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.914430][T21964] [ 1605.916742][T21964] Memory state around the buggy address: [ 1605.922376][T21964] ffff8880597f8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1605.930424][T21964] ffff8880597f8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1605.938472][T21964] >ffff8880597f8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1605.946607][T21964] ^ [ 1605.952484][T21964] ffff8880597f8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1605.960566][T21964] ffff8880597f8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1605.968616][T21964] ================================================================== [ 1605.985014][ T977] usb 5-1: config 0 has no interface number 0 [ 1605.995038][ T977] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1606.008152][ T977] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1606.017268][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.033014][ T977] usb 5-1: Product: syz [ 1606.037294][ T977] usb 5-1: Manufacturer: syz [ 1606.041872][ T977] usb 5-1: SerialNumber: syz [ 1606.146289][T21964] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1606.153523][T21964] CPU: 0 UID: 0 PID: 21964 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 1606.164017][T21964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1606.174148][T21964] Call Trace: [ 1606.177419][T21964] [ 1606.180334][T21964] dump_stack_lvl+0x99/0x250 [ 1606.184920][T21964] ? __asan_memcpy+0x40/0x70 [ 1606.189508][T21964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1606.194693][T21964] ? __pfx__printk+0x10/0x10 [ 1606.199267][T21964] panic+0x2db/0x790 [ 1606.203153][T21964] ? __pfx_panic+0x10/0x10 [ 1606.207568][T21964] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1606.213458][T21964] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1606.219770][T21964] ? print_memory_metadata+0x314/0x400 [ 1606.225215][T21964] ? v4l2_fh_open+0xc7/0x430 [ 1606.229790][T21964] check_panic_on_warn+0x89/0xb0 [ 1606.234712][T21964] ? v4l2_fh_open+0xc7/0x430 [ 1606.239291][T21964] end_report+0x78/0x160 [ 1606.243518][T21964] kasan_report+0x129/0x150 [ 1606.248000][T21964] ? v4l2_fh_open+0xc7/0x430 [ 1606.252573][T21964] v4l2_fh_open+0xc7/0x430 [ 1606.256973][T21964] ? __pfx___mutex_lock+0x10/0x10 [ 1606.261996][T21964] em28xx_v4l2_open+0x157/0x9a0 [ 1606.266846][T21964] v4l2_open+0x20f/0x360 [ 1606.271071][T21964] chrdev_open+0x4c9/0x5e0 [ 1606.275473][T21964] ? __pfx_chrdev_open+0x10/0x10 [ 1606.280411][T21964] ? __pfx_chrdev_open+0x10/0x10 [ 1606.285372][T21964] do_dentry_open+0xdf0/0x1970 [ 1606.290131][T21964] vfs_open+0x3b/0x340 [ 1606.294191][T21964] ? path_openat+0x2ecd/0x3830 [ 1606.298973][T21964] path_openat+0x2ee5/0x3830 [ 1606.303549][T21964] ? arch_stack_walk+0xfc/0x150 [ 1606.308389][T21964] ? rcu_is_watching+0x15/0xb0 [ 1606.313226][T21964] ? __pfx_path_openat+0x10/0x10 [ 1606.318143][T21964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.324209][T21964] do_filp_open+0x1fa/0x410 [ 1606.328764][T21964] ? __lock_acquire+0xab9/0xd20 [ 1606.333615][T21964] ? __pfx_do_filp_open+0x10/0x10 [ 1606.338651][T21964] ? _raw_spin_unlock+0x28/0x50 [ 1606.343496][T21964] ? alloc_fd+0x64c/0x6c0 [ 1606.347807][T21964] do_sys_openat2+0x121/0x1c0 [ 1606.352469][T21964] ? __pfx_do_sys_openat2+0x10/0x10 [ 1606.357653][T21964] __x64_sys_openat+0x138/0x170 [ 1606.362488][T21964] do_syscall_64+0xfa/0x3b0 [ 1606.366987][T21964] ? lockdep_hardirqs_on+0x9c/0x150 [ 1606.372173][T21964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.378232][T21964] ? clear_bhb_loop+0x60/0xb0 [ 1606.382909][T21964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.388795][T21964] RIP: 0033:0x7fd0b16a7407 [ 1606.393193][T21964] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1606.412795][T21964] RSP: 002b:00007ffdba1ef150 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1606.421194][T21964] RAX: ffffffffffffffda RBX: 00007fd0b1e43880 RCX: 00007fd0b16a7407 [ 1606.429178][T21964] RDX: 0000000000000000 RSI: 00007ffdba1eff1b RDI: ffffffffffffff9c [ 1606.437127][T21964] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1606.445076][T21964] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1606.453026][T21964] R13: 00007ffdba1ef3a0 R14: 00007fd0b1faa000 R15: 00005595a877d4d8 [ 1606.461002][T21964] [ 1606.464791][T21964] Kernel Offset: disabled [ 1606.469108][T21964] Rebooting in 86400 seconds..