last executing test programs: 51.279018308s ago: executing program 2 (id=133): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000300)=""/103, 0x67}], 0x1, 0x5, 0xd8e, 0x1) (async) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) (async, rerun: 64) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000780)=ANY=[@ANYRES8=r0, @ANYBLOB="e19380143596fe7262262dda7851ef99f3cfe57ba36a21bf12736a34c7bc656f6effb322cb0a1fd54c438144cb1c38ab1d706c45e193386941a6d8f4f6b8bf6818cb6f9dd0d6c8ffb987a257bb997efef7123fb63ad186a1ac8ae9a206fb53815b35982081093eb0730e68193824751d7fbfd2ff60d044f38053dd71949e1a", @ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="83a98fe32ed6f27632ec68ab4846e74806567e07dd5f9ed3834fb5153de232ea98e7e69d757444157244ce7cc438e7162b0d414251d1bc83fc22468d14282d84a3a4a8ae8487116ebeff2ec2cd5f43ad9272f369339c87e4ae8efc9e80a49180547b180b65cafd125d", @ANYBLOB="fd479b3e203ee1ba036f713904e0ed0a6b24bb1828b84eaf8c98e73f00aba76ff62c275fdbca6fe9af484fc6e89f5f8f2eb4f0b2a57848fb716db65f3fc12c81d11b9462d3a61539d9bec8911f7bbee36d235b6bfa9a2f91e2db53c416065a24881ed4f7bd5f99d695650d63e76e5977c5cb19f7f104c65a0ff2bf8b190487fca6585aa4ab4b6d6a66d7e8a8a2fdbc21ccd58376a2f271e89ca0fc63861487ac9b2f8e9d2794b4c7a27a37d37ac1e4b8d06f00d9e6fa040d283f43b3676bded69105a16fe10fc16c5f21c29e6b18f8b5"], 0x0) (async, rerun: 64) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r3) r5 = add_key$user(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="57a2816a2dbf6038d10455326d3609850290d37b2ee50dfbf017105de0a05ffee65ae54a492912720394ae830149b6acebfc5beac54a41705078dafe1542b18d8f55ba76767e12017db8f69b429e24e24547623df04676919638a943f29c0f47af52c5fa2ff3104f8cf06182f542a853b9545b2f97cb", 0x76, r4) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080)={r5}, &(0x7f0000000140)=ANY=[], 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) keyctl$assume_authority(0x10, r3) (async) syz_usb_control_io(r2, &(0x7f0000000b40)={0x18, &(0x7f0000000980)={0x40, 0x11, 0xc, {0xc, 0x8, "451202e5af6c7b510625"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) getpid() 51.247768498s ago: executing program 2 (id=134): socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$tcp_mem(r0, &(0x7f0000000180)={0x10, 0x20, 0x1, 0x20, 0xc}, 0x48) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000040)={0x4, 0x3}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) write(r1, &(0x7f0000000140)='n', 0x1) 51.231310979s ago: executing program 2 (id=135): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x2ea}}], 0x20, 0x0, 0x0) 51.156206131s ago: executing program 2 (id=136): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000010101014ac84ac4da64565c020000070c001980080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/kvm/mmu_shadow_zapped\x00', 0x1, 0x14) write(r0, &(0x7f0000000200)='0', 0x1) 51.155903711s ago: executing program 2 (id=137): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x20e, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x33, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/31, 0x1f}, {0x0}, {&(0x7f0000000240)=""/95, 0x5f}], 0x3, 0x2, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000100)=0x17ff, 0x4) r7 = fcntl$dupfd(r6, 0x406, r6) write$cgroup_pid(r7, 0x0, 0x0) ioctl$KVM_TDX_INIT_VM(r7, 0xc008aeba, &(0x7f0000000980)={0x1, 0x0, &(0x7f0000000780)={0x8000000, 0x1, [0x3ff, 0x2, 0xff, 0x6, 0x8, 0x7], [0xff, 0x278, 0x9, 0x40, 0x7, 0x1], [0x280, 0x9, 0x2, 0xffffffffffffff51, 0x1000, 0x4], '\x00', {0x5, 0x0, [{0x40000001, 0x2, 0x8, 0x4, 0x7, 0x5, 0xfffffff8}, {0x80000008, 0xf, 0x0, 0x2, 0x7, 0x9, 0x7}, {0x40000001, 0x5, 0x2, 0x38, 0x8, 0x8}, {0xc0000000, 0x9, 0x1, 0x7fffffff, 0x9, 0xffffffff, 0x6}, {0x80000008, 0x8, 0x3, 0xfff, 0x0, 0x1, 0x5}]}}}) syz_ublk_setup_queues(r5, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 51.040585773s ago: executing program 2 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000a40)=0x100002, 0x4) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r1, @ANYBLOB="7d14e978caceba2597d2dd49022e93ee7ccaaebf6b47a1e98667e8d6c74923865664531f6c207357d46cca7132f450034cb21dcf351428bd5fe99e3993cbf616018068eeabc6cec355e1fd73d55ad020d034bcf1559dac7ca87ccef62ac52b81ccc759d145b0423be8d9"]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0x4000000000004, 0x62001) ioctl$MON_IOCX_GET(r3, 0x40189206, 0x0) 35.928148988s ago: executing program 32 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000a40)=0x100002, 0x4) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r1, @ANYBLOB="7d14e978caceba2597d2dd49022e93ee7ccaaebf6b47a1e98667e8d6c74923865664531f6c207357d46cca7132f450034cb21dcf351428bd5fe99e3993cbf616018068eeabc6cec355e1fd73d55ad020d034bcf1559dac7ca87ccef62ac52b81ccc759d145b0423be8d9"]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0x4000000000004, 0x62001) ioctl$MON_IOCX_GET(r3, 0x40189206, 0x0) 6.158906227s ago: executing program 1 (id=429): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x11) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x500000000000000) 6.142114898s ago: executing program 1 (id=430): socket(0x1e, 0x4, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000feff00"/88, 0x58) 6.121875558s ago: executing program 1 (id=431): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000500)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x20, 0x9, 0xe, "aa3d39691b3e0dbbe941d7388e8e"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000680)={0x40, 0xa, 0x74, "c44da585aeaf64a3a27896fe637a9fc532295b61a658aaec25aab352e7436077de22446319c919690afb7291d8d04f662402cad529d4497dd5f462a3184d7065df8f6cae4d6bc708c0e10717f77e77c223de090ee8bc7f5b726ab2cf18b616b32cb309f6593cf140b157f0c7172cdeb896264729"}, &(0x7f0000000700)={0x0, 0xa, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1}, &(0x7f0000000780)={0xc0, 0x5, 0x5, "192382e659"}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x40, 0x12, 0x3, "64d99b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a80)={0x40, 0xa, 0x3, "fbc898"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.463887774s ago: executing program 0 (id=443): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x1ca, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x52}}}, &(0x7f0000000300)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.356006487s ago: executing program 0 (id=444): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x20, 0x9, 0xe, "aa3d39691b3e0dbbe941d7388e8e"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000680)={0x40, 0xa, 0x74, "c44da585aeaf64a3a27896fe637a9fc532295b61a658aaec25aab352e7436077de22446319c919690afb7291d8d04f662402cad529d4497dd5f462a3184d7065df8f6cae4d6bc708c0e10717f77e77c223de090ee8bc7f5b726ab2cf18b616b32cb309f6593cf140b157f0c7172cdeb896264729"}, &(0x7f0000000700)={0x0, 0xa, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1}, &(0x7f0000000780)={0xc0, 0x5, 0x5, "192382e659"}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x40, 0x12, 0x3, "64d99b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a80)={0x40, 0xa, 0x3, "fbc898"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) 3.079486674s ago: executing program 1 (id=445): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff0100000000000000000000000000016401010200000000000000000000000000000000000200000a000080060000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000030000000000000000000000b86b6e0000010001000000000c0015005b07e177ed"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x7, 0x18, "58987c6835122c28bcdf412551824c9b0ee0963c96fddec3"}}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0x19, 0x4) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001200192340834b80040d8c560a067f0200ff000000000000000058000b4824ca946e64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1) r5 = creat(&(0x7f0000000100)='./tracing/events/enable\x00', 0x19) write(r5, &(0x7f0000000140)='1', 0x1) 2.970632616s ago: executing program 1 (id=446): sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0200000000000000000000000000000000000000000000000e8000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x40) 2.968266597s ago: executing program 1 (id=447): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00011100000009040000019569", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000500)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x20, 0x9, 0xe, "aa3d39691b3e0dbbe941d7388e8e"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000680)={0x40, 0xa, 0x74, "c44da585aeaf64a3a27896fe637a9fc532295b61a658aaec25aab352e7436077de22446319c919690afb7291d8d04f662402cad529d4497dd5f462a3184d7065df8f6cae4d6bc708c0e10717f77e77c223de090ee8bc7f5b726ab2cf18b616b32cb309f6593cf140b157f0c7172cdeb896264729"}, &(0x7f0000000700)={0x0, 0xa, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1}, &(0x7f0000000780)={0xc0, 0x5, 0x5, "192382e659"}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x40, 0x12, 0x3, "64d99b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a80)={0x40, 0xa, 0x3, "fbc898"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.795047591s ago: executing program 3 (id=448): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000140)) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) sendmsg$tipc(r2, &(0x7f0000000000)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4014}, 0x20042010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @remote, 0xc}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r4, &(0x7f0000000500)=[{&(0x7f0000000280)=""/200, 0xc8}], 0x1, 0x3, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000330005006d04000012b0000000000000000000000600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"], 0x14b) write$UHID_INPUT2(r5, &(0x7f00000001c0)={0xc, {0xc, "12e6b3d855f4311c265f962b"}}, 0x12) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000180)={0x0, 0xe000}) 2.41921104s ago: executing program 3 (id=449): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="f162704b8dc6706326bd7000ffdbdf25"], 0x10}}, 0x20044010) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001100010000000000000000002000000001"], 0x30}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0a9e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a09008c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cde22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa10500c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be00", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x150, 0x0, 0x9, [{{0x5, 0x1, 0x2, 0x100, 0x2, 0x8, {0x6, 0x9, 0x9, 0x80000000000000ff, 0x2, 0x0, 0x2, 0x100003f, 0x3, 0x8000, 0x4000009, r4, r5, 0x1, 0x2}}, {0x4, 0x537, 0xa7, 0xf9, '9\xfc\xd8\x1cm\x02W\xa9\x85Z\xf0\xd0)\xb2\xf6:?m \xa7\xeb\x90\xc6\xde\xdfu\xadx\xc1\xc2v\xe2S\xa8\x00_\x86\xa7\xd4\x9b.\x00+\x13;\b\x00\x00\x00\x00\xa9\xfc\x89~\xee\xc3\x10\xcd\x90Z\xbb\'\x82\xb4\x85\xd8e\xad\xb4O\xfd\xab\xf4q\xe7\x94\xd8\xaa\xb5\x10\x0e\xd5\x04\x0e\x18:\xb8/1rz%\x05\xc0\xa0%\x17fT\xc1-o\xf1|G\xd0\xca`)\x96\xb7#\t\x1eX\xf2\x1c\xb5\x01Z\xfa\x00\x00\x00\x00\x00\x00\x00\x80\xf0\xd0\x8f\xb3\x99\x10\xff\'\xb2V\x92@\x86\xa0\xb5\x81\x90\x85\x1f\xf7\xfeJ\x1c\x06\x8e\xa2\xe3\x9b\x83\xc8\xb7\xcc\xdd\xfa\xc96\bF'}}]}, 0x0, 0x0, 0x0}) getdents(r7, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x80000, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYBLOB="3c58819092f570b655ad1d04aad7832973c00b32f96adaebe5d4805d471acd9f1a2451ff424d642fa74c1ad8fc21d8d2ab", @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES64=r0]) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r9 = socket$netlink(0x10, 0x3, 0x0) inotify_add_watch(r8, &(0x7f0000000240)='./file0\x00', 0x15000000) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002500)=ANY=[@ANYBLOB="e00300001800290200000000000000000a000000ca031780"], 0x3e0}}, 0x20010000) pread64(r8, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) write$FUSE_LK(r8, &(0x7f0000000280)={0x28, 0x0, r3, {{0x18, 0x0, 0x0, r6}}}, 0x28) 2.226543945s ago: executing program 3 (id=450): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x130c00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x30) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x68c50012, 0x4, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x7ff, {0x0, 0x0, 0x0, 0xbf5, 0x0, 0xb22f, {0x0, 0x0, 0x9279, 0x0, 0x800000000, 0x4, 0x8, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x40104d06, &(0x7f0000000040)="00000200000000000000020001") r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(r4, 0x0, 0x0) capset(0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close(0x3) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000200)={0x551e, [0x80000007, 0xffffffff], 0x3}, 0x10) statx(0xffffffffffffffff, 0x0, 0x1000, 0x100, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, 0x0, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf5) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket(0x10, 0x3, 0x0) 2.181709866s ago: executing program 3 (id=451): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e4fffffffffffbff", "9da15200", "b6730761", "f3ffffffffffffff"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendto$inet6(r2, &(0x7f0000000300)="0e5c402e5a33", 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x24) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0x5382, 0x18) getpid() userfaultfd(0x801) 2.159978127s ago: executing program 3 (id=452): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.109785068s ago: executing program 3 (id=453): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000500)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x20, 0x9, 0xe, "aa3d39691b3e0dbbe941d7388e8e"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000680)={0x40, 0xa, 0x74, "c44da585aeaf64a3a27896fe637a9fc532295b61a658aaec25aab352e7436077de22446319c919690afb7291d8d04f662402cad529d4497dd5f462a3184d7065df8f6cae4d6bc708c0e10717f77e77c223de090ee8bc7f5b726ab2cf18b616b32cb309f6593cf140b157f0c7172cdeb896264729"}, &(0x7f0000000700)={0x0, 0xa, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1}, &(0x7f0000000780)={0xc0, 0x5, 0x5, "192382e659"}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x40, 0x12, 0x3, "64d99b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000a80)={0x40, 0xa, 0x3, "fbc898"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.672999409s ago: executing program 4 (id=457): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x3abb, &(0x7f0000000000)={0x0, 0x36ad, 0x10000, 0x2, 0x6}, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) munmap$IORING_OFF_CQ_RING(r1, 0x1) ptrace(0x10, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}}, 0x20000000) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x810) tgkill(r0, r0, 0xb) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) fchmod(r4, 0x20049549e2a2d659) renameat2(r3, &(0x7f0000000300)='./cgroup\x00', r3, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_usb_connect(0x5, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103040505072404", @ANYRESDEC], 0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 434.6389ms ago: executing program 4 (id=458): socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0x46) write(r0, &(0x7f0000000140)='n', 0x1) 434.343149ms ago: executing program 4 (id=459): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0xfffffffffffffffe, 0x7, {0x5, 0x3, 0x2, 0x8, 0x3, 0x33e, {0x6, 0x638, 0x80, 0x8, 0xc7de, 0x7, 0x14f5a307, 0x7, 0x1, 0x0, 0x4, 0x0, 0x0, 0x7, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0xcc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xb8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}]}, 0xcc}}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 432.979359ms ago: executing program 4 (id=460): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private2, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x3}}}, [@policy_type={0xa, 0x10, {0x2}}]}, 0xcc}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f00000000c0)=0x6, 0x4) process_vm_readv(0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000440)=""/224, 0xe0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000780)=""/68, 0x44}], 0x6, 0x0, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x3a40, &(0x7f00000001c0)={0x0, 0x7b10, 0x800, 0x2, 0x3b9}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x6dad, &(0x7f0000000300)={0x0, 0x20ac, 0x40, 0x0, 0xd6, 0x0, r3}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) dup3(r0, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)='D', 0x1) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f0000000040)) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r6, 0x1, 0x32, &(0x7f0000000180)=0x4, 0x4) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000100)=0x1) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, 0x0, &(0x7f0000001940)) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) 403.6418ms ago: executing program 4 (id=461): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 318.833472ms ago: executing program 0 (id=462): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0xfffffffffffffffe, 0x7, {0x5, 0x3, 0x2, 0x8, 0x3, 0x33e, {0x6, 0x638, 0x80, 0x8, 0xc7de, 0x7, 0x14f5a307, 0x7, 0x1, 0x0, 0x4, 0x0, 0x0, 0x7, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0xcc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xb8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}]}, 0xcc}}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (fail_nth: 2) 69.019678ms ago: executing program 4 (id=463): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001180)={0x2c, &(0x7f0000000f40)={0x0, 0xb, 0x2, "5816"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}}) 355.67µs ago: executing program 0 (id=464): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r5 = dup(r4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x2000000, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x2ea}}], 0x1, 0x0, 0x0) 227.95µs ago: executing program 0 (id=465): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) mkdir(&(0x7f00000000c0)='./bus\x00', 0x13e) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000005cc0)='./file0\x00') 0s ago: executing program 0 (id=466): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r5 = dup(r4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x2ea}}], 0x1, 0x0, 0x0) (fail_nth: 6) kernel console output (not intermixed with test programs): ce number 7 using dummy_hcd [ 38.488125][ T444] usb 3-1: Using ep0 maxpacket: 16 [ 38.494908][ T444] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.506216][ T376] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 38.513880][ T444] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.524582][ T444] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 38.537776][ T444] usb 3-1: config 0 interface 0 has no altsetting 0 [ 38.544474][ T444] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 38.553710][ T444] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.564106][ T444] usb 3-1: config 0 descriptor?? [ 38.578186][ T31] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 38.668131][ T376] usb 4-1: Using ep0 maxpacket: 32 [ 38.675294][ T376] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 38.684730][ T376] usb 4-1: config 0 has no interface number 0 [ 38.691146][ T376] usb 4-1: config 0 interface 188 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 38.701303][ T376] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 38.713074][ T376] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 38.722208][ T376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.730294][ T376] usb 4-1: Product: syz [ 38.734516][ T376] usb 4-1: Manufacturer: syz [ 38.739749][ T376] usb 4-1: SerialNumber: syz [ 38.744996][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.756599][ T376] usb 4-1: config 0 descriptor?? [ 38.761709][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.774525][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 38.784206][ T376] asix 4-1:0.188: probe with driver asix failed with error -22 [ 38.791924][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.802583][ T31] usb 2-1: config 0 descriptor?? [ 38.990377][ T444] hid (null): unknown global tag 0x5e [ 38.997798][ T444] hid (null): unknown global tag 0xd [ 39.003218][ T444] hid (null): global environment stack underflow [ 39.010269][ T444] hid (null): report_id 3016947009 is invalid [ 39.016498][ T444] hid (null): report_id 0 is invalid [ 39.021908][ T548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.032914][ T548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.187420][ T444] usb 3-1: USB disconnect, device number 7 [ 39.218170][ T376] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 39.244519][ T31] isku 0003:1E7D:319C.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 39.379416][ T376] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.389925][ T376] usb 1-1: config 1 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 39.400732][ T376] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 39.415891][ T376] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 39.425557][ T376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.434189][ T376] usb 1-1: Product: syz [ 39.438467][ T376] usb 1-1: Manufacturer: syz [ 39.443631][ T31] isku 0003:1E7D:319C.0002: couldn't init struct isku_device [ 39.451119][ T376] usb 1-1: SerialNumber: syz [ 39.456135][ T31] isku 0003:1E7D:319C.0002: couldn't install keyboard [ 39.466261][ T376] usb-storage 1-1:1.0: USB Mass Storage device detected [ 39.473734][ T31] isku 0003:1E7D:319C.0002: probe with driver isku failed with error -71 [ 39.483882][ T31] usb 2-1: USB disconnect, device number 7 [ 39.490295][ T376] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 39.498553][ T376] scsi host1: usb-storage 1-1:1.0 [ 39.671973][ T376] usb 1-1: USB disconnect, device number 4 [ 39.948189][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 40.034896][ T575] can0: slcan on ttyS3. [ 40.041327][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 40.041346][ T36] audit: type=1400 audit(1786167707.630:201): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.090830][ T36] audit: type=1400 audit(1786167707.680:202): avc: denied { read } for pid=578 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.100362][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 40.113933][ T36] audit: type=1400 audit(1786167707.680:203): avc: denied { open } for pid=578 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.148311][ T574] can0 (unregistered): slcan off ttyS3. [ 40.153978][ T31] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 40.163601][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.171616][ T36] audit: type=1400 audit(1786167707.680:204): avc: denied { getattr } for pid=578 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.194094][ T31] usb 3-1: Product: syz [ 40.204135][ T31] usb 3-1: Manufacturer: syz [ 40.235108][ T31] usb 3-1: SerialNumber: syz [ 40.252139][ T586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 40.322814][ T36] audit: type=1400 audit(1786167707.910:205): avc: denied { write } for pid=577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.367313][ T36] audit: type=1400 audit(1786167707.910:206): avc: denied { add_name } for pid=577 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.404709][ T595] kvm: kvm [592]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 40.422365][ T36] audit: type=1400 audit(1786167708.010:207): avc: denied { remove_name } for pid=598 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.455800][ T31] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 40.474309][ T31] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 40.495776][ T31] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 40.506962][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 40.532307][ T31] usb 3-1: USB disconnect, device number 8 [ 40.558137][ T376] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 40.575844][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.697693][ T36] audit: type=1400 audit(1786167708.280:208): avc: denied { watch watch_reads } for pid=618 comm="syz.1.80" path="/22/file1" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.822560][ T36] audit: type=1400 audit(1786167708.410:209): avc: denied { create } for pid=623 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.824352][ T624] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64528 sclass=netlink_xfrm_socket pid=624 comm=syz.1.81 [ 40.844233][ T36] audit: type=1400 audit(1786167708.410:210): avc: denied { bind } for pid=623 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.020241][ T638] binder: Unknown parameter 'defcontext01777777777777777777777' [ 41.217629][ T31] usb 4-1: USB disconnect, device number 3 [ 41.258181][ T444] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 41.330671][ T643] FAULT_INJECTION: forcing a failure. [ 41.330671][ T643] name failslab, interval 1, probability 0, space 0, times 0 [ 41.343551][ T643] CPU: 1 UID: 0 PID: 643 Comm: syz.3.87 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 41.343590][ T643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.343604][ T643] Call Trace: [ 41.343612][ T643] [ 41.343621][ T643] __dump_stack+0x21/0x30 [ 41.343660][ T643] dump_stack_lvl+0x140/0x1c0 [ 41.343690][ T643] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.343734][ T643] ? __kernel_text_address+0x40/0x40 [ 41.343769][ T643] dump_stack+0x19/0x20 [ 41.343800][ T643] should_fail_ex+0x3c2/0x510 [ 41.343828][ T643] should_failslab+0xac/0x100 [ 41.343858][ T643] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 41.343885][ T643] ? sidtab_sid2str_get+0x135/0x360 [ 41.343918][ T643] kmemdup_noprof+0x31/0x80 [ 41.343949][ T643] sidtab_sid2str_get+0x135/0x360 [ 41.343984][ T643] security_sid_to_context_core+0x30d/0x5d0 [ 41.344014][ T643] security_sid_to_context+0x2e/0x50 [ 41.344041][ T643] selinux_dentry_init_security+0x488/0x5f0 [ 41.344070][ T643] ? __cfi_selinux_dentry_init_security+0x10/0x10 [ 41.344097][ T643] security_dentry_init_security+0x88/0x170 [ 41.344120][ T643] get_create_ext+0x1c6/0xde0 [ 41.344137][ T643] ? kasan_save_alloc_info+0x3a/0x50 [ 41.344164][ T643] ? __kasan_kmalloc+0x96/0xb0 [ 41.344185][ T643] ? create_new_entry+0xa10/0xa10 [ 41.344201][ T643] ? __kmalloc_cache_noprof+0x23c/0x470 [ 41.344222][ T643] create_new_entry+0x24f/0xa10 [ 41.344239][ T643] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 41.344257][ T643] ? fuse_tmpfile+0x270/0x270 [ 41.344274][ T643] ? avc_xperms_populate+0x2a8/0x620 [ 41.344296][ T643] fuse_mkdir+0x443/0x1940 [ 41.344323][ T643] ? __cfi_fuse_mkdir+0x10/0x10 [ 41.344348][ T643] ? avc_perm_nonode+0x118/0x1d0 [ 41.344388][ T643] ? avc_has_perm_noaudit+0x21f/0x360 [ 41.344413][ T643] ? may_create+0x602/0x820 [ 41.344430][ T643] ? show_sid+0x1e0/0x1e0 [ 41.344447][ T643] ? d_alloc+0x174/0x1c0 [ 41.344466][ T643] ? make_vfsgid+0x4d/0xa0 [ 41.344482][ T643] ? __cfi_fuse_permission+0x10/0x10 [ 41.344508][ T643] ? selinux_inode_mkdir+0x26/0x30 [ 41.344532][ T643] ? bpf_lsm_inode_mkdir+0xd/0x20 [ 41.344552][ T643] ? security_inode_mkdir+0x7e/0x180 [ 41.344576][ T643] vfs_mkdir+0x591/0x810 [ 41.344601][ T643] do_mkdirat+0x240/0x530 [ 41.344625][ T643] ? __cfi_do_mkdirat+0x10/0x10 [ 41.344649][ T643] ? __kasan_check_write+0x18/0x20 [ 41.344666][ T643] ? getname_flags+0x203/0x6b0 [ 41.344685][ T643] ? __kasan_check_read+0x15/0x20 [ 41.344702][ T643] __x64_sys_mkdirat+0x8b/0xa0 [ 41.344733][ T643] x64_sys_call+0x2ba8/0x2ee0 [ 41.344749][ T643] do_syscall_64+0x57/0xf0 [ 41.344769][ T643] ? clear_bhb_loop+0x50/0xa0 [ 41.344794][ T643] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.344817][ T643] RIP: 0033:0x7fa1acd9e0d9 [ 41.344833][ T643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.344848][ T643] RSP: 002b:00007fa1adc24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 41.344867][ T643] RAX: ffffffffffffffda RBX: 00007fa1ad025fa0 RCX: 00007fa1acd9e0d9 [ 41.344881][ T643] RDX: 0000000000000062 RSI: 0000200000000900 RDI: ffffffffffffff9c [ 41.344893][ T643] RBP: 00007fa1adc24090 R08: 0000000000000000 R09: 0000000000000000 [ 41.344905][ T643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.344916][ T643] R13: 00007fa1ad026038 R14: 00007fa1ad025fa0 R15: 00007ffd08d29268 [ 41.344931][ T643] [ 41.695665][ T444] usb 3-1: device descriptor read/64, error -71 [ 41.938142][ T444] usb 3-1: device descriptor read/64, error -71 [ 41.978167][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 42.129514][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.140631][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.150463][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.163510][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.172656][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.180757][ T444] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 42.189306][ T31] usb 4-1: config 0 descriptor?? [ 42.328168][ T444] usb 3-1: device descriptor read/64, error -71 [ 42.498151][ T376] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 42.568268][ T444] usb 3-1: device descriptor read/64, error -71 [ 42.596952][ T31] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 42.606115][ T31] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 42.650674][ T376] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 42.660099][ T376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.668361][ T376] usb 1-1: Product: syz [ 42.672567][ T376] usb 1-1: Manufacturer: syz [ 42.677185][ T376] usb 1-1: SerialNumber: syz [ 42.682190][ T444] usb usb3-port1: attempt power cycle [ 42.689969][ T376] pl2303 1-1:1.0: pl2303 converter detected [ 42.696986][ T376] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 42.891967][ T669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.900986][ T669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.910668][ T376] usb 1-1: USB disconnect, device number 6 [ 42.918315][ T376] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 42.926793][ T376] pl2303 1-1:1.0: device disconnected [ 43.018180][ T444] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 43.049436][ T444] usb 3-1: device descriptor read/8, error -71 [ 43.179364][ T444] usb 3-1: device descriptor read/8, error -71 [ 43.418182][ T444] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 43.441073][ T444] usb 3-1: device descriptor read/8, error -71 [ 43.569274][ T444] usb 3-1: device descriptor read/8, error -71 [ 43.608267][ T684] mmap: syz.0.102 (684) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.655686][ T687] can0: slcan on ttyS3. [ 43.680745][ T444] usb usb3-port1: unable to enumerate USB device [ 43.690635][ T686] can0 (unregistered): slcan off ttyS3. [ 43.772699][ T692] FAULT_INJECTION: forcing a failure. [ 43.772699][ T692] name failslab, interval 1, probability 0, space 0, times 0 [ 43.786246][ T692] CPU: 1 UID: 0 PID: 692 Comm: syz.0.104 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 43.786287][ T692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.786303][ T692] Call Trace: [ 43.786311][ T692] [ 43.786320][ T692] __dump_stack+0x21/0x30 [ 43.786361][ T692] dump_stack_lvl+0x140/0x1c0 [ 43.786397][ T692] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.786433][ T692] ? security_sid_to_context+0x2e/0x50 [ 43.786467][ T692] dump_stack+0x19/0x20 [ 43.786500][ T692] should_fail_ex+0x3c2/0x510 [ 43.786538][ T692] ? get_create_ext+0x2fa/0xde0 [ 43.786561][ T692] should_failslab+0xac/0x100 [ 43.786592][ T692] __kmalloc_noprof+0x69/0x510 [ 43.786617][ T692] ? get_create_ext+0x2fa/0xde0 [ 43.786639][ T692] ? security_dentry_init_security+0x154/0x170 [ 43.786673][ T692] get_create_ext+0x2fa/0xde0 [ 43.786695][ T692] ? __kasan_kmalloc+0x96/0xb0 [ 43.786725][ T692] ? create_new_entry+0xa10/0xa10 [ 43.786747][ T692] ? __kmalloc_cache_noprof+0x23c/0x470 [ 43.786776][ T692] create_new_entry+0x24f/0xa10 [ 43.786800][ T692] ? fuse_tmpfile+0x270/0x270 [ 43.786840][ T692] fuse_mkdir+0x443/0x1940 [ 43.786876][ T692] ? __kmalloc_node_noprof+0x267/0x500 [ 43.786903][ T692] ? __cfi_fuse_mkdir+0x10/0x10 [ 43.786944][ T692] ? avc_has_perm_noaudit+0x289/0x360 [ 43.786979][ T692] ? may_create+0x602/0x820 [ 43.787003][ T692] ? show_sid+0x1e0/0x1e0 [ 43.787026][ T692] ? d_alloc+0x174/0x1c0 [ 43.787048][ T692] ? make_vfsgid+0x4d/0xa0 [ 43.787071][ T692] ? __cfi_fuse_permission+0x10/0x10 [ 43.787107][ T692] ? selinux_inode_mkdir+0x26/0x30 [ 43.787142][ T692] ? bpf_lsm_inode_mkdir+0xd/0x20 [ 43.787170][ T692] ? security_inode_mkdir+0x7e/0x180 [ 43.787203][ T692] vfs_mkdir+0x591/0x810 [ 43.787239][ T692] do_mkdirat+0x240/0x530 [ 43.787276][ T692] ? __cfi_do_mkdirat+0x10/0x10 [ 43.787310][ T692] ? __kasan_check_write+0x18/0x20 [ 43.787334][ T692] ? getname_flags+0x203/0x6b0 [ 43.787361][ T692] ? __kasan_check_read+0x15/0x20 [ 43.787386][ T692] __x64_sys_mkdirat+0x8b/0xa0 [ 43.787420][ T692] x64_sys_call+0x2ba8/0x2ee0 [ 43.787443][ T692] do_syscall_64+0x57/0xf0 [ 43.787472][ T692] ? clear_bhb_loop+0x50/0xa0 [ 43.787512][ T692] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.787545][ T692] RIP: 0033:0x7f172219e0d9 [ 43.787566][ T692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.787587][ T692] RSP: 002b:00007f1720be3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 43.787614][ T692] RAX: ffffffffffffffda RBX: 00007f1722425fa0 RCX: 00007f172219e0d9 [ 43.787633][ T692] RDX: 0000000000000062 RSI: 0000200000000900 RDI: ffffffffffffff9c [ 43.787650][ T692] RBP: 00007f1720be3090 R08: 0000000000000000 R09: 0000000000000000 [ 43.787666][ T692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 43.787681][ T692] R13: 00007f1722426038 R14: 00007f1722425fa0 R15: 00007ffc1345c3a8 [ 43.787702][ T692] [ 44.148800][ T705] netlink: 44 bytes leftover after parsing attributes in process `syz.1.107'. [ 44.157759][ T705] netlink: 43 bytes leftover after parsing attributes in process `syz.1.107'. [ 44.166707][ T705] netlink: 'syz.1.107': attribute type 6 has an invalid length. [ 44.174431][ T705] netlink: 'syz.1.107': attribute type 5 has an invalid length. [ 44.182157][ T705] netlink: 43 bytes leftover after parsing attributes in process `syz.1.107'. [ 44.616164][ T739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 44.878532][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 44.878570][ T444] usb 4-1: USB disconnect, device number 4 [ 45.018121][ T9] usb 2-1: device descriptor read/64, error -71 [ 45.198144][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 45.258165][ T9] usb 2-1: device descriptor read/64, error -71 [ 45.308142][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 45.372636][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 45.383956][ T31] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 45.391814][ T31] usb 3-1: can't read configurations, error -71 [ 45.478275][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 45.484884][ T10] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.497003][ T10] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.507177][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 45.514731][ T10] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 45.528192][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.534927][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 45.544283][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.553852][ T10] usb 1-1: config 0 descriptor?? [ 45.603349][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 45.603387][ T36] audit: type=1400 audit(1786167713.190:230): avc: denied { unlink } for pid=296 comm="syz-executor" name="file0" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 45.688172][ T9] usb 2-1: device descriptor read/64, error -71 [ 45.848198][ T444] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 45.931282][ T9] usb 2-1: device descriptor read/64, error -71 [ 45.950403][ T762] overlay: Unknown parameter 'audit' [ 45.979138][ T10] hid (null): unknown global tag 0x5e [ 45.985951][ T10] hid (null): unknown global tag 0xd [ 45.991598][ T10] hid (null): global environment stack underflow [ 45.998014][ T10] hid (null): report_id 3016947009 is invalid [ 46.004197][ T36] audit: type=1400 audit(1786167713.580:231): avc: denied { write } for pid=763 comm="syz.2.122" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.010186][ T444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.027926][ T10] hid (null): report_id 0 is invalid [ 46.039612][ T444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.048669][ T36] audit: type=1400 audit(1786167713.580:232): avc: denied { open } for pid=763 comm="syz.2.122" path="/dev/usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.054999][ T444] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 46.089029][ T9] usb usb2-port1: attempt power cycle [ 46.091459][ T36] audit: type=1400 audit(1786167713.600:233): avc: denied { ioctl } for pid=763 comm="syz.2.122" path="socket:[8305]" dev="sockfs" ino=8305 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.120674][ T444] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 46.126411][ T36] audit: type=1400 audit(1786167713.600:234): avc: denied { ioctl } for pid=763 comm="syz.2.122" path="/dev/usbmon8" dev="devtmpfs" ino=115 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.148138][ T444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.172789][ T66] usb 1-1: USB disconnect, device number 7 [ 46.179344][ T444] usb 4-1: config 0 descriptor?? [ 46.389098][ T444] playstation 0003:054C:09CC.0005: unknown main item tag 0x0 [ 46.396646][ T444] playstation 0003:054C:09CC.0005: unknown main item tag 0x0 [ 46.404576][ T444] playstation 0003:054C:09CC.0005: unknown main item tag 0x0 [ 46.412242][ T444] playstation 0003:054C:09CC.0005: unknown main item tag 0x0 [ 46.419745][ T444] playstation 0003:054C:09CC.0005: unknown main item tag 0x0 [ 46.427823][ T444] playstation 0003:054C:09CC.0005: unknown main item tag 0x0 [ 46.436178][ T444] playstation 0003:054C:09CC.0005: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.3-1/input0 [ 46.438850][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 46.458164][ T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 46.469502][ T9] usb 2-1: device descriptor read/8, error -71 [ 46.500324][ T444] playstation 0003:054C:09CC.0005: Invalid byte count transferred, expected 16 got 0 [ 46.509959][ T444] playstation 0003:054C:09CC.0005: Failed to retrieve DualShock4 pairing info: -22 [ 46.519443][ T444] playstation 0003:054C:09CC.0005: Failed to get MAC address from DualShock4 [ 46.528316][ T444] playstation 0003:054C:09CC.0005: Failed to create dualshock4. [ 46.536595][ T444] playstation 0003:054C:09CC.0005: probe with driver playstation failed with error -22 [ 46.599376][ T9] usb 2-1: device descriptor read/8, error -71 [ 46.618172][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 46.624573][ T31] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.635554][ T31] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.645396][ T31] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.658269][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 46.664903][ T31] usb 3-1: New USB device found, idVendor=046e, idProduct=5577, bcdDevice= 0.00 [ 46.674450][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.683890][ T31] usb 3-1: config 0 descriptor?? [ 46.700686][ T311] usb 4-1: USB disconnect, device number 5 [ 46.804247][ T776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.126'. [ 46.838213][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 46.859261][ T9] usb 2-1: device descriptor read/8, error -71 [ 46.989224][ T9] usb 2-1: device descriptor read/8, error -71 [ 47.048169][ T444] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 47.096483][ T36] audit: type=1400 audit(1786167714.680:235): avc: denied { set_context_mgr } for pid=765 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 47.117028][ T9] usb usb2-port1: unable to enumerate USB device [ 47.127534][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 47.140672][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 47.150648][ T31] usb 3-1: USB disconnect, device number 14 [ 47.198150][ T444] usb 1-1: Using ep0 maxpacket: 8 [ 47.204869][ T444] usb 1-1: config 248 has an invalid interface number: 115 but max is 2 [ 47.213722][ T444] usb 1-1: config 248 has an invalid interface number: 241 but max is 2 [ 47.222979][ T444] usb 1-1: config 248 has an invalid descriptor of length 0, skipping remainder of the config [ 47.233707][ T444] usb 1-1: config 248 has 2 interfaces, different from the descriptor's value: 3 [ 47.243059][ T444] usb 1-1: config 248 has no interface number 0 [ 47.249723][ T444] usb 1-1: config 248 has no interface number 1 [ 47.256485][ T444] usb 1-1: config 248 interface 115 altsetting 128 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 47.273995][ T444] usb 1-1: config 248 interface 115 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 1023 [ 47.287722][ T444] usb 1-1: config 248 interface 241 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 47.299296][ T444] usb 1-1: config 248 interface 241 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 47.313295][ T444] usb 1-1: config 248 interface 115 has no altsetting 0 [ 47.320578][ T444] usb 1-1: config 248 interface 241 has no altsetting 0 [ 47.337580][ T444] usb 1-1: New USB device found, idVendor=4971, idProduct=8017, bcdDevice=5f.a1 [ 47.347919][ T444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.367606][ T444] usb 1-1: Product: syz [ 47.372071][ T444] usb 1-1: Manufacturer: syz [ 47.376867][ T444] usb 1-1: SerialNumber: syz [ 47.387001][ T776] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 47.398297][ T36] audit: type=1400 audit(1786167714.990:236): avc: denied { write } for pid=784 comm="syz.3.130" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.512201][ T36] audit: type=1400 audit(1786167715.100:237): avc: denied { write } for pid=793 comm="syz.2.133" name="ip6_flowlabel" dev="proc" ino=4026532606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 47.601813][ T36] audit: type=1400 audit(1786167715.190:238): avc: denied { search } for pid=804 comm="syz.2.137" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.611986][ T444] usb-storage 1-1:248.115: USB Mass Storage device detected [ 47.636809][ T444] usb-storage 1-1:248.115: Quirks match for vid 4971 pid 8017: 4000000 [ 47.658224][ T36] audit: type=1400 audit(1786167715.190:239): avc: denied { read } for pid=804 comm="syz.2.137" name="trace_pipe" dev="tracefs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 47.686270][ T444] usb-storage 1-1:248.241: USB Mass Storage device detected [ 47.698136][ T311] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 47.708351][ T444] usb-storage 1-1:248.241: Quirks match for vid 4971 pid 8017: 4000000 [ 47.756448][ T444] usb 1-1: USB disconnect, device number 8 [ 47.848170][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 47.857702][ T311] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 47.878009][ T311] usb 4-1: config 0 has no interface number 0 [ 47.888164][ T311] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 47.896606][ T814] loop5: detected capacity change from 0 to 7 [ 47.905086][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.914339][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.922671][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.932183][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.940301][ T814] loop5: unable to read partition table [ 47.948537][ T311] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 47.949840][ T814] loop_reread_partitions: partition scan of loop5 (uWý* %) failed (rc=-5) [ 47.957638][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.957664][ T311] usb 4-1: Product: syz [ 47.980821][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.990043][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.998047][ T311] usb 4-1: Manufacturer: syz [ 48.002960][ T311] usb 4-1: SerialNumber: syz [ 48.009339][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.018554][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 48.026794][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.036267][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 48.044647][ T311] usb 4-1: config 0 descriptor?? [ 48.046941][ T815] loop5: unable to read partition table [ 48.053335][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.064474][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 48.067597][ T815] loop_reread_partitions: partition scan of loop5 (uWý* %) failed (rc=-5) [ 48.083076][ T792] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 48.090538][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.099764][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 48.109952][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.119203][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 48.134942][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.144181][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 48.274507][ T821] netlink: 'syz.1.143': attribute type 12 has an invalid length. [ 48.310778][ T792] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 48.418152][ T444] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 48.474033][ T826] process 'syz.1.145' launched './file0' with NULL argv: empty string added [ 48.483772][ T826] Invalid argument reading file caps for ./file0 [ 48.524319][ T311] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 48.535074][ T311] asix 4-1:0.188: probe with driver asix failed with error -32 [ 48.588155][ T444] usb 1-1: Using ep0 maxpacket: 16 [ 48.599049][ T444] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.610361][ T444] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.620704][ T444] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 48.633807][ T444] usb 1-1: config 0 interface 0 has no altsetting 0 [ 48.658142][ T444] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 48.667255][ T444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.688929][ T444] usb 1-1: config 0 descriptor?? [ 48.896664][ T817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.908570][ T817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.226458][ T845] netlink: 'syz.1.152': attribute type 28 has an invalid length. [ 49.245444][ T444] usbhid 1-1:0.0: can't add hid device: -71 [ 49.251521][ T444] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 49.269610][ T444] usb 1-1: USB disconnect, device number 9 [ 50.474842][ T10] usb 4-1: USB disconnect, device number 6 [ 50.626600][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 50.626620][ T36] audit: type=1400 audit(1786167718.210:254): avc: denied { wake_alarm } for pid=900 comm="syz.0.175" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 50.938148][ T311] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 50.977496][ T921] overlayfs: empty lowerdir [ 50.983025][ T36] audit: type=1400 audit(1786167718.570:255): avc: denied { bind } for pid=920 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.051416][ T927] fuse: Bad value for 'fd' [ 51.098136][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 51.109196][ T311] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 51.128144][ T311] usb 1-1: config 0 has no interface number 0 [ 51.134320][ T311] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 51.169531][ T311] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 51.178815][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.186852][ T311] usb 1-1: Product: syz [ 51.198135][ T311] usb 1-1: Manufacturer: syz [ 51.202816][ T311] usb 1-1: SerialNumber: syz [ 51.218605][ T311] usb 1-1: config 0 descriptor?? [ 51.223953][ T910] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 51.433157][ T910] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 51.493874][ T936] syzkaller1: entered promiscuous mode [ 51.500884][ T936] syzkaller1: entered allmulticast mode [ 51.658366][ T311] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 51.677912][ T311] asix 1-1:0.188: probe with driver asix failed with error -32 [ 51.739623][ T36] audit: type=1400 audit(1786167719.330:256): avc: denied { mounton } for pid=949 comm="syz.1.195" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 51.739802][ T950] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 51.773117][ T444] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 51.774545][ T950] overlayfs: missing 'lowerdir' [ 51.929408][ T444] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 51.940864][ T444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 88, setting to 64 [ 51.952037][ T444] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 51.965659][ T444] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 51.975019][ T444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.987763][ T444] usb 4-1: config 0 descriptor?? [ 51.993932][ T936] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 52.108141][ T311] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 52.205258][ T444] usbhid 4-1:0.0: can't add hid device: -71 [ 52.216047][ T444] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 52.227818][ T444] usb 4-1: USB disconnect, device number 7 [ 52.259484][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 52.273524][ T311] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 52.286556][ T311] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 52.296094][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.304497][ T311] usb 2-1: Product: syz [ 52.309001][ T311] usb 2-1: Manufacturer: syz [ 52.313808][ T311] usb 2-1: SerialNumber: syz [ 52.524223][ T311] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 53.021623][ T960] can0: slcan on ttyS3. [ 53.095333][ T960] can0 (unregistered): slcan off ttyS3. [ 53.119739][ T36] audit: type=1400 audit(1786167720.710:257): avc: denied { write } for pid=961 comm="syz.3.199" name="igmp6" dev="proc" ino=4026532521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 53.144452][ T962] rust_binder: 961:962 no such ref 3 [ 53.153331][ T962] rust_binder: 961:962 got reply transaction with no transaction stack [ 53.162188][ T311] usb 2-1: invalid uac2 rates [ 53.167364][ T962] rust_binder: 961:962 transaction reply to 0:0 failed EINVAL, code 0 size 112-24 [ 53.176993][ T311] usb 2-1: invalid uac2 rates [ 53.240755][ T962] 9pnet_fd: Insufficient options for proto=fd [ 53.359920][ T953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.369408][ T953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.378973][ T311] usb 2-1: failed to enable PITCH for EP 0x82 [ 53.388714][ T311] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 53.397404][ T311] usb 2-1: clock source 0 is not valid, cannot use [ 53.408245][ T311] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 53.419468][ T311] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 53.450775][ T311] usb 2-1: USB disconnect, device number 12 [ 53.470714][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.616653][ T36] audit: type=1400 audit(1786167721.200:258): avc: denied { name_bind } for pid=971 comm="syz.3.203" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 53.621378][ T972] batadv_slave_1: entered promiscuous mode [ 53.645239][ T972] netlink: 148 bytes leftover after parsing attributes in process `syz.3.203'. [ 53.708433][ T972] kernel profiling enabled (shift: 63) [ 53.714154][ T972] profiling shift: 63 too large [ 53.724298][ T444] usb 1-1: USB disconnect, device number 10 [ 53.773693][ T971] batadv_slave_1: left promiscuous mode [ 53.921660][ T983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 54.110596][ T36] audit: type=1400 audit(1786167721.700:259): avc: denied { create } for pid=985 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 54.138117][ T444] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 54.281342][ T36] audit: type=1400 audit(1786167721.870:260): avc: denied { setattr } for pid=988 comm="syz.1.210" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.318141][ T444] usb 4-1: Using ep0 maxpacket: 16 [ 54.325115][ T444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.338881][ T444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.349988][ T444] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 54.363201][ T444] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 54.380169][ T444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.395692][ T444] usb 4-1: config 0 descriptor?? [ 54.430278][ T992] batadv_slave_1: entered promiscuous mode [ 54.438276][ T36] audit: type=1400 audit(1786167722.020:261): avc: denied { bind } for pid=991 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.439151][ T992] tipc: Started in network mode [ 54.463677][ T992] tipc: Node identity 8a1e80c5ba45, cluster identity 4711 [ 54.471513][ T992] tipc: Enabled bearer , priority 10 [ 54.607182][ T981] netlink: 32 bytes leftover after parsing attributes in process `syz.3.207'. [ 54.655557][ T444] usbhid 4-1:0.0: can't add hid device: -71 [ 54.661745][ T444] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 54.671247][ T444] usb 4-1: USB disconnect, device number 8 [ 54.718142][ T311] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 54.879352][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.891219][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.902141][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 54.915144][ T311] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 54.924565][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.933779][ T311] usb 1-1: config 0 descriptor?? [ 55.318177][ T444] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 55.342930][ T311] playstation 0003:054C:09CC.0006: unknown main item tag 0x0 [ 55.352741][ T311] playstation 0003:054C:09CC.0006: unknown main item tag 0x0 [ 55.360857][ T311] playstation 0003:054C:09CC.0006: unknown main item tag 0x0 [ 55.369056][ T311] playstation 0003:054C:09CC.0006: unknown main item tag 0x2 [ 55.382437][ T311] playstation 0003:054C:09CC.0006: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.0-1/input0 [ 55.428170][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 55.496808][ T444] usb 2-1: Using ep0 maxpacket: 32 [ 55.503311][ T444] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 55.518221][ T444] usb 2-1: config 0 has no interface number 0 [ 55.524918][ T444] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 55.541779][ T444] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 55.551337][ T444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.552339][ T311] playstation 0003:054C:09CC.0006: Invalid byte count transferred, expected 16 got 0 [ 55.560239][ T444] usb 2-1: Product: syz [ 55.573677][ T444] usb 2-1: Manufacturer: syz [ 55.578626][ T444] usb 2-1: SerialNumber: syz [ 55.584121][ T311] playstation 0003:054C:09CC.0006: Failed to retrieve DualShock4 pairing info: -22 [ 55.585815][ T444] usb 2-1: config 0 descriptor?? [ 55.593816][ T758] tipc: Node number set to 811303109 [ 55.604278][ T994] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 55.608234][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 55.628214][ T311] playstation 0003:054C:09CC.0006: Failed to get MAC address from DualShock4 [ 55.637078][ T311] playstation 0003:054C:09CC.0006: Failed to create dualshock4. [ 55.645568][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.657283][ T311] playstation 0003:054C:09CC.0006: probe with driver playstation failed with error -22 [ 55.667413][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.684018][ T10] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 55.697480][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 55.704348][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 55.713626][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.725899][ T10] usb 4-1: config 0 descriptor?? [ 55.765523][ T443] usb 1-1: USB disconnect, device number 11 [ 55.775235][ T991] batadv_slave_1: left promiscuous mode [ 55.784222][ T991] tipc: Resetting bearer [ 55.792420][ T991] tipc: Disabling bearer [ 55.814796][ T994] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 56.041508][ T444] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 56.052694][ T444] asix 2-1:0.188: probe with driver asix failed with error -32 [ 56.136675][ T10] hid (null): unknown global tag 0xd [ 56.142301][ T10] hid (null): invalid report_count -838069199 [ 56.150374][ T10] hid (null): unknown global tag 0x5e [ 56.157743][ T10] hid (null): unknown global tag 0xd [ 56.163245][ T10] hid (null): global environment stack underflow [ 56.169662][ T10] hid (null): report_id 3016947009 is invalid [ 56.175900][ T10] hid (null): report_id 0 is invalid [ 56.340677][ T10] usb 4-1: USB disconnect, device number 9 [ 56.430125][ T36] audit: type=1400 audit(1786167982.028:262): avc: denied { name_bind } for pid=1003 comm="syz.0.216" src=19488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 56.562739][ T1007] tmpfs: Bad value for 'size' [ 57.438141][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 57.498138][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 57.589391][ T10] usb 4-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 57.600010][ T10] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 57.613436][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 57.623875][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.659241][ T9] usb 1-1: config 17 has an invalid interface number: 255 but max is 0 [ 57.669250][ T9] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 57.679946][ T9] usb 1-1: config 17 has no interface number 0 [ 57.686260][ T9] usb 1-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 57.697955][ T9] usb 1-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 57.711672][ T9] usb 1-1: config 17 interface 255 has no altsetting 0 [ 57.718694][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 57.728160][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.744246][ T9] aiptek 1-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 57.838517][ T10] usb 4-1: string descriptor 0 read error: -32 [ 57.845492][ T10] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 58.086824][ T10] usb 2-1: USB disconnect, device number 13 [ 58.648006][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 58.799246][ T10] usb 2-1: config 243 has an invalid interface number: 32 but max is 0 [ 58.807722][ T10] usb 2-1: config 243 has no interface number 0 [ 58.814348][ T10] usb 2-1: too many endpoints for config 243 interface 32 altsetting 32: 32, using maximum allowed: 30 [ 58.825783][ T10] usb 2-1: config 243 interface 32 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 58.839545][ T10] usb 2-1: config 243 interface 32 has no altsetting 0 [ 58.848279][ T10] usb 2-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 58.857519][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.865796][ T10] usb 2-1: Product: syz [ 58.870298][ T10] usb 2-1: Manufacturer: syz [ 58.874958][ T10] usb 2-1: SerialNumber: syz [ 59.090551][ T10] usb 2-1: USB disconnect, device number 14 [ 59.733582][ T1047] can0: slcan on ttyS3. [ 59.775602][ T1047] can0 (unregistered): slcan off ttyS3. [ 60.047845][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 60.207798][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 60.227457][ T9] usb 4-1: USB disconnect, device number 10 [ 60.237468][ T10] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 60.250154][ T10] usb 2-1: config 0 has no interface number 0 [ 60.256495][ T10] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 60.278524][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 60.290704][ T758] usb 1-1: USB disconnect, device number 12 [ 60.303674][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.322345][ T10] usb 2-1: Product: syz [ 60.332634][ T10] usb 2-1: Manufacturer: syz [ 60.340116][ T10] usb 2-1: SerialNumber: syz [ 60.350709][ T10] usb 2-1: config 0 descriptor?? [ 60.356981][ T1051] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 60.566061][ T1051] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 60.775501][ T10] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 60.785981][ T10] asix 2-1:0.188: probe with driver asix failed with error -32 [ 60.807726][ T758] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 60.967707][ T758] usb 4-1: Using ep0 maxpacket: 16 [ 60.974289][ T758] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.985736][ T758] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.996028][ T758] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 61.009406][ T758] usb 4-1: config 0 interface 0 has no altsetting 0 [ 61.016170][ T758] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 61.025749][ T758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.034922][ T758] usb 4-1: config 0 descriptor?? [ 61.468773][ T758] hid (null): unknown global tag 0xc [ 61.474331][ T758] hid (null): unknown global tag 0xc [ 61.480105][ T758] hid (null): unknown global tag 0xc [ 61.490940][ T758] hid (null): unknown global tag 0x5e [ 61.498591][ T758] hid (null): unknown global tag 0xd [ 61.504285][ T758] hid (null): global environment stack underflow [ 61.510992][ T758] hid (null): report_id 3016947009 is invalid [ 61.517343][ T758] hid (null): report_id 0 is invalid [ 61.547674][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 61.718492][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 61.732233][ T10] usb 1-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 61.748711][ T311] usb 4-1: USB disconnect, device number 11 [ 61.754814][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 61.774134][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 61.782258][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 61.792297][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 61.801488][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.809683][ T10] usb 1-1: Product: syz [ 61.813939][ T10] usb 1-1: Manufacturer: syz [ 61.819230][ T10] usb 1-1: SerialNumber: syz [ 62.030368][ T1070] netlink: 'syz.0.237': attribute type 16 has an invalid length. [ 62.038851][ T1070] netlink: 51802 bytes leftover after parsing attributes in process `syz.0.237'. [ 62.051872][ T10] usb 1-1: selecting invalid altsetting 0 [ 62.066219][ T10] usb 1-1: USB disconnect, device number 13 [ 62.277885][ T36] audit: type=1400 audit(1786167987.869:263): avc: denied { ioctl } for pid=1072 comm="syz.3.238" path="socket:[10140]" dev="sockfs" ino=10140 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.818467][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 62.834936][ T9] usb 2-1: USB disconnect, device number 15 [ 62.907436][ T66] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 62.962219][ T36] audit: type=1400 audit(1786167988.549:264): avc: denied { mounton } for pid=1087 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.992341][ T493] bridge_slave_1: left allmulticast mode [ 62.998154][ T493] bridge_slave_1: left promiscuous mode [ 63.003864][ T493] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.009270][ T10] usb 1-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 63.021600][ T10] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 63.024415][ T493] bridge_slave_0: left allmulticast mode [ 63.040782][ T493] bridge_slave_0: left promiscuous mode [ 63.046469][ T493] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.047638][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 63.062921][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.078906][ T66] usb 4-1: config 17 has an invalid interface number: 255 but max is 0 [ 63.092926][ T66] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 63.113502][ T66] usb 4-1: config 17 has no interface number 0 [ 63.123636][ T66] usb 4-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 63.137054][ T66] usb 4-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 63.151866][ T66] usb 4-1: config 17 interface 255 has no altsetting 0 [ 63.158845][ T66] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 63.169249][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.190980][ T66] aiptek 4-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 63.206211][ T493] veth1_macvtap: left promiscuous mode [ 63.215272][ T493] veth0_vlan: left promiscuous mode [ 63.276671][ T10] usb 1-1: string descriptor 0 read error: -32 [ 63.288854][ T10] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 63.335679][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.343331][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.350839][ T1087] bridge_slave_0: entered allmulticast mode [ 63.358768][ T1087] bridge_slave_0: entered promiscuous mode [ 63.365625][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.373207][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.380544][ T1087] bridge_slave_1: entered allmulticast mode [ 63.388504][ T1087] bridge_slave_1: entered promiscuous mode [ 63.449576][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.456652][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.464619][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.471700][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.493981][ T487] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.502721][ T487] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.512750][ T497] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.519977][ T497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.529607][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.536744][ T487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.572289][ T1102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'. [ 63.581739][ T1087] veth0_vlan: entered promiscuous mode [ 63.595509][ T1087] veth1_macvtap: entered promiscuous mode [ 63.628365][ T36] audit: type=1400 audit(1786167989.219:265): avc: denied { mount } for pid=1087 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.628891][ T1104] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 63.658441][ T36] audit: type=1400 audit(1786167989.249:266): avc: denied { mounton } for pid=1087 comm="syz-executor" path="/root/syzkaller.wSlZy5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 63.987869][ T1120] fuse: Unknown parameter 'Nb00000000000000000000' [ 64.037660][ T66] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 64.072754][ T36] audit: type=1400 audit(1786167989.659:267): avc: denied { setopt } for pid=1121 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.093465][ T36] audit: type=1400 audit(1786167989.659:268): avc: denied { listen } for pid=1121 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.113380][ T36] audit: type=1400 audit(1786167989.659:269): avc: denied { accept } for pid=1121 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.136360][ T36] audit: type=1400 audit(1786167989.719:270): avc: denied { read } for pid=1121 comm="syz.4.254" dev="sockfs" ino=11615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.158914][ T36] audit: type=1400 audit(1786167989.729:271): avc: denied { create } for pid=1121 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.179748][ T36] audit: type=1400 audit(1786167989.729:272): avc: denied { write } for pid=1121 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.217381][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 64.223776][ T66] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 64.232578][ T66] usb 2-1: config 0 has no interface number 0 [ 64.239975][ T66] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 64.252439][ T66] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 64.261988][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.270874][ T66] usb 2-1: Product: syz [ 64.276016][ T66] usb 2-1: Manufacturer: syz [ 64.281432][ T66] usb 2-1: SerialNumber: syz [ 64.286928][ T66] usb 2-1: config 0 descriptor?? [ 64.292752][ T1111] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 64.502706][ T1111] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 64.711619][ T66] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 64.721980][ T66] asix 2-1:0.188: probe with driver asix failed with error -32 [ 64.877309][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.027240][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 65.033614][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.045035][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.055158][ T9] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 65.068544][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 65.075222][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 65.084366][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.093136][ T9] usb 5-1: config 0 descriptor?? [ 65.503180][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 65.509349][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 65.518444][ T9] usb 5-1: USB disconnect, device number 2 [ 65.598860][ T312] usb 1-1: USB disconnect, device number 14 [ 65.679217][ T10] usb 4-1: USB disconnect, device number 12 [ 65.753890][ T1159] can0: slcan on ttyS3. [ 65.786584][ T1157] 9pnet: p9_errstr2errno: server reported unknown error [ 65.794800][ T1159] can0 (unregistered): slcan off ttyS3. [ 66.097130][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 66.217082][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 66.248404][ T10] usb 1-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 66.259098][ T10] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 66.272551][ T312] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 66.280146][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 66.289720][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.368774][ T9] usb 4-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 66.379578][ T9] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 66.392723][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 66.402149][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.448526][ T312] usb 5-1: unable to get BOS descriptor or descriptor too short [ 66.457069][ T312] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.467312][ T312] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 66.478282][ T312] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 66.489682][ T312] usb 5-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 66.498915][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.507240][ T312] usb 5-1: Product: syz [ 66.511485][ T312] usb 5-1: Manufacturer: syz [ 66.516190][ T312] usb 5-1: SerialNumber: syz [ 66.522301][ T10] usb 1-1: string descriptor 0 read error: -32 [ 66.530586][ T10] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 66.615464][ T9] usb 4-1: string descriptor 0 read error: -32 [ 66.623625][ T9] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 66.731090][ T1197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.740190][ T1197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.748822][ T1197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.757638][ T1197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.769102][ T312] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 66.779794][ T312] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 66.792775][ T312] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 66.802867][ T312] usb 5-1: USB disconnect, device number 3 [ 66.813309][ T66] usb 2-1: USB disconnect, device number 16 [ 66.858369][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.948611][ T1205] syz.1.274 uses obsolete (PF_INET,SOCK_PACKET) [ 66.972417][ T1210] capability: warning: `syz.1.275' uses 32-bit capabilities (legacy support in use) [ 67.270095][ T1221] netlink: 'syz.1.279': attribute type 32 has an invalid length. [ 67.301908][ T1228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 67.336640][ T1233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 67.526961][ T66] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 67.646990][ T31] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 67.676933][ T66] usb 5-1: Using ep0 maxpacket: 32 [ 67.683281][ T66] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 67.691564][ T66] usb 5-1: config 0 has no interface number 0 [ 67.697758][ T66] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 67.709553][ T66] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 67.718773][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.726982][ T66] usb 5-1: Product: syz [ 67.731198][ T66] usb 5-1: Manufacturer: syz [ 67.735834][ T66] usb 5-1: SerialNumber: syz [ 67.741378][ T66] usb 5-1: config 0 descriptor?? [ 67.746714][ T1226] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 67.808170][ T31] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 67.816589][ T31] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 67.826961][ T31] usb 2-1: config 127 has no interface number 0 [ 67.833281][ T31] usb 2-1: config 127 interface 57 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.848368][ T31] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 67.857687][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.865765][ T31] usb 2-1: Product: syz [ 67.870021][ T31] usb 2-1: Manufacturer: syz [ 67.874703][ T31] usb 2-1: SerialNumber: syz [ 67.955646][ T1226] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 68.082694][ T31] asix 2-1:127.57: probe with driver asix failed with error -22 [ 68.091854][ T31] usb 2-1: USB disconnect, device number 17 [ 68.163663][ T66] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 68.173924][ T66] asix 5-1:0.188: probe with driver asix failed with error -61 [ 68.873556][ T31] usb 1-1: USB disconnect, device number 15 [ 68.950021][ T1251] netlink: 'syz.0.286': attribute type 32 has an invalid length. [ 69.002381][ T66] usb 4-1: USB disconnect, device number 13 [ 69.303501][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 69.303523][ T36] audit: type=1400 audit(1786167994.890:277): avc: denied { bind } for pid=1268 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.332536][ T36] audit: type=1400 audit(1786167994.890:278): avc: denied { name_bind } for pid=1268 comm="syz.0.292" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 69.353894][ T36] audit: type=1400 audit(1786167994.890:279): avc: denied { node_bind } for pid=1268 comm="syz.0.292" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 69.377087][ T36] audit: type=1400 audit(1786167994.890:280): avc: denied { setopt } for pid=1268 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.398444][ T36] audit: type=1400 audit(1786167994.900:281): avc: denied { getopt } for pid=1268 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.566693][ T10] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 69.616886][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 69.717976][ T10] usb 4-1: config index 0 descriptor too short (expected 16420, got 36) [ 69.726361][ T10] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 69.734830][ T10] usb 4-1: config 127 has no interface number 0 [ 69.741187][ T312] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 69.749027][ T10] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 69.761790][ T10] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 69.770910][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.779057][ T10] usb 4-1: Product: syz [ 69.783309][ T10] usb 4-1: Manufacturer: syz [ 69.788112][ T10] usb 4-1: SerialNumber: syz [ 69.793424][ T9] usb 1-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 69.804415][ T9] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 69.817514][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 69.818187][ T1271] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 69.827207][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.844140][ T9] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 69.917836][ T312] usb 2-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 69.928447][ T312] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 69.942976][ T312] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 69.954169][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.045547][ T1271] netlink: 'syz.3.294': attribute type 5 has an invalid length. [ 70.053406][ T1271] netlink: 'syz.3.294': attribute type 32 has an invalid length. [ 70.166751][ T312] usb 2-1: string descriptor 0 read error: -32 [ 70.174719][ T312] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 70.263363][ T1271] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 70.301787][ T312] usb 5-1: USB disconnect, device number 4 [ 70.472473][ T10] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 70.483081][ T10] asix 4-1:127.57: probe with driver asix failed with error -71 [ 70.492244][ T10] usb 4-1: USB disconnect, device number 14 [ 70.756554][ T312] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 70.907922][ T312] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 70.915627][ T312] usb 5-1: can't read configurations, error -61 [ 71.046562][ T312] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 71.197834][ T312] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 71.205458][ T312] usb 5-1: can't read configurations, error -61 [ 71.211942][ T312] usb usb5-port1: attempt power cycle [ 71.226515][ T66] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 71.378282][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 71.386788][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.396988][ T66] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 71.405979][ T66] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.417412][ T66] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 71.426627][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 71.434807][ T66] usb 4-1: Product: syz [ 71.439046][ T66] usb 4-1: Manufacturer: syz [ 71.443669][ T66] usb 4-1: SerialNumber: syz [ 71.556467][ T312] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 71.578412][ T312] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 71.586095][ T312] usb 5-1: can't read configurations, error -61 [ 71.658153][ T66] usb 4-1: USB disconnect, device number 15 [ 71.673121][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.716490][ T312] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 71.738192][ T312] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 71.745864][ T312] usb 5-1: can't read configurations, error -61 [ 71.752342][ T312] usb usb5-port1: unable to enumerate USB device [ 72.189594][ T1301] FAULT_INJECTION: forcing a failure. [ 72.189594][ T1301] name failslab, interval 1, probability 0, space 0, times 0 [ 72.202356][ T1301] CPU: 1 UID: 0 PID: 1301 Comm: syz.3.302 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 72.202394][ T1301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.202410][ T1301] Call Trace: [ 72.202417][ T1301] [ 72.202446][ T1301] __dump_stack+0x21/0x30 [ 72.202484][ T1301] dump_stack_lvl+0x140/0x1c0 [ 72.202521][ T1301] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.202545][ T1301] dump_stack+0x19/0x20 [ 72.202567][ T1301] should_fail_ex+0x3c2/0x510 [ 72.202586][ T1301] ? io_alloc_hash_table+0x52/0x160 [ 72.202611][ T1301] should_failslab+0xac/0x100 [ 72.202632][ T1301] __kmalloc_noprof+0x69/0x510 [ 72.202649][ T1301] ? io_alloc_hash_table+0x52/0x160 [ 72.202673][ T1301] ? __kasan_kmalloc+0x96/0xb0 [ 72.202693][ T1301] io_alloc_hash_table+0x52/0x160 [ 72.202718][ T1301] io_ring_ctx_alloc+0xd1/0x1dc0 [ 72.202736][ T1301] ? __cfi_vfs_write+0x10/0x10 [ 72.202753][ T1301] io_uring_create+0x2e0/0x13f0 [ 72.202769][ T1301] ? __kasan_check_write+0x18/0x20 [ 72.202785][ T1301] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 72.202808][ T1301] ? __kasan_check_write+0x18/0x20 [ 72.202824][ T1301] ? __x64_sys_io_uring_setup+0x80/0x80 [ 72.202849][ T1301] ? __kasan_check_read+0x15/0x20 [ 72.202865][ T1301] __x64_sys_io_uring_setup+0x5f/0x80 [ 72.202887][ T1301] x64_sys_call+0x22c0/0x2ee0 [ 72.202901][ T1301] do_syscall_64+0x57/0xf0 [ 72.202920][ T1301] ? clear_bhb_loop+0x50/0xa0 [ 72.202979][ T1301] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.203001][ T1301] RIP: 0033:0x7fa1acd9e0d9 [ 72.203016][ T1301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.203031][ T1301] RSP: 002b:00007fa1adc23ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 72.203048][ T1301] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fa1acd9e0d9 [ 72.203061][ T1301] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 72.203073][ T1301] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 72.203084][ T1301] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 72.203095][ T1301] R13: 0000200000000b10 R14: 00007fa1adc23fd8 R15: 0000000000000000 [ 72.203109][ T1301] [ 72.435357][ T66] usb 1-1: USB disconnect, device number 16 [ 72.490789][ T1310] : renamed from vlan0 (while UP) [ 72.513014][ T36] audit: type=1400 audit(1786167998.090:282): avc: denied { cmd } for pid=1309 comm="syz.0.306" path="socket:[13506]" dev="sockfs" ino=13506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 72.546555][ T31] usb 2-1: USB disconnect, device number 18 [ 72.606954][ T1317] can0: slcan on ttyS3. [ 72.656993][ T1317] can0 (unregistered): slcan off ttyS3. [ 72.926288][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 72.936276][ T66] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 73.076255][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 73.082709][ T31] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 73.091175][ T31] usb 2-1: config 0 has no interface number 0 [ 73.097403][ T31] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 73.108419][ T66] usb 1-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 73.119148][ T66] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 73.132252][ T66] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 73.142058][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.150558][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 73.160246][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.171551][ T66] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 73.188651][ T31] usb 2-1: Product: syz [ 73.192973][ T31] usb 2-1: Manufacturer: syz [ 73.206428][ T31] usb 2-1: SerialNumber: syz [ 73.214829][ T31] usb 2-1: config 0 descriptor?? [ 73.222046][ T1316] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 73.431241][ T1316] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 73.526178][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 73.639822][ T31] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 73.651737][ T31] asix 2-1:0.188: probe with driver asix failed with error -61 [ 73.677535][ T9] usb 4-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 73.688173][ T9] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 73.701444][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 73.711105][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.866143][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 73.923444][ T9] usb 4-1: string descriptor 0 read error: -32 [ 73.932535][ T9] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 73.996152][ T10] usb 5-1: device descriptor read/64, error -71 [ 74.236142][ T10] usb 5-1: device descriptor read/64, error -71 [ 74.476085][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 74.616105][ T10] usb 5-1: device descriptor read/64, error -71 [ 74.856022][ T10] usb 5-1: device descriptor read/64, error -71 [ 74.966147][ T10] usb usb5-port1: attempt power cycle [ 75.305953][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 75.327309][ T10] usb 5-1: device descriptor read/8, error -71 [ 75.457211][ T10] usb 5-1: device descriptor read/8, error -71 [ 75.605076][ T31] usb 2-1: USB disconnect, device number 19 [ 75.619271][ T1382] overlayfs: missing 'lowerdir' [ 75.695918][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 75.714020][ T66] usb 1-1: USB disconnect, device number 17 [ 75.720849][ T10] usb 5-1: device descriptor read/8, error -71 [ 75.857103][ T10] usb 5-1: device descriptor read/8, error -71 [ 75.966087][ T10] usb usb5-port1: unable to enumerate USB device [ 75.985912][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 76.137393][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 76.145186][ T31] usb 2-1: can't read configurations, error -61 [ 76.275852][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 76.305215][ T66] usb 4-1: USB disconnect, device number 16 [ 76.427402][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 76.435020][ T31] usb 2-1: can't read configurations, error -61 [ 76.441791][ T31] usb usb2-port1: attempt power cycle [ 76.525862][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 76.645796][ T66] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 76.675907][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 76.681213][ T1419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.336'. [ 76.689419][ T10] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 76.698805][ T10] usb 1-1: config 0 has no interface number 0 [ 76.704953][ T10] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 76.717057][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 76.728583][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.738522][ T10] usb 1-1: Product: syz [ 76.742826][ T10] usb 1-1: Manufacturer: syz [ 76.747526][ T10] usb 1-1: SerialNumber: syz [ 76.752957][ T10] usb 1-1: config 0 descriptor?? [ 76.758327][ T1404] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 76.794282][ T36] audit: type=1400 audit(1786168002.381:283): avc: denied { listen } for pid=1420 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.813820][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 76.822772][ T66] usb 4-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 76.834183][ T66] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.847578][ T66] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 76.857079][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.866464][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 76.874104][ T31] usb 2-1: can't read configurations, error -61 [ 76.886625][ T66] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 76.967718][ T1404] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 77.005754][ T31] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 77.027557][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 77.035210][ T31] usb 2-1: can't read configurations, error -61 [ 77.041690][ T31] usb usb2-port1: unable to enumerate USB device [ 77.175694][ T10] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 77.186210][ T10] asix 1-1:0.188: probe with driver asix failed with error -61 [ 77.265841][ T66] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 77.417098][ T66] usb 5-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 77.427684][ T66] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.441121][ T66] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 77.450252][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.460787][ T66] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 78.693141][ T1436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 78.702868][ T1436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.711587][ T1436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.075568][ T311] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 79.227312][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.237604][ T311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 79.246555][ T311] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.262905][ T311] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.272943][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.281010][ T311] usb 2-1: Manufacturer: ᥢ꺠瘿䓻蠏泍ㆍ䅹쒆鼙犅ꀏ뻟鴚䙧ⅼ촣偈㙁呓읗ଌ䍇䀴苾綷䤍朁鱧뗉쮘鿈→Ⓩ蟸맏᯻쌲钧욢 [ 79.297203][ T311] usb 2-1: SerialNumber: syz [ 79.305420][ T66] usb 1-1: USB disconnect, device number 18 [ 79.354404][ T10] usb 4-1: USB disconnect, device number 17 [ 79.506303][ T311] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 79.513165][ T311] cdc_ncm 2-1:1.0: bind() failure [ 79.524625][ T311] usb 2-1: USB disconnect, device number 24 [ 79.755439][ T66] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 79.906792][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.917970][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.928009][ T66] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.940949][ T66] usb 1-1: New USB device found, idVendor=056a, idProduct=00d1, bcdDevice= 0.00 [ 79.950054][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.959632][ T66] usb 1-1: config 0 descriptor?? [ 80.040972][ T311] usb 5-1: USB disconnect, device number 13 [ 80.275358][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 80.315426][ T31] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 80.375327][ T311] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 80.382403][ T66] usbhid 1-1:0.0: can't add hid device: -71 [ 80.392364][ T66] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 80.404727][ T66] usb 1-1: USB disconnect, device number 19 [ 80.446845][ T10] usb 2-1: config 17 has an invalid interface number: 255 but max is 0 [ 80.455193][ T10] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 80.465988][ T10] usb 2-1: config 17 has no interface number 0 [ 80.473087][ T10] usb 2-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 80.477199][ T31] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.484490][ T10] usb 2-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 80.499922][ T31] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 80.514374][ T10] usb 2-1: config 17 interface 255 has no altsetting 0 [ 80.522111][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.527793][ T311] usb 5-1: Using ep0 maxpacket: 32 [ 80.541260][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 80.550648][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.551435][ T31] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 80.569647][ T10] aiptek 2-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 80.579255][ T311] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 80.587831][ T311] usb 5-1: config 0 has no interface number 0 [ 80.595389][ T311] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 80.607702][ T311] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 80.616941][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.624976][ T311] usb 5-1: Product: syz [ 80.629291][ T311] usb 5-1: Manufacturer: syz [ 80.633923][ T311] usb 5-1: SerialNumber: syz [ 80.639409][ T311] usb 5-1: config 0 descriptor?? [ 80.644842][ T1469] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 80.745356][ T66] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 80.854655][ T1469] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 80.896915][ T66] usb 1-1: unable to get BOS descriptor or descriptor too short [ 80.905881][ T66] usb 1-1: config 4 has an invalid descriptor of length 99, skipping remainder of the config [ 80.916177][ T66] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 28 [ 80.927275][ T66] usb 1-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=8a.38 [ 80.936445][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.944482][ T66] usb 1-1: Product: 晣뺢‱뾴溒ಖ擬쀨ೠ鰛巳灘⻝⪼ꑢ㖈⺱廱丨킍儯⌕ᴫ뎗靎쁳紖ꊹꞄ撇걳ޯ [ 80.959885][ T66] usb 1-1: Manufacturer: ဌ [ 80.964634][ T66] usb 1-1: SerialNumber: 쑙ᤆ댞⑨膀ﶭ強ㅈ䪓ᑄ뿇糒ﰡ条䍖ꌬᤫᖸꚠ䭌뎗䏉謀铝㺩囎䧥뎂렋씦㾹㐚᭖긓䄣ꕽニ泌䲍−݃恞톛輑鉅ꁌ⇒剔廋쨟戩샞볛൛끽÷䲥兞턦蝷픥䨬횁閗鞼㊨옗턻梸錄ൖ럜搩腒劣魐뜓￉戜㿜Ԩꏐ鬅蔪 [ 81.201973][ T66] usb 1-1: USB disconnect, device number 20 [ 81.464125][ T311] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 81.474413][ T311] asix 5-1:0.188: probe with driver asix failed with error -71 [ 81.483236][ T311] usb 5-1: USB disconnect, device number 14 [ 82.215372][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 82.376335][ T10] usb 5-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 82.386942][ T10] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.400346][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 82.410190][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.422568][ T10] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 82.766316][ T36] audit: type=1400 audit(1786168008.361:284): avc: denied { create } for pid=1508 comm="syz.0.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 82.797243][ T36] audit: type=1400 audit(1786168008.381:285): avc: denied { sys_admin } for pid=1508 comm="syz.0.363" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 83.043407][ T10] usb 2-1: USB disconnect, device number 25 [ 83.079873][ T66] usb 4-1: USB disconnect, device number 18 [ 83.455834][ T1532] can0: slcan on ttyS3. [ 83.488546][ T1532] can0 (unregistered): slcan off ttyS3. [ 83.564952][ T66] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 83.714967][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 83.721459][ T66] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 83.729725][ T66] usb 4-1: config 0 has no interface number 0 [ 83.736033][ T66] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 83.747628][ T66] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 83.756786][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.764874][ T66] usb 4-1: Product: syz [ 83.765789][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 83.769075][ T66] usb 4-1: Manufacturer: syz [ 83.769098][ T66] usb 4-1: SerialNumber: syz [ 83.772691][ T66] usb 4-1: config 0 descriptor?? [ 83.791495][ T1526] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 83.851021][ T1566] kvm: user requested TSC rate below hardware speed [ 83.858212][ T1566] netlink: 224 bytes leftover after parsing attributes in process `syz.1.373'. [ 83.946107][ T10] usb 1-1: config 17 has an invalid interface number: 255 but max is 0 [ 83.954513][ T10] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 83.964776][ T10] usb 1-1: config 17 has no interface number 0 [ 83.973204][ T10] usb 1-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 83.984558][ T10] usb 1-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 83.998128][ T10] usb 1-1: config 17 interface 255 has no altsetting 0 [ 84.005147][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 84.014232][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.020575][ T1526] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 84.031879][ T10] aiptek 1-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 84.314855][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 84.466075][ T10] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.479360][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 84.488482][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.498598][ T10] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 84.641065][ T66] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 84.651371][ T66] asix 4-1:0.188: probe with driver asix failed with error -71 [ 84.660609][ T66] usb 4-1: USB disconnect, device number 19 [ 84.999571][ T10] usb 5-1: USB disconnect, device number 15 [ 85.150285][ T1585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=1585 comm=syz.4.378 [ 85.164132][ T1585] netlink: 32 bytes leftover after parsing attributes in process `syz.4.378'. [ 85.173276][ T1585] tipc: Invalid UDP bearer configuration [ 85.173301][ T1585] tipc: Enabling of bearer rejected, failed to enable media [ 85.554760][ T66] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 85.583301][ T1608] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.590831][ T1608] netlink: 'syz.3.387': attribute type 1 has an invalid length. [ 85.598565][ T1608] netlink: 9 bytes leftover after parsing attributes in process `syz.3.387'. [ 85.608566][ T36] audit: type=1400 audit(1786168011.202:286): avc: denied { create } for pid=1607 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.705825][ T66] usb 5-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 85.716335][ T66] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.729697][ T66] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 85.738871][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.748915][ T66] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 85.874691][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 86.024713][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 86.031775][ T9] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 86.040266][ T9] usb 4-1: config 0 has no interface number 0 [ 86.046675][ T9] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 86.058086][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 86.067171][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.075216][ T9] usb 4-1: Product: syz [ 86.079412][ T9] usb 4-1: Manufacturer: syz [ 86.084017][ T9] usb 4-1: SerialNumber: syz [ 86.089420][ T9] usb 4-1: config 0 descriptor?? [ 86.094733][ T1611] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 86.303626][ T1611] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 86.546613][ T31] usb 1-1: USB disconnect, device number 21 [ 86.884556][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 86.912791][ T9] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 86.923323][ T9] asix 4-1:0.188: probe with driver asix failed with error -71 [ 86.933525][ T9] usb 4-1: USB disconnect, device number 20 [ 87.034549][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 87.041204][ T31] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.052489][ T31] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.062660][ T31] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 87.075703][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.082361][ T31] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 87.091449][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.104789][ T31] usb 1-1: config 0 descriptor?? [ 87.113270][ T66] usb 2-1: USB disconnect, device number 26 [ 87.145327][ T1630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 87.437646][ T1643] syzkaller1: entered promiscuous mode [ 87.443263][ T1643] syzkaller1: entered allmulticast mode [ 87.462925][ T36] audit: type=1400 audit(1786168013.052:287): avc: denied { ioctl } for pid=1638 comm="syz.1.396" path="net:[4026532303]" dev="nsfs" ino=4026532303 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.465903][ T1639] overlay: ./file0 is not a directory [ 87.488872][ T1641] overlay: ./file0 is not a directory [ 87.499517][ T1639] overlay: ./file0 is not a directory [ 87.505712][ T1639] overlay: ./file0 is not a directory [ 87.765899][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 87.772042][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 87.781306][ T31] usb 1-1: USB disconnect, device number 22 [ 87.785836][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 87.945951][ T10] usb 2-1: config 17 has an invalid interface number: 255 but max is 0 [ 87.954375][ T10] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 87.964645][ T10] usb 2-1: config 17 has no interface number 0 [ 87.970842][ T10] usb 2-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 87.982191][ T10] usb 2-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 87.995772][ T10] usb 2-1: config 17 interface 255 has no altsetting 0 [ 88.002760][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 88.011906][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.024148][ T10] aiptek 2-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 88.328461][ T31] usb 5-1: USB disconnect, device number 16 [ 88.397513][ T36] audit: type=1400 audit(1786168013.992:288): avc: denied { ioctl } for pid=1650 comm="syz.0.400" path="socket:[16487]" dev="sockfs" ino=16487 ioctlcmd=0x48df scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.554344][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 88.696212][ T1677] FAULT_INJECTION: forcing a failure. [ 88.696212][ T1677] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 88.709462][ T1677] CPU: 0 UID: 0 PID: 1677 Comm: syz.0.410 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 88.709498][ T1677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.709509][ T1677] Call Trace: [ 88.709516][ T1677] [ 88.709523][ T1677] __dump_stack+0x21/0x30 [ 88.709583][ T1677] dump_stack_lvl+0x140/0x1c0 [ 88.709605][ T1677] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.709628][ T1677] ? vfs_write+0xbcf/0xfd0 [ 88.709646][ T1677] dump_stack+0x19/0x20 [ 88.709667][ T1677] should_fail_ex+0x3c2/0x510 [ 88.709686][ T1677] should_fail+0xf/0x20 [ 88.709702][ T1677] should_fail_usercopy+0x1e/0x30 [ 88.709721][ T1677] _copy_from_user+0x20/0xa0 [ 88.709743][ T1677] get_timespec64+0x97/0x1b0 [ 88.709765][ T1677] ? __cfi_get_timespec64+0x10/0x10 [ 88.709788][ T1677] __x64_sys_recvmmsg+0x14c/0x250 [ 88.709806][ T1677] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 88.709824][ T1677] ? __kasan_check_read+0x15/0x20 [ 88.709841][ T1677] x64_sys_call+0x292c/0x2ee0 [ 88.709856][ T1677] do_syscall_64+0x57/0xf0 [ 88.709875][ T1677] ? clear_bhb_loop+0x50/0xa0 [ 88.709897][ T1677] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.709918][ T1677] RIP: 0033:0x7f172219e0d9 [ 88.709933][ T1677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.709947][ T1677] RSP: 002b:00007f1720be3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 88.709964][ T1677] RAX: ffffffffffffffda RBX: 00007f1722425fa0 RCX: 00007f172219e0d9 [ 88.709976][ T1677] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 88.709987][ T1677] RBP: 00007f1720be3090 R08: 0000200000003700 R09: 0000000000000000 [ 88.709998][ T1677] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 88.710009][ T1677] R13: 00007f1722426038 R14: 00007f1722425fa0 R15: 00007ffc1345c3a8 [ 88.710023][ T1677] [ 88.906091][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 88.917029][ T10] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.930489][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 88.940979][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.951429][ T10] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 89.064330][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 89.070887][ T9] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 89.079822][ T9] usb 5-1: config 0 has no interface number 0 [ 89.086318][ T9] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 89.098673][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 89.107817][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.115892][ T9] usb 5-1: Product: syz [ 89.120095][ T9] usb 5-1: Manufacturer: syz [ 89.124800][ T9] usb 5-1: SerialNumber: syz [ 89.130106][ T9] usb 5-1: config 0 descriptor?? [ 89.135715][ T1666] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 89.164305][ T66] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 89.315581][ T66] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.329511][ T66] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 89.338737][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.348296][ T1666] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 89.355841][ T66] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 89.765321][ T9] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 89.777909][ T9] asix 5-1:0.188: probe with driver asix failed with error -32 [ 89.787384][ T9] usb 5-1: USB disconnect, device number 17 [ 90.514157][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 90.542701][ T9] usb 2-1: USB disconnect, device number 27 [ 90.664108][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 90.670614][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.680819][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 90.691940][ T10] usb 5-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice= 0.40 [ 90.701186][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.710167][ T10] usb 5-1: Product: syz [ 90.714441][ T10] usb 5-1: Manufacturer: syz [ 90.719097][ T10] usb 5-1: SerialNumber: syz [ 90.874057][ T9] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 90.929670][ T10] usb 5-1: unit 3 not found! [ 90.934864][ T10] usb 5-1: 6:0: failed to get current value for ch 0 (-71) [ 90.946110][ T10] usb 5-1: USB disconnect, device number 18 [ 90.959121][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.025976][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.036405][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 91.047942][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.059213][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 91.068961][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.078252][ T9] usb 2-1: config 0 descriptor?? [ 91.324892][ T66] usb 4-1: USB disconnect, device number 21 [ 91.514535][ T1714] FAULT_INJECTION: forcing a failure. [ 91.514535][ T1714] name failslab, interval 1, probability 0, space 0, times 0 [ 91.527362][ T1714] CPU: 0 UID: 0 PID: 1714 Comm: syz.3.419 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 91.527399][ T1714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.527414][ T1714] Call Trace: [ 91.527421][ T1714] [ 91.527429][ T1714] __dump_stack+0x21/0x30 [ 91.527465][ T1714] dump_stack_lvl+0x140/0x1c0 [ 91.527496][ T1714] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.527524][ T1714] ? pcpu_memcg_post_alloc_hook+0x202/0x2e0 [ 91.527552][ T1714] ? mutex_unlock+0x90/0x240 [ 91.527580][ T1714] ? pcpu_alloc_noprof+0x1440/0x1440 [ 91.527607][ T1714] dump_stack+0x19/0x20 [ 91.527636][ T1714] should_fail_ex+0x3c2/0x510 [ 91.527661][ T1714] should_failslab+0xac/0x100 [ 91.527687][ T1714] __kmalloc_cache_noprof+0x41/0x470 [ 91.527715][ T1714] ? percpu_ref_init+0xe3/0x4d0 [ 91.527736][ T1714] percpu_ref_init+0xe3/0x4d0 [ 91.527756][ T1714] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 91.527775][ T1714] io_ring_ctx_alloc+0x141/0x1dc0 [ 91.527794][ T1714] io_uring_create+0x2e0/0x13f0 [ 91.527812][ T1714] ? __kasan_check_write+0x18/0x20 [ 91.527830][ T1714] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 91.527855][ T1714] ? __kasan_check_write+0x18/0x20 [ 91.527873][ T1714] ? __x64_sys_io_uring_setup+0x80/0x80 [ 91.527900][ T1714] ? __kasan_check_read+0x15/0x20 [ 91.527918][ T1714] __x64_sys_io_uring_setup+0x5f/0x80 [ 91.527942][ T1714] x64_sys_call+0x22c0/0x2ee0 [ 91.527958][ T1714] do_syscall_64+0x57/0xf0 [ 91.527991][ T1714] ? clear_bhb_loop+0x50/0xa0 [ 91.528018][ T1714] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.528042][ T1714] RIP: 0033:0x7fa1acd9e0d9 [ 91.528058][ T1714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.528075][ T1714] RSP: 002b:00007fa1adc23ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 91.528095][ T1714] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fa1acd9e0d9 [ 91.528110][ T1714] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 91.528123][ T1714] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 91.528135][ T1714] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 91.528148][ T1714] R13: 0000200000000b10 R14: 00007fa1adc23fd8 R15: 0000000000000000 [ 91.528164][ T1714] [ 91.715857][ T36] audit: type=1400 audit(1786168017.292:289): avc: denied { connect } for pid=1715 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.728688][ T1694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.796827][ T1694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.806198][ T9] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf3 found [ 91.814139][ T9] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf4 found [ 91.824387][ T9] usb 2-1: USB disconnect, device number 28 [ 91.944671][ T31] usb 1-1: USB disconnect, device number 23 [ 92.043959][ T443] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 92.083944][ T66] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 92.194016][ T443] usb 4-1: Using ep0 maxpacket: 32 [ 92.201382][ T443] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 92.209929][ T443] usb 4-1: config 0 has no interface number 0 [ 92.216292][ T443] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 92.228323][ T443] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 92.237566][ T443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.245682][ T443] usb 4-1: Product: syz [ 92.249978][ T443] usb 4-1: Manufacturer: syz [ 92.254870][ T443] usb 4-1: SerialNumber: syz [ 92.260171][ T66] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.272614][ T443] usb 4-1: config 0 descriptor?? [ 92.277736][ T66] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 92.289076][ T31] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 92.289568][ T1720] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 92.298333][ T66] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 92.316145][ T66] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 92.326105][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.335788][ T1722] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 92.445405][ T31] usb 1-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 92.457829][ T31] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.471202][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 92.480571][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.517983][ T1720] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 92.590708][ T1740] can0: slcan on ttyS3. [ 92.624899][ T1740] can0 (unregistered): slcan off ttyS3. [ 92.696431][ T31] usb 1-1: string descriptor 0 read error: -32 [ 92.703543][ T31] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 92.903858][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 92.926746][ T443] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 92.937105][ T443] asix 4-1:0.188: probe with driver asix failed with error -32 [ 92.945883][ T443] usb 4-1: USB disconnect, device number 22 [ 93.055958][ T9] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.069177][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 93.078293][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.088538][ T9] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 93.154276][ T66] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 93.162854][ T66] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input27 [ 93.173584][ T36] audit: type=1400 audit(1786168018.773:290): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=615 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.196484][ T36] audit: type=1400 audit(1786168018.773:291): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=615 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.221928][ T36] audit: type=1400 audit(1786168018.773:292): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=615 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.693745][ T758] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 93.843698][ T758] usb 4-1: Using ep0 maxpacket: 32 [ 93.850303][ T758] usb 4-1: unable to get BOS descriptor or descriptor too short [ 93.859295][ T758] usb 4-1: config 1 has an invalid interface number: 97 but max is 2 [ 93.867499][ T758] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.878088][ T758] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 93.887197][ T758] usb 4-1: config 1 has no interface number 0 [ 93.893385][ T758] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x1F, changing to 0xF [ 93.906253][ T758] usb 4-1: config 1 has an invalid interface number: 97 but max is 2 [ 93.914450][ T758] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.924603][ T758] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 93.933587][ T758] usb 4-1: config 1 has no interface number 0 [ 93.939756][ T758] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x1F, changing to 0xF [ 93.951884][ T758] usb 4-1: config 1 has an invalid interface number: 97 but max is 2 [ 93.960045][ T758] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.970457][ T758] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 93.979490][ T758] usb 4-1: config 1 has no interface number 0 [ 93.985732][ T758] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x1F, changing to 0xF [ 93.998705][ T758] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 94.007872][ T758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.016137][ T758] usb 4-1: Product: syz [ 94.020433][ T758] usb 4-1: Manufacturer: syz [ 94.025225][ T758] usb 4-1: SerialNumber: syz [ 94.234428][ T758] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 94.244729][ T758] snd-usb-audio 4-1:1.97: probe with driver snd-usb-audio failed with error -22 [ 94.255660][ T758] usb 4-1: USB disconnect, device number 23 [ 94.269796][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.97/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.865290][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 94.882345][ T509] usb 5-1: USB disconnect, device number 19 [ 94.895332][ T1798] netlink: 'syz.4.436': attribute type 12 has an invalid length. [ 94.911703][ T36] audit: type=1400 audit(1786168020.503:293): avc: denied { map } for pid=1797 comm="syz.4.436" path="socket:[16350]" dev="sockfs" ino=16350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.941857][ T36] audit: type=1400 audit(1786168020.503:294): avc: denied { read } for pid=1797 comm="syz.4.436" path="socket:[16350]" dev="sockfs" ino=16350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.986338][ T10] usb 1-1: USB disconnect, device number 24 [ 95.009481][ T1806] netlink: 'syz.0.439': attribute type 23 has an invalid length. [ 95.167032][ T1813] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2961764976 (5923529952 ns) > initial count (2430913814 ns). Using initial count to start timer. [ 95.353498][ T509] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 95.503484][ T509] usb 5-1: Using ep0 maxpacket: 32 [ 95.509945][ T509] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 95.518698][ T509] usb 5-1: config 0 has no interface number 0 [ 95.525123][ T509] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 95.537236][ T509] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 95.546631][ T509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.554915][ T509] usb 5-1: Product: syz [ 95.559227][ T509] usb 5-1: Manufacturer: syz [ 95.564215][ T509] usb 5-1: SerialNumber: syz [ 95.570481][ T509] usb 5-1: config 0 descriptor?? [ 95.578835][ T1809] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.673656][ T311] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 95.689586][ T10] usb 2-1: USB disconnect, device number 29 [ 95.714522][ T36] audit: type=1400 audit(1786168021.313:295): avc: denied { ioctl } for pid=1825 comm="syz.1.445" path="socket:[17665]" dev="sockfs" ino=17665 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.740080][ T36] audit: type=1400 audit(1786168021.313:296): avc: denied { ioctl } for pid=1825 comm="syz.1.445" path="socket:[17667]" dev="sockfs" ino=17667 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.774576][ T1828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 95.788297][ T1809] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.854654][ T311] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.867607][ T311] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 95.880202][ T311] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 95.895027][ T311] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 95.906694][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.920016][ T1824] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 96.033668][ T36] audit: type=1400 audit(1786168021.633:297): avc: denied { create } for pid=1831 comm="syz.3.448" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.054414][ T36] audit: type=1400 audit(1786168021.633:298): avc: denied { read write } for pid=1831 comm="syz.3.448" name="file0" dev="tmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.077209][ T36] audit: type=1400 audit(1786168021.633:299): avc: denied { open } for pid=1831 comm="syz.3.448" path="/101/file0" dev="tmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.100206][ T36] audit: type=1400 audit(1786168021.633:300): avc: denied { ioctl } for pid=1831 comm="syz.3.448" path="/101/file0" dev="tmpfs" ino=554 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.153424][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 96.203540][ T36] audit: type=1400 audit(1786168021.803:301): avc: denied { read write } for pid=1831 comm="syz.3.448" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 96.216856][ T9] logitech-hidpp-device 0005:046D:B012.000A: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 96.230349][ T36] audit: type=1400 audit(1786168021.803:302): avc: denied { open } for pid=1831 comm="syz.3.448" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 96.263446][ T509] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 96.283438][ T509] asix 5-1:0.188: probe with driver asix failed with error -32 [ 96.292193][ T1834] fido_id[1834]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.304458][ T509] usb 5-1: USB disconnect, device number 20 [ 96.324441][ T10] usb 2-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 96.337203][ T10] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.351935][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 96.361559][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.378726][ T1836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.449'. [ 96.492757][ T1836] netlink: 964 bytes leftover after parsing attributes in process `syz.3.449'. [ 96.574562][ T10] usb 2-1: string descriptor 0 read error: -32 [ 96.581322][ T10] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 96.743812][ T311] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 96.751543][ T311] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input30 [ 96.913350][ T509] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 97.075306][ T509] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.088506][ T509] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 97.098566][ T509] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.110353][ T509] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 97.373305][ T509] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 97.523296][ T509] usb 5-1: Using ep0 maxpacket: 8 [ 97.529420][ T509] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 97.537646][ T509] usb 5-1: config 0 has no interface number 0 [ 97.545426][ T509] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 97.554645][ T509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.562762][ T509] usb 5-1: Product: syz [ 97.567023][ T509] usb 5-1: Manufacturer: syz [ 97.571683][ T509] usb 5-1: SerialNumber: syz [ 97.577398][ T509] usb 5-1: config 0 descriptor?? [ 98.294293][ T509] usb 5-1: USB disconnect, device number 21 [ 98.444864][ T9] usb 1-1: USB disconnect, device number 25 [ 98.445019][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 98.469083][ T1884] FAULT_INJECTION: forcing a failure. [ 98.469083][ T1884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.482880][ T1884] CPU: 1 UID: 0 PID: 1884 Comm: syz.0.462 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 98.482918][ T1884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.482933][ T1884] Call Trace: [ 98.482939][ T1884] [ 98.482947][ T1884] __dump_stack+0x21/0x30 [ 98.482983][ T1884] dump_stack_lvl+0x140/0x1c0 [ 98.483014][ T1884] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.483051][ T1884] ? unwind_get_return_address+0x51/0x90 [ 98.483079][ T1884] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 98.483107][ T1884] dump_stack+0x19/0x20 [ 98.483136][ T1884] should_fail_ex+0x3c2/0x510 [ 98.483162][ T1884] should_fail+0xf/0x20 [ 98.483185][ T1884] should_fail_usercopy+0x1e/0x30 [ 98.483211][ T1884] _copy_from_user+0x20/0xa0 [ 98.483241][ T1884] ___sys_recvmsg+0x174/0x590 [ 98.483268][ T1884] ? __sys_recvmsg+0x2a0/0x2a0 [ 98.483294][ T1884] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 98.483318][ T1884] ? selinux_file_permission+0x318/0xb60 [ 98.483344][ T1884] do_recvmmsg+0x36d/0x7f0 [ 98.483370][ T1884] ? __sys_recvmmsg+0x2a0/0x2a0 [ 98.483394][ T1884] ? __cfi_vfs_write+0x10/0x10 [ 98.483420][ T1884] ? _copy_from_user+0x87/0xa0 [ 98.483453][ T1884] __x64_sys_recvmmsg+0x1b8/0x250 [ 98.483479][ T1884] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 98.483505][ T1884] ? __kasan_check_read+0x15/0x20 [ 98.483530][ T1884] x64_sys_call+0x292c/0x2ee0 [ 98.483551][ T1884] do_syscall_64+0x57/0xf0 [ 98.483590][ T1884] ? clear_bhb_loop+0x50/0xa0 [ 98.483622][ T1884] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.483653][ T1884] RIP: 0033:0x7f172219e0d9 [ 98.483674][ T1884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.483694][ T1884] RSP: 002b:00007f1720be3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 98.483720][ T1884] RAX: ffffffffffffffda RBX: 00007f1722425fa0 RCX: 00007f172219e0d9 [ 98.483738][ T1884] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 98.483755][ T1884] RBP: 00007f1720be3090 R08: 0000200000003700 R09: 0000000000000000 [ 98.483772][ T1884] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 98.483786][ T1884] R13: 00007f1722426038 R14: 00007f1722425fa0 R15: 00007ffc1345c3a8 [ 98.483806][ T1884] [ 98.750526][ T294] ------------[ cut here ]------------ [ 98.756143][ T294] WARNING: CPU: 0 PID: 294 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 98.764154][ T294] Modules linked in: [ 98.768076][ T294] CPU: 0 UID: 0 PID: 294 Comm: syz-executor Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 98.779965][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.790345][ T294] RIP: 0010:drop_nlink+0xce/0x110 [ 98.795489][ T294] Code: 04 00 00 be 08 00 00 00 e8 5f 13 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 4b 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 98.815287][ T294] RSP: 0018:ffffc9000b66fc88 EFLAGS: 00010293 [ 98.821401][ T294] RAX: ffffffff81f225ee RBX: ffff888117b78b98 RCX: ffff88810374cc00 [ 98.829435][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.837542][ T294] RBP: ffffc9000b66fcb0 R08: 0000000000000003 R09: 0000000000000004 [ 98.845596][ T294] R10: dffffc0000000000 R11: fffff520016cdf80 R12: dffffc0000000000 [ 98.853639][ T294] R13: 1ffff11022f6f17c R14: ffff888117b78be0 R15: 0000000000000000 [ 98.861658][ T294] FS: 0000555580319500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 98.862768][ T509] usb 2-1: USB disconnect, device number 30 [ 98.871051][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.883301][ T294] CR2: 000055558033c958 CR3: 00000001037d0000 CR4: 00000000003526b0 [ 98.891329][ T294] Call Trace: [ 98.894729][ T294] [ 98.897706][ T294] shmem_rmdir+0x5f/0x90 [ 98.902002][ T294] vfs_rmdir+0x3de/0x560 [ 98.906336][ T294] incfs_kill_sb+0x102/0x220 [ 98.910972][ T294] deactivate_locked_super+0xd5/0x270 [ 98.916598][ T294] deactivate_super+0xb8/0xe0 [ 98.921323][ T294] cleanup_mnt+0x438/0x4d0 [ 98.925822][ T294] __cleanup_mnt+0x1d/0x40 [ 98.930299][ T294] task_work_run+0x1e8/0x260 [ 98.934976][ T294] ? __cfi_task_work_run+0x10/0x10 [ 98.940139][ T294] ? __x64_sys_umount+0x12e/0x180 [ 98.945274][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 98.950679][ T294] ? __kasan_check_read+0x15/0x20 [ 98.955770][ T294] resume_user_mode_work+0x35/0x50 [ 98.960918][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 98.966487][ T294] do_syscall_64+0x63/0xf0 [ 98.970958][ T294] ? clear_bhb_loop+0x50/0xa0 [ 98.975843][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.981781][ T294] RIP: 0033:0x7f172219f317 [ 98.986345][ T294] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 99.006037][ T294] RSP: 002b:00007ffc1345b618 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 99.014568][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f172219f317 [ 99.022784][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1345b6d0 [ 99.030834][ T294] RBP: 00007ffc1345b6d0 R08: 00007ffc1345c6d0 R09: 00000000ffffffff [ 99.038988][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1345c760 [ 99.047060][ T294] R13: 00007f1722234474 R14: 000000000001819e R15: 00007ffc1345c7a0 [ 99.055111][ T294] [ 99.058414][ T294] ---[ end trace 0000000000000000 ]--- [ 99.064085][ T294] ================================================================== [ 99.072206][ T294] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 99.078617][ T294] Write of size 4 at addr 0000000000000168 by task syz-executor/294 [ 99.086614][ T294] [ 99.088955][ T294] CPU: 1 UID: 0 PID: 294 Comm: syz-executor Tainted: G W syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 99.088983][ T294] Tainted: [W]=WARN [ 99.088989][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.088999][ T294] Call Trace: [ 99.089006][ T294] [ 99.089013][ T294] __dump_stack+0x21/0x30 [ 99.089043][ T294] dump_stack_lvl+0x140/0x1c0 [ 99.089065][ T294] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.089090][ T294] print_report+0x3d/0x70 [ 99.089112][ T294] kasan_report+0x162/0x1a0 [ 99.089134][ T294] ? ihold+0x24/0x70 [ 99.089153][ T294] ? ihold+0x24/0x70 [ 99.089172][ T294] kasan_check_range+0x25a/0x2b0 [ 99.089193][ T294] __kasan_check_write+0x18/0x20 [ 99.089209][ T294] ihold+0x24/0x70 [ 99.089227][ T294] vfs_rmdir+0x25c/0x560 [ 99.089251][ T294] incfs_kill_sb+0x102/0x220 [ 99.089268][ T294] deactivate_locked_super+0xd5/0x270 [ 99.089292][ T294] deactivate_super+0xb8/0xe0 [ 99.089314][ T294] cleanup_mnt+0x438/0x4d0 [ 99.089334][ T294] __cleanup_mnt+0x1d/0x40 [ 99.089353][ T294] task_work_run+0x1e8/0x260 [ 99.089375][ T294] ? __cfi_task_work_run+0x10/0x10 [ 99.089395][ T294] ? __x64_sys_umount+0x12e/0x180 [ 99.089410][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 99.089424][ T294] ? __kasan_check_read+0x15/0x20 [ 99.089440][ T294] resume_user_mode_work+0x35/0x50 [ 99.089455][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 99.089471][ T294] do_syscall_64+0x63/0xf0 [ 99.089489][ T294] ? clear_bhb_loop+0x50/0xa0 [ 99.089512][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.089540][ T294] RIP: 0033:0x7f172219f317 [ 99.089555][ T294] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 99.089570][ T294] RSP: 002b:00007ffc1345b618 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 99.089587][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f172219f317 [ 99.089598][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1345b6d0 [ 99.089609][ T294] RBP: 00007ffc1345b6d0 R08: 00007ffc1345c6d0 R09: 00000000ffffffff [ 99.089621][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1345c760 [ 99.089632][ T294] R13: 00007f1722234474 R14: 000000000001819e R15: 00007ffc1345c7a0 [ 99.089645][ T294] [ 99.089651][ T294] ================================================================== [ 99.203179][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 99.208352][ T294] Disabling lock debugging due to kernel taint [ 99.345856][ T294] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 99.353695][ T294] #PF: supervisor write access in kernel mode [ 99.359785][ T294] #PF: error_code(0x0002) - not-present page [ 99.365985][ T294] PGD 800000010fb61067 P4D 800000010fb61067 PUD 0 [ 99.372507][ T294] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 99.378673][ T294] CPU: 0 UID: 0 PID: 294 Comm: syz-executor Tainted: G B W syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 99.391784][ T294] Tainted: [B]=BAD_PAGE, [W]=WARN [ 99.396804][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.406860][ T294] RIP: 0010:ihold+0x2a/0x70 [ 99.411406][ T294] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 42 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 1c 0a ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 99.431575][ T294] RSP: 0018:ffffc9000b66fcc8 EFLAGS: 00010246 [ 99.437667][ T294] RAX: ffff88810374cc00 RBX: 0000000000000000 RCX: ffff88810374cc00 [ 99.445646][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.453626][ T294] RBP: ffffc9000b66fcd8 R08: ffffffff88bb6947 R09: 1ffffffff1176d28 [ 99.461619][ T294] R10: dffffc0000000000 R11: fffffbfff1176d29 R12: 0000000000000000 [ 99.469609][ T294] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 99.477805][ T294] FS: 0000555580319500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 99.486833][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.493572][ T294] CR2: 0000000000000168 CR3: 00000001037d0000 CR4: 00000000003526b0 [ 99.501683][ T294] Call Trace: [ 99.504977][ T294] [ 99.507915][ T294] vfs_rmdir+0x25c/0x560 [ 99.512172][ T294] incfs_kill_sb+0x102/0x220 [ 99.516797][ T294] deactivate_locked_super+0xd5/0x270 [ 99.522341][ T294] deactivate_super+0xb8/0xe0 [ 99.527133][ T294] cleanup_mnt+0x438/0x4d0 [ 99.531587][ T294] __cleanup_mnt+0x1d/0x40 [ 99.536022][ T294] task_work_run+0x1e8/0x260 [ 99.540642][ T294] ? __cfi_task_work_run+0x10/0x10 [ 99.545766][ T294] ? __x64_sys_umount+0x12e/0x180 [ 99.550800][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 99.556183][ T294] ? __kasan_check_read+0x15/0x20 [ 99.561229][ T294] resume_user_mode_work+0x35/0x50 [ 99.566359][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 99.571916][ T294] do_syscall_64+0x63/0xf0 [ 99.576358][ T294] ? clear_bhb_loop+0x50/0xa0 [ 99.581079][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.587095][ T294] RIP: 0033:0x7f172219f317 [ 99.591979][ T294] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 99.611684][ T294] RSP: 002b:00007ffc1345b618 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 99.620131][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f172219f317 [ 99.628110][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1345b6d0 [ 99.636086][ T294] RBP: 00007ffc1345b6d0 R08: 00007ffc1345c6d0 R09: 00000000ffffffff [ 99.644195][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1345c760 [ 99.652174][ T294] R13: 00007f1722234474 R14: 000000000001819e R15: 00007ffc1345c7a0 [ 99.660243][ T294] [ 99.663295][ T294] Modules linked in: [ 99.667222][ T294] CR2: 0000000000000168 [ 99.671485][ T294] ---[ end trace 0000000000000000 ]--- [ 99.676973][ T294] RIP: 0010:ihold+0x2a/0x70 [ 99.681596][ T294] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 42 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 1c 0a ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 99.701236][ T294] RSP: 0018:ffffc9000b66fcc8 EFLAGS: 00010246 [ 99.707358][ T294] RAX: ffff88810374cc00 RBX: 0000000000000000 RCX: ffff88810374cc00 [ 99.715374][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.723362][ T294] RBP: ffffc9000b66fcd8 R08: ffffffff88bb6947 R09: 1ffffffff1176d28 [ 99.731356][ T294] R10: dffffc0000000000 R11: fffffbfff1176d29 R12: 0000000000000000 [ 99.739439][ T294] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 99.747452][ T294] FS: 0000555580319500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 99.756396][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.762996][ T294] CR2: 0000000000000168 CR3: 00000001037d0000 CR4: 00000000003526b0 [ 99.770977][ T294] Kernel panic - not syncing: Fatal exception [ 99.777246][ T294] Kernel Offset: disabled [ 99.781582][ T294] Rebooting in 86400 seconds..