last executing test programs: 1.886857613s ago: executing program 1 (id=2): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_connect$uac2(0x5, 0xad, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x4068, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0xa3, 0x80, 0x2, {0x8, 0xb, 0x0, 0x0, 0x1, 0x2, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x5, 0xe, 0x86}, [@mixer_unit={0x5, 0x24, 0x4, 0x3, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x80, 0x9, 0xfa}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x100, 0x6, 0x1}, @as_header={0x10, 0x24, 0x1, 0x1, 0xae, 0x0, 0x1002, 0x1, 0x3, 0xc}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x81, 0x0, "", '(['}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xe, 0x0, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0xf, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xc, 0xff, 0x1, {0x8, 0x25, 0x1, 0x81, 0xc, 0x1, 0x7}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0x2, 0x60, 0x58, 0x20}, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x2, 0xdd, 0x80, 0x3, 0x25, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_x_sec_ctx={0x20, 0x18, 0x6, 0x3, 0xf1, "4de3e17eab1d722aa9c700e1ea6e404e3d69cf2c21f7dd95887de8b52e444800ddfe29912ff74240ca498f7285a44e9f9762ba6edd337f654deaee56978e0cf226a18c1a9eb6fd9ba955442d3c023bb7b8eeb839fd01271506e0bad7aa23f199d8d714c2dffb0601c6a823c78fb2b9e07a64845e59b4b4796473a639e14506e8fe0b01eccde676b8c895835d5d405dac1c0a4d7602a5d5773188a5e5600b5e815e47128717d173ae1b97b4e28289b3b8a1c2d6acc03c006f49304869771fc40d7358cef2777bec5960a08ff0fedfd8782d8302f7761dc5dca131f8ae776604db51ae81e7f18a4de91f63c2456ddef7b5ca"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d6}]}, 0x128}}, 0x4000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") dup(0xffffffffffffffff) r3 = syz_usb_connect$uac1(0x6, 0xd7, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x30, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x7, 0x30, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x307, 0x4, 0x4, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x800, 0xfffc, 0x0, "af62c9ea1490bf"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x4, 0x4}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0x1, 0x5, "a4eb5c", "01"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x1000, 0x1, 0xff}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa44, 0x47b, 0x1, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7f, 0xc0, 0x5, {0x7, 0x25, 0x1, 0x0, 0x76, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x1, 0xeb, 0x6, "02a822", "eb"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x6, 0xc0, 'N\\1W'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xff, 0x3, 0x0, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x30, 0x1, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x7ff}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x200, 0x7, 0xc, 0x80, 0x8, 0x3}, 0x10, &(0x7f00000005c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4a, 0xdc, 0xc, 0x5, 0x3}]}, 0x6, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x801}}, {0xa1, &(0x7f0000000680)=@string={0xa1, 0x3, "38c47b8dfd62a590687b8089e3efceb7ffe8e7dfb751d4ec5725a954f26c7f5aafc6b6dd0729ef4386d54e4a169ad45cc5bfdbbb3999efb33cd039a6309a70cb6d4d6d62611c38fbcf5e3c33b2b04fc1a969d64b24f3777272b81cf87d4ebf4d538f967fe34b59898af11e63ee664769db106011c03654a26bfa047931e0a0d6e528cad07575e82c1e0b076d324a65d79c17dc6e61c1064e9ccd0acdd2c805"}}, {0x25, &(0x7f0000000740)=@string={0x25, 0x3, "18c1ca99064a52a319b47627ccd2d6dfb206ce269d97fa0710183d5fc97576d711f9e9"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x54, &(0x7f0000000800)=@string={0x54, 0x3, "faf2f98a84b572236689880756225c133c4d63ea4f5fda0ee167749152710b974f3c08da2d8973771e59dc9619f1ec6a05847c27e8bab86f062799cf941d2f2a732ec35fed78f57c5dbae98c4d6558f0937b"}}]}) syz_usb_control_io(r3, &(0x7f0000000b40)={0x2c, &(0x7f0000000900)={0x0, 0x10, 0x74, {0x74, 0x3, "1e8d399a1284a6a1afa332bd3fdf63966741c2cb1a0f9df6790e2c63eb17b2e158e82d783f238a4fb4877d56d709f82f294038d16e98c3b312591221e4d237e9480821f5dc295320c7adfd42e7e1d4058b227cbe5a159232f45376a23b213edbcadd86d1c7dd78732a0eb28cd2785d4b4371"}}, &(0x7f0000000980)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000009c0)={0x0, 0xf, 0xdb, {0x5, 0xf, 0xdb, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x2, 0xf0f, 0xc0}, @generic={0xca, 0x10, 0x4, "8ea294887e0ac8b8a6251fcc3c447d7f43a7bf3b38fbc91ce7c3b69b721679b9275f045074831a73d35004d597b295038a4d18b615b1d229c059f9db6d8aab8c5ea7234b8f46d572af7877cc3063b83fcea6d4f43440a8f37e13f06a8ae92844a921d4c9858ef6cc3b3fc1a724185f9f203b7ad23de748ca8c930dd9f527ccc090c6fab74f7651feb7e72ed4ca79b2279caf9340dfbb8ebde1baa31432a3553456c0f0d7e77b152528944217a57fd96cd0ab8815f071f8657cb2789e3762815a07a6bc8f3f2512"}]}}, &(0x7f0000000ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x0, 0x9, "da5e7435", "6f37e87c"}}, &(0x7f0000000b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x60, 0x80, 0xb, 0x6, 0x2, 0xfff6}}}, &(0x7f0000000f80)={0x84, &(0x7f0000000b80)={0x20, 0x0, 0xc, "832e9df90218b8b4cd846e3b"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000c80)={0x20, 0x0, 0x8, {0x60, 0x2, [0xf0]}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x7ff}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "8de7"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0xee}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000e00)={0x40, 0x17, 0x6, @random="2fb0afdc2816"}, &(0x7f0000000e40)={0x40, 0x19, 0x2, 'f#'}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x1}}) 1.864601504s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1200001, &(0x7f0000000340)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x5}}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x50, &(0x7f0000001640)={{{@in6=@remote, @in6=@private0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) r1 = fsopen(&(0x7f00000001c0)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x1) fchdir(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x2) r4 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x6085, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xc1, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x39, 0xc8, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xd7, 0xec, 0xc}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0022ca000000ca0ac2ec31a4569c2c3c1bfc44bdce918d0fc24237ccb12c45ef2271"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r5, &(0x7f0000000000)={0x2c, 0x4}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'wg2\x00', &(0x7f0000000100)=@ethtool_sfeatures}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r8 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xa48}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x424}}, {0xb, &(0x7f0000000380)=@string={0xb, 0x3, "bba5576ed7afbf9a33"}}, {0xef, &(0x7f00000003c0)=@string={0xef, 0x3, "2f4cee4eba2dd6e8bf52243f9f3e668ec88960ed849b389d3703271f6f21cca821ff91f88d7e406b4083ba8b55bd5763c2089931609505656a2ef8b037eaa4b27828c3b42af71f77e8cac527200d60b489bd2a92e14f1dc80919cdb9cf8551f9761f069fd4b6201170e9a580c5d10e8b85302dbda9a0bd01ae326e2fdc1e9f382cb7a6cc8d9852667e868fe64caeecb95b9bf59305f5eb768631901801b1a3cc7cadb1bdb86a512948d29a8e471e8a34f373f86549ac1bbb0f0855ab10d35075c3fe037927d832f8b01a23f0d0e2df4a3774706afa78d17fd3f0b93b506e8014c5749aa08127988e36a87a17cd"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x400e}}]}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000018c0)={0xc, 0x0, &(0x7f0000001800)=[@free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x40, 0x0, &(0x7f0000000080)=[@acquire, @free_buffer={0x40086303, r8}, @exit_looper, @register_looper, @acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x3}, @enter_looper, @enter_looper], 0xed, 0x0, &(0x7f0000000140)="51bfbf9f2e1af6bfbd0c755069faa9e7a46705309791cb5f6ce7925f34cbd36c90cb30ecfd6b939849208aa0aabc1119b437df135833cf13b131e9c266cf2e4c9f138cc302ce14ac6cd20b6b44821cffac8231919149462307fe50294bbabad963f830e8c66b1cf188d31b3f1f88952266bb63397e8dd5004050f9cc45c33292f48adcd14483eb5b35c7e22a925a6977c9f7069364fbbdf48632d375ea81745d5fa35e0493e7fb291964201ea96b8317207e06b7907503452e73a4f62d269530a8e32d1a1b2ba3e83319fac540bbcf277f121c07aad77c48c93bfbaec598773454f7c87987a188f315c29847f9"}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000005c0)=[@sack_perm, @sack_perm, @timestamp, @sack_perm, @mss={0x2, 0x2}, @mss={0x2, 0xffffffff}, @sack_perm, @sack_perm, @window={0x3, 0x1ff, 0x7}], 0x9) 1.847363954s ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x1, 0xc000, 0x4, 0xfb, 0x1, 0x8, 0x3, 0xa, 0x2, 0x6, 0x12, 0x5, 0x40}, {0x8, 0x2, 0x1, 0x4d, 0x7, 0x0, 0x44, 0x20, 0x9, 0xc, 0x6, 0x6f, 0x20e}, {0x0, 0x5, 0x38, 0x4, 0x84, 0x7, 0x3, 0x50, 0xc, 0x2, 0x7, 0x8, 0x20024a9}], 0xdfffffff}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x40, 0x200002000001, 0x1, 0x2004c8, 0x3, 0x6, 0xf, 0x5, 0x8000000000000006, 0x3, 0x48000000000, 0x6, 0xf73c], 0x80a0000, 0x40}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.60436119s ago: executing program 3 (id=7): mkdir(&(0x7f0000000300)='./bus\x00', 0x63) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143542, 0x160) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x17b}]}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file2\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',version=9p2000.L,version=9p2000.u,noextend,cache=fscache,mmap,euid=', @ANYRESDEC=0xee01, @ANYBLOB="2c66756e63e79b0747613d4250524d5f434845434b2c0100000000000000657569643c", @ANYRESDEC=0xee01, @ANYBLOB=',pcr=00000000000000000043,\x00']) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f0000003200)='./file0/file2\x00', &(0x7f0000003240), 0x0) 1.530195412s ago: executing program 3 (id=8): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x20, 0x31, 0xc8, {0xc8, 0x5, "099189848262ec69a1fa47473ead142e0a9eedcd3a84270450adebce678852a3645cc6bc19727cc725c4bdbdd8d8c4340a0a79859c7b3f8015d4648138cc8e6183c8dd2b2ce62ead070fb9194670b05596cdbdaffc40d7852708b251a20230c123cceb8b3cf673eb6f62e17e2d00fada209a5673a8a2036d932de5aeba18313b4787bf5f73daf2301f4f45cf885b144555ee543adeafc38b1d9435661477f5797f00ec8e94c0f702593d5b99a6ace02303ed789dfbb767fe029e789f5643ddc5ca0efb51355a"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x44, &(0x7f0000000340)={0x20, 0x5, 0x4, "34c0ce86"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x7, 0x8, 0x7, 0x5, 0x20fa, 0x0, 0x2, 0x5, 0x800, 0x1, 0x8001, 0x564}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0x8}, &(0x7f00000004c0)={0x20, 0x83, 0x2}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0xf}, &(0x7f0000000540)={0x20, 0x89, 0x2, 0x1}}) r3 = socket(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x4000002, 0x1, 0x7f, 0x80000001, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f01, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x7, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x8, 0x5, 0x8000, 0x0, 0x8, 0x129432e2, 0x40000cb, 0xf6, 0xb, 0xbf, 0x6c8, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x8, 0x2f, 0xe, 0x3, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x108000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x6, 0x4, 0x9, 0x20000004, 0x100009, 0x6, 0x9, 0x40000006, 0x5, 0x0, 0x0, 0xf, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0x102], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x40008ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x5, 0x86, 0x3, 0x10000009, 0x3e7, 0xfff, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x1fd, 0x7f, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x2, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0xfff, 0x5, 0xce7, 0x1ff, 0x6, 0x7ff, 0x5, 0x3, 0x101, 0x10002, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x8001, 0x6, 0x7, 0x14c, 0x60a7, 0x6, 0x1, 0x0, 0x7ffffffe, 0x4f, 0x8, 0x0, 0x3, 0x3, 0xffff, 0x3, 0x9, 0xfe, 0x9602, 0xa, 0x97f, 0x2000001, 0x6, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x7fff, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x203, 0xffff3441, 0xfff]}, 0x45c) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c0021ef000000000000000007000000160000000200fc000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4000090}, 0x8010) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20100200"], 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f00000000c0)=""/128, 0x80}], 0x3}}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x2, 0x0) 1.460606784s ago: executing program 2 (id=10): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$sock(r0, &(0x7f0000000040)=[{{&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x1, @empty, 0x56f6}, 0x80, 0x0, 0x0, &(0x7f0000000740)=[@timestamping={{0x14, 0x1, 0x25, 0xc5}}], 0x18}}], 0x1, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0), 0x138c041, &(0x7f0000000200)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@pcr={'pcr', 0x3d, 0x20}}]}}) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000380)=ANY=[@ANYBLOB="12010102000000108205a300290001020301090269000301090008080b00020100207f09000000800000000009240100080709000609040100000102203318fa4cd0f83daf00f55bc6d861ea8f7fc8a1de8173b127e824208f600635510d22fb832d6a7f444706d012de963ffc434ad612643a34a271919c35e9fe7301b5b72382426efa79520266b7730ecd24252985621a18"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000040)=@string={0x2}}]}) 193.386115ms ago: executing program 2 (id=11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id, 0x10) shutdown(r2, 0x2) recvmmsg$unix(r2, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000100)=""/186, 0xba}], 0x1}}], 0x1, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x10000005836, 0x8, 0x0, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x8001, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xb, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 69.361919ms ago: executing program 2 (id=12): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x8c, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfb82}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "71a219e3bc78a7c72788f3b594ecbe3d720441fa4d5ca74b576559617bca6f06bb"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 639.971µs ago: executing program 2 (id=13): prctl$PR_SET_VMA(0x41555856, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r1, 0x719, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x880) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x4, @none, 0x101}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 139.111µs ago: executing program 2 (id=14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2014010, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x94c02, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69ff3db0b6ac4fc75cbb55f3af524637eafd3a8961622a3a1c91336a94827944915212d5df76f7c58c738cde71659e13f207c2a0248df0fd6af6356ed3d4e29020ee22080d57a6ebb7c3", @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = inotify_init1(0x0) io_setup(0x800, &(0x7f0000000440)=0x0) r3 = eventfd(0x0) io_submit(r2, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r3, 0x0, 0x4f}]) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206307122040000102030109021200010d0e503f09040000000103"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x20000290) umount2(&(0x7f0000000040)='./file0\x00', 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x4, 0x6}, {0x64}, {0x6}]}) kernel console output (not intermixed with test programs): cess permissive=1 [ 15.062980][ T36] audit: type=1400 audit(1786010734.160:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.57' (ED25519) to the list of known hosts. [ 337.920711][ T36] audit: type=1400 audit(1786011057.020:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 337.924837][ T286] cgroup: Unknown subsys name 'net' [ 337.943605][ T36] audit: type=1400 audit(1786011057.020:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 337.970994][ T36] audit: type=1400 audit(1786011057.050:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 337.971555][ T286] cgroup: Unknown subsys name 'devices' [ 338.095521][ T286] cgroup: Unknown subsys name 'hugetlb' [ 338.101148][ T286] cgroup: Unknown subsys name 'rlimit' [ 338.217425][ T36] audit: type=1400 audit(1786011057.320:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 338.240625][ T36] audit: type=1400 audit(1786011057.320:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 338.265489][ T36] audit: type=1400 audit(1786011057.320:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 338.289772][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 338.298612][ T36] audit: type=1400 audit(1786011057.400:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 338.324200][ T36] audit: type=1400 audit(1786011057.400:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 338.357482][ T36] audit: type=1400 audit(1786011057.460:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 338.383132][ T36] audit: type=1400 audit(1786011057.460:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 338.384162][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 339.192190][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.199447][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.207241][ T293] bridge_slave_0: entered allmulticast mode [ 339.214361][ T293] bridge_slave_0: entered promiscuous mode [ 339.235781][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.242859][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.250046][ T293] bridge_slave_1: entered allmulticast mode [ 339.256649][ T293] bridge_slave_1: entered promiscuous mode [ 339.386851][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.393954][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.401382][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.408466][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.431610][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.438756][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.446420][ T297] bridge_slave_0: entered allmulticast mode [ 339.452661][ T297] bridge_slave_0: entered promiscuous mode [ 339.461917][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.469019][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.476244][ T298] bridge_slave_0: entered allmulticast mode [ 339.482493][ T298] bridge_slave_0: entered promiscuous mode [ 339.489287][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.496568][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.503782][ T298] bridge_slave_1: entered allmulticast mode [ 339.510035][ T298] bridge_slave_1: entered promiscuous mode [ 339.520000][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.527074][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.534220][ T297] bridge_slave_1: entered allmulticast mode [ 339.540519][ T297] bridge_slave_1: entered promiscuous mode [ 339.564250][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.571328][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.578500][ T299] bridge_slave_0: entered allmulticast mode [ 339.584904][ T299] bridge_slave_0: entered promiscuous mode [ 339.605039][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.612110][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.619270][ T299] bridge_slave_1: entered allmulticast mode [ 339.625670][ T299] bridge_slave_1: entered promiscuous mode [ 339.736806][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.744820][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.755091][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.762156][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.784129][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.791206][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.859799][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.867028][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.875527][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.882601][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.899926][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.907012][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.914879][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.921959][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.929836][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.936925][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.955670][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.962725][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.991919][ T293] veth0_vlan: entered promiscuous mode [ 340.016637][ T293] veth1_macvtap: entered promiscuous mode [ 340.029466][ T297] veth0_vlan: entered promiscuous mode [ 340.037216][ T299] veth0_vlan: entered promiscuous mode [ 340.050309][ T298] veth0_vlan: entered promiscuous mode [ 340.067644][ T297] veth1_macvtap: entered promiscuous mode [ 340.085506][ T299] veth1_macvtap: entered promiscuous mode [ 340.096223][ T298] veth1_macvtap: entered promiscuous mode [ 340.128641][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 340.211268][ T322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 340.423304][ T323] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 340.453174][ T66] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 340.585506][ T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.596855][ T323] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 340.606441][ T323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.615370][ T66] usb 1-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.630498][ T323] usb 2-1: config 0 descriptor?? [ 340.644792][ T66] usb 1-1: config 0 interface 0 has no altsetting 0 [ 340.651550][ T66] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 340.673360][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.685592][ T66] usb 1-1: config 0 descriptor?? [ 340.690931][ T317] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 340.783184][ T311] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 340.813208][ T348] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 340.839163][ T323] usbhid 2-1:0.0: can't add hid device: -71 [ 340.845325][ T323] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 340.855640][ T323] usb 2-1: USB disconnect, device number 2 [ 340.933164][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 340.939507][ T311] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 340.947878][ T311] usb 4-1: config 0 has no interface number 0 [ 340.954234][ T311] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 340.964338][ T311] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 340.974299][ T348] usb 3-1: Using ep0 maxpacket: 16 [ 340.981048][ T348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 340.988846][ T311] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 340.998196][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.006282][ T311] usb 4-1: Product: syz [ 341.010482][ T311] usb 4-1: Manufacturer: syz [ 341.015175][ T311] usb 4-1: SerialNumber: syz [ 341.020022][ T348] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 341.027350][ T348] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.037026][ T348] usb 3-1: config 1 has no interface number 0 [ 341.043531][ T311] usb 4-1: config 0 descriptor?? [ 341.048818][ T345] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 341.056183][ T348] usb 3-1: language id specifier not provided by device, defaulting to English [ 341.056755][ T345] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 341.075656][ T348] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.29 [ 341.084807][ T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.092853][ T348] usb 3-1: Product: syz [ 341.097121][ T348] usb 3-1: Manufacturer: syz [ 341.101854][ T348] usb 3-1: SerialNumber: syz [ 341.109015][ T66] hid-rmi 0003:17EF:6085.0001: unknown main item tag 0x3 [ 341.117184][ T66] hid-rmi 0003:17EF:6085.0001: unknown main item tag 0x2 [ 341.124380][ T66] hid-rmi 0003:17EF:6085.0001: unknown main item tag 0x0 [ 341.131628][ T66] hid-rmi 0003:17EF:6085.0001: unknown main item tag 0x0 [ 341.138785][ T66] hid-rmi 0003:17EF:6085.0001: unknown main item tag 0x0 [ 341.145930][ T66] hid-rmi 0003:17EF:6085.0001: unknown main item tag 0x0 [ 341.152997][ T66] hid-rmi 0003:17EF:6085.0001: unknown main item tag 0x0 [ 341.160354][ T66] hid-rmi 0003:17EF:6085.0001: unknown main item tag 0x0 [ 341.167784][ T66] hid-rmi 0003:17EF:6085.0001: unknown main item tag 0x0 [ 341.174951][ T66] hid-rmi 0003:17EF:6085.0001: unknown main item tag 0x0 [ 341.182065][ T66] hid-rmi 0003:17EF:6085.0001: unknown main item tag 0x0 [ 341.189466][ T66] hid-rmi 0003:17EF:6085.0001: unknown main item tag 0x0 [ 341.196658][ T66] hid-rmi 0003:17EF:6085.0001: unknown main item tag 0x0 [ 341.204933][ T66] hid-rmi 0003:17EF:6085.0001: hidraw0: USB HID v0.c1 Device [HID 17ef:6085] on usb-dummy_hcd.0-1/input0 [ 341.273769][ T345] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 341.281036][ T345] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 341.325327][ T323] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 341.354275][ T348] usb 3-1: USB disconnect, device number 2 [ 341.368704][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 341.489263][ T311] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 341.514400][ T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.525819][ T323] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 341.535963][ T323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.553371][ T323] usb 2-1: config 0 descriptor?? [ 341.761498][ T314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.770882][ T314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.981756][ T360] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12'. [ 342.092824][ T312] usb 1-1: USB disconnect, device number 2 [ 342.293196][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 342.393563][ T323] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 342.402095][ T323] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input4 [ 342.417817][ C1] ------------[ cut here ]------------ [ 342.423334][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 342.431950][ C1] index 47839 is out of range for type 'const int[34]' [ 342.438909][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 342.438953][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.438987][ C1] Call Trace: [ 342.438993][ C1] [ 342.439000][ C1] __dump_stack+0x21/0x30 [ 342.439036][ C1] dump_stack_lvl+0x140/0x1c0 [ 342.439059][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 342.439083][ C1] ? common_startup_64+0x13b/0x157 [ 342.439110][ C1] dump_stack+0x19/0x20 [ 342.439132][ C1] ubsan_epilogue+0xe/0x40 [ 342.439146][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 342.439171][ C1] aiptek_irq+0x208d/0x2a00 [ 342.439194][ C1] ? _raw_spin_unlock+0x45/0x60 [ 342.439214][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 342.439232][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 342.439259][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 342.439284][ C1] dummy_timer+0xa3f/0x4900 [ 342.439307][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 342.439323][ C1] ? timerqueue_del+0xd7/0x130 [ 342.439339][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 342.439364][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 342.439379][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 342.439428][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 342.439452][ C1] ? read_tsc+0xd/0x20 [ 342.439475][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 342.439497][ C1] hrtimer_run_softirq+0x159/0x560 [ 342.439512][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 342.439537][ C1] handle_softirqs+0x1aa/0x620 [ 342.439555][ C1] __irq_exit_rcu+0x47/0xb0 [ 342.439571][ C1] irq_exit_rcu+0xd/0x30 [ 342.439586][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 342.439611][ C1] [ 342.439617][ C1] [ 342.439623][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 342.439665][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 342.439693][ C1] Code: cc cc cc cc cc cc cc b8 20 8b f4 dc 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 19 43 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 342.439707][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 [ 342.439726][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366cc00 RCX: ffffffff85a444fd [ 342.439739][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000033434 [ 342.439750][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd [ 342.439762][ C1] R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000 [ 342.439774][ C1] R13: 1ffff110206cd980 R14: dffffc0000000000 R15: ffffffff87ecbfa8 [ 342.439788][ C1] ? ct_kernel_exit+0x7d/0xb0 [ 342.439805][ C1] default_idle+0x17/0x30 [ 342.439821][ C1] arch_cpu_idle+0xd/0x20 [ 342.439836][ C1] default_idle_call+0x3e/0x80 [ 342.439852][ C1] do_idle+0x2fc/0x570 [ 342.439870][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 342.439891][ C1] cpu_startup_entry+0x47/0x60 [ 342.439911][ C1] start_secondary+0x12e/0x140 [ 342.439934][ C1] common_startup_64+0x13b/0x157 [ 342.439959][ C1] [ 342.439965][ C1] ---[ end trace ]--- [ 342.443270][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 342.451211][ C1] ================================================================== [ 342.464450][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 342.464614][ C1] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x20ab/0x2a00 [ 342.474779][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 342.476448][ C1] Read of size 4 at addr ffffffff867332bc by task swapper/1/0 [ 342.481653][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.486764][ C1] [ 342.486775][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 342.486805][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.486820][ C1] Call Trace: [ 342.486831][ C1] [ 342.486866][ C1] __dump_stack+0x21/0x30 [ 342.486990][ C1] dump_stack_lvl+0x140/0x1c0 [ 342.487088][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 342.487172][ C1] ? __cfi__printk+0x10/0x10 [ 342.487254][ C1] print_address_description+0x71/0x210 [ 342.487338][ C1] print_report+0x4a/0x70 [ 342.487434][ C1] kasan_report+0x162/0x1a0 [ 342.487511][ C1] ? aiptek_irq+0x20ab/0x2a00 [ 342.487604][ C1] ? aiptek_irq+0x20ab/0x2a00 [ 342.487688][ C1] __asan_report_load4_noabort+0x18/0x20 [ 342.487751][ C1] aiptek_irq+0x20ab/0x2a00 [ 342.487845][ C1] ? _raw_spin_unlock+0x45/0x60 [ 342.487911][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 342.487981][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 342.488081][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 342.488170][ C1] dummy_timer+0xa3f/0x4900 [ 342.488250][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 342.488324][ C1] ? timerqueue_del+0xd7/0x130 [ 342.488414][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 342.488504][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 342.488550][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 342.488649][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 342.488730][ C1] ? read_tsc+0xd/0x20 [ 342.488805][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 342.488884][ C1] hrtimer_run_softirq+0x159/0x560 [ 342.488936][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 342.489017][ C1] handle_softirqs+0x1aa/0x620 [ 342.489084][ C1] __irq_exit_rcu+0x47/0xb0 [ 342.489142][ C1] irq_exit_rcu+0xd/0x30 [ 342.489191][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 342.489283][ C1] [ 342.489302][ C1] [ 342.489330][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 342.489445][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 342.489548][ C1] Code: cc cc cc cc cc cc cc b8 20 8b f4 dc 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 19 43 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 342.489600][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 [ 342.489652][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366cc00 RCX: ffffffff85a444fd [ 342.489721][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000033434 [ 342.489780][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd [ 342.489830][ C1] R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000 [ 342.489879][ C1] R13: 1ffff110206cd980 R14: dffffc0000000000 R15: ffffffff87ecbfa8 [ 342.489925][ C1] ? ct_kernel_exit+0x7d/0xb0 [ 342.489986][ C1] default_idle+0x17/0x30 [ 342.490048][ C1] arch_cpu_idle+0xd/0x20 [ 342.490102][ C1] default_idle_call+0x3e/0x80 [ 342.490163][ C1] do_idle+0x2fc/0x570 [ 342.490235][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 342.490311][ C1] cpu_startup_entry+0x47/0x60 [ 342.490390][ C1] start_secondary+0x12e/0x140 [ 342.490473][ C1] common_startup_64+0x13b/0x157 [ 342.490561][ C1] [ 342.490590][ C1] [ 342.501860][ T10] usb 3-1: Product: syz [ 342.505680][ C1] The buggy address belongs to the variable: [ 342.505694][ C1] .str.35+0x7c/0x80 [ 342.505730][ C1] [ 342.505736][ C1] The buggy address belongs to the physical page: [ 342.505813][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6733 [ 342.512392][ T10] usb 3-1: Manufacturer: syz [ 342.515760][ C1] flags: 0x4000(reserved|zone=0) [ 342.521892][ T10] usb 3-1: SerialNumber: syz [ 342.526492][ C1] raw: 0000000000004000 ffffea000019ccc8 ffffea000019ccc8 0000000000000000 [ 342.526515][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 342.526530][ C1] page dumped because: kasan: bad access detected [ 342.744948][ T10] usb 3-1: Fast Track Pro config OK [ 342.746508][ C1] page_owner info is not present (never set?) [ 342.768074][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 342.770747][ C1] [ 342.770756][ C1] Memory state around the buggy address: [ 342.770772][ C1] ffffffff86733180: 01 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 00 [ 342.792482][ T10] usb 3-1: USB disconnect, device number 3 [ 342.799780][ C1] ffffffff86733200: 00 04 f9 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 00 [ 342.799800][ C1] >ffffffff86733280: 00 02 f9 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 00 [ 342.799813][ C1] ^ [ 342.799825][ C1] ffffffff86733300: 00 00 04 f9 f9 f9 f9 f9 00 01 f9 f9 05 f9 f9 f9 [ 342.799839][ C1] ffffffff86733380: 00 00 00 00 00 00 00 00 00 00 02 f9 f9 f9 f9 f9 [ 342.799852][ C1] ================================================================== [ 343.248722][ C1] Disabling lock debugging due to kernel taint [ 343.254979][ C1] ------------[ cut here ]------------ [ 343.260445][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 343.269125][ C1] index 47840 is out of range for type 'const int[34]' [ 343.275979][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G B syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 343.276008][ C1] Tainted: [B]=BAD_PAGE [ 343.276014][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.276024][ C1] Call Trace: [ 343.276031][ C1] [ 343.276038][ C1] __dump_stack+0x21/0x30 [ 343.276072][ C1] dump_stack_lvl+0x140/0x1c0 [ 343.276096][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 343.276119][ C1] ? input_event_dispose+0x2f5/0x6d0 [ 343.276147][ C1] dump_stack+0x19/0x20 [ 343.276169][ C1] ubsan_epilogue+0xe/0x40 [ 343.276183][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 343.276208][ C1] aiptek_irq+0x1f3c/0x2a00 [ 343.276232][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 343.276250][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 343.276310][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 343.276335][ C1] dummy_timer+0xa3f/0x4900 [ 343.276359][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 343.276375][ C1] ? timerqueue_del+0xd7/0x130 [ 343.276391][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 343.276417][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 343.276432][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 343.276459][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 343.276483][ C1] ? read_tsc+0xd/0x20 [ 343.276506][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 343.276527][ C1] hrtimer_run_softirq+0x159/0x560 [ 343.276542][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 343.276567][ C1] handle_softirqs+0x1aa/0x620 [ 343.276585][ C1] __irq_exit_rcu+0x47/0xb0 [ 343.276600][ C1] irq_exit_rcu+0xd/0x30 [ 343.276615][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 343.276641][ C1] [ 343.276646][ C1] [ 343.276652][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 343.276675][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 343.276703][ C1] Code: cc cc cc cc cc cc cc b8 20 8b f4 dc 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 19 43 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 343.276716][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 [ 343.276731][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366cc00 RCX: ffffffff85a444fd [ 343.276745][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000033434 [ 343.276757][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd [ 343.276770][ C1] R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000 [ 343.276782][ C1] R13: 1ffff110206cd980 R14: dffffc0000000000 R15: ffffffff87ecbfa8 [ 343.276796][ C1] ? ct_kernel_exit+0x7d/0xb0 [ 343.276812][ C1] default_idle+0x17/0x30 [ 343.276828][ C1] arch_cpu_idle+0xd/0x20 [ 343.276843][ C1] default_idle_call+0x3e/0x80 [ 343.276860][ C1] do_idle+0x2fc/0x570 [ 343.276877][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 343.276919][ C1] cpu_startup_entry+0x47/0x60 [ 343.276947][ C1] start_secondary+0x12e/0x140 [ 343.276983][ C1] common_startup_64+0x13b/0x157 [ 343.277009][ C1] [ 343.277015][ C1] ---[ end trace ]--- [ 343.577891][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 343.580770][ T311] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 343.628053][ T311] asix 4-1:0.34: probe with driver asix failed with error -71 [ 343.628826][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 343.628874][ T36] audit: type=1400 audit(1786011062.730:154): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 343.639750][ T311] usb 4-1: USB disconnect, device number 2 [ 343.922017][ T10] usb 2-1: USB disconnect, device number 3 [ 343.922056][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19