last executing test programs: 5.166673349s ago: executing program 0 (id=219): r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x20, 0x10, 0x6b, {0x6b, 0x24, "b077ce9927d5f8ca957d0efd73380dc7334749a84dcc180759b2f4ea1127a14eb0479641c8270a7f2a1e230464e84e169a08bc24ca3f1bc66800e7adfe28fdba40a9a92bfd2414f4ac03a5654808ae3d35d47ff0ce7b6f15325f74bb89d4ac8a4998fc896f90cc8586"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x20, 0x16, 0x19, "af62d91067beaede9fd4be2f8af511378fc4d3c36cf74662e1"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x37}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000380), &(0x7f00000003c0)={0x40, 0x5, 0x2, '[='}}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000080)={0x20, 0x16, 0x56, "7bccf54a00000000000000000000082d4b61d86e2cb0ddd15636b20f5f709071fdfa374715f739613684b4bd9ccf6f5b01a61c787e91b531ff97eb27f60e2aeb54459691bc02ea99a7079f598cf067de9a8767cf26ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r2, &(0x7f0000000100)=""/117, 0x75) getdents64(r2, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.852592167s ago: executing program 2 (id=221): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000180)=0x7, 0x54) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 4.798874649s ago: executing program 2 (id=222): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="440f78bdb20000003e64460f78b49d0060000065400f841b000000650fc77674dd0166baf80cb85cb2f38cefb800000000efc442a3f5f0c44105d3a100400000b9800000c00f3235000100000f3066baf80cb84a88638aef66bafc0cb017ee", 0x5f}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x112, 0x0, 0x2080, {0x8000000, 0xf000}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.783150649s ago: executing program 2 (id=223): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000087d1e5009000000000000000224000102000000090400080203000000002105e70b01222800090581032000000b08"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xffffffffffffffff) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000002c0)={0x20, 0x23, 0x2e, {0x2e, 0x2, "f70ba381030000000400000000cb4fdca0560f06000000000000003ee44fbf6fc93f0808251f783127ffc0bc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.596771994s ago: executing program 1 (id=227): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000002b80)={'geneve1\x00', @local}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x3, &(0x7f0000000040)=0x5, 0xfdda) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/fs/file-max\x00', 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r8, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r7, 0x0}]) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r10 = syz_open_dev$mouse(&(0x7f00000001c0), 0x7, 0x8e901) ioctl$KVM_PPC_ALLOCATE_HTAB(r10, 0xc004aea7, &(0x7f0000000040)=0x237) syz_kvm_setup_cpu$x86(r2, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="b8050000009a00780000d00000e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c0c4e27d3095fbffffff09083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c840f320f3566b85700", 0x60}], 0x0, 0x41, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fadvise64(r11, 0x1, 0x6000000000, 0x1) 4.531587565s ago: executing program 1 (id=228): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xea9}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r2, r3, 0x0, 0x0, 0x1, 0x0, 0x0) (fail_nth: 29) 4.502350856s ago: executing program 1 (id=229): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x13, 0xffffffffffffffff, 0xd6460000) madvise(&(0x7f000050c000/0x12000)=nil, 0x12000, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/isp1760/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1af4 ffffffff', 0xd) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) madvise(&(0x7f0000402000/0x1000)=nil, 0x1000, 0xf) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 4.480267386s ago: executing program 1 (id=230): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'vlan0\x00', @multicast}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async, rerun: 32) read$ptp(r0, &(0x7f0000000100)=""/4096, 0x1000) (rerun: 32) 4.418908128s ago: executing program 1 (id=231): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000)=0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20010d"], 0x0}) 3.178625559s ago: executing program 0 (id=232): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, 0x1e, 0x100, 0x70bd2b, 0x25dfdbfb, {0xe}, [@generic="d908d306abe555d2781dfd46bba325a2ec3b29f0b7c4d163173fe331bdf38f4c33e5a3ce0648109f9f39060c181def1f5732ae285bc8a6b7eca02a3b2d6457d53472946e1239d1eb44790ddc70551e0f255a8c90c6b7fb1df14d8ecfefa6e5e930bcd0aa568651e1e5ec9c196aee87f46d965a748b9570fc873c6343539e4273e47cad7722d83257730b33511392dfb8c835304c412b0a8f9d80a7ec9b314aa2204057b82d19a9ff6e286bad2a612dcdbae05d07db5fa7ec8832835cdc02d0885a978c47318d4be59bb0efdd9bf328db93078492"]}, 0xe8}, 0x1, 0x0, 0x0, 0x4011}, 0x880) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', r2, 0x80, 0x3c30, 0xfffffffe, 0x0, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @multicast2}}}}) 3.15847186s ago: executing program 0 (id=233): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000200)='./file0\x00', 0xa6) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000008c0)='./file0\x00', 0x0, 0x20000b2, &(0x7f00000001c0)=ANY=[@ANYBLOB=',mode=0']) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'bridge_slave_1\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0xf, "06b34c297dcdb619d4e7a6994c4348"}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2039bb00f5a213d14606f07d3fa82641186b1c241a0d19debc3fe1b623b633013651001bca565e98ba144d0c176190c9d5d19af04bc8a82be7e4ad61edd6b84b5363be01aec0f25570ef8e3fe7d9ea9691a8d8dcaff0d25c0d7b0d6d61"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="1efb82181e12e36ffec4b725"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="0006040000001a99571846"], 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@loopback, @in6=@private2}}, {{@in6=@private2}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) r3 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x1, 0x30, 0x66, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x35, 0x64, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x37, 0x31, 0x35, 0x62, 0x65, 0x34, 0x30, 0x30, 0x30, 0x0, 0x38, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) 1.722849067s ago: executing program 2 (id=234): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) mprotect(&(0x7f00005b5000/0x1000)=nil, 0x1000, 0xaeba29992259822c) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000400)=0x55e, 0x4) 1.709584817s ago: executing program 2 (id=235): socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_open_dev$loop(0x0, 0x7, 0x20800) (async) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40801, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000580)="580000001400192340834b80040d8c560a067fbc45ff810500004000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100050808004149004001040800", 0x58}], 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x800007, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = syz_io_uring_setup(0x5b17, &(0x7f0000000000)={0x0, 0xc995, 0x4000, 0x0, 0x2de, 0x0, r5}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000001c0)) syz_ublk_setup_queues(r5, r3, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x23c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x80, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x10, 0x0, 0x8000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff, 0x0, r6}}], 0x1, 0x0, 0x0) 1.705786197s ago: executing program 2 (id=236): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='$\x00', 0x44a000, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x4]}, {0x701, 0x3, 0xeb2b, 0x4}}, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4}) r1 = syz_open_pts(r0, 0x4042) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000140)=0x3, 0x2) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000001c0)=r2) (async) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x1) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x4a03, 0x0) r4 = fsmount(r3, 0x0, 0x3) fcntl$getownex(r0, 0x10, &(0x7f0000000240)) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000280)=0x1005841, 0x4) (async, rerun: 32) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000002c0)=""/36) (async, rerun: 32) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) (async) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300), 0x424000, 0x0) (async) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r5, 0xffffffff80000300, r6, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000500)={r1, &(0x7f0000000400)='\'-\x00', 0x2, &(0x7f0000000440)={@align=0x3, {0x0, 0x4, 0x1, 0x9}}, 0x800, &(0x7f0000000480), &(0x7f00000004c0)=0x3}) ioctl$XFS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000540)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000580)={0x4, 0x1e3e, 0xffff, 0x79, 0x2, 0xfff9}) (async) r8 = signalfd(0xffffffffffffffff, &(0x7f00000005c0)={[0xe]}, 0x8) readahead(r8, 0x9cd4, 0xffff) (async) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) (async) r9 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xb, 0x2, 0x400, 0xc7, 0x7, 0x3}, {0x9, 0x5, 0xc, 0x2, 0x8, 0x8, 0x1, 0x56}, {0x9, 0x5, 0x80, 0x3, 0x8, 0x9, 0x0, 0xe}}}}}}]}}, 0x0) syz_usb_control_io(r9, &(0x7f0000000840)={0x2c, &(0x7f0000000640)={0x20, 0x5, 0x3b, {0x3b, 0x1, "e066cfe2c34134821d783f4bc45f3b424652c4991ca23c6ff0c0e99d60cd6349e20e7186ceae667ace3dafc3929a2f2596de51822de42c0375"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x856}}, &(0x7f0000000700)={0x0, 0xf, 0x7e, {0x5, 0xf, 0x7e, 0x2, [@generic={0x65, 0x10, 0x3, "7b92e8ccf48bd2de5f7880b6a786571fc03a21abcf8f146dfdbab1277e43d1eedf58d1e0ca5402863a0e926d0428fb28ff3647693c0ef31fb64d20b51c25921990613b15257595433542d3012190286611625eaa07a49529473b42e7e9de6146f43b"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "38e89e3181440b7f4de81c677b141e22"}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x18, 0x1a, 0x6, "c5b1e587", "15922be6"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x18, 0x4, 0x5, 0x4, 0x8, 0x3}}}, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x1, 0xd7, "e0969412e36c48fc0028e2fe8c70b230964ef0340d00d37077aa67def24025393d58e905264063a41c1329363a5e6f3b96f51c9a2a30ef233b7635d95264538771a02443516228bee0345fc1bfdaa1a3667143c09cfffa622d6ae2484f092e232517a327208a2e96d99c5418174b059bc763f8119f39dac98013ad37bad948da3445aabf3f93e3053ab5d81b352da1d2bccec2e9ce45a590ae2a97c614b844a842e7944e8b6ac7e15512928e25733e707ae42eab692ab2f22c09e0df052860e4ff297d997bbcfd3837a7697a6c82a1359707238253cbd3"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0xa0, 0x1}}, &(0x7f0000000a80)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000ac0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000b00)={0x40, 0xb, 0x2, "a2e5"}, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0xfe01}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "bef5"}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0x76}, &(0x7f0000000d00)={0x40, 0x21, 0x1}}) (async) r10 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000e00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r10, &(0x7f0000001100)={0x2c, &(0x7f0000000e80)={0x40, 0x11, 0x62, {0x62, 0x30, "b68082867dc79e45e3fa477005d866e3fce7cbc820bd5a807ff06360fe88c13ca70c876fd71914509cebd5272adb8efc0b791535a51c2851773c36877a31c7ec206c351ce4db4da0209277666ba2e364f2d366c1e64cbf2dffba45867619b9df"}}, &(0x7f0000000f00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}, &(0x7f0000000f40)={0x0, 0xf, 0x107, {0x5, 0xf, 0x107, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x9, 0xcc9a}, @generic={0xdd, 0x10, 0xa, "2bcd19199bfce2de32259a6d84b73ccbef1d910c9d1757507be533be750c4ee590076577bc9bb41d7b2e6f372252fd9e210b877aa54cf90583d4c1d35b092a36aaa4960082aabbef1349943cc62d7bc163aaa9ed4027e4b2d71c08b92183d8f319618b58f4745176ecc31e0428a4dfe576409df9154d8143d00a3ff930f300be0b736b392db36419249f9aa6fdd9a35236de6522729014ec0b073f5596ade4d278d50122cc139ecfca68a437dad42a3d8f3c996d9b2bfc05dc429f8764775ba65f5b9f1d59e8764e020eb938f364ec252d3eca64b4839dcc9de6"}, @ext_cap={0x7, 0x10, 0x2, 0x34, 0x8, 0x0, 0xfff7}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "615d71e2290941f965ae142f0df507e2"}, @ptm_cap={0x3}]}}, &(0x7f0000001080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x3, 0xc, 0x6, "d45489b3", "e28ef01b"}}, &(0x7f00000010c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x28, 0x3, 0x3, 0x6, 0x5, 0x4, 0x3e65}}}, &(0x7f0000001580)={0x84, &(0x7f0000001140)={0x40, 0xd, 0x4c, "96f8a3cfbfee479219dbe36a84aac17e19402072ffe977c362d4dac5fed8ecdffaa97304a24c53f068093f49e950a32bfb26ae5c7f8e3503f6c503a6f778b74c06093b6a85fcdd359965c83c"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000001280)={0x20, 0x0, 0x8, {0x20, 0x4, [0xf000]}}, &(0x7f00000012c0)={0x40, 0x7, 0x2, 0x6ae}, &(0x7f0000001300)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000001340)={0x40, 0xb, 0x2, "fa28"}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000013c0)={0x40, 0x13, 0x6, @random="8f1df161dfbc"}, &(0x7f0000001400)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000001440)={0x40, 0x19, 0x2, "aa15"}, &(0x7f0000001480)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001500)={0x40, 0x1e, 0x1}, &(0x7f0000001540)={0x40, 0x21, 0x1, 0xc}}) (async, rerun: 64) flock(r7, 0x2) (rerun: 64) syz_usb_control_io(r10, &(0x7f0000001840)={0x2c, &(0x7f0000001640)={0x20, 0x8, 0x7d, {0x7d, 0x1, "e3aff4e616c294e798d0107857f39ea9da33e1fdac824fd57f652c63d711ddd78e34fa9677aae348e14145759b956e90a9213b746183df6140a324e6e47d7e35d8fd557e2613aed64a6cfa5f1b0f70439845bbb0c55970ac94389f9bfedd264323a680b528b2c65495ab065970ee24e3f2bc5f84f290132a923328"}}, &(0x7f0000001700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, &(0x7f0000001740)={0x0, 0xf, 0x41, {0x5, 0xf, 0x41, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "a6298c986e25d330212a9612fb5689c1"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xa, 0x6, 0x100}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x2, 0x3b0}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "981492fc194a8376732a4b2f68af96da"}]}}, &(0x7f00000017c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0xfb56bdd28cd5e1b2, 0x8, 0x4, "9bbaa3fc", "8e0238f5"}}, &(0x7f0000001800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4e, 0x2, 0x3, 0x4, 0xd, 0x4}}}, &(0x7f0000001d00)={0x84, &(0x7f0000001880)={0x20, 0xb, 0xb6, "92e3e9e0e5bad82a7b1f6d5a264ee309cc38c1a0bf3694a2ade5316b389a910c1d4bfe56292099906023cd6980c259cd5612027f12221ac25f3a26bcb5fc52fb9fef758ddddaccd8e917fd5bd726e72d3c09730dd5c765d9e0f5d1f170755d9d1ef63dbdc8a25c15bdf6884a1e2af5fc26098bc9e345a892abb6fc03008ccaf52a97b4360cfa854c2f129249bc40ced2fcaf45daad84b31834175a5f32d31a3f6da37ba462005a5bad082af5f77ad28dfdceb3b9fd71"}, &(0x7f0000001940)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001980)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000019c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001a00)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000001a40)={0x40, 0x7, 0x2}, &(0x7f0000001a80)={0x40, 0x9, 0x1, 0xde}, &(0x7f0000001ac0)={0x40, 0xb, 0x2, "3b9c"}, &(0x7f0000001b00)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000001b40)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001b80)={0x40, 0x17, 0x6, @local}, &(0x7f0000001bc0)={0x40, 0x19, 0x2, "fbaf"}, &(0x7f0000001c00)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000001c40)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001c80)={0x40, 0x1e, 0x1, 0x6a}, &(0x7f0000001cc0)={0x40, 0x21, 0x1, 0xff}}) (async) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x81f4b344785ea52a, 0x10, r8, 0x6) syz_usb_ep_read(r10, 0x6, 0x5c, &(0x7f0000001dc0)=""/92) syz_usb_control_io$sierra_net(r9, &(0x7f0000001f80)={0x14, &(0x7f0000001e40)={0x0, 0x9, 0xdd, {0xdd, 0x2, "f1b3a14416389180f9afb3e8cf11bb0826b93cb33a32a0416d147c904cbce2d01b134894dc35871dbb55e6c26be6d7e0cd523906364bfa24ed4852365708b55aea23721b9fb2d1bd2752193a176608bd3fd7a66ed3f5aedb7a8a5bb212ecf113ffced83132fd24cdb577c536182b1ac92999adf6259624378e2b2e257e0bde8aaaca5d9131d269896db8b750e2c3f94fcea8032bb91af9a0a28457f79c76b7d2952ac5f706c3c50df7bdb5b286c9b119210b87893067650044f97f1112f12f43c8c3711deebdf70ddcef0230b58a43166726dbddf0cadcf227aec5"}}, &(0x7f0000001f40)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "e66accf668d82298e4b251fa697fd0a2e5bbcb412ac424655c8adb82"}}}, &(0x7f00000024c0)={0x1c, &(0x7f0000001fc0)={0x0, 0xe, 0x3f, "4e70d4eb38a44570f00acb65b0c9f2a4c61933aa28de111a29384fd555f4007b93d0318c9fb881bf91a1266fa90e7035b9b0bde9521413ea415f0fce9b24db"}, &(0x7f0000002040)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000002480)={0x21, 0x0, 0x3, "6647e9"}}) 1.528729312s ago: executing program 3 (id=240): r0 = socket(0x10, 0x803, 0x0) dup2(r0, r0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, 0x0}, 0x0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) sendto(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x101, 0x8000, 0x0, 0x0) r2 = openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000008c0)=""/212, 0xd4}, {&(0x7f0000001c00)=""/89, 0x59}, {0x0}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/242, 0xf2}, {&(0x7f0000000500)=""/267, 0x10b}, {&(0x7f0000000640)=""/83, 0x53}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f00000000c0)=""/113, 0x71}], 0x9}, 0x4d}, {{0x0, 0x0, 0x0}, 0xd183}, {{0x0, 0x0, 0x0}, 0x1f77}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x2090d2}, {{0x0, 0x0, 0x0}, 0xe52}], 0x7, 0x0, 0x0) 1.498902182s ago: executing program 3 (id=241): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) r0 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) write$binfmt_script(r0, &(0x7f00000008c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204) pwrite64(r0, &(0x7f0000000240)="078b7b7afffbd891fa10928a4b401bc5c42432f2c62237ffc8ee5d8dd1fe23223cea3e138abe9953655805b4788252bb0467297a6f46c8d9c66f8d3a4ee6149403ddec3cf384d0a52ab8a2a8552f369e97c2218e4e5e7bf7ac5f24f3328181a196b8ce937a633e7ca1bfe44b356e5309", 0x70, 0x2) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ptrace$poke(0x5, r1, &(0x7f0000000040), 0x6) 1.442750614s ago: executing program 3 (id=242): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1001fffffd) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1001fffffd) fcntl$dupfd(r0, 0x0, r1) (async) r3 = fcntl$dupfd(r0, 0x0, r1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000053c000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="b8050000009a00780000d00000e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c0c4e27d3095fbffffff09083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c840f320f3566b85700", 0x60}], 0x1, 0x41, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) fsopen(&(0x7f0000000680)='sockfs\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000340), &(0x7f0000000140)) (async) syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') (async) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r7, &(0x7f0000000080)=[{&(0x7f0000000140)='15', 0x2}, {&(0x7f0000000400)='u;', 0x2}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r7, 0x1000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000440)="66b84b0000000f23d80f21f86635c0000000fdafe3f8f8f30f0d1c2ef30fbd064200670fc79eff3100003e660f71e6e62e0f01df0f7919260fc75f0766b9aa0b000066b800780000d950270f302e0f381d1a", 0x52}], 0x1, 0x62, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000140)={{0x8080000, 0x0, 0x2, 0xf6, 0x2, 0xf3, 0x57, 0x8, 0x8, 0x1, 0x9, 0x6}, {0x50000, 0xc0a0c0f0f5000ded, 0x9, 0x5, 0x3, 0x8, 0x5, 0x80, 0x81, 0xfc, 0xfc, 0x4}, {0x200000, 0x25000, 0xb, 0x7, 0xff, 0x3, 0x0, 0x5, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x6000, 0x9, 0xd, 0x8f, 0x4, 0x83, 0x4, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0xc, 0x2, 0x6, 0x1, 0x9, 0xc9, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xf, 0x0, 0x6, 0x0, 0x3, 0x9, 0x7, 0x0, 0x4, 0x30}, {0xdddd0000, 0x0, 0xc, 0x1, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0x82, 0x8, 0x6, 0x10, 0x7, 0x3, 0x80, 0x87}, {0x2, 0x8000}, {0x1000, 0x5}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x6, 0x2, 0x1e}) ioctl$KVM_RUN(r10, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.429762844s ago: executing program 1 (id=243): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000640)=@vmx={0x0, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff}}) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0x1000, 0x1000}) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000bac"], 0x0, 0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = userfaultfd(0x801) syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f0000002ec0)) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f000048c000/0x3000)=nil, 0x3000}, 0x4}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000ac0)={0x1, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2001aeb035752b78fd9f412f1b1b11a3c1267c5a22f2941de8cb06eda6d3594031da494ac7a92febc60607d1f2127881843a0f5c6ddbe3d4899e75d4ba1d09d013540ec187b3c05243add03cb665386dbafed8eee54f397fa911a54da1eb5dfee1d2900934774c8d04c7c846f79c6cf435401c14cb5216e7729895ab038d6324a130ab049fa064a491bc54d3482c125a8772ea1dd159572742f890838dd4a8b5ff1da9666b0d796125d4a6e76ec6000000"], 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) syz_usb_connect$uac2(0x6, 0xde, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x582, 0x48, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x37, 0x10, 0x35, {0x8, 0xb, 0x2, 0x2, 0x1, 0x3, 0x20, 0xe0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x7, 0x19, 0xe2}, [@selector_unit={0xb, 0x24, 0xb, 0x8, 0x6, "1e9e7c06279c"}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0xfb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x2f}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0x6, 0xa, "dcf399", '3'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x1, 0x0, 0x1, "010b0fbb9255dd49"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfff7, 0x9803, 0xb, 0x3}, @as_header={0x10, 0x24, 0x1, 0x1, 0x4, 0x0, 0x4, 0x40, 0x14f2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x1, 0x1, {0x8, 0x25, 0x1, 0x2, 0x39, 0x9, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0x4, 0x5, "119461"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x5, 0x7f, "25de47"}]}, {{0x9, 0x5, 0x82, 0x9, 0x660, 0x1, 0x91, 0x0, {0x8, 0x25, 0x1, 0x1, 0x3, 0x3, 0xfffc}}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x3, 0xbb, 0x6, 0x8, 0x4}, 0x19, &(0x7f0000000480)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "845b88656078eca7b500ee153daf6441"}]}, 0x5, [{0x5d, &(0x7f0000000540)=@string={0x5d, 0x3, "78958cbfef90e8049b192d867dbac2cd94957a36ac6682518123fb288ca4d70cc573b07773d6321844f38b234bcd558a209697ad157fe0eb870f523e59f385b4a42a097b5f24dd07b637a480851e3a2259704d709d1b50912a9c46"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x827}}, {0xfd, &(0x7f0000000640)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x809}}, {0x93, &(0x7f0000000840)=@string={0x93, 0x3, "7de1f8496a2638b3f55950d644a117f912c4b9524578e6e36e8d52b78b44e495f4b18d14b4c6d9638106e63da9b9f7b470282cea21ca13ce21ef940f80284d55a6e569f3eac24acb3425e0685b43a1208ce67d0aa0d77c6a0fa234859284dca6ada00c1e188c1a19eb300358bb6146de963bdb3509af23c597192949f5b5c6d29c774280ce40469004b77a87801f055fe4"}}]}) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) mlock2(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x0) write(r7, &(0x7f0000000900)='0x1', 0x3) write$char_usb(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$KVM_CAP_DISABLE_QUIRKS2(r7, 0x4068aea3, &(0x7f0000000180)) 1.390406615s ago: executing program 0 (id=244): ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000026c0), 0x1, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000000)={0x9}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_wolinfo={0x6, 0x2, 0x7, "50f1ff00"}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x1, 0x200005, 0x6, 0x0, 0x2, {0x1, 0x17a, 0x40000000103, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0xa000, 0x4, 0xee00, 0x0, 0x403, 0x3}}, {0x0, 0x11}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080)=0x2, 0x7f02) syz_usb_connect(0x1, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect$cdc_ecm(0x3, 0x54, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x1, 0x1, 0x69, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x7f, 0x3, 0x2, 0x6, 0x0, 0x37, {{0x8, 0x24, 0x6, 0x0, 0x0, 'y*$'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x10a, 0x81, 0x17}, [@acm={0x4, 0x24, 0x2, 0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0xa7, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0xfb, 0x6}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x6, 0x5, 0x7, 0x40, 0xd}, 0x3a, &(0x7f0000000140)={0x5, 0xf, 0x3a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "3d62d376597c0872d053c88b1da6fd2f"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x4, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0xd7, 0x7, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0xa6, 0x1, 0x6, 0xf00, 0x100, [0xff3f30]}]}, 0x8, [{0x57, &(0x7f0000000200)=@string={0x57, 0x3, "5cd763143da9ec43a5f11e304fafc41601c5ee5b557487f337e41af2cf3c4d47f813a8c5b61d9323d04b80b9d9ac39895a15f6e5e74a7914844d89329b1198ac5a0baaeb2b1a099bb7ac2fbb2905b947af92185990"}}, {0xb, &(0x7f0000000280)=@string={0xb, 0x3, "610e65f8949bb12e4e"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42b}}, {0xc6, &(0x7f0000000300)=@string={0xc6, 0x3, "13f728a405618ea4184550a5dd38e25a8c5e7af9a213c42a0f30a50913dbabe8f2977fedb6a6fb676e51bcc07a9e7e07eac28af2b0363bf01ef866b764e8095e72ef1e9a1eff05727cfc83cb7ec0cbe0d3c845f1b368bde29d6990537c6cce4d70430746e29d9e1e82bb2c6cafa1c991bac15de4d83d66c6047a12d323114bba742d2e2fb83c54846f62acf6ea93d9986a100538c169086010a0a440202642b0e3263bfa762326d2529e0ab0f3b039c12476d0d86e7f9d9d7ee95899b00b41cf918514ae"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2001}}, {0xae, &(0x7f0000000580)=@string={0xae, 0x3, "e76e443b41aebb894866ddb8c9018a497334327e89995c5be513021db5d47665862d2b91db387084d4d19f862f572e0ff3aa64236be96b433bd4c414bb635f7d23b34620e660035eef7d254bd3d988f911294fdffa09fa1e8a1016894c07a04c6dd4416d428c6a8ee6d5ebd592550b177e6e459c0f6bd12bf723315a31b96f39d4cedb5e40b749e98e206ae7c0b55a37155b71b03cd40acc6b4021b61773a8acd72256a194fb54f87b379cb3"}}, {0x24, &(0x7f00000004c0)=@string={0x24, 0x3, "06cc5335f0f720a4d215f7ca46dd673fafd5036bc84b7265b050fe900215c6c83c67"}}]}) 1.091308043s ago: executing program 3 (id=245): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = memfd_secret(0x80000) bind$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xf8}, 0xa) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.091156043s ago: executing program 3 (id=246): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xea9}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r2, r3, 0x0, 0x0, 0x1, 0x0, 0x0) (fail_nth: 31) 1.084388892s ago: executing program 3 (id=247): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x800000002c, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, &(0x7f0000000300)={0x0, 0xf, 0x47, {0x5, 0xf, 0x47, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "cc81e53b6153e372cad6d4e8df9d98fd"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "977d53069a8f3b99ccdc675d95cd4a8c"}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x40, 0x0, 0x8000, [0xff]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x0, 0xf}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x3, 0x8, "d29cab29", "7b35e79b"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x1d, 0x3, 0x56, 0x2, 0xb, 0x81}}}, &(0x7f0000000900)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="401167000000e5660b01110abed0f6cf65194d3ba45395e6ff25be386b08d7cdf695897dff50b367fbdf1d5df88439b30f2b317a476a74d9400a604656d3424ff8760205366de54c7a52c69157806d4197e2649c201a0f89d1c2c76b60f490ca0176e328f7807b960a2d357ac488ee5a149335a1274ff7fc231c29aaeec81c9b51122a5fffb169b61bf78f6762a7d23a7da37256d8056e23208c14b2cec6e6f98a4478b7d867"], &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000100)=ANY=[@ANYBLOB="20006a6b0000a0000000dcd77e71251f301dff3f1550af5e464f178948188d87ca9b0d2831030024761c86e4ee24d36321a72a7e0b2749855593058b79cd0300000000000000d1d8e38d08c2a3aec67599a4098192f2336458f08805aaa0d252ca1dde9eedb6c76fc871850a030e0be216c8daad23511362b7b7ccf76b35c26b5e9cc1766aff59c9797d57c490775f49eda1650e333644cd210cdb0ee6f5b8"], &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000640)={0x40, 0xb, 0x2, "dda2"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0xfffa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x13e) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x13e) r7 = socket(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)={0x20, 0x12, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0x10, 0x20, 0x0, 0x0, [@nested={0xc, 0xc7, 0x0, 0x1, [@typed={0x8, 0x133, 0x0, 0x0, @uid}]}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) sendmsg$netlink(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)={0x20, 0x12, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0x10, 0x20, 0x0, 0x0, [@nested={0xc, 0xc7, 0x0, 0x1, [@typed={0x8, 0x133, 0x0, 0x0, @uid}]}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'wg0\x00', &(0x7f0000000240)=@ethtool_eee={0x45, 0xcaf5, 0x7, 0x6, 0xc, 0x7, 0x10000, 0xcc51, [0x8, 0xff]}}) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') (async) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000005cc0)='./file0\x00') pread64(r5, &(0x7f0000000040)=""/36, 0x24, 0x5) (async) pread64(r5, &(0x7f0000000040)=""/36, 0x24, 0x5) 48.760559ms ago: executing program 0 (id=248): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x6, 0x409}, 0x2a, [0x0, 0x1000000, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x4, 0x7ffeffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x4000, 0x20, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040000, 0xfffffffb, 0x24f1, 0x8, 0xfffffffe, 0x0, 0x2, 0x5, 0x400000, 0xf16, 0x0, 0x0, 0x9, 0xfffffff2, 0x0, 0x0, 0x0, 0x0, 0x7a3, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x99, 0x800000, 0x0, 0x7f, 0xa, 0x0, 0xfffffffc, 0x7, 0x5f1, 0x6], [0xfffffff6, 0x0, 0x22, 0x1, 0x0, 0x5, 0x0, 0x9d, 0x0, 0x7, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x100007, 0xfffffffc, 0x3, 0x0, 0x7, 0xfffffffa, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x5, 0x10002000, 0x0, 0x0, 0x800, 0x0, 0x6, 0x404, 0x0, 0x4, 0x1, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffc, 0x7ff, 0x32, 0x1, 0x0, 0x80000, 0x85, 0x8, 0x0, 0x8, 0x0, 0x8, 0x10, 0x20000000, 0x0, 0x3, 0x2], [0x204, 0xfc, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x10000000, 0x0, 0xfffffffc, 0x4, 0x7fffffff, 0x80, 0x149e1cbc, 0x31d, 0x3, 0xffffffff, 0x5, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x10000000, 0x0, 0x4, 0x0, 0x0, 0x925, 0x0, 0xffffffff, 0x3, 0x0, 0x6, 0x8, 0x0, 0xbda6, 0x1, 0x0, 0x0, 0x0, 0x463db3a7, 0x0, 0x800, 0x0, 0x0, 0xf, 0x4, 0x0, 0x0, 0x80, 0xfff, 0x6, 0x0, 0x1, 0x0, 0x0, 0x8], [0x7, 0x0, 0x635, 0x10000, 0x8000000, 0x7, 0x8, 0x7d, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffd, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x1, 0x7fff, 0x0, 0xfffffffd, 0x18, 0x8000000, 0xfffffffd, 0x6, 0x9, 0x101, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x80000000, 0x10000, 0x0, 0xe, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x3ffc, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101202) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="f99c42b33e7b02bf78428b567a98469f6e6a", @ANYRES16=0x0, @ANYBLOB="15022abd700001dcdf252800000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40420d5}, 0x20000000) r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d9, 0x1, 0x1, 0x180}, 0x30, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/bnep\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r6, 0x0, 0x0) landlock_restrict_self(r5, 0x0) r7 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r7, 0x400, 0x1) r8 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r8) write$FUSE_NOTIFY_POLL(r7, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x100000000}}, 0x18) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x62, 0x65, 0x30, 0x34, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x65, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x9, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "0011224f445566778899a2abccddeeff00112233445166ff0399aac8ccddeeff11221d447866778899aabbccddeeff0000000000000000000000009f00", 0x40}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x32, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x31, 0x34, 0x30, 0x38, 0x32, 0x30, 0x30, 0x30, 0x65, 0x0, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aab9ccddeebf001122334455667701040000cc0400ff0011222b0c000000000000bbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r8) 0s ago: executing program 0 (id=249): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x13, 0xffffffffffffffff, 0xd6460000) madvise(&(0x7f000050c000/0x12000)=nil, 0x12000, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/isp1760/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1af4 ffffffff', 0xd) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) madvise(&(0x7f0000402000/0x1000)=nil, 0x1000, 0xf) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) kernel console output (not intermixed with test programs): et BOS descriptor or descriptor too short [ 25.986979][ T318] plusb 1-1:0.0: probe with driver plusb failed with error -22 [ 25.995151][ T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.006596][ T66] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.017837][ T66] usb 3-1: string descriptor 0 read error: -22 [ 26.024044][ T66] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 26.033145][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.045964][ T66] usb 3-1: 0:1 : does not exist [ 26.055951][ T66] usb 3-1: 0:2 : does not exist [ 26.146829][ T326] usb 4-1: device descriptor read/64, error -71 [ 26.179818][ T10] usb 1-1: USB disconnect, device number 2 [ 26.260078][ T330] netlink: 'syz.2.3': attribute type 28 has an invalid length. [ 26.272489][ T66] usb 3-1: 6:0: failed to get current value for ch 0 (-22) [ 26.284175][ T66] usb 3-1: 6:0: cannot get min/max values for control 4 (id 6) [ 26.295974][ T66] usb 3-1: USB disconnect, device number 2 [ 26.396925][ T326] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.526875][ T326] usb 4-1: device descriptor read/64, error -71 [ 26.735525][ T342] FAULT_INJECTION: forcing a failure. [ 26.735525][ T342] name failslab, interval 1, probability 0, space 0, times 1 [ 26.748286][ T342] CPU: 1 UID: 0 PID: 342 Comm: syz.0.9 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 26.748317][ T342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.748339][ T342] Call Trace: [ 26.748346][ T342] [ 26.748354][ T342] __dump_stack+0x21/0x30 [ 26.748404][ T342] dump_stack_lvl+0x140/0x1c0 [ 26.748431][ T342] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.748478][ T342] dump_stack+0x19/0x20 [ 26.748506][ T342] should_fail_ex+0x3c2/0x510 [ 26.748540][ T342] should_failslab+0xac/0x100 [ 26.748567][ T342] __kmalloc_node_noprof+0x69/0x500 [ 26.748596][ T342] ? __kvmalloc_node_noprof+0x128/0x300 [ 26.748620][ T342] ? __kasan_kmalloc+0x96/0xb0 [ 26.748639][ T342] __kvmalloc_node_noprof+0x128/0x300 [ 26.748662][ T342] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 26.748685][ T342] ? percpu_ref_init+0x230/0x4d0 [ 26.748702][ T342] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 26.748719][ T342] io_ring_ctx_alloc+0x28c/0x1dc0 [ 26.748735][ T342] io_uring_create+0x2e0/0x13f0 [ 26.748750][ T342] ? __kasan_check_write+0x18/0x20 [ 26.748765][ T342] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 26.748787][ T342] ? __kasan_check_write+0x18/0x20 [ 26.748801][ T342] ? __x64_sys_io_uring_setup+0x80/0x80 [ 26.748824][ T342] ? __kasan_check_read+0x15/0x20 [ 26.748838][ T342] __x64_sys_io_uring_setup+0x5f/0x80 [ 26.748859][ T342] x64_sys_call+0x22c0/0x2ee0 [ 26.748873][ T342] do_syscall_64+0x57/0xf0 [ 26.748890][ T342] ? clear_bhb_loop+0x50/0xa0 [ 26.748911][ T342] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.748931][ T342] RIP: 0033:0x7f46bd39e0d9 [ 26.748944][ T342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.748956][ T342] RSP: 002b:00007f46be228ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 26.748976][ T342] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f46bd39e0d9 [ 26.748987][ T342] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 0000000000000ea9 [ 26.748996][ T342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 26.749005][ T342] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 26.749014][ T342] R13: 0000000000000090 R14: 00007f46be228fd8 R15: 0000000000000000 [ 26.749026][ T342] [ 26.768060][ T344] netlink: 316 bytes leftover after parsing attributes in process `syz.0.10'. [ 26.996042][ T326] usb 4-1: device descriptor read/64, error -71 [ 27.002787][ T345] netlink: 316 bytes leftover after parsing attributes in process `syz.0.10'. [ 27.107016][ T326] usb usb4-port1: attempt power cycle [ 27.326858][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.356850][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 27.356867][ T316] Bluetooth: hci0: command 0x1003 tx timeout [ 27.387074][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 27.446887][ T326] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 27.468031][ T326] usb 4-1: device descriptor read/8, error -71 [ 27.477991][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.489195][ T45] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 27.498299][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.597881][ T326] usb 4-1: device descriptor read/8, error -71 [ 27.837107][ T326] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 27.857946][ T326] usb 4-1: device descriptor read/8, error -71 [ 27.910179][ T45] wacom 0003:056A:033B.0001: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 27.920437][ T45] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 27.932587][ T45] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0001/input/input4 [ 27.987958][ T326] usb 4-1: device descriptor read/8, error -71 [ 28.096990][ T326] usb usb4-port1: unable to enumerate USB device [ 28.376842][ T326] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.526864][ T326] usb 2-1: Using ep0 maxpacket: 8 [ 28.533449][ T326] usb 2-1: unable to get BOS descriptor or descriptor too short [ 28.542120][ T326] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 28.551304][ T326] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 28.562190][ T326] usb 2-1: config 4 has no interface number 0 [ 28.573684][ T326] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 28.583048][ T326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.591229][ T326] usb 2-1: Product: syz [ 28.595508][ T326] usb 2-1: Manufacturer: syz [ 28.601070][ T326] usb 2-1: SerialNumber: syz [ 28.612849][ T36] kauditd_printk_skb: 60 callbacks suppressed [ 28.612865][ T36] audit: type=1400 audit(1786068466.290:134): avc: denied { name_bind } for pid=367 comm="syz.3.17" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 28.640665][ T36] audit: type=1400 audit(1786068466.290:135): avc: denied { node_bind } for pid=367 comm="syz.3.17" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 28.672514][ T36] audit: type=1400 audit(1786068466.350:136): avc: denied { read write } for pid=373 comm="syz.3.18" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 28.696500][ T36] audit: type=1400 audit(1786068466.350:137): avc: denied { open } for pid=373 comm="syz.3.18" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 28.720219][ T374] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.732607][ T36] audit: type=1400 audit(1786068466.360:138): avc: denied { ioctl } for pid=373 comm="syz.3.18" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 28.757844][ T36] audit: type=1400 audit(1786068466.380:139): avc: denied { write } for pid=373 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.778050][ T36] audit: type=1400 audit(1786068466.380:140): avc: denied { read } for pid=373 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.798600][ T36] audit: type=1400 audit(1786068466.390:141): avc: denied { unlink } for pid=373 comm="syz.3.18" name="#1" dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 28.821294][ T36] audit: type=1400 audit(1786068466.390:142): avc: denied { mount } for pid=373 comm="syz.3.18" name="/" dev="overlay" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.836434][ T326] uvcvideo 2-1:4.147: Found multiple Units with ID 6 [ 28.850096][ T326] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 28.856935][ T326] usb 2-1: No streaming interface found for terminal 65535. [ 28.866803][ T36] audit: type=1400 audit(1786068466.390:143): avc: denied { ioctl } for pid=373 comm="syz.3.18" path="socket:[3585]" dev="sockfs" ino=3585 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.869105][ T326] usb 2-1: USB disconnect, device number 2 [ 29.146856][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 29.296872][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 29.303209][ T10] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 29.311466][ T10] usb 4-1: config 0 has no interface number 0 [ 29.317703][ T10] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 29.334746][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 29.347154][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.355465][ T10] usb 4-1: Product: syz [ 29.360938][ T10] usb 4-1: Manufacturer: syz [ 29.367436][ T10] usb 4-1: SerialNumber: syz [ 29.373176][ T10] usb 4-1: config 0 descriptor?? [ 29.378561][ T377] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 29.436895][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.437076][ T316] Bluetooth: hci0: command 0x1003 tx timeout [ 29.587305][ T377] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 30.040212][ T326] usb 3-1: USB disconnect, device number 3 [ 30.111783][ T390] incfs: mount failed -22 [ 30.306828][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 30.386846][ T337] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 30.457984][ T9] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 30.466243][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.476446][ T9] usb 2-1: config 0 has no interface number 0 [ 30.484401][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 30.493580][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.501825][ T9] usb 2-1: Product: syz [ 30.506005][ T9] usb 2-1: Manufacturer: syz [ 30.510655][ T9] usb 2-1: SerialNumber: syz [ 30.516328][ T9] usb 2-1: config 0 descriptor?? [ 30.522312][ T9] asix 2-1:0.251: probe with driver asix failed with error -22 [ 30.537981][ T337] usb 1-1: config 0 has an invalid interface number: 15 but max is 0 [ 30.546207][ T337] usb 1-1: config 0 has no interface number 0 [ 30.552363][ T337] usb 1-1: config 0 interface 15 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 30.563959][ T337] usb 1-1: config 0 interface 15 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.573871][ T337] usb 1-1: config 0 interface 15 has no altsetting 0 [ 30.580805][ T337] usb 1-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 30.589892][ T337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.598997][ T337] usb 1-1: config 0 descriptor?? [ 30.605671][ T337] usbhid 1-1:0.15: fixing wrong optional hid class descriptors count [ 30.717933][ T10] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 30.731322][ T9] usb 2-1: USB disconnect, device number 3 [ 30.738194][ T10] asix 4-1:0.188: probe with driver asix failed with error -71 [ 30.753432][ T10] usb 4-1: USB disconnect, device number 6 [ 30.763692][ T403] netlink: 60 bytes leftover after parsing attributes in process `syz.3.27'. [ 30.776230][ T403] Zero length message leads to an empty skb [ 30.798730][ T405] netlink: 72 bytes leftover after parsing attributes in process `syz.3.28'. [ 31.126840][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 31.286822][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 31.296258][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 15 [ 31.311818][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 31.321177][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 31.329399][ T10] usb 4-1: SerialNumber: syz [ 31.407708][ T398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.417490][ T398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.426221][ T337] usbhid 1-1:0.15: can't add hid device: -71 [ 31.437011][ T337] usbhid 1-1:0.15: probe with driver usbhid failed with error -71 [ 31.449043][ T337] usb 1-1: USB disconnect, device number 3 [ 31.538160][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 31.546659][ T10] usb-storage 4-1:1.0: USB Mass Storage device detected [ 31.554483][ T10] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 31.585831][ T10] usb 4-1: USB disconnect, device number 7 [ 31.606198][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 31.626214][ T427] netlink: 'syz.1.34': attribute type 4 has an invalid length. [ 31.906857][ T337] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.057800][ T337] usb 2-1: Using ep0 maxpacket: 16 [ 32.064220][ T337] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.074598][ T337] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.085098][ T337] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.094298][ T337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.102528][ T337] usb 2-1: Product: syz [ 32.106966][ T337] usb 2-1: Manufacturer: syz [ 32.111599][ T337] usb 2-1: SerialNumber: syz [ 32.296826][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 32.323406][ T337] usb 2-1: 0:2 : does not exist [ 32.330545][ T337] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 32.342527][ T337] usb 2-1: USB disconnect, device number 4 [ 32.351890][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.456835][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 32.463109][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 32.471265][ T10] usb 4-1: config 0 has no interface number 0 [ 32.479071][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 32.488175][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.496178][ T10] usb 4-1: Product: syz [ 32.500386][ T10] usb 4-1: Manufacturer: syz [ 32.505004][ T10] usb 4-1: SerialNumber: syz [ 32.510394][ T10] usb 4-1: config 0 descriptor?? [ 32.516217][ T10] smsc95xx v2.0.0 [ 32.922768][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 32.934393][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 32.944605][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 32.955499][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 32.964700][ T10] usb 4-1: USB disconnect, device number 8 [ 33.001748][ T454] capability: warning: `syz.0.48' uses deprecated v2 capabilities in a way that may be insecure [ 33.141607][ T462] mmap: syz.1.43 (462) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.157577][ T464] FAULT_INJECTION: forcing a failure. [ 33.157577][ T464] name failslab, interval 1, probability 0, space 0, times 0 [ 33.170274][ T464] CPU: 1 UID: 0 PID: 464 Comm: syz.3.44 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 33.170303][ T464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.170315][ T464] Call Trace: [ 33.170321][ T464] [ 33.170329][ T464] __dump_stack+0x21/0x30 [ 33.170360][ T464] dump_stack_lvl+0x140/0x1c0 [ 33.170387][ T464] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.170416][ T464] dump_stack+0x19/0x20 [ 33.170441][ T464] should_fail_ex+0x3c2/0x510 [ 33.170465][ T464] should_failslab+0xac/0x100 [ 33.170489][ T464] __kmalloc_node_noprof+0x69/0x500 [ 33.170510][ T464] ? __kvmalloc_node_noprof+0x128/0x300 [ 33.170541][ T464] __kvmalloc_node_noprof+0x128/0x300 [ 33.170571][ T464] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 33.170600][ T464] ? percpu_ref_init+0x230/0x4d0 [ 33.170622][ T464] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 33.170643][ T464] io_ring_ctx_alloc+0x5c0/0x1dc0 [ 33.170665][ T464] io_uring_create+0x2e0/0x13f0 [ 33.170697][ T464] ? __kasan_check_write+0x18/0x20 [ 33.170717][ T464] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 33.170743][ T464] ? __kasan_check_write+0x18/0x20 [ 33.170761][ T464] ? __x64_sys_io_uring_setup+0x80/0x80 [ 33.170789][ T464] ? __kasan_check_read+0x15/0x20 [ 33.170808][ T464] __x64_sys_io_uring_setup+0x5f/0x80 [ 33.170833][ T464] x64_sys_call+0x22c0/0x2ee0 [ 33.170850][ T464] do_syscall_64+0x57/0xf0 [ 33.170871][ T464] ? clear_bhb_loop+0x50/0xa0 [ 33.170897][ T464] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.170921][ T464] RIP: 0033:0x7f3dd8d9e0d9 [ 33.170936][ T464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.170978][ T464] RSP: 002b:00007f3dd9c02ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 33.170999][ T464] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f3dd8d9e0d9 [ 33.171012][ T464] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 0000000000000ea9 [ 33.171023][ T464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 33.171035][ T464] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 33.171047][ T464] R13: 0000000000000090 R14: 00007f3dd9c02fd8 R15: 0000000000000000 [ 33.171062][ T464] [ 33.213305][ T466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 33.396906][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.399711][ T466] bridge_slave_1: left allmulticast mode [ 33.424135][ T466] bridge_slave_1: left promiscuous mode [ 33.429833][ T466] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.437576][ T466] bridge_slave_0: left allmulticast mode [ 33.443229][ T466] bridge_slave_0: left promiscuous mode [ 33.448968][ T466] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.560595][ T45] usb 2-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 33.569749][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.577991][ T45] usb 2-1: Product: syz [ 33.582401][ T45] usb 2-1: Manufacturer: syz [ 33.588545][ T45] usb 2-1: SerialNumber: syz [ 33.619840][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 33.627321][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 33.634771][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 33.642228][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 33.649657][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 33.657076][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 33.664470][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 33.671872][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 33.676899][ T316] Bluetooth: hci0: command 0x1003 tx timeout [ 33.679285][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 33.692308][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.10 Device [syz0] on syz1 [ 33.729103][ T472] fido_id[472]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 33.855389][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 33.855408][ T36] audit: type=1400 audit(1786068471.530:184): avc: denied { create } for pid=475 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.881084][ T476] netlink: 'syz.0.50': attribute type 12 has an invalid length. [ 33.881686][ T36] audit: type=1400 audit(1786068471.540:185): avc: denied { block_suspend } for pid=475 comm="syz.0.50" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.946830][ T66] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 34.098034][ T66] usb 4-1: config 1 has an invalid interface number: 223 but max is 0 [ 34.106279][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.116427][ T66] usb 4-1: config 1 has no interface number 0 [ 34.122533][ T66] usb 4-1: config 1 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 34.137123][ T66] usb 4-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=99.5e [ 34.146184][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.154200][ T66] usb 4-1: Product: syz [ 34.158420][ T66] usb 4-1: Manufacturer: syz [ 34.163104][ T66] usb 4-1: SerialNumber: syz [ 34.296826][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 34.381894][ T337] usb 4-1: USB disconnect, device number 9 [ 34.448017][ T10] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 34.456230][ T10] usb 1-1: config 0 has no interface number 0 [ 34.462352][ T10] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 34.474939][ T10] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 34.484091][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.492120][ T10] usb 1-1: Product: syz [ 34.496306][ T10] usb 1-1: Manufacturer: syz [ 34.496900][ T66] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.500921][ T10] usb 1-1: SerialNumber: syz [ 34.513753][ T10] usb 1-1: config 0 descriptor?? [ 34.520245][ T483] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 34.529800][ T10] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, b6:99:f9:32:f8:37 [ 34.550513][ T36] audit: type=1400 audit(1786068472.230:186): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.574476][ T36] audit: type=1400 audit(1786068472.260:187): avc: denied { read } for pid=150 comm="dhcpcd" name="n15" dev="tmpfs" ino=746 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.596506][ T36] audit: type=1400 audit(1786068472.260:188): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=746 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.619344][ T36] audit: type=1400 audit(1786068472.260:189): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=746 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.644351][ T36] audit: type=1400 audit(1786068472.330:190): avc: denied { search } for pid=487 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.672785][ T36] audit: type=1400 audit(1786068472.350:191): avc: denied { read } for pid=489 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.695777][ T36] audit: type=1400 audit(1786068472.350:192): avc: denied { open } for pid=489 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.720910][ T36] audit: type=1400 audit(1786068472.350:193): avc: denied { getattr } for pid=489 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.754184][ T483] process 'syz.0.52' launched './file0' with NULL argv: empty string added [ 34.763168][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.774311][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.784324][ T66] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 34.793467][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.808191][ T66] usb 3-1: config 0 descriptor?? [ 34.912437][ T503] FAULT_INJECTION: forcing a failure. [ 34.912437][ T503] name failslab, interval 1, probability 0, space 0, times 0 [ 34.925186][ T503] CPU: 0 UID: 0 PID: 503 Comm: syz.3.54 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 34.925218][ T503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.925232][ T503] Call Trace: [ 34.925239][ T503] [ 34.925248][ T503] __dump_stack+0x21/0x30 [ 34.925283][ T503] dump_stack_lvl+0x140/0x1c0 [ 34.925315][ T503] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.925348][ T503] dump_stack+0x19/0x20 [ 34.925378][ T503] should_fail_ex+0x3c2/0x510 [ 34.925404][ T503] should_failslab+0xac/0x100 [ 34.925433][ T503] __kmalloc_node_noprof+0x69/0x500 [ 34.925458][ T503] ? __kvmalloc_node_noprof+0x128/0x300 [ 34.925493][ T503] __kvmalloc_node_noprof+0x128/0x300 [ 34.925527][ T503] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 34.925561][ T503] ? percpu_ref_init+0x230/0x4d0 [ 34.925588][ T503] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 34.925612][ T503] io_ring_ctx_alloc+0x6af/0x1dc0 [ 34.925636][ T503] io_uring_create+0x2e0/0x13f0 [ 34.925659][ T503] ? __kasan_check_write+0x18/0x20 [ 34.925681][ T503] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 34.925713][ T503] ? __kasan_check_write+0x18/0x20 [ 34.925735][ T503] ? __x64_sys_io_uring_setup+0x80/0x80 [ 34.925768][ T503] ? __kasan_check_read+0x15/0x20 [ 34.925790][ T503] __x64_sys_io_uring_setup+0x5f/0x80 [ 34.925822][ T503] x64_sys_call+0x22c0/0x2ee0 [ 34.925842][ T503] do_syscall_64+0x57/0xf0 [ 34.925876][ T503] ? clear_bhb_loop+0x50/0xa0 [ 34.925907][ T503] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.925936][ T503] RIP: 0033:0x7f3dd8d9e0d9 [ 34.925954][ T503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.925973][ T503] RSP: 002b:00007f3dd9c02ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 34.925998][ T503] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f3dd8d9e0d9 [ 34.926014][ T503] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 0000000000000ea9 [ 34.926029][ T503] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 34.926042][ T503] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 34.926056][ T503] R13: 0000000000000090 R14: 00007f3dd9c02fd8 R15: 0000000000000000 [ 34.926073][ T503] [ 35.153086][ T10] usb 1-1: USB disconnect, device number 4 [ 35.159120][ T66] usbhid 3-1:0.0: can't add hid device: -71 [ 35.159967][ T10] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 35.168982][ T66] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 35.188877][ T66] usb 3-1: USB disconnect, device number 4 [ 35.486841][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 35.636828][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 35.643126][ T31] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 35.654098][ T31] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 35.667205][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 35.679840][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 35.691647][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.708069][ T31] usb 4-1: config 0 descriptor?? [ 35.793748][ T548] tipc: Enabling of bearer rejected, failed to enable media [ 35.872256][ T558] FAULT_INJECTION: forcing a failure. [ 35.872256][ T558] name failslab, interval 1, probability 0, space 0, times 0 [ 35.884962][ T558] CPU: 0 UID: 0 PID: 558 Comm: syz.0.63 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 35.884993][ T558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.885006][ T558] Call Trace: [ 35.885013][ T558] [ 35.885024][ T558] __dump_stack+0x21/0x30 [ 35.885055][ T558] dump_stack_lvl+0x140/0x1c0 [ 35.885095][ T558] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.885127][ T558] dump_stack+0x19/0x20 [ 35.885155][ T558] should_fail_ex+0x3c2/0x510 [ 35.885180][ T558] should_failslab+0xac/0x100 [ 35.885205][ T558] __kmalloc_node_noprof+0x69/0x500 [ 35.885235][ T558] ? __kvmalloc_node_noprof+0x128/0x300 [ 35.885271][ T558] __kvmalloc_node_noprof+0x128/0x300 [ 35.885303][ T558] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 35.885334][ T558] ? percpu_ref_init+0x230/0x4d0 [ 35.885351][ T558] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 35.885368][ T558] io_ring_ctx_alloc+0x6af/0x1dc0 [ 35.885403][ T558] io_uring_create+0x2e0/0x13f0 [ 35.885425][ T558] ? __kasan_check_write+0x18/0x20 [ 35.885446][ T558] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 35.885478][ T558] ? __kasan_check_write+0x18/0x20 [ 35.885492][ T558] ? __x64_sys_io_uring_setup+0x80/0x80 [ 35.885515][ T558] ? __kasan_check_read+0x15/0x20 [ 35.885549][ T558] __x64_sys_io_uring_setup+0x5f/0x80 [ 35.885578][ T558] x64_sys_call+0x22c0/0x2ee0 [ 35.885597][ T558] do_syscall_64+0x57/0xf0 [ 35.885624][ T558] ? clear_bhb_loop+0x50/0xa0 [ 35.885645][ T558] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.885665][ T558] RIP: 0033:0x7f46bd39e0d9 [ 35.885694][ T558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.885712][ T558] RSP: 002b:00007f46be228ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 35.885746][ T558] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f46bd39e0d9 [ 35.885760][ T558] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 0000000000000ea9 [ 35.885776][ T558] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 35.885784][ T558] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 35.885792][ T558] R13: 0000000000000090 R14: 00007f46be228fd8 R15: 0000000000000000 [ 35.885804][ T558] [ 36.115858][ T45] usb 2-1: MIDIStreaming interface descriptor not found [ 36.135575][ T560] program syz.0.64 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.137055][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.155362][ T45] usb 2-1: USB disconnect, device number 5 [ 36.182858][ T564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 36.184895][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.192294][ T564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 36.206410][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.225744][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.233812][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.242296][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.250327][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.259715][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.266933][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.274196][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.283051][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.290268][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.297505][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.304645][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.311822][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.318986][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.326133][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.334387][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.341836][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.349004][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.356145][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.363506][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.370830][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.377999][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.385178][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.392362][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.399540][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.406679][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.413842][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.421130][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.428338][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.435501][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.442697][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.449849][ T31] logitech 0003:046D:C50C.0003: unknown main item tag 0x0 [ 36.457766][ T31] logitech 0003:046D:C50C.0003: hidraw0: USB HID v0.01 Device [HID 046d:c50c] on usb-dummy_hcd.3-1/input0 [ 36.470715][ T31] usb 4-1: USB disconnect, device number 10 [ 36.485281][ T572] fido_id[572]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 36.627037][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.636691][ T578] netlink: 1 bytes leftover after parsing attributes in process `syz.2.71'. [ 36.777963][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.788128][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 36.797795][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.811819][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 36.820946][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.829055][ T10] usb 1-1: Product: syz [ 36.833204][ T10] usb 1-1: Manufacturer: syz [ 36.837818][ T10] usb 1-1: SerialNumber: syz [ 36.842987][ T10] usb 1-1: config 0 descriptor?? [ 36.886844][ T337] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.016814][ T337] usb 3-1: device descriptor read/64, error -71 [ 37.055619][ T10] usb 1-1: USB disconnect, device number 5 [ 37.064465][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.116851][ T326] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 37.146803][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 37.256836][ T337] usb 3-1: device descriptor read/64, error -71 [ 37.269415][ T326] usb 4-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 37.278544][ T326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.286536][ T326] usb 4-1: Product: syz [ 37.290759][ T326] usb 4-1: Manufacturer: syz [ 37.295384][ T326] usb 4-1: SerialNumber: syz [ 37.306803][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 37.313035][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 37.324576][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 37.335463][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 37.346657][ T45] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 37.355726][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.364545][ T45] usb 2-1: Product: syz [ 37.368977][ T45] usb 2-1: Manufacturer: syz [ 37.373596][ T45] usb 2-1: SerialNumber: syz [ 37.379138][ T45] usb 2-1: config 0 descriptor?? [ 37.385901][ T45] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 37.496819][ T337] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 37.506674][ T326] usb 4-1: MIDIStreaming interface descriptor not found [ 37.516840][ T326] usb 4-1: USB disconnect, device number 11 [ 37.525863][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.585867][ T9] usb 2-1: USB disconnect, device number 6 [ 37.626858][ T337] usb 3-1: device descriptor read/64, error -71 [ 37.806835][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 37.866833][ T337] usb 3-1: device descriptor read/64, error -71 [ 37.956820][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 37.963122][ T10] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 37.971241][ T10] usb 1-1: config 0 has no interface number 0 [ 37.977487][ T10] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 37.987562][ T337] usb usb3-port1: attempt power cycle [ 37.993251][ T10] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 38.005560][ T10] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 38.014802][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.022852][ T10] usb 1-1: Product: syz [ 38.032514][ T10] usb 1-1: Manufacturer: syz [ 38.038907][ T10] usb 1-1: SerialNumber: syz [ 38.046942][ T10] usb 1-1: config 0 descriptor?? [ 38.052385][ T594] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 38.060386][ T594] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 38.270831][ T594] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 38.278373][ T594] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 38.286474][ T10] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 38.307454][ T10] asix 1-1:0.34: probe with driver asix failed with error -32 [ 38.326992][ T337] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 38.347859][ T337] usb 3-1: device descriptor read/8, error -71 [ 38.387471][ T635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 38.396198][ T635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 38.478056][ T337] usb 3-1: device descriptor read/8, error -71 [ 38.576827][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 38.716826][ T337] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 38.726822][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 38.734644][ T45] usb 2-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 38.743789][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.748511][ T337] usb 3-1: device descriptor read/8, error -71 [ 38.751923][ T45] usb 2-1: Product: syz [ 38.762163][ T45] usb 2-1: Manufacturer: syz [ 38.766795][ T45] usb 2-1: SerialNumber: syz [ 38.887915][ T337] usb 3-1: device descriptor read/8, error -71 [ 38.977254][ T45] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 39.002637][ T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 39.007154][ T337] usb usb3-port1: unable to enumerate USB device [ 39.017403][ T45] usb 2-1: USB disconnect, device number 7 [ 39.067386][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.310257][ T645] tc_dump_action: action bad kind [ 39.315787][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 39.315801][ T36] audit: type=1400 audit(1786068476.990:225): avc: denied { getopt } for pid=644 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.506925][ T655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.515726][ T655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.524130][ T36] audit: type=1400 audit(1786068477.210:226): avc: denied { read append } for pid=653 comm="syz.1.91" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.547109][ T36] audit: type=1400 audit(1786068477.210:227): avc: denied { open } for pid=653 comm="syz.1.91" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.549838][ T655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.572394][ T36] audit: type=1400 audit(1786068477.210:228): avc: denied { map } for pid=653 comm="syz.1.91" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.579684][ T656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.607239][ T655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.614357][ T337] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 39.625228][ T656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.747026][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 39.766812][ T337] usb 4-1: Using ep0 maxpacket: 8 [ 39.772879][ T337] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.783098][ T337] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 39.792154][ T337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.800937][ T337] usb 4-1: config 0 descriptor?? [ 39.806872][ T337] usb 4-1: bad CDC descriptors [ 39.876823][ T10] usb 2-1: device descriptor read/64, error -71 [ 40.047727][ T337] usb 4-1: USB disconnect, device number 12 [ 40.116820][ T10] usb 2-1: device descriptor read/64, error -71 [ 40.198158][ T662] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 40.356821][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 40.486819][ T10] usb 2-1: device descriptor read/64, error -71 [ 40.496833][ T337] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 40.562924][ T36] audit: type=1400 audit(1786068478.240:229): avc: denied { setopt } for pid=665 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.579427][ T666] netlink: 'syz.3.96': attribute type 1 has an invalid length. [ 40.590986][ T666] netlink: 'syz.3.96': attribute type 2 has an invalid length. [ 40.596369][ T66] usb 1-1: USB disconnect, device number 6 [ 40.598734][ T666] netlink: 48 bytes leftover after parsing attributes in process `syz.3.96'. [ 40.622610][ T36] audit: type=1400 audit(1786068478.300:230): avc: denied { remount } for pid=667 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.646796][ T337] usb 3-1: Using ep0 maxpacket: 32 [ 40.659422][ T36] audit: type=1400 audit(1786068478.320:231): avc: denied { create } for pid=667 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 40.680292][ T337] usb 3-1: config 0 has no interfaces? [ 40.687197][ T337] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 40.693701][ T36] audit: type=1400 audit(1786068478.320:232): avc: denied { sys_admin } for pid=667 comm="syz.0.97" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 40.696460][ T337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.732482][ T337] usb 3-1: Product: syz [ 40.736826][ T10] usb 2-1: device descriptor read/64, error -71 [ 40.744692][ T337] usb 3-1: Manufacturer: syz [ 40.774233][ T337] usb 3-1: SerialNumber: syz [ 40.782531][ T337] usb 3-1: config 0 descriptor?? [ 40.846911][ T10] usb usb2-port1: attempt power cycle [ 41.056916][ T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 41.126900][ T66] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 41.186815][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 41.207955][ T10] usb 2-1: device descriptor read/8, error -71 [ 41.208415][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 41.222547][ T45] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 41.235279][ T45] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 41.244376][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.252416][ T45] usb 4-1: Product: syz [ 41.256596][ T45] usb 4-1: Manufacturer: syz [ 41.261317][ T45] usb 4-1: SerialNumber: syz [ 41.287976][ T66] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 41.298876][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.309789][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.319648][ T66] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 41.333400][ T66] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 41.342473][ T66] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 41.348519][ T10] usb 2-1: device descriptor read/8, error -71 [ 41.350600][ T66] usb 1-1: Manufacturer: syz [ 41.362275][ T66] usb 1-1: config 0 descriptor?? [ 41.468394][ T36] audit: type=1400 audit(1786068479.150:233): avc: denied { write } for pid=678 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 41.487876][ T45] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 41.496644][ T45] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 41.510011][ T45] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 41.518323][ T45] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 41.535783][ T45] usb 4-1: USB disconnect, device number 13 [ 41.549179][ T337] usb 3-1: USB disconnect, device number 9 [ 41.563180][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.596812][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 41.617903][ T10] usb 2-1: device descriptor read/8, error -71 [ 41.669827][ T36] audit: type=1400 audit(1786068479.350:234): avc: denied { write } for pid=688 comm="syz.2.103" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 41.747871][ T10] usb 2-1: device descriptor read/8, error -71 [ 41.780596][ T66] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 41.791649][ T698] netlink: 'syz.2.105': attribute type 12 has an invalid length. [ 41.791926][ T66] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 41.808748][ T66] appleir 0003:05AC:8243.0004: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 41.866831][ T45] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 41.867094][ T10] usb usb2-port1: unable to enumerate USB device [ 41.980547][ T10] usb 1-1: USB disconnect, device number 7 [ 41.996867][ T45] usb 4-1: device descriptor read/64, error -71 [ 42.036875][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 42.196806][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 42.203138][ T9] usb 3-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 42.214833][ T9] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 42.224050][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.232069][ T9] usb 3-1: Product: syz [ 42.236292][ T9] usb 3-1: Manufacturer: syz [ 42.240924][ T9] usb 3-1: SerialNumber: syz [ 42.246717][ T9] usb 3-1: config 0 descriptor?? [ 42.248542][ T45] usb 4-1: device descriptor read/64, error -71 [ 42.253296][ T9] usb 3-1: bad CDC descriptors [ 42.263394][ T9] usb 3-1: unsupported MDLM descriptors [ 42.453835][ T66] usb 3-1: USB disconnect, device number 10 [ 42.496849][ T45] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 42.626822][ T45] usb 4-1: device descriptor read/64, error -71 [ 42.703922][ T721] FAULT_INJECTION: forcing a failure. [ 42.703922][ T721] name failslab, interval 1, probability 0, space 0, times 0 [ 42.716681][ T721] CPU: 0 UID: 0 PID: 721 Comm: syz.1.111 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 42.716711][ T721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.716721][ T721] Call Trace: [ 42.716726][ T721] [ 42.716732][ T721] __dump_stack+0x21/0x30 [ 42.716776][ T721] dump_stack_lvl+0x140/0x1c0 [ 42.716806][ T721] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.716836][ T721] ? __kvmalloc_node_noprof+0x173/0x300 [ 42.716869][ T721] dump_stack+0x19/0x20 [ 42.716897][ T721] should_fail_ex+0x3c2/0x510 [ 42.716922][ T721] should_failslab+0xac/0x100 [ 42.716948][ T721] __kmalloc_cache_noprof+0x41/0x470 [ 42.716972][ T721] ? io_rsrc_node_alloc+0x13c/0x2c0 [ 42.716994][ T721] ? __cfi_io_sq_offload_create+0x10/0x10 [ 42.717019][ T721] io_rsrc_node_alloc+0x13c/0x2c0 [ 42.717041][ T721] ? io_uring_create+0x7ad/0x13f0 [ 42.717066][ T721] io_uring_create+0x7be/0x13f0 [ 42.717081][ T721] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 42.717102][ T721] ? __kasan_check_write+0x18/0x20 [ 42.717117][ T721] ? __x64_sys_io_uring_setup+0x80/0x80 [ 42.717139][ T721] ? __kasan_check_read+0x15/0x20 [ 42.717154][ T721] __x64_sys_io_uring_setup+0x5f/0x80 [ 42.717180][ T721] x64_sys_call+0x22c0/0x2ee0 [ 42.717205][ T721] do_syscall_64+0x57/0xf0 [ 42.717220][ T721] ? clear_bhb_loop+0x50/0xa0 [ 42.717241][ T721] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.717259][ T721] RIP: 0033:0x7fe06e79e0d9 [ 42.717271][ T721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.717283][ T721] RSP: 002b:00007fe06f628ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 42.717298][ T721] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fe06e79e0d9 [ 42.717326][ T721] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 0000000000000ea9 [ 42.717336][ T721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 42.717344][ T721] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 42.717354][ T721] R13: 0000000000000090 R14: 00007fe06f628fd8 R15: 0000000000000000 [ 42.717366][ T721] [ 42.846888][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 42.937028][ T724] netlink: 252 bytes leftover after parsing attributes in process `syz.1.112'. [ 42.938575][ T45] usb 4-1: device descriptor read/64, error -71 [ 42.947325][ T724] IPv6: NLM_F_CREATE should be specified when creating new route [ 43.076895][ T45] usb usb4-port1: attempt power cycle [ 43.147098][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 43.153373][ T31] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 43.162967][ T31] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 43.171495][ T31] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 43.192181][ T31] usb 1-1: config 250 has no interface number 0 [ 43.198671][ T31] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 43.210946][ T31] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 43.221593][ T31] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 43.233397][ T31] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 43.244059][ T31] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 43.270106][ T31] usb 1-1: config 250 interface 228 has no altsetting 0 [ 43.278674][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 43.288329][ T31] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 43.296895][ T31] usb 1-1: Product: syz [ 43.302142][ T31] usb 1-1: SerialNumber: syz [ 43.318671][ T31] hub 1-1:250.228: bad descriptor, ignoring hub [ 43.325053][ T31] hub 1-1:250.228: probe with driver hub failed with error -5 [ 43.426825][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 43.448053][ T45] usb 4-1: device descriptor read/8, error -71 [ 43.519998][ T31] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 43.567329][ T31] usb 1-1: USB disconnect, device number 8 [ 43.575879][ T31] usblp0: removed [ 43.587880][ T45] usb 4-1: device descriptor read/8, error -71 [ 43.605396][ T757] FAULT_INJECTION: forcing a failure. [ 43.605396][ T757] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.618587][ T757] CPU: 0 UID: 0 PID: 757 Comm: syz.1.121 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 43.618616][ T757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.618629][ T757] Call Trace: [ 43.618635][ T757] [ 43.618648][ T757] __dump_stack+0x21/0x30 [ 43.618673][ T757] dump_stack_lvl+0x140/0x1c0 [ 43.618692][ T757] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.618712][ T757] ? __kvmalloc_node_noprof+0x173/0x300 [ 43.618735][ T757] ? kasan_save_alloc_info+0x3a/0x50 [ 43.618758][ T757] dump_stack+0x19/0x20 [ 43.618777][ T757] should_fail_ex+0x3c2/0x510 [ 43.618793][ T757] should_fail+0xf/0x20 [ 43.618808][ T757] should_fail_usercopy+0x1e/0x30 [ 43.618825][ T757] _copy_to_user+0x24/0xa0 [ 43.618844][ T757] io_uring_create+0xb9e/0x13f0 [ 43.618859][ T757] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 43.618880][ T757] ? __kasan_check_write+0x18/0x20 [ 43.618894][ T757] ? __x64_sys_io_uring_setup+0x80/0x80 [ 43.618915][ T757] ? __kasan_check_read+0x15/0x20 [ 43.618929][ T757] __x64_sys_io_uring_setup+0x5f/0x80 [ 43.618948][ T757] x64_sys_call+0x22c0/0x2ee0 [ 43.618961][ T757] do_syscall_64+0x57/0xf0 [ 43.618977][ T757] ? clear_bhb_loop+0x50/0xa0 [ 43.618997][ T757] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.619016][ T757] RIP: 0033:0x7fe06e79e0d9 [ 43.619028][ T757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.619040][ T757] RSP: 002b:00007fe06f628ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 43.619064][ T757] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fe06e79e0d9 [ 43.619074][ T757] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 0000000000000ea9 [ 43.619094][ T757] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 43.619102][ T757] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 43.619110][ T757] R13: 0000000000000090 R14: 00007fe06f628fd8 R15: 0000000000000000 [ 43.619120][ T757] [ 43.876841][ T45] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 43.899001][ T45] usb 4-1: device descriptor read/8, error -71 [ 44.027935][ T45] usb 4-1: device descriptor read/8, error -71 [ 44.067090][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 44.137091][ T45] usb usb4-port1: unable to enumerate USB device [ 44.196904][ T318] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 44.216846][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 44.223170][ T31] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 44.231403][ T31] usb 2-1: config 0 has no interface number 0 [ 44.239097][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 44.248470][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.256634][ T31] usb 2-1: Product: syz [ 44.261242][ T31] usb 2-1: Manufacturer: syz [ 44.267032][ T31] usb 2-1: SerialNumber: syz [ 44.272358][ T31] usb 2-1: config 0 descriptor?? [ 44.278489][ T31] smsc95xx v2.0.0 [ 44.326459][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 44.326474][ T36] audit: type=1400 audit(1786068482.000:251): avc: denied { cmd } for pid=774 comm="syz.2.126" path="socket:[6429]" dev="sockfs" ino=6429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.346870][ T318] usb 1-1: Using ep0 maxpacket: 32 [ 44.361419][ T318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.372530][ T318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.382481][ T318] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 44.391699][ T318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.400664][ T318] usb 1-1: config 0 descriptor?? [ 44.413002][ T318] hub 1-1:0.0: USB hub found [ 44.595205][ T778] rust_binder: Write failure EINVAL in pid:112 [ 44.618544][ T779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.633359][ T779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.636223][ T318] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 44.656624][ T318] usbhid 1-1:0.0: can't add hid device: -71 [ 44.662715][ T318] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 44.693028][ T36] audit: type=1400 audit(1786068482.370:252): avc: denied { ioctl } for pid=781 comm="syz.0.128" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x55c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.877024][ T318] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 44.926812][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 45.006813][ T318] usb 1-1: device descriptor read/64, error -71 [ 45.078012][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.088218][ T9] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 45.088557][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 45.099821][ T9] usb 4-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 45.116317][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.124594][ T9] usb 4-1: Product: syz [ 45.128937][ T9] usb 4-1: Manufacturer: syz [ 45.133546][ T9] usb 4-1: SerialNumber: syz [ 45.246820][ T318] usb 1-1: device descriptor read/64, error -71 [ 45.342794][ T778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.351406][ T778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.360166][ T9] usb 4-1: USB disconnect, device number 18 [ 45.396817][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 45.486814][ T318] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 45.499020][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 45.509806][ T31] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 45.519165][ T31] usb 2-1: USB disconnect, device number 12 [ 45.547923][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.558142][ T45] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 45.567372][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.575877][ T45] usb 3-1: config 0 descriptor?? [ 45.582029][ T45] usb 3-1: bad CDC descriptors [ 45.626848][ T318] usb 1-1: device descriptor read/64, error -71 [ 45.783430][ T36] audit: type=1400 audit(1786068483.460:253): avc: denied { setopt } for pid=789 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.803236][ T36] audit: type=1400 audit(1786068483.470:254): avc: denied { write } for pid=789 comm="syz.2.130" path="socket:[6461]" dev="sockfs" ino=6461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.878972][ T318] usb 1-1: device descriptor read/64, error -71 [ 45.890515][ T793] FAULT_INJECTION: forcing a failure. [ 45.890515][ T793] name failslab, interval 1, probability 0, space 0, times 0 [ 45.903459][ T793] CPU: 1 UID: 0 PID: 793 Comm: syz.3.131 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 45.903499][ T793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.903514][ T793] Call Trace: [ 45.903522][ T793] [ 45.903530][ T793] __dump_stack+0x21/0x30 [ 45.903568][ T793] dump_stack_lvl+0x140/0x1c0 [ 45.903600][ T793] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.903633][ T793] ? kasan_save_track+0x4f/0x80 [ 45.903659][ T793] ? kasan_save_track+0x3e/0x80 [ 45.903684][ T793] ? kasan_save_alloc_info+0x3a/0x50 [ 45.903718][ T793] ? __kmalloc_cache_noprof+0x23c/0x470 [ 45.903743][ T793] ? io_rsrc_node_alloc+0x13c/0x2c0 [ 45.903769][ T793] dump_stack+0x19/0x20 [ 45.903799][ T793] should_fail_ex+0x3c2/0x510 [ 45.903826][ T793] should_failslab+0xac/0x100 [ 45.903855][ T793] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 45.903879][ T793] ? alloc_inode+0xa9/0x270 [ 45.903909][ T793] alloc_inode+0xa9/0x270 [ 45.903937][ T793] new_inode_pseudo+0x19/0x40 [ 45.903967][ T793] alloc_anon_inode+0x21/0x340 [ 45.904000][ T793] anon_inode_make_secure_inode+0x76/0x150 [ 45.904034][ T793] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 45.904067][ T793] ? kasan_save_alloc_info+0x3a/0x50 [ 45.904102][ T793] ? __kasan_kmalloc+0x96/0xb0 [ 45.904131][ T793] __anon_inode_getfile+0xd1/0x200 [ 45.904162][ T793] anon_inode_create_getfile+0x3f/0x50 [ 45.904196][ T793] io_uring_create+0xc61/0x13f0 [ 45.904220][ T793] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 45.904253][ T793] ? __x64_sys_io_uring_setup+0x80/0x80 [ 45.904298][ T793] ? __kasan_check_write+0x18/0x20 [ 45.904319][ T793] ? fpregs_restore_userregs+0x11c/0x260 [ 45.904352][ T793] __x64_sys_io_uring_setup+0x5f/0x80 [ 45.904383][ T793] x64_sys_call+0x22c0/0x2ee0 [ 45.904403][ T793] do_syscall_64+0x57/0xf0 [ 45.904429][ T793] ? clear_bhb_loop+0x50/0xa0 [ 45.904459][ T793] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.904495][ T793] RIP: 0033:0x7f3dd8d9e0d9 [ 45.904514][ T793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.904534][ T793] RSP: 002b:00007f3dd9c02ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 45.904559][ T793] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f3dd8d9e0d9 [ 45.904576][ T793] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 0000000000000ea9 [ 45.904591][ T793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 45.904605][ T793] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 45.904619][ T793] R13: 0000000000000090 R14: 00007f3dd9c02fd8 R15: 0000000000000000 [ 45.904637][ T793] [ 46.198446][ T36] audit: type=1400 audit(1786068483.880:255): avc: denied { write } for pid=798 comm="syz.1.134" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 46.280319][ T36] audit: type=1400 audit(1786068483.960:256): avc: denied { rename } for pid=802 comm="syz.1.136" name="file0" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.280890][ T803] netlink: 188 bytes leftover after parsing attributes in process `syz.1.136'. [ 46.356813][ T318] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 46.358058][ T36] audit: type=1400 audit(1786068484.040:257): avc: denied { create } for pid=804 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.378475][ T318] usb 1-1: device descriptor read/8, error -71 [ 46.394418][ T805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.137'. [ 46.403715][ T805] tipc: Started in network mode [ 46.406889][ T36] audit: type=1400 audit(1786068484.080:258): avc: denied { write } for pid=804 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.408837][ T805] tipc: Node identity ac14140f, cluster identity 4711 [ 46.428420][ T36] audit: type=1400 audit(1786068484.080:259): avc: denied { nlmsg_write } for pid=804 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.455865][ T805] tipc: New replicast peer: 255.255.255.255 [ 46.462245][ T805] tipc: Enabled bearer , priority 10 [ 46.527961][ T318] usb 1-1: device descriptor read/8, error -71 [ 46.586819][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 46.737135][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 46.743449][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.754389][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.764203][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 46.777033][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 46.786076][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.786879][ T318] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 46.796652][ T9] usb 4-1: config 0 descriptor?? [ 46.828018][ T318] usb 1-1: device descriptor read/8, error -71 [ 46.957987][ T318] usb 1-1: device descriptor read/8, error -71 [ 47.067021][ T318] usb 1-1: USB disconnect, device number 9 [ 47.102964][ T36] audit: type=1326 audit(1786068484.780:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=813 comm="syz.1.140" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe06e79e0d9 code=0x0 [ 47.210069][ T9] microsoft 0003:045E:07DA.0005: nested delimiters [ 47.216808][ T9] microsoft 0003:045E:07DA.0005: item 0 1 2 10 parsing failed [ 47.224498][ T9] microsoft 0003:045E:07DA.0005: parse failed [ 47.230661][ T9] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 47.376864][ T318] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 47.410936][ T10] usb 4-1: USB disconnect, device number 19 [ 47.506836][ T318] usb 1-1: device descriptor read/64, error -71 [ 47.576862][ T9] tipc: Node number set to 2886997007 [ 47.689893][ T816] FAULT_INJECTION: forcing a failure. [ 47.689893][ T816] name failslab, interval 1, probability 0, space 0, times 0 [ 47.702678][ T816] CPU: 0 UID: 0 PID: 816 Comm: syz.0.141 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 47.702710][ T816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.702729][ T816] Call Trace: [ 47.702734][ T816] [ 47.702740][ T816] __dump_stack+0x21/0x30 [ 47.702765][ T816] dump_stack_lvl+0x140/0x1c0 [ 47.702787][ T816] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.702810][ T816] dump_stack+0x19/0x20 [ 47.702830][ T816] should_fail_ex+0x3c2/0x510 [ 47.702848][ T816] should_failslab+0xac/0x100 [ 47.702887][ T816] kmem_cache_alloc_noprof+0x42/0x410 [ 47.702910][ T816] ? security_inode_alloc+0x51/0x230 [ 47.702942][ T816] ? __cfi_make_kgid+0x10/0x10 [ 47.702961][ T816] security_inode_alloc+0x51/0x230 [ 47.702979][ T816] inode_init_always_gfp+0x756/0x9e0 [ 47.702999][ T816] alloc_inode+0xc5/0x270 [ 47.703018][ T816] new_inode_pseudo+0x19/0x40 [ 47.703037][ T816] alloc_anon_inode+0x21/0x340 [ 47.703059][ T816] anon_inode_make_secure_inode+0x76/0x150 [ 47.703081][ T816] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 47.703103][ T816] ? kasan_save_alloc_info+0x3a/0x50 [ 47.703138][ T816] ? __kasan_kmalloc+0x96/0xb0 [ 47.703180][ T816] __anon_inode_getfile+0xd1/0x200 [ 47.703201][ T816] anon_inode_create_getfile+0x3f/0x50 [ 47.703223][ T816] io_uring_create+0xc61/0x13f0 [ 47.703240][ T816] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 47.703261][ T816] ? __kasan_check_write+0x18/0x20 [ 47.703276][ T816] ? __x64_sys_io_uring_setup+0x80/0x80 [ 47.703309][ T816] ? __kasan_check_read+0x15/0x20 [ 47.703323][ T816] __x64_sys_io_uring_setup+0x5f/0x80 [ 47.703342][ T816] x64_sys_call+0x22c0/0x2ee0 [ 47.703355][ T816] do_syscall_64+0x57/0xf0 [ 47.703371][ T816] ? clear_bhb_loop+0x50/0xa0 [ 47.703405][ T816] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.703431][ T816] RIP: 0033:0x7f46bd39e0d9 [ 47.703447][ T816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.703466][ T816] RSP: 002b:00007f46be228ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 47.703482][ T816] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f46bd39e0d9 [ 47.703492][ T816] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 0000000000000ea9 [ 47.703501][ T816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 47.703510][ T816] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 47.703518][ T816] R13: 0000000000000090 R14: 00007f46be228fd8 R15: 0000000000000000 [ 47.703530][ T816] [ 48.180149][ T10] usb 3-1: USB disconnect, device number 11 [ 48.202138][ T821] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 48.442479][ T842] FAULT_INJECTION: forcing a failure. [ 48.442479][ T842] name failslab, interval 1, probability 0, space 0, times 0 [ 48.455212][ T842] CPU: 1 UID: 0 PID: 842 Comm: syz.2.150 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 48.455231][ T842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.455240][ T842] Call Trace: [ 48.455245][ T842] [ 48.455250][ T842] __dump_stack+0x21/0x30 [ 48.455273][ T842] dump_stack_lvl+0x140/0x1c0 [ 48.455292][ T842] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.455311][ T842] dump_stack+0x19/0x20 [ 48.455329][ T842] should_fail_ex+0x3c2/0x510 [ 48.455345][ T842] should_failslab+0xac/0x100 [ 48.455362][ T842] kmem_cache_alloc_noprof+0x42/0x410 [ 48.455375][ T842] ? security_inode_alloc+0x51/0x230 [ 48.455393][ T842] ? __cfi_make_kgid+0x10/0x10 [ 48.455409][ T842] security_inode_alloc+0x51/0x230 [ 48.455426][ T842] inode_init_always_gfp+0x756/0x9e0 [ 48.455443][ T842] alloc_inode+0xc5/0x270 [ 48.455461][ T842] new_inode_pseudo+0x19/0x40 [ 48.455477][ T842] alloc_anon_inode+0x21/0x340 [ 48.455497][ T842] anon_inode_make_secure_inode+0x76/0x150 [ 48.455516][ T842] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 48.455536][ T842] ? kasan_save_alloc_info+0x3a/0x50 [ 48.455556][ T842] ? __kasan_kmalloc+0x96/0xb0 [ 48.455572][ T842] __anon_inode_getfile+0xd1/0x200 [ 48.455591][ T842] anon_inode_create_getfile+0x3f/0x50 [ 48.455610][ T842] io_uring_create+0xc61/0x13f0 [ 48.455624][ T842] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 48.455645][ T842] ? __kasan_check_write+0x18/0x20 [ 48.455658][ T842] ? __x64_sys_io_uring_setup+0x80/0x80 [ 48.455678][ T842] ? __kasan_check_read+0x15/0x20 [ 48.455691][ T842] __x64_sys_io_uring_setup+0x5f/0x80 [ 48.455710][ T842] x64_sys_call+0x22c0/0x2ee0 [ 48.455722][ T842] do_syscall_64+0x57/0xf0 [ 48.455737][ T842] ? clear_bhb_loop+0x50/0xa0 [ 48.455755][ T842] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.455773][ T842] RIP: 0033:0x7fc8b9f9e0d9 [ 48.455784][ T842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.455795][ T842] RSP: 002b:00007fc8b89f6ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 48.455810][ T842] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fc8b9f9e0d9 [ 48.455819][ T842] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 0000000000000ea9 [ 48.455828][ T842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 48.455836][ T842] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 48.455845][ T842] R13: 0000000000000090 R14: 00007fc8b89f6fd8 R15: 0000000000000000 [ 48.455856][ T842] [ 48.710541][ T318] usb 1-1: device descriptor read/64, error -71 [ 48.956826][ T318] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 49.026817][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 49.106816][ T318] usb 1-1: Using ep0 maxpacket: 16 [ 49.112992][ T318] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 49.121287][ T318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.131448][ T318] usb 1-1: config 0 has no interface number 0 [ 49.138839][ T318] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 49.147916][ T318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.155904][ T318] usb 1-1: Product: syz [ 49.160094][ T318] usb 1-1: Manufacturer: syz [ 49.164714][ T318] usb 1-1: SerialNumber: syz [ 49.170177][ T318] usb 1-1: config 0 descriptor?? [ 49.186812][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 49.193206][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 49.207069][ T9] usb 3-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 49.218995][ T847] netlink: 'syz.3.152': attribute type 3 has an invalid length. [ 49.223107][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.235144][ T9] usb 3-1: Product: syz [ 49.239440][ T9] usb 3-1: Manufacturer: syz [ 49.244021][ T9] usb 3-1: SerialNumber: syz [ 49.626823][ T10] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 49.780294][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 49.789551][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.797602][ T10] usb 4-1: Product: syz [ 49.801812][ T10] usb 4-1: Manufacturer: syz [ 49.806403][ T10] usb 4-1: SerialNumber: syz [ 49.811733][ T10] usb 4-1: config 0 descriptor?? [ 49.817742][ T10] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG [ 50.132759][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 50.132844][ T36] audit: type=1400 audit(1786068487.810:263): avc: denied { bind } for pid=853 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.138595][ T855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=855 comm=syz.1.154 [ 50.159851][ T36] audit: type=1400 audit(1786068487.810:264): avc: denied { node_bind } for pid=853 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 50.170529][ T855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=855 comm=syz.1.154 [ 50.202593][ T855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=855 comm=syz.1.154 [ 50.215079][ T855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=855 comm=syz.1.154 [ 50.227456][ T855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=855 comm=syz.1.154 [ 50.239915][ T855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=855 comm=syz.1.154 [ 50.252227][ T855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=855 comm=syz.1.154 [ 50.264535][ T855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=855 comm=syz.1.154 [ 50.276834][ T855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=855 comm=syz.1.154 [ 50.289133][ T855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=855 comm=syz.1.154 [ 50.339904][ T36] audit: type=1400 audit(1786068488.020:265): avc: denied { watch } for pid=859 comm="syz.1.156" path="/43" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.423711][ T36] audit: type=1400 audit(1786068488.100:266): avc: denied { search } for pid=861 comm="syz.1.157" name="/" dev="configfs" ino=2531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 50.446713][ T36] audit: type=1400 audit(1786068488.130:267): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 50.487863][ T869] FAULT_INJECTION: forcing a failure. [ 50.487863][ T869] name failslab, interval 1, probability 0, space 0, times 0 [ 50.500523][ T869] CPU: 1 UID: 0 PID: 869 Comm: syz.1.159 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 50.500555][ T869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.500569][ T869] Call Trace: [ 50.500576][ T869] [ 50.500591][ T869] __dump_stack+0x21/0x30 [ 50.500641][ T869] dump_stack_lvl+0x140/0x1c0 [ 50.500673][ T869] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.500706][ T869] dump_stack+0x19/0x20 [ 50.500738][ T869] should_fail_ex+0x3c2/0x510 [ 50.500757][ T869] should_failslab+0xac/0x100 [ 50.500794][ T869] kmem_cache_alloc_noprof+0x42/0x410 [ 50.500819][ T869] ? alloc_empty_file+0xbf/0x270 [ 50.500847][ T869] ? _raw_spin_unlock+0x45/0x60 [ 50.500875][ T869] alloc_empty_file+0xbf/0x270 [ 50.500900][ T869] ? _raw_spin_unlock+0x45/0x60 [ 50.500918][ T869] alloc_file_pseudo+0x142/0x1f0 [ 50.500959][ T869] ? security_inode_init_security_anon+0x3e/0x110 [ 50.500990][ T869] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 50.501022][ T869] ? anon_inode_make_secure_inode+0xf5/0x150 [ 50.501046][ T869] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 50.501068][ T869] ? __kasan_kmalloc+0x96/0xb0 [ 50.501108][ T869] __anon_inode_getfile+0x12e/0x200 [ 50.501141][ T869] anon_inode_create_getfile+0x3f/0x50 [ 50.501171][ T869] io_uring_create+0xc61/0x13f0 [ 50.501197][ T869] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 50.501220][ T869] ? __kasan_check_write+0x18/0x20 [ 50.501252][ T869] ? __x64_sys_io_uring_setup+0x80/0x80 [ 50.501286][ T869] ? __kasan_check_read+0x15/0x20 [ 50.501308][ T869] __x64_sys_io_uring_setup+0x5f/0x80 [ 50.501337][ T869] x64_sys_call+0x22c0/0x2ee0 [ 50.501352][ T869] do_syscall_64+0x57/0xf0 [ 50.501369][ T869] ? clear_bhb_loop+0x50/0xa0 [ 50.501411][ T869] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.501439][ T869] RIP: 0033:0x7fe06e79e0d9 [ 50.501457][ T869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.501491][ T869] RSP: 002b:00007fe06f628ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 50.501507][ T869] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fe06e79e0d9 [ 50.501518][ T869] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 0000000000000ea9 [ 50.501528][ T869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.501553][ T869] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 50.501567][ T869] R13: 0000000000000090 R14: 00007fe06f628fd8 R15: 0000000000000000 [ 50.501582][ T869] [ 50.863911][ T36] audit: type=1400 audit(1786068488.540:268): avc: denied { setattr } for pid=870 comm="syz.1.160" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 50.913872][ T36] audit: type=1400 audit(1786068488.590:269): avc: denied { read } for pid=873 comm="syz.1.161" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.936744][ T36] audit: type=1400 audit(1786068488.590:270): avc: denied { open } for pid=873 comm="syz.1.161" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.962834][ T36] audit: type=1400 audit(1786068488.590:271): avc: denied { ioctl } for pid=873 comm="syz.1.161" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.997750][ T10] usb 1-1: USB disconnect, device number 11 [ 51.128316][ T884] 9pnet: p9_errstr2errno: server reported unknown error [ 51.149229][ T888] Invalid argument reading file caps for ./file0 [ 51.208364][ T890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.166'. [ 51.217323][ T891] netlink: 20 bytes leftover after parsing attributes in process `syz.0.166'. [ 51.375753][ T36] audit: type=1400 audit(1786068489.050:272): avc: denied { watch } for pid=896 comm="syz.0.168" path="/42/file0" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.636826][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 51.749478][ T9] usb 3-1: USB disconnect, device number 12 [ 51.785717][ T900] FAULT_INJECTION: forcing a failure. [ 51.785717][ T900] name failslab, interval 1, probability 0, space 0, times 0 [ 51.798585][ T900] CPU: 0 UID: 0 PID: 900 Comm: syz.2.169 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 51.798608][ T900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.798618][ T900] Call Trace: [ 51.798623][ T900] [ 51.798630][ T900] __dump_stack+0x21/0x30 [ 51.798680][ T900] dump_stack_lvl+0x140/0x1c0 [ 51.798717][ T900] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.798741][ T900] dump_stack+0x19/0x20 [ 51.798760][ T900] should_fail_ex+0x3c2/0x510 [ 51.798779][ T900] should_failslab+0xac/0x100 [ 51.798798][ T900] kmem_cache_alloc_noprof+0x42/0x410 [ 51.798814][ T900] ? security_file_alloc+0x49/0x220 [ 51.798837][ T900] ? kasan_save_alloc_info+0x3a/0x50 [ 51.798862][ T900] security_file_alloc+0x49/0x220 [ 51.798885][ T900] init_file+0x9e/0x210 [ 51.798904][ T900] alloc_empty_file+0xd9/0x270 [ 51.798923][ T900] ? _raw_spin_unlock+0x45/0x60 [ 51.798953][ T900] alloc_file_pseudo+0x142/0x1f0 [ 51.798971][ T900] ? security_inode_init_security_anon+0x3e/0x110 [ 51.798991][ T900] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 51.799009][ T900] ? anon_inode_make_secure_inode+0xf5/0x150 [ 51.799043][ T900] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 51.799074][ T900] ? __kasan_kmalloc+0x96/0xb0 [ 51.799101][ T900] __anon_inode_getfile+0x12e/0x200 [ 51.799122][ T900] anon_inode_create_getfile+0x3f/0x50 [ 51.799142][ T900] io_uring_create+0xc61/0x13f0 [ 51.799157][ T900] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 51.799177][ T900] ? __kasan_check_write+0x18/0x20 [ 51.799191][ T900] ? __x64_sys_io_uring_setup+0x80/0x80 [ 51.799212][ T900] ? __kasan_check_read+0x15/0x20 [ 51.799225][ T900] __x64_sys_io_uring_setup+0x5f/0x80 [ 51.799245][ T900] x64_sys_call+0x22c0/0x2ee0 [ 51.799258][ T900] do_syscall_64+0x57/0xf0 [ 51.799273][ T900] ? clear_bhb_loop+0x50/0xa0 [ 51.799293][ T900] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.799311][ T900] RIP: 0033:0x7fc8b9f9e0d9 [ 51.799323][ T900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.799335][ T900] RSP: 002b:00007fc8b89f6ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 51.799356][ T900] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fc8b9f9e0d9 [ 51.799367][ T900] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 0000000000000ea9 [ 51.799376][ T900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.799384][ T900] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 51.799393][ T900] R13: 0000000000000090 R14: 00007fc8b89f6fd8 R15: 0000000000000000 [ 51.799405][ T900] [ 51.800383][ T10] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 52.078454][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.089471][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 52.105847][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 52.116172][ T908] netlink: 'syz.2.172': attribute type 4 has an invalid length. [ 52.128651][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.137750][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 52.145752][ T10] usb 1-1: SerialNumber: syz [ 52.161452][ T908] netlink: 'syz.2.172': attribute type 4 has an invalid length. [ 52.162206][ T897] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 52.242942][ T318] usb 4-1: USB disconnect, device number 20 [ 52.278112][ T925] FAULT_INJECTION: forcing a failure. [ 52.278112][ T925] name failslab, interval 1, probability 0, space 0, times 0 [ 52.306826][ T925] CPU: 0 UID: 0 PID: 925 Comm: syz.1.178 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 52.306862][ T925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.306882][ T925] Call Trace: [ 52.306902][ T925] [ 52.306912][ T925] __dump_stack+0x21/0x30 [ 52.306960][ T925] dump_stack_lvl+0x140/0x1c0 [ 52.307001][ T925] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.307036][ T925] ? kasan_save_alloc_info+0x3a/0x50 [ 52.307079][ T925] dump_stack+0x19/0x20 [ 52.307117][ T925] should_fail_ex+0x3c2/0x510 [ 52.307151][ T925] should_failslab+0xac/0x100 [ 52.307187][ T925] __kmalloc_cache_noprof+0x41/0x470 [ 52.307220][ T925] ? file_init_path+0x3b/0x590 [ 52.307257][ T925] ? io_uring_alloc_task_context+0xbe/0x6b0 [ 52.307289][ T925] ? __asan_memcpy+0x5a/0x80 [ 52.307328][ T925] io_uring_alloc_task_context+0xbe/0x6b0 [ 52.307362][ T925] ? alloc_file_pseudo+0x191/0x1f0 [ 52.307399][ T925] ? __cfi_io_uring_alloc_task_context+0x10/0x10 [ 52.307432][ T925] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 52.307469][ T925] ? anon_inode_make_secure_inode+0xf5/0x150 [ 52.307511][ T925] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 52.307555][ T925] __io_uring_add_tctx_node+0x324/0x590 [ 52.307602][ T925] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 52.307634][ T925] ? anon_inode_create_getfile+0x3f/0x50 [ 52.307673][ T925] io_uring_create+0xc78/0x13f0 [ 52.307703][ T925] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 52.307741][ T925] ? __kasan_check_write+0x18/0x20 [ 52.307769][ T925] ? __x64_sys_io_uring_setup+0x80/0x80 [ 52.307808][ T925] ? __kasan_check_read+0x15/0x20 [ 52.307836][ T925] __x64_sys_io_uring_setup+0x5f/0x80 [ 52.307872][ T925] x64_sys_call+0x22c0/0x2ee0 [ 52.307897][ T925] do_syscall_64+0x57/0xf0 [ 52.307925][ T925] ? clear_bhb_loop+0x50/0xa0 [ 52.307960][ T925] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.307989][ T925] RIP: 0033:0x7fe06e79e0d9 [ 52.308013][ T925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.308037][ T925] RSP: 002b:00007fe06f628ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 52.308064][ T925] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fe06e79e0d9 [ 52.308086][ T925] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 0000000000000ea9 [ 52.308105][ T925] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.308121][ T925] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 52.308140][ T925] R13: 0000000000000090 R14: 00007fe06f628fd8 R15: 0000000000000000 [ 52.308161][ T925] [ 52.357926][ T929] syz.3.177: attempt to access beyond end of device [ 52.357926][ T929] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 52.471245][ T931] tmpfs: Unknown parameter '0x0000000000000003' [ 52.511659][ T929] FAT-fs (loop3): unable to read boot sector [ 52.558722][ T937] tmpfs: Unknown parameter '0x0000000000000003' [ 52.612154][ T10] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 52.628447][ T10] usb 1-1: USB disconnect, device number 12 [ 52.666316][ T316] Bluetooth: hci0: unexpected event 0x02 length: 0 < 1 [ 52.735779][ T950] support for the xor transformation has been removed. [ 52.832611][ T958] netlink: 'syz.3.190': attribute type 5 has an invalid length. [ 52.840345][ T958] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.190'. [ 52.916881][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 52.981819][ T966] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 53.053114][ T969] netlink: 64 bytes leftover after parsing attributes in process `syz.3.194'. [ 53.076827][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 53.084165][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 53.093997][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 53.101674][ T9] usb 2-1: can't read configurations, error -61 [ 53.131950][ T10] kernel write not supported for file /input/event2 (pid: 10 comm: kworker/0:1) [ 53.236842][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 53.386816][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 53.393183][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 53.396938][ T318] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 53.401103][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 53.417200][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 53.424772][ T9] usb 2-1: can't read configurations, error -61 [ 53.431134][ T9] usb usb2-port1: attempt power cycle [ 53.556948][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 53.560325][ T318] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 53.563445][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 53.571095][ T318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.579968][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 53.586735][ T318] usb 4-1: Product: syz [ 53.596242][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.600096][ T318] usb 4-1: Manufacturer: syz [ 53.610290][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 53.614741][ T318] usb 4-1: SerialNumber: syz [ 53.623859][ T10] usb 1-1: config 1 has no interface number 1 [ 53.634204][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 53.647132][ T10] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 53.660143][ T10] usb 1-1: config 1 interface 2 has no altsetting 0 [ 53.668265][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.677421][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.685428][ T10] usb 1-1: Product: syz [ 53.689615][ T10] usb 1-1: Manufacturer: syz [ 53.694232][ T10] usb 1-1: SerialNumber: syz [ 53.776854][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 53.797207][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 53.803707][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 53.812526][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 53.820150][ T9] usb 2-1: can't read configurations, error -61 [ 53.906847][ T10] usb 1-1: USB disconnect, device number 13 [ 53.919156][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.946828][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 53.967212][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 53.973760][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 53.983017][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 53.990667][ T9] usb 2-1: can't read configurations, error -61 [ 53.998217][ T9] usb usb2-port1: unable to enumerate USB device [ 54.235157][ T318] (unnamed net_device) (uninitialized): Assigned a random MAC address: b6:bc:6f:0c:bd:b4 [ 54.235881][ T979] random: crng reseeded on system resumption [ 54.251671][ T318] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 54.277228][ T979] Unrecognized hibernate image header format! [ 54.283424][ T979] PM: hibernation: Image mismatch: architecture specific data [ 54.293403][ T10] usb 4-1: USB disconnect, device number 21 [ 54.520654][ T1010] FAULT_INJECTION: forcing a failure. [ 54.520654][ T1010] name failslab, interval 1, probability 0, space 0, times 0 [ 54.533368][ T1010] CPU: 1 UID: 0 PID: 1010 Comm: syz.0.198 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 54.533402][ T1010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.533415][ T1010] Call Trace: [ 54.533421][ T1010] [ 54.533429][ T1010] __dump_stack+0x21/0x30 [ 54.533462][ T1010] dump_stack_lvl+0x140/0x1c0 [ 54.533489][ T1010] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.533518][ T1010] dump_stack+0x19/0x20 [ 54.533544][ T1010] should_fail_ex+0x3c2/0x510 [ 54.533567][ T1010] should_failslab+0xac/0x100 [ 54.533592][ T1010] __kmalloc_cache_noprof+0x41/0x470 [ 54.533613][ T1010] ? io_wq_create+0xe0/0x9d0 [ 54.533645][ T1010] ? __kasan_check_write+0x18/0x20 [ 54.533664][ T1010] ? mutex_unlock+0x90/0x240 [ 54.533693][ T1010] io_wq_create+0xe0/0x9d0 [ 54.533712][ T1010] io_uring_alloc_task_context+0x2a5/0x6b0 [ 54.533735][ T1010] ? alloc_file_pseudo+0x191/0x1f0 [ 54.533762][ T1010] ? __cfi_io_uring_alloc_task_context+0x10/0x10 [ 54.533784][ T1010] ? __cfi_io_wq_submit_work+0x10/0x10 [ 54.533810][ T1010] ? __cfi_io_wq_free_work+0x10/0x10 [ 54.533835][ T1010] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 54.533865][ T1010] __io_uring_add_tctx_node+0x324/0x590 [ 54.533889][ T1010] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 54.533913][ T1010] ? anon_inode_create_getfile+0x3f/0x50 [ 54.533940][ T1010] io_uring_create+0xc78/0x13f0 [ 54.533962][ T1010] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 54.533988][ T1010] ? __kasan_check_write+0x18/0x20 [ 54.534008][ T1010] ? __x64_sys_io_uring_setup+0x80/0x80 [ 54.534037][ T1010] ? __kasan_check_read+0x15/0x20 [ 54.534057][ T1010] __x64_sys_io_uring_setup+0x5f/0x80 [ 54.534083][ T1010] x64_sys_call+0x22c0/0x2ee0 [ 54.534101][ T1010] do_syscall_64+0x57/0xf0 [ 54.534124][ T1010] ? clear_bhb_loop+0x50/0xa0 [ 54.534152][ T1010] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.534178][ T1010] RIP: 0033:0x7f46bd39e0d9 [ 54.534194][ T1010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.534211][ T1010] RSP: 002b:00007f46be228ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 54.534233][ T1010] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f46bd39e0d9 [ 54.534248][ T1010] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 0000000000000ea9 [ 54.534260][ T1010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.534273][ T1010] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 54.534285][ T1010] R13: 0000000000000090 R14: 00007f46be228fd8 R15: 0000000000000000 [ 54.534302][ T1010] [ 54.767144][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.777393][ T316] Bluetooth: hci0: command 0x1003 tx timeout [ 54.910406][ T61] device offline error, dev sda, sector 1130806 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 54.920989][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2027 starting block 141350) [ 54.932606][ T61] Buffer I/O error on device sda1, logical block 141312 [ 54.939797][ T61] Buffer I/O error on device sda1, logical block 141313 [ 54.946792][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2027 starting block 141352) [ 54.958451][ T61] device offline error, dev sda, sector 1138998 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 54.958454][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2027, error -5) [ 54.968998][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2031 starting block 142374) [ 54.969035][ T61] Buffer I/O error on device sda1, logical block 142336 [ 54.985358][ T13] Buffer I/O error on device sda1, logical block 141314 [ 54.993234][ T61] Buffer I/O error on device sda1, logical block 142337 [ 55.014245][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2031 starting block 142376) [ 55.025872][ T61] device offline error, dev sda, sector 1147190 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 55.026893][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2031, error -5) [ 55.036501][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 143398) [ 55.049982][ T13] Buffer I/O error on device sda1, logical block 142338 [ 55.060808][ T61] Buffer I/O error on device sda1, logical block 143360 [ 55.074659][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 55.082299][ T61] device offline error, dev sda, sector 1147694 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 55.092864][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 143461) [ 55.104440][ T61] Buffer I/O error on device sda1, logical block 143423 [ 55.111492][ T61] device offline error, dev sda, sector 1155374 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 55.122107][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 144421) [ 55.133738][ T61] Buffer I/O error on device sda1, logical block 144383 [ 55.137048][ T311] device offline error, dev sda, sector 1196342 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 55.140814][ T61] device offline error, dev sda, sector 1179958 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 55.152437][ T311] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 149542) [ 55.161802][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2032 starting block 147494) [ 55.174027][ T311] Buffer I/O error on device sda1, logical block 149504 [ 55.185150][ T61] device offline error, dev sda, sector 1180462 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 55.192554][ T311] device offline error, dev sda, sector 1196846 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 55.202398][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2032 starting block 147557) [ 55.213654][ T311] device offline error, dev sda, sector 1204526 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 55.226111][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2032, error -5) [ 55.249971][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2035, error -5) [ 55.262711][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2034, error -5) [ 55.275608][ T1030] Buffer I/O error on dev sda1, logical block 172, lost async page write [ 55.276172][ T74] Aborting journal on device sda1-8. [ 55.289049][ T1030] Buffer I/O error on dev sda1, logical block 173, lost async page write [ 55.290392][ T74] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 55.298239][ T484] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 55.306951][ T74] JBD2: I/O error when updating journal superblock for sda1-8. [ 55.330740][ T1030] EXT4-fs (sda1): shut down requested (2) [ 55.337005][ T93] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 55.346052][ T93] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 55.369932][ T1030] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 55.396835][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 55.407073][ T10] usb 4-1: config 0 has an invalid descriptor of length 209, skipping remainder of the config [ 55.426812][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 55.435802][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 55.459865][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.475641][ T10] usb 4-1: config 0 descriptor?? [ 55.480707][ T484] usb 1-1: Using ep0 maxpacket: 8 [ 55.493060][ T484] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 55.507193][ T484] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 55.515704][ T484] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 55.525056][ T484] usb 1-1: config 250 has no interface number 0 [ 55.531579][ T484] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 55.543380][ T484] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 55.554133][ T484] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 55.566871][ T484] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 55.577529][ T484] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 55.591109][ T484] usb 1-1: config 250 interface 228 has no altsetting 0 [ 55.599218][ T484] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 55.608848][ T484] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 55.617496][ T484] usb 1-1: Product: syz [ 55.621758][ T484] usb 1-1: SerialNumber: syz [ 55.636627][ T484] hub 1-1:250.228: bad descriptor, ignoring hub [ 55.643033][ T484] hub 1-1:250.228: probe with driver hub failed with error -5 [ 55.666430][ T1043] FAULT_INJECTION: forcing a failure. [ 55.666430][ T1043] name failslab, interval 1, probability 0, space 0, times 0 [ 55.679156][ T1043] CPU: 1 UID: 0 PID: 1043 Comm: syz.2.208 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 55.679189][ T1043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.679199][ T1043] Call Trace: [ 55.679204][ T1043] [ 55.679210][ T1043] __dump_stack+0x21/0x30 [ 55.679234][ T1043] dump_stack_lvl+0x140/0x1c0 [ 55.679256][ T1043] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.679277][ T1043] dump_stack+0x19/0x20 [ 55.679296][ T1043] should_fail_ex+0x3c2/0x510 [ 55.679317][ T1043] should_failslab+0xac/0x100 [ 55.679336][ T1043] __kmalloc_cache_noprof+0x41/0x470 [ 55.679350][ T1043] ? __percpu_counter_init_many+0x47e/0x570 [ 55.679393][ T1043] ? io_uring_alloc_task_context+0x1a7/0x6b0 [ 55.679411][ T1043] io_uring_alloc_task_context+0x1a7/0x6b0 [ 55.679428][ T1043] ? alloc_file_pseudo+0x191/0x1f0 [ 55.679450][ T1043] ? __cfi_io_uring_alloc_task_context+0x10/0x10 [ 55.679467][ T1043] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 55.679492][ T1043] __io_uring_add_tctx_node+0x324/0x590 [ 55.679511][ T1043] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 55.679531][ T1043] ? anon_inode_create_getfile+0x3f/0x50 [ 55.679553][ T1043] io_uring_create+0xc78/0x13f0 [ 55.679575][ T1043] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 55.679597][ T1043] ? __kasan_check_write+0x18/0x20 [ 55.679613][ T1043] ? __x64_sys_io_uring_setup+0x80/0x80 [ 55.679636][ T1043] ? __kasan_check_read+0x15/0x20 [ 55.679652][ T1043] __x64_sys_io_uring_setup+0x5f/0x80 [ 55.679673][ T1043] x64_sys_call+0x22c0/0x2ee0 [ 55.679687][ T1043] do_syscall_64+0x57/0xf0 [ 55.679705][ T1043] ? clear_bhb_loop+0x50/0xa0 [ 55.679727][ T1043] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.679748][ T1043] RIP: 0033:0x7fc8b9f9e0d9 [ 55.679762][ T1043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.679775][ T1043] RSP: 002b:00007fc8b89f6ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 55.679792][ T1043] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fc8b9f9e0d9 [ 55.679804][ T1043] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 0000000000000ea9 [ 55.679814][ T1043] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.679824][ T1043] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 55.679834][ T1043] R13: 0000000000000090 R14: 00007fc8b89f6fd8 R15: 0000000000000000 [ 55.679847][ T1043] [ 55.722464][ T1045] memory length for this resource is wrong [ 55.791208][ T1017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.887298][ T1048] Write-error on swap-device (8:0:788078) [ 55.902297][ T1017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.911416][ T93] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 55.919168][ T484] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 55.941906][ T1045] isp1760 0000:00:03.0: probe with driver isp1760 failed with error -12 [ 56.093308][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 56.093327][ T36] audit: type=1400 audit(1786068493.770:302): avc: denied { read write } for pid=1027 comm="syz.0.204" name="lp0" dev="devtmpfs" ino=568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 56.122954][ T36] audit: type=1400 audit(1786068493.770:303): avc: denied { open } for pid=1027 comm="syz.0.204" path="/dev/usb/lp0" dev="devtmpfs" ino=568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 56.151470][ T1053] erofs: dax options not supported [ 56.167320][ C0] usblp0: nonzero read bulk status received: -71 [ 56.246827][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 56.376916][ T45] usb 1-1: USB disconnect, device number 14 [ 56.383809][ T45] usblp0: removed [ 56.396935][ T484] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 56.398799][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 56.413045][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 56.425828][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 56.434897][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.443049][ T10] usb 3-1: Product: syz [ 56.447282][ T10] usb 3-1: Manufacturer: syz [ 56.451892][ T10] usb 3-1: SerialNumber: syz [ 56.546829][ T484] usb 2-1: Using ep0 maxpacket: 16 [ 56.553282][ T484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.564881][ T484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.574667][ T484] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 56.587537][ T484] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 56.596606][ T484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.605330][ T484] usb 2-1: config 0 descriptor?? [ 56.658861][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 56.678742][ T1058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.687445][ T1058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.696077][ T1058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.704689][ T1058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.888634][ T36] audit: type=1400 audit(1786068494.570:304): avc: denied { read } for pid=1059 comm="syz.0.213" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 56.911807][ T36] audit: type=1400 audit(1786068494.570:305): avc: denied { open } for pid=1059 comm="syz.0.213" path="/49/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 56.936209][ T36] audit: type=1400 audit(1786068494.570:306): avc: denied { ioctl } for pid=1059 comm="syz.0.213" path="/49/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 56.967358][ T1060] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 56.972326][ T36] audit: type=1400 audit(1786068494.640:307): avc: denied { cmd } for pid=1059 comm="syz.0.213" path="socket:[8498]" dev="sockfs" ino=8498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 57.085329][ T36] audit: type=1400 audit(1786068494.760:308): avc: denied { create } for pid=1065 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 57.111376][ T484] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0006/input/input9 [ 57.114790][ T36] audit: type=1400 audit(1786068494.760:309): avc: denied { append } for pid=1065 comm="syz.0.214" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.146356][ T484] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 57.175274][ T1070] udevd[1070]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 57.194047][ T36] audit: type=1400 audit(1786068494.870:310): avc: denied { setopt } for pid=1071 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.207897][ T1072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'. [ 57.216372][ T36] audit: type=1400 audit(1786068494.890:311): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=574 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.228735][ T1072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'. [ 57.268075][ T1052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.276680][ T1052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.299252][ T10] usb 3-1: invalid uac2 rates [ 57.304104][ T10] usb 3-1: invalid uac2 rates [ 57.331717][ T9] usb 2-1: USB disconnect, device number 17 [ 57.499941][ T1052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.508654][ T1052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.522137][ T10] usb 3-1: failed to enable PITCH for EP 0x82 [ 57.533598][ T10] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 57.544332][ T10] usb 3-1: clock source 0 is not valid, cannot use [ 57.551265][ T10] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 57.557990][ T10] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 57.575491][ T10] usb 3-1: USB disconnect, device number 13 [ 57.589173][ T484] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 57.599925][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.748088][ T484] usb 1-1: unable to get BOS descriptor or descriptor too short [ 57.756632][ T484] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 57.769144][ T484] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 57.778260][ T484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.786277][ T484] usb 1-1: Product: syz [ 57.790525][ T484] usb 1-1: Manufacturer: syz [ 57.795139][ T484] usb 1-1: SerialNumber: syz [ 57.845947][ T31] usb 4-1: USB disconnect, device number 22 [ 58.006538][ T484] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 58.076802][ T10] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 58.186869][ T31] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 58.227208][ T10] usb 3-1: no configurations [ 58.231874][ T10] usb 3-1: can't read configurations, error -22 [ 58.286813][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 58.316803][ T31] usb 4-1: device descriptor read/64, error -71 [ 58.366824][ T10] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 58.437906][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.448833][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.458602][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 58.467684][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.476340][ T9] usb 2-1: config 0 descriptor?? [ 58.517228][ T10] usb 3-1: no configurations [ 58.521903][ T10] usb 3-1: can't read configurations, error -22 [ 58.528291][ T10] usb usb3-port1: attempt power cycle [ 58.566806][ T31] usb 4-1: device descriptor read/64, error -71 [ 58.604406][ T484] usb 1-1: invalid uac2 rates [ 58.609330][ T484] usb 1-1: invalid uac2 rates [ 58.806812][ T31] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 58.815903][ T484] usb 1-1: failed to enable PITCH for EP 0x82 [ 58.822347][ T484] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 58.831045][ T484] usb 1-1: clock source 0 is not valid, cannot use [ 58.837855][ T484] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 58.844457][ T484] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 58.857060][ T484] usb 1-1: USB disconnect, device number 15 [ 58.867136][ T10] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 58.880163][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.897571][ T10] usb 3-1: no configurations [ 58.902435][ T10] usb 3-1: can't read configurations, error -22 [ 58.966819][ T31] usb 4-1: device descriptor read/64, error -71 [ 58.986978][ T9] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 58.993903][ T9] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 59.000728][ T9] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 59.007597][ T9] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 59.014373][ T9] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 59.021231][ T9] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 59.028082][ T9] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 59.035531][ T9] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 59.046590][ T10] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 59.054255][ T1114] udevd[1114]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 59.067574][ T10] usb 3-1: no configurations [ 59.072232][ T10] usb 3-1: can't read configurations, error -22 [ 59.078752][ T10] usb usb3-port1: unable to enumerate USB device [ 59.216846][ T31] usb 4-1: device descriptor read/64, error -71 [ 59.334027][ T31] usb usb4-port1: attempt power cycle [ 59.586829][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 59.676815][ T31] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 59.697878][ T31] usb 4-1: device descriptor read/8, error -71 [ 59.736812][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 59.742936][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.753901][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.763707][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 59.772804][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.781597][ T10] usb 1-1: config 0 descriptor?? [ 59.788686][ T10] hub 1-1:0.0: USB hub found [ 59.827843][ T31] usb 4-1: device descriptor read/8, error -71 [ 59.987585][ T10] hub 1-1:0.0: 1 port detected [ 60.066836][ T31] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 60.087872][ T31] usb 4-1: device descriptor read/8, error -71 [ 60.218003][ T31] usb 4-1: device descriptor read/8, error -71 [ 60.326884][ T31] usb usb4-port1: unable to enumerate USB device [ 60.591938][ T10] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 60.591972][ T31] usb 1-1: USB disconnect, device number 16 [ 61.038775][ T63] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 61.047284][ T63] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz0 [ 61.065378][ T1145] udevd[1145]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 61.076836][ T9] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 61.084265][ T9] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 61.099412][ T9] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71 [ 61.114879][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 61.114927][ T36] audit: type=1400 audit(1786068498.790:320): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 61.147807][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 61.155663][ T9] usb 2-1: USB disconnect, device number 18 [ 61.312059][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 61.321447][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.329503][ T10] usb 3-1: Product: syz [ 61.333705][ T10] usb 3-1: Manufacturer: syz [ 61.338360][ T10] usb 3-1: SerialNumber: syz [ 61.376316][ T1152] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 61.406809][ T31] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 61.446807][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 61.558292][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 61.566651][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 61.577662][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 61.587339][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 61.597219][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 61.607066][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 61.616788][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 61.619543][ T31] usb 1-1: string descriptor 0 read error: -22 [ 61.624095][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.628166][ T31] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 61.639666][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.648069][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.658451][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 61.666875][ T45] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 61.675512][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.683317][ T31] usb 1-1: config 0 descriptor?? [ 61.695689][ T1149] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 61.704121][ T9] usb 2-1: config 0 descriptor?? [ 61.718414][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.846834][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 61.853205][ T45] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 61.861369][ T45] usb 4-1: config 2 has no interface number 0 [ 61.867486][ T45] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 61.877522][ T45] usb 4-1: config 2 interface 88 has no altsetting 0 [ 61.885731][ T45] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 61.894813][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 61.902843][ T45] usb 4-1: Product: syz [ 61.907110][ T45] usb 4-1: Manufacturer: syz [ 61.911726][ T45] usb 4-1: SerialNumber: syz [ 61.918459][ T1156] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 61.927133][ T1149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.935631][ T1149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.944370][ T10] usb 1-1: USB disconnect, device number 17 [ 62.126989][ T1156] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 62.341424][ T45] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 62.351697][ T45] asix 4-1:2.88: probe with driver asix failed with error -71 [ 62.360759][ T45] usb 4-1: USB disconnect, device number 27 [ 62.378430][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 62.384388][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 62.393536][ T9] usb 2-1: USB disconnect, device number 19 [ 62.464241][ T1161] input: syz1 as /devices/virtual/input/input10 SYZFAIL: SIGBUS pc-offset:0xfffffffffffe33cd pc:0x7fbe57470163 addr:0x7fbe547ffffc code=2 (errno 11: Resource temporarily unavailable) [ 62.494401][ T36] audit: type=1400 audit(1786068500.170:321): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[1655]" dev="pipefs" ino=1655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 62.534187][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.572639][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.611186][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.636903][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.645866][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.696866][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.705918][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.737009][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.745982][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.786918][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.788337][ T10] usb 3-1: USB disconnect, device number 18 [ 62.802493][ T298] bridge_slave_1: left allmulticast mode [ 62.817162][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.826122][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.826864][ T298] bridge_slave_1: left promiscuous mode [ 62.847271][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.856223][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.865968][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.868625][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.880142][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.890870][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.899938][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.909179][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.918334][ T298] bridge_slave_0: left allmulticast mode [ 62.923994][ T298] bridge_slave_0: left promiscuous mode [ 62.927718][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.946840][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.947152][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.983560][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 62.997963][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 63.007248][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 63.016324][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 63.025350][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 63.034328][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 63.043495][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 63.052494][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 63.061548][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 63.070699][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 63.079708][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 63.089775][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 63.098871][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 63.108010][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 63.117132][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 63.128815][ T298] veth1_macvtap: left promiscuous mode [ 63.134320][ T298] veth0_vlan: left promiscuous mode [ 63.389089][ T298] bridge_slave_1: left allmulticast mode [ 63.394759][ T298] bridge_slave_1: left promiscuous mode [ 63.400416][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.408052][ T298] bridge_slave_0: left allmulticast mode [ 63.413712][ T298] bridge_slave_0: left promiscuous mode [ 63.419372][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.427181][ T298] bridge_slave_1: left allmulticast mode [ 63.432825][ T298] bridge_slave_1: left promiscuous mode [ 63.438544][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.446068][ T298] bridge_slave_0: left allmulticast mode [ 63.451843][ T298] bridge_slave_0: left promiscuous mode [ 63.457496][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.611215][ T298] tipc: Disabling bearer [ 63.616577][ T298] tipc: Left network mode [ 63.623087][ T298] veth1_macvtap: left promiscuous mode [ 63.628678][ T298] veth0_vlan: left promiscuous mode [ 63.634217][ T298] veth1_macvtap: left promiscuous mode [ 63.639760][ T298] veth0_vlan: left promiscuous mode [ 63.645269][ T298] veth1_macvtap: left promiscuous mode [ 63.650826][ T298] veth0_vlan: left promiscuous mode [ 64.127139][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 64.136620][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 64.145667][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 64.154699][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 64.163759][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 64.172744][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 64.181913][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 64.190928][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 64.199977][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 64.209076][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 64.218541][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 64.227549][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001