last executing test programs: 7.123676297s ago: executing program 3 (id=110): userfaultfd(0x80800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f00000009c0)) 7.122609447s ago: executing program 3 (id=111): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x4008000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000304fcff", 0x58}], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0xe, 0x0, &(0x7f0000000680)) (async) r3 = syz_io_uring_complete(0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000100)=0x81) 7.122296547s ago: executing program 3 (id=112): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}, 0x1, 0x0, 0x0, 0x2810}, 0x4000814) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000500)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x80, 0x8, 0x1, 0xf, 0x8, 0xd4e}, {0x8, 0x100, 0x4, 0x8, 0xc, 0x0, 0x9, 0x7, 0x3, 0x17, 0x1, 0x3, 0x9}, {0x80000002, 0x7, 0xa, 0xf, 0x1, 0x12, 0x0, 0xfb, 0xf2, 0xf9, 0x1, 0xff, 0x2}], 0x8}) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, &(0x7f00000005c0)="b91b0000000f3225ff0f00000d000010000f30b878563412bb000310008903", 0xfffffcad}], 0x1, 0x0, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000600)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000640)) signalfd(0xffffffffffffffff, &(0x7f0000000680)={[0xffffffffffffffff]}, 0x8) pselect6(0x40, &(0x7f0000000700)={0xa, 0x8002, 0x0, 0x0, 0x0, 0x1000000000000008, 0x1e25, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100b}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 6.258450135s ago: executing program 3 (id=114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x2}, {0x0, 0x4}, {0x7, 0x9}, {0x0, 0x9}, {0x7, 0x1}, {0x2, 0xa}, {0x3, 0x8}, {0x7}, {0x5, 0x6}, {0x6, 0x5}, {0x3, 0x2}, {0x1, 0x5}, {0x6, 0xa}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket$packet(0x11, 0x1, 0x300) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x8c03, &(0x7f0000000100)={[{@gid}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x12, r4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.140495397s ago: executing program 3 (id=115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000700), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000880), 0x0, 0xbb42) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, 0x0) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x38, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0x23, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000c40)={{r3, &(0x7f0000000140)='ns/net\x00', 0x101102, 0x0, 0x5a6, 0x0, 0x0}, 0x0, 0x0}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x80000000000001, 0x20, 0x2, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)) add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000500)="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", 0x1d8, r5) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.299583143s ago: executing program 2 (id=122): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}, 0x1, 0x0, 0x0, 0x2810}, 0x4000814) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000500)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x80, 0x8, 0x1, 0xf, 0x8, 0xd4e}, {0x8, 0x100, 0x4, 0x8, 0xc, 0x0, 0x9, 0x7, 0x3, 0x17, 0x1, 0x3, 0x9}, {0x80000002, 0x7, 0xa, 0xf, 0x1, 0x12, 0x0, 0xfb, 0xf2, 0xf9, 0x1, 0xff, 0x2}], 0x8}) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, &(0x7f00000005c0)="b91b0000000f3225ff0f00000d000010000f30b878563412bb000310008903", 0xfffffcad}], 0x1, 0x0, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000600)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000640)) pselect6(0x40, &(0x7f0000000700)={0xa, 0x8002, 0x0, 0x0, 0x0, 0x1000000000000008, 0x1e25, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100b}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 3.358514569s ago: executing program 2 (id=124): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000080)='w', 0x1}], 0x1, 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0xf, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000001380)={0x4, 0x16, 0x6, 0x9, 0x18, 0xffff9071, &(0x7f00000013c0)="c0f4d77298ab38c52311198c5bf6d813d8384b3f26ec6ee5"}) mount$cgroup(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x810010, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f00000002c0)=0x1, 0x4) socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)=""/4096, 0x1000}, 0x62) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xd, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000014}, 0x4014) (async) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xd, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000014}, 0x4014) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000040001000003be8c5ee17688a8003200030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xee) 3.257085979s ago: executing program 2 (id=125): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xb, 0x30d302) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000000b00033264756d6d793000000800400004021200180012000a00010064756d6d79"], 0x4c}], 0x1}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x401, 0x40) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f00000001c0)={0x1fe, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000140)={0x1f, 0x18, 0x0, 0x4, 0x85, 0x800, &(0x7f0000000080)="817975d4902b640747d313f2ff6b14487ffbe8485b106c38071f0de94f1874b4245aa79aaf3148a0bfcda24525bf328a5866888e17129d0fa2c960c4ff647bfb2f3b6ec76277067b87a853c0c5b4d7ad2ba9ff85bf32d6097a9dc06ad7d1cce381e0bc69a4f29606b2fe5b14a6a3b5e91ed4b88225fcdecac84a8c4cdf9b27c976e758794c"}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 3.240824031s ago: executing program 2 (id=126): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) write$selinux_load(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x80, 0x0, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @private}}}}) syz_usb_connect(0x0, 0x51, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201500207c6a608b8071a40e4820102030109023f0002080780010904320202deddc01009050b08ff0302040409ff06090410a9023de20501"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x6, [{0xc3, &(0x7f0000000040)=@string={0xc3, 0x3, "bbbab55a1140dc16fbd1e73ffb4f6ede3b1d19f4b66cee7497bb298012657536e5ebf65b026e10bc1878e33cdb96d226d68deb753e43a126944c49981be7f0eb643b6b8fa720315eb765163352750e4c34a9933e134c51797ed3ccbf29035fa7ddf63e1b5efbcb6a74e93ff97e7995d7430e14a7b8d6c621595ede85aba813a6f162626347ac1a685506051d97e8ef9b87b50084a3034dd63c0fa295e66febe3e2c85962890756e76bbc015b3c1445ca63a0d716ba9c097737feb0ea6409f61f66"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3c0a}}, {0xdb, &(0x7f0000000240)=@string={0xdb, 0x3, "20b859d36ae35f5ca4213b0e05fa4b751b4f2065f31aa41f4f4581e5ee41b2cafb5ecd2470689f203d784e5dc40470de9f5daf4fec7ece46322dfe8b7df890c19367ed54ebd30e3a9c3afa3086363b8f746c97f66826638cb6721143665431735c2f5cb3f63fa3e05c92397e1d4c3723355ef17549d0d23a4957e11da60d6d079f220dcc6cd72413379c5603091407fffcbcd189f52e96f1750c4cd2e64c6e8689fce14767babca3effaf646a8207feb961925e57609421a46d0a80ec30e4f41d051493e46e30c70d8452ade62758f2a6adbbd7d3cbde29022"}}, {0x3c, &(0x7f0000000340)=@string={0x3c, 0x3, "29ca22f28ef04a4b91594bdb6919988c3b4c9150424acf36fdf2d11e294f559a33b36c21bdf5229e0d53920b8f6c4ddea9dabeaeff66552d0151"}}]}) 3.191572256s ago: executing program 1 (id=127): madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17) r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x63, 0x62, 0x32, 0x66, 0x65, 0x32, 0x31, 0x35, 0x37, 0x37, 0x30, 0x61, 0x61, 0x38, 0x39, 0x34]}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e94937920fcba13ce0af61beaa44d66a6535daf1bc35fb3af1e9197d71d26589d077c88184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$get_security(0x11, r0, 0x0, 0x0) 3.140625392s ago: executing program 1 (id=128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x200000000000000, 0xc4, 0x6, 0xd79a, 0x3}}, @nested_vmlaunch={0x12f, 0x18}], 0x80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.127992102s ago: executing program 1 (id=129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x12, 0x0, 0x0) futex(0x0, 0x9, 0x2, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x40000000692, 0x809b, 0x2, 0x4000000010000e50, 0x2000000000000102, 0xa, 0x0, 0x200000000006, 0xfffffffffffffffd, 0x3aa, 0xfffffffffffff9de, 0x1, 0x5, 0x40000000009, 0x378, 0x200], 0x6000, 0x194110}) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00', 0x167) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/tty/ttyS0/rx_trig_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='8', 0x1) mkdirat(r3, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000280), &(0x7f0000000540)=0x4) chdir(&(0x7f0000000380)='./mnt\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000400)=@v1={0x0, @aes128, 0x1, @desc1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000004c0)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) 3.048633661s ago: executing program 1 (id=130): r0 = syz_clone(0x800, &(0x7f00000000c0)="1babe287ae4d7fb6d9d611083fab0e37c1bfdcce40d97f4c63dd4d7a7ff3e776698ea3934becbd8ccb1a8116b1e529e225408e327e6bd40017e9540a8413eb623b8eb4d431c306e0b4a5db57839a7d25af7df5c5ae71ff8c5cd22188794413fb584d1609d25f5e4ff97e767000010417f17429a41f0bb77cf0a9d9208cb189b9b55ce0afc0dd53cf118d97bb01a9127ae4895984a68dc055089f6b0a9716d5454bc0f83f2005e4c39427afd6fdfd", 0xae, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="1db3c18261b8bfcbf02604f373b93bc9e2c03fba28097fc4fdaf10bd7161f76c545ce29ae2d8440b3e53ea2f3e2d906e2da3433754d10ff6be59499b1576a5924628553023c77f29502eb223932e5c2322cfd6") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r1, 0x5) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000280)='smaps_rollup\x00') write$tcp_mem(r3, &(0x7f0000000040), 0x48) read$FUSE(r3, 0x0, 0x0) syz_usb_connect(0x5, 0x58, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000043489a08b82225643a09010203010902460001050510010904360600020a0000052406000005240004000d240f010000000043ea4e66020524060001052407fbff0d240f01676b2ccf20831669db000005"], 0x0) 2.95671855s ago: executing program 3 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x156) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='27', 0x2) mknodat$loop(0xffffffffffffffff, 0x0, 0x8000, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) keyctl$invalidate(0x15, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000180)) syz_usb_connect$uac2(0x2, 0xa8, &(0x7f00000009c0)=ANY=[], 0x0) 2.019353485s ago: executing program 2 (id=132): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}, 0x1, 0x0, 0x0, 0x2810}, 0x4000814) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000500)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x80, 0x8, 0x1, 0xf, 0x8, 0xd4e}, {0x8, 0x100, 0x4, 0x8, 0xc, 0x0, 0x9, 0x7, 0x3, 0x17, 0x1, 0x3, 0x9}, {0x80000002, 0x7, 0xa, 0xf, 0x1, 0x12, 0x0, 0xfb, 0xf2, 0xf9, 0x1, 0xff, 0x2}], 0x8}) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, &(0x7f00000005c0)="b91b0000000f3225ff0f00000d000010000f30b878563412bb000310008903", 0xfffffcad}], 0x1, 0x0, 0x0, 0x0) gettid() pselect6(0x40, &(0x7f0000000700)={0xa, 0x8002, 0x0, 0x0, 0x0, 0x1000000000000008, 0x1e25, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100b}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 1.853504822s ago: executing program 1 (id=133): r0 = socket(0x10, 0x5, 0x0) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='nilfs2\x00', 0x1000004, &(0x7f0000000140)='\xee\xd1M\x85') setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) mount$overlay(0x0, &(0x7f0000000800)='\x00', &(0x7f0000000840), 0x0, &(0x7f0000000880)={[{@redirect_dir_off}], [{@audit}, {@subj_type={'subj_type', 0x3d, '/-/'}}]}) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) setns(0xc9, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000c00)={0x1, &(0x7f0000000c40)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000c80)='\x05\x00\x00\x00\x00\x00\x00\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./dev\x00', 0x1ff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1499a1", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x0) mount(0x0, &(0x7f0000000dc0)='./dev\x00', &(0x7f0000000e00)='devtmpfs\x00', 0x4010, 0x0) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000e40)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./dev/ttyUSB0\x00', 0x12df00, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x45, &(0x7f0000000ec0)=ANY=[]) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x168) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x8, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000a40)='./bus\x00', &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ppoll(&(0x7f0000000ec0)=[{r2, 0x20}], 0x1, &(0x7f0000000f00)={0x0, 0x3938700}, &(0x7f0000000f40), 0x8) mount$incfs(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), 0x82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0/file1/file2\x00', 0x1c0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000780)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) write(r0, &(0x7f0000000000)="240000005a001f001007f4b9002304000a04f51108000500020100020800038005004000", 0x24) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000006c0)={{'\x00', 0x3}, {0x2}, 0x110, 0x0, 0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)="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", 0x1f0, 0x0, &(0x7f0000000400)={0x2, 0x193, {0x0, 0xc, 0xb9, "5eb0abc0538f184150cb258edd5c3f21864ef5c9db3371591473b5bd4675cf3ce4ad8a3bb1c52d51c8f620c18dac868c66456255c17d7b3f7c5e74f2bef4683df55ea342e4e82ae4e18d38c9feada5adac557635b85f9acf9d1a69e78c9367acc1808500d57a63ccbb0026c3f7efb78ef13ad281cf7f86fdfdbda378a5876eca6a485f9aeb819ff5f8cf452144c46f337756897a26d07111936cf58551dc5c1cd4931e5b9a683ee273f1601fa2760bcb07fc829dffb94b1a97", 0xcd, "eabe144e06c21479605831767c04884db0b3c580ab47d86fbe5bd71c721133d15d812de1821437c10314db767876ea420052e4f5f6730d8c39a514939cb44381bbd14bf4d9305d70e6a74e7fbfbdf87806a34a9093af2422b0ab47d63ed2218c899ae2b0591bdb3b77a38f8df904197078665112787084bea38973d72c785da1d82e4f034e7a7dec4b6f7512eb45c7ed0e834b370804d3e98db066663c381015853051ba11624f6e4b28aecdb1cfa8de9f3b2849d255ff6198e3890a7ab5eda748748f905ed0a46a0b4cba7e36"}, 0xff, "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"}, 0x29e}) 1.562327281s ago: executing program 0 (id=136): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000180)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000740)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000380)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000400)={0x0, 0x7693, 0x800, 0xfffffffe, 0x2f6, 0x0, r4}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x85c87, 0x40, 0x3, 0x3aa, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6c, 0x0, 0x40000003, 0xd5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0x19f}}], 0x1, 0x0, 0x0) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r9, r9) 1.508675267s ago: executing program 0 (id=137): r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x74) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x1000, @dev={0xfe, 0x80, '\x00', 0x2a}}, 0x18) move_mount(r2, &(0x7f0000000000)='./file0/file0\x00', r2, &(0x7f0000000040)='./file0/file0\x00', 0x247) 1.508448397s ago: executing program 0 (id=138): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x1fc) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x5, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 1.508249567s ago: executing program 0 (id=139): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000780)) (async) r1 = add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000140)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000006c0)={r2, 0x4, 0x20}, 0x0, &(0x7f0000000700)="00000001", 0x0) (async) r3 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$get_security(0x11, r3, 0x0, 0x0) 1.507951597s ago: executing program 0 (id=140): r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000003c0)=@ethtool_eeprom={0x43, 0x3, 0x1}}) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00') connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsmount(r0, 0xa53283a0904a64c4, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000540)='ext3\x00', 0x0) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}, 0x80) r6 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(r5, 0x0, r6, 0x0, 0x0, &(0x7f0000000700)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000007c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000800)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000840)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6, 0x0, r5}, &(0x7f00000008c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x10000, 0x40000003, 0x60}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[@cpuid={0x64, 0x18, {0x3, 0x6}}], 0x18}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a1740, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$x86(r12, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r13, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x7}]}) 1.137987464s ago: executing program 2 (id=141): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000480)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240102000a000201020904010000010200000904010101010200000905"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bae000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@rdmsr={0x66, 0x18, {0xc0011022}}], 0x18}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 636.647945ms ago: executing program 0 (id=142): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000200)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f00000002c0)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="000891000000910966a1b68e58f46bd2207df676d2b086a20d4bc39a48e5f1c6c3b55e694140b9ac280b2364aa2df50cc80e906558f701364d0bdd6a4c6363f4d5dc53a72f902651daafa951a4cbb2a311305f03401b946f387eb6c02dc37b59760600000017c3bd47a069089341e4f9ff0576c5ac5a61bef23540a8fb01329b1324c6d76cf00e0a58358aa49ccf279558cfbbfe4077b9"], &(0x7f0000000a40)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "25648125528f633ce860bfd6eca2650f78dc2c19750f807a47e507bdf79368cae720fdadaa4006364e7546dd961ecd73129287025d66854e34be94bafdc7d5f31472dec8441eb0827b22bcf8cef3a289659697e3e42df08215727196c9710e1c6a4e988e3d08ab7a9e7f167adca1f3665828d876913e3860df478c6c131db3d553143e38804416b0197a792f8c6ea0e24be08cca566f752e8f6d654d8afdbb1404f216cd61033b1c0c7cdb144e2a76a23cb423941b6dfebcf31abc6c23a5d25d5e28a7fcb8584784d7cf80efa053df14d80ca052ba1bd02ea9e38489151adcd98aa0a47f85d9255f9b344120a0f011e3e06e7fd54802"}}, &(0x7f00000005c0)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x7, "143c4683"}, @local=@item_012={0x1, 0x2, 0x3, '\n'}, @global=@item_4={0x3, 0x1, 0xa, "660e6615"}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x80, 0x1, {0x22, 0x29e}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000740)={0x0, 0x7, 0xf3, "36668dfc92af256917af3ed33cfcc9ea983d56409e419fc841c32b824eea9ba3f9bea916d0abfd64a006fa5faa706eeffe0609652336bead9427d1066e0ed28101d387f64710c776968e76b78e45791c3abea88d94b20910f3cda85165c60b0ad91ace7d5ca455a6081d04895b6a13d79515f3d0e33bc359e98438aea2ee0284d013573654861d074dd817bbe37d50d7e4330523e9f6c150aee7590d509e76bece669db9c679ca16a9267b655048d42ed4f32bd17c19f2e014f2cc31411cc0231132560159399065a920d412e491c03e0a97ffb61f5952fc4f959791973f33ea199a320a552a7e94aa193c06e430f2e9420d88"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000008c0)={0x20, 0x1, 0x57, "9445a2835c92a935037d2c21241a1c341bfd16395cb9a6c5a814a1fa777fbbb2a01f0383e850d71b19524ae06f0ae1e3f96f06460313c7103bda7a3b5eae51e2238893fbb848dddd041a02eff80e37af717b86f933a29a"}, &(0x7f0000000940)={0x20, 0x3, 0x1, 0xd0}}) 0s ago: executing program 1 (id=143): pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x100, r0, &(0x7f0000000000)="69d3c3", 0x3, 0x4}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. [ 21.698971][ T36] audit: type=1400 audit(1794037219.179:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.721943][ T36] audit: type=1400 audit(1794037219.219:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.722883][ T287] cgroup: Unknown subsys name 'net' [ 21.749755][ T36] audit: type=1400 audit(1794037219.239:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.749925][ T287] cgroup: Unknown subsys name 'devices' [ 21.871264][ T287] cgroup: Unknown subsys name 'hugetlb' [ 21.876873][ T287] cgroup: Unknown subsys name 'rlimit' [ 22.030200][ T36] audit: type=1400 audit(1794037219.519:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.053501][ T36] audit: type=1400 audit(1794037219.519:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.061002][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.078468][ T36] audit: type=1400 audit(1794037219.519:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.109867][ T36] audit: type=1400 audit(1794037219.579:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.122847][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.135243][ T36] audit: type=1400 audit(1794037219.579:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.169452][ T36] audit: type=1400 audit(1794037219.599:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.194959][ T36] audit: type=1400 audit(1794037219.599:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.451640][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.458680][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.465789][ T297] bridge_slave_0: entered allmulticast mode [ 23.472153][ T297] bridge_slave_0: entered promiscuous mode [ 23.487574][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.494664][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.501777][ T297] bridge_slave_1: entered allmulticast mode [ 23.507890][ T297] bridge_slave_1: entered promiscuous mode [ 23.520701][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.527742][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.535030][ T296] bridge_slave_0: entered allmulticast mode [ 23.541294][ T296] bridge_slave_0: entered promiscuous mode [ 23.547413][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.554517][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.561588][ T295] bridge_slave_0: entered allmulticast mode [ 23.567704][ T295] bridge_slave_0: entered promiscuous mode [ 23.577043][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.584121][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.591198][ T295] bridge_slave_1: entered allmulticast mode [ 23.597325][ T295] bridge_slave_1: entered promiscuous mode [ 23.612131][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.619156][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.626215][ T296] bridge_slave_1: entered allmulticast mode [ 23.632367][ T296] bridge_slave_1: entered promiscuous mode [ 23.655685][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.662753][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.669816][ T294] bridge_slave_0: entered allmulticast mode [ 23.675927][ T294] bridge_slave_0: entered promiscuous mode [ 23.685059][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.692108][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.699229][ T294] bridge_slave_1: entered allmulticast mode [ 23.705508][ T294] bridge_slave_1: entered promiscuous mode [ 23.844827][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.851984][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.859265][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.866297][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.883476][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.890628][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.897879][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.904931][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.915773][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.922823][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.930063][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.937062][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.947717][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.954772][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.962048][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.969067][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.011387][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.018667][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.026069][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.033781][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.041263][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.048392][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.055763][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.062928][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.074523][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.081575][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.093827][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.100895][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.121639][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.128676][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.136519][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.143597][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.151197][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.158209][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.176252][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.183312][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.191118][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.198136][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.207281][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.214338][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.246545][ T296] veth0_vlan: entered promiscuous mode [ 24.268340][ T295] veth0_vlan: entered promiscuous mode [ 24.284422][ T297] veth0_vlan: entered promiscuous mode [ 24.298471][ T296] veth1_macvtap: entered promiscuous mode [ 24.305790][ T294] veth0_vlan: entered promiscuous mode [ 24.322026][ T295] veth1_macvtap: entered promiscuous mode [ 24.329492][ T297] veth1_macvtap: entered promiscuous mode [ 24.351419][ T294] veth1_macvtap: entered promiscuous mode [ 24.378525][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.447977][ T322] FAULT_INJECTION: forcing a failure. [ 24.447977][ T322] name failslab, interval 1, probability 0, space 0, times 0 [ 24.457371][ T318] netlink: 'syz.0.1': attribute type 27 has an invalid length. [ 24.462214][ T322] CPU: 1 UID: 0 PID: 322 Comm: syz.2.3 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 24.462260][ T322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 24.462280][ T322] Call Trace: [ 24.462286][ T322] [ 24.462294][ T322] __dump_stack+0x21/0x30 [ 24.462317][ T322] dump_stack_lvl+0x140/0x1c0 [ 24.462335][ T322] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.462354][ T322] dump_stack+0x19/0x20 [ 24.462370][ T322] should_fail_ex+0x3c2/0x510 [ 24.462388][ T322] should_failslab+0xac/0x100 [ 24.462407][ T322] kmem_cache_alloc_noprof+0x42/0x410 [ 24.462432][ T322] ? __kernfs_new_node+0xf1/0x740 [ 24.462452][ T322] __kernfs_new_node+0xf1/0x740 [ 24.462471][ T322] ? kernfs_new_node+0x280/0x280 [ 24.462491][ T322] ? bus_add_driver+0x18c/0x730 [ 24.462509][ T322] kernfs_new_node+0x154/0x280 [ 24.462528][ T322] kernfs_create_dir_ns+0x4b/0x130 [ 24.462548][ T322] sysfs_create_dir_ns+0x127/0x210 [ 24.462573][ T322] ? __cfi_sysfs_create_dir_ns+0x10/0x10 [ 24.462597][ T322] ? kstrdup+0x7b/0x130 [ 24.462620][ T322] kobject_add_internal+0x71f/0xc20 [ 24.462640][ T322] kobject_init_and_add+0x12c/0x1a0 [ 24.462659][ T322] ? __cfi_kobject_init_and_add+0x10/0x10 [ 24.462676][ T322] ? __kasan_kmalloc+0x96/0xb0 [ 24.462695][ T322] ? __kmalloc_cache_noprof+0x23c/0x470 [ 24.462719][ T322] ? klist_init+0x29/0xe0 [ 24.462734][ T322] bus_add_driver+0x2a2/0x730 [ 24.462752][ T322] driver_register+0x2b7/0x3c0 [ 24.462775][ T322] usb_gadget_register_driver_owner+0xfc/0x270 [ 24.462809][ T322] raw_ioctl+0x144c/0x37a0 [ 24.462832][ T322] ? __cfi_raw_ioctl+0x10/0x10 [ 24.462853][ T322] ? selinux_file_ioctl+0x732/0x1480 [ 24.462880][ T322] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 24.462907][ T322] ? hook_file_ioctl+0x1ef/0x590 [ 24.462929][ T322] ? __cfi_hook_file_ioctl+0x10/0x10 [ 24.462953][ T322] ? __fget_files+0x2bc/0x330 [ 24.462971][ T322] ? bpf_lsm_file_ioctl+0xd/0x20 [ 24.462990][ T322] ? security_file_ioctl+0x3e/0x110 [ 24.463013][ T322] ? __cfi_raw_ioctl+0x10/0x10 [ 24.463032][ T322] __se_sys_ioctl+0x123/0x1b0 [ 24.463052][ T322] __x64_sys_ioctl+0x7f/0xa0 [ 24.463069][ T322] x64_sys_call+0x1878/0x2ee0 [ 24.463088][ T322] do_syscall_64+0x57/0xf0 [ 24.463106][ T322] ? clear_bhb_loop+0x50/0xa0 [ 24.463128][ T322] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.463150][ T322] RIP: 0033:0x7f7da019f7ab [ 24.463171][ T322] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 24.463185][ T322] RSP: 002b:00007f7da0fd9f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 24.463209][ T322] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f7da019f7ab [ 24.463223][ T322] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 24.463234][ T322] RBP: 00007f7da0fdafd0 R08: 0000000000000001 R09: 00000000ffffffff [ 24.463246][ T322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.463258][ T322] R13: 00002000000009c0 R14: 0000000000000002 R15: 0000000000000000 [ 24.463272][ T322] [ 24.463286][ T322] kobject: kobject_add_internal failed for raw-gadget.2 (error: -12 parent: drivers) [ 24.468435][ T318] lo: entered promiscuous mode [ 24.482784][ T322] UDC core: USB Raw Gadget: driver registration failed: -12 [ 24.490746][ T318] lo: entered allmulticast mode [ 24.493580][ T322] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 24.497103][ T318] tunl0: entered promiscuous mode [ 24.679537][ T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.696388][ T318] tunl0: entered allmulticast mode [ 24.825806][ T318] gre0: entered promiscuous mode [ 24.830893][ T318] gre0: entered allmulticast mode [ 24.836110][ T318] gretap0: entered promiscuous mode [ 24.841355][ T318] gretap0: entered allmulticast mode [ 24.846880][ T318] erspan0: entered promiscuous mode [ 24.852102][ T318] erspan0: entered allmulticast mode [ 24.857584][ T318] ip_vti0: entered promiscuous mode [ 24.859724][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 24.862834][ T318] ip_vti0: entered allmulticast mode [ 24.869353][ T65] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 24.873584][ T318] ip6_vti0: entered promiscuous mode [ 24.882163][ T65] usb 4-1: config 0 has no interface number 0 [ 24.886617][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.894640][ T65] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 24.900371][ T318] ip6_vti0: entered allmulticast mode [ 24.909839][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.915049][ T318] sit0: entered promiscuous mode [ 24.923168][ T65] usb 4-1: Product: syz [ 24.927690][ T318] sit0: entered allmulticast mode [ 24.932881][ T65] usb 4-1: Manufacturer: syz [ 24.937196][ T318] ip6tnl0: entered promiscuous mode [ 24.941568][ T65] usb 4-1: SerialNumber: syz [ 24.946666][ T318] ip6tnl0: entered allmulticast mode [ 24.953537][ T65] usb 4-1: config 0 descriptor?? [ 24.956744][ T318] ip6gre0: entered promiscuous mode [ 24.964017][ T65] smsc95xx v2.0.0 [ 24.966675][ T318] ip6gre0: entered allmulticast mode [ 24.975800][ T318] syz_tun: entered promiscuous mode [ 24.981226][ T318] syz_tun: entered allmulticast mode [ 24.986837][ T318] ip6gretap0: entered promiscuous mode [ 24.992371][ T318] ip6gretap0: entered allmulticast mode [ 24.998292][ T318] bridge0: entered promiscuous mode [ 25.003593][ T318] bridge0: entered allmulticast mode [ 25.009235][ T318] vcan0: entered promiscuous mode [ 25.014651][ T318] vcan0: entered allmulticast mode [ 25.019994][ T318] dummy0: entered promiscuous mode [ 25.025107][ T318] dummy0: entered allmulticast mode [ 25.030835][ T318] veth0: entered promiscuous mode [ 25.035870][ T318] veth0: entered allmulticast mode [ 25.041596][ T318] veth1: entered promiscuous mode [ 25.046801][ T318] veth1: entered allmulticast mode [ 25.053321][ T318] wg0: entered promiscuous mode [ 25.058246][ T318] wg0: entered allmulticast mode [ 25.063503][ T318] wg1: entered promiscuous mode [ 25.068468][ T318] wg1: entered allmulticast mode [ 25.073791][ T318] wg2: entered promiscuous mode [ 25.078697][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.089627][ T318] wg2: entered allmulticast mode [ 25.094786][ T318] veth0_to_bridge: entered promiscuous mode [ 25.100756][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 25.109512][ T318] veth0_to_bridge: entered allmulticast mode [ 25.110031][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.116630][ T318] veth1_to_bridge: entered promiscuous mode [ 25.127001][ T10] usb 2-1: config 0 descriptor?? [ 25.129819][ T318] veth1_to_bridge: entered allmulticast mode [ 25.141703][ T318] veth0_to_bond: entered promiscuous mode [ 25.147514][ T318] veth0_to_bond: entered allmulticast mode [ 25.160158][ T318] bond_slave_0: entered promiscuous mode [ 25.166215][ T318] bond_slave_0: entered allmulticast mode [ 25.172793][ T318] veth1_to_bond: entered promiscuous mode [ 25.178577][ T318] veth1_to_bond: entered allmulticast mode [ 25.184977][ T318] bond_slave_1: entered promiscuous mode [ 25.190646][ T318] bond_slave_1: entered allmulticast mode [ 25.196652][ T318] veth0_to_team: entered promiscuous mode [ 25.202433][ T318] veth0_to_team: entered allmulticast mode [ 25.208700][ T318] team_slave_0: entered promiscuous mode [ 25.214389][ T318] team_slave_0: entered allmulticast mode [ 25.220471][ T318] veth1_to_team: entered promiscuous mode [ 25.226207][ T318] veth1_to_team: entered allmulticast mode [ 25.232540][ T318] team_slave_1: entered promiscuous mode [ 25.238284][ T318] team_slave_1: entered allmulticast mode [ 25.244512][ T318] veth0_to_batadv: entered promiscuous mode [ 25.250706][ T318] veth0_to_batadv: entered allmulticast mode [ 25.257160][ T318] batadv_slave_0: entered promiscuous mode [ 25.263037][ T318] batadv_slave_0: entered allmulticast mode [ 25.270140][ T318] veth1_to_batadv: entered promiscuous mode [ 25.276094][ T318] veth1_to_batadv: entered allmulticast mode [ 25.282908][ T318] batadv_slave_1: entered promiscuous mode [ 25.288740][ T318] batadv_slave_1: entered allmulticast mode [ 25.294759][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.300004][ T318] xfrm0: entered promiscuous mode [ 25.307311][ T318] xfrm0: entered allmulticast mode [ 25.312812][ T318] veth0_to_hsr: entered promiscuous mode [ 25.318469][ T318] veth0_to_hsr: entered allmulticast mode [ 25.324643][ T318] hsr_slave_0: entered promiscuous mode [ 25.330304][ T318] hsr_slave_0: entered allmulticast mode [ 25.336459][ T318] veth1_to_hsr: entered promiscuous mode [ 25.342249][ T318] veth1_to_hsr: entered allmulticast mode [ 25.348285][ T318] hsr_slave_1: entered promiscuous mode [ 25.354240][ T318] hsr_slave_1: entered allmulticast mode [ 25.360379][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 25.366347][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 25.369328][ T65] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 25.374560][ T318] veth1_virt_wifi: entered promiscuous mode [ 25.385978][ T65] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 25.392842][ T10] usb 2-1: USB disconnect, device number 2 [ 25.405612][ T318] veth1_virt_wifi: entered allmulticast mode [ 25.413475][ T318] veth0_virt_wifi: entered promiscuous mode [ 25.419373][ T318] veth0_virt_wifi: entered allmulticast mode [ 25.425882][ T318] veth1_vlan: entered promiscuous mode [ 25.431389][ T318] veth1_vlan: entered allmulticast mode [ 25.437262][ T318] veth0_vlan: entered allmulticast mode [ 25.443407][ T318] vlan0: entered promiscuous mode [ 25.448524][ T318] vlan0: entered allmulticast mode [ 25.453726][ T9] usb 3-1: device descriptor read/64, error -71 [ 25.459944][ T318] vlan1: entered promiscuous mode [ 25.460020][ T318] vlan1: entered allmulticast mode [ 25.470496][ T318] veth1_macvtap: entered allmulticast mode [ 25.476608][ T318] veth0_macvtap: entered promiscuous mode [ 25.482500][ T318] veth0_macvtap: entered allmulticast mode [ 25.488602][ T318] macsec0: entered promiscuous mode [ 25.494005][ T318] macsec0: entered allmulticast mode [ 25.600701][ T337] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.699723][ T9] usb 3-1: device descriptor read/64, error -71 [ 25.737911][ T329] rust_binder: 336: undelivered TRANSACTION_ERROR: 29189 [ 25.829608][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.863128][ T350] FAULT_INJECTION: forcing a failure. [ 25.863128][ T350] name failslab, interval 1, probability 0, space 0, times 0 [ 25.876010][ T350] CPU: 0 UID: 0 PID: 350 Comm: syz.0.13 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 25.876030][ T350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 25.876041][ T350] Call Trace: [ 25.876048][ T350] [ 25.876055][ T350] __dump_stack+0x21/0x30 [ 25.876079][ T350] dump_stack_lvl+0x140/0x1c0 [ 25.876096][ T350] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.876114][ T350] ? __kasan_check_write+0x18/0x20 [ 25.876131][ T350] ? mutex_unlock+0x90/0x240 [ 25.876144][ T350] dump_stack+0x19/0x20 [ 25.876152][ T350] should_fail_ex+0x3c2/0x510 [ 25.876171][ T350] should_failslab+0xac/0x100 [ 25.876183][ T350] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 25.876213][ T350] ? __cfi_selinux_kernfs_init_security+0x10/0x10 [ 25.876242][ T350] ? kstrdup_const+0x45/0x60 [ 25.876264][ T350] kstrdup+0x4d/0x130 [ 25.876277][ T350] ? kstrdup_const+0x3a/0x60 [ 25.876289][ T350] kstrdup_const+0x45/0x60 [ 25.876300][ T350] __kernfs_new_node+0xaa/0x740 [ 25.876311][ T350] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 25.876323][ T350] ? kernfs_new_node+0x280/0x280 [ 25.876341][ T350] ? __kasan_check_write+0x18/0x20 [ 25.876365][ T350] ? down_write+0xee/0x2b0 [ 25.876388][ T350] ? rpm_resume+0xb92/0x1670 [ 25.876406][ T350] kernfs_new_node+0x154/0x280 [ 25.876418][ T350] kernfs_create_link+0xa8/0x200 [ 25.876431][ T350] sysfs_do_create_link_sd+0x8a/0x120 [ 25.876440][ T350] sysfs_create_link+0x6c/0x90 [ 25.876449][ T350] driver_sysfs_add+0x91/0x240 [ 25.876462][ T350] really_probe+0x178/0x8b0 [ 25.876477][ T350] __driver_probe_device+0x193/0x280 [ 25.876505][ T350] driver_probe_device+0x54/0x3f0 [ 25.876530][ T350] __driver_attach+0x422/0x5e0 [ 25.876552][ T350] bus_for_each_dev+0x249/0x2d0 [ 25.876562][ T350] ? __cfi___driver_attach+0x10/0x10 [ 25.876575][ T350] ? __cfi_bus_for_each_dev+0x10/0x10 [ 25.876584][ T350] ? __kasan_kmalloc+0x96/0xb0 [ 25.876595][ T350] ? _raw_spin_unlock+0x45/0x60 [ 25.876606][ T350] ? klist_add_tail+0x1dd/0x220 [ 25.876618][ T350] driver_attach+0x46/0x50 [ 25.876638][ T350] bus_add_driver+0x393/0x730 [ 25.876657][ T350] driver_register+0x2b7/0x3c0 [ 25.876680][ T350] usb_gadget_register_driver_owner+0xfc/0x270 [ 25.876701][ T350] raw_ioctl+0x144c/0x37a0 [ 25.876714][ T350] ? __cfi_raw_ioctl+0x10/0x10 [ 25.876725][ T350] ? selinux_file_ioctl+0x732/0x1480 [ 25.876740][ T350] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 25.876754][ T350] ? hook_file_ioctl+0x1ef/0x590 [ 25.876775][ T350] ? __cfi_hook_file_ioctl+0x10/0x10 [ 25.876800][ T350] ? __fget_files+0x2bc/0x330 [ 25.876819][ T350] ? bpf_lsm_file_ioctl+0xd/0x20 [ 25.876837][ T350] ? security_file_ioctl+0x3e/0x110 [ 25.876856][ T350] ? __cfi_raw_ioctl+0x10/0x10 [ 25.876867][ T350] __se_sys_ioctl+0x123/0x1b0 [ 25.876879][ T350] __x64_sys_ioctl+0x7f/0xa0 [ 25.876890][ T350] x64_sys_call+0x1878/0x2ee0 [ 25.876902][ T350] do_syscall_64+0x57/0xf0 [ 25.876921][ T350] ? clear_bhb_loop+0x50/0xa0 [ 25.876945][ T350] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.876968][ T350] RIP: 0033:0x7f9ef6f9f7ab [ 25.876983][ T350] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 25.876992][ T350] RSP: 002b:00007f9ef7f2ef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 25.877004][ T350] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f9ef6f9f7ab [ 25.877011][ T350] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 25.877018][ T350] RBP: 00007f9ef7f2ffd0 R08: 0000000000000001 R09: 00000000ffffffff [ 25.877025][ T350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.877031][ T350] R13: 00002000000009c0 R14: 0000000000000002 R15: 0000000000000000 [ 25.877038][ T350] [ 25.877049][ T350] raw-gadget.3 gadget.0: really_probe: driver_sysfs_add failed [ 26.258983][ T350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.267570][ T350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.319547][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.330736][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.341641][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 26.350692][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.359488][ T10] usb 2-1: config 0 descriptor?? [ 26.449695][ T9] usb 3-1: device descriptor read/64, error -71 [ 26.689617][ T9] usb 3-1: device descriptor read/64, error -71 [ 26.799648][ T9] usb usb3-port1: attempt power cycle [ 27.029543][ T327] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.139525][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.160576][ T9] usb 3-1: device descriptor read/8, error -71 [ 27.169876][ T10] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 27.177347][ T10] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input4 [ 27.189263][ T327] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 27.198394][ T327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.207233][ T327] usb 1-1: config 0 descriptor?? [ 27.213128][ T327] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 27.221005][ T327] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 27.227455][ T65] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 27.238388][ T65] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 27.253724][ T65] usb 4-1: USB disconnect, device number 2 [ 27.290525][ T9] usb 3-1: device descriptor read/8, error -71 [ 27.413115][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 27.413130][ T36] audit: type=1400 audit(1794037224.899:132): avc: denied { create } for pid=352 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.439162][ T36] audit: type=1400 audit(1794037224.899:133): avc: denied { append } for pid=352 comm="syz.0.14" name="001" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 27.529546][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 27.550563][ T9] usb 3-1: device descriptor read/8, error -71 [ 27.668054][ T36] audit: type=1400 audit(1794037225.149:134): avc: denied { ioctl } for pid=313 comm="syz.1.2" path="socket:[3555]" dev="sockfs" ino=3555 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.680571][ T9] usb 3-1: device descriptor read/8, error -71 [ 27.748375][ T359] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 27.762618][ T36] audit: type=1400 audit(1794037225.249:135): avc: denied { mount } for pid=358 comm="syz.3.15" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 27.784616][ T36] audit: type=1400 audit(1794037225.249:136): avc: denied { write } for pid=358 comm="syz.3.15" name="sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.809752][ T9] usb usb3-port1: unable to enumerate USB device [ 27.824104][ T361] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET) [ 27.830671][ T36] audit: type=1400 audit(1794037225.309:137): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 27.855203][ T36] audit: type=1400 audit(1794037225.339:138): avc: denied { create } for pid=352 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 27.874771][ T36] audit: type=1400 audit(1794037225.339:139): avc: denied { create } for pid=352 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.894647][ T36] audit: type=1400 audit(1794037225.339:140): avc: denied { bind } for pid=352 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.913826][ T36] audit: type=1400 audit(1794037225.339:141): avc: denied { listen } for pid=352 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.000128][ T369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.008679][ T369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.135437][ T354] rust_binder: 370: undelivered TRANSACTION_COMPLETE [ 28.219520][ T327] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.305607][ T382] FAULT_INJECTION: forcing a failure. [ 28.305607][ T382] name failslab, interval 1, probability 0, space 0, times 0 [ 28.318954][ T382] CPU: 0 UID: 0 PID: 382 Comm: syz.2.22 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 28.318982][ T382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 28.318994][ T382] Call Trace: [ 28.319000][ T382] [ 28.319008][ T382] __dump_stack+0x21/0x30 [ 28.319031][ T382] dump_stack_lvl+0x140/0x1c0 [ 28.319047][ T382] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.319058][ T382] dump_stack+0x19/0x20 [ 28.319068][ T382] should_fail_ex+0x3c2/0x510 [ 28.319078][ T382] should_failslab+0xac/0x100 [ 28.319088][ T382] kmem_cache_alloc_noprof+0x42/0x410 [ 28.319103][ T382] ? __kernfs_new_node+0xf1/0x740 [ 28.319125][ T382] __kernfs_new_node+0xf1/0x740 [ 28.319145][ T382] ? kernfs_new_node+0x280/0x280 [ 28.319166][ T382] ? bus_add_driver+0x18c/0x730 [ 28.319185][ T382] kernfs_new_node+0x154/0x280 [ 28.319196][ T382] kernfs_create_dir_ns+0x4b/0x130 [ 28.319208][ T382] sysfs_create_dir_ns+0x127/0x210 [ 28.319222][ T382] ? __cfi_sysfs_create_dir_ns+0x10/0x10 [ 28.319236][ T382] ? kstrdup+0x7b/0x130 [ 28.319250][ T382] kobject_add_internal+0x71f/0xc20 [ 28.319271][ T382] kobject_init_and_add+0x12c/0x1a0 [ 28.319290][ T382] ? __cfi_kobject_init_and_add+0x10/0x10 [ 28.319308][ T382] ? __kasan_kmalloc+0x96/0xb0 [ 28.319326][ T382] ? __kmalloc_cache_noprof+0x23c/0x470 [ 28.319341][ T382] ? klist_init+0x29/0xe0 [ 28.319352][ T382] bus_add_driver+0x2a2/0x730 [ 28.319371][ T382] driver_register+0x2b7/0x3c0 [ 28.319392][ T382] usb_gadget_register_driver_owner+0xfc/0x270 [ 28.319419][ T382] raw_ioctl+0x144c/0x37a0 [ 28.319442][ T382] ? __cfi_raw_ioctl+0x10/0x10 [ 28.319465][ T382] ? selinux_file_ioctl+0x732/0x1480 [ 28.319489][ T382] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 28.319516][ T382] ? hook_file_ioctl+0x1ef/0x590 [ 28.319541][ T382] ? __cfi_hook_file_ioctl+0x10/0x10 [ 28.319567][ T382] ? __fget_files+0x2bc/0x330 [ 28.319588][ T382] ? bpf_lsm_file_ioctl+0xd/0x20 [ 28.319605][ T382] ? security_file_ioctl+0x3e/0x110 [ 28.319619][ T382] ? __cfi_raw_ioctl+0x10/0x10 [ 28.319631][ T382] __se_sys_ioctl+0x123/0x1b0 [ 28.319642][ T382] __x64_sys_ioctl+0x7f/0xa0 [ 28.319652][ T382] x64_sys_call+0x1878/0x2ee0 [ 28.319663][ T382] do_syscall_64+0x57/0xf0 [ 28.319680][ T382] ? clear_bhb_loop+0x50/0xa0 [ 28.319702][ T382] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.319724][ T382] RIP: 0033:0x7f7da019f7ab [ 28.319740][ T382] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 28.319754][ T382] RSP: 002b:00007f7da0fd9f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.319774][ T382] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f7da019f7ab [ 28.319782][ T382] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 28.319789][ T382] RBP: 00007f7da0fdafd0 R08: 0000000000000001 R09: 00000000ffffffff [ 28.319795][ T382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.319802][ T382] R13: 00002000000009c0 R14: 0000000000000002 R15: 0000000000000000 [ 28.319809][ T382] [ 28.625576][ T382] kobject: kobject_add_internal failed for raw-gadget.2 (error: -12 parent: drivers) [ 28.635223][ T382] UDC core: USB Raw Gadget: driver registration failed: -12 [ 28.642584][ T382] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 28.651828][ T327] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 28.660815][ T327] usb 4-1: config 1 has no interface number 0 [ 28.666908][ T327] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 28.675987][ T327] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 28.685483][ T351] usb 2-1: USB disconnect, device number 3 [ 28.687041][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 28.701477][ T327] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 28.710561][ T327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.718567][ T327] usb 4-1: Product: syz [ 28.722781][ T327] usb 4-1: Manufacturer: syz [ 28.727594][ T327] usb 4-1: SerialNumber: syz [ 28.999545][ T351] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.149507][ T351] usb 2-1: Using ep0 maxpacket: 32 [ 29.155781][ T351] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 29.164083][ T351] usb 2-1: config 0 has no interface number 0 [ 29.172378][ T351] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 29.181556][ T351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.190204][ T351] usb 2-1: Product: syz [ 29.194421][ T351] usb 2-1: Manufacturer: syz [ 29.199017][ T351] usb 2-1: SerialNumber: syz [ 29.207704][ T351] usb 2-1: config 0 descriptor?? [ 29.214656][ T351] smsc95xx v2.0.0 [ 29.479535][ T354] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 29.614850][ T351] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 29.619521][ T354] usb 3-1: device descriptor read/64, error -71 [ 29.625625][ T351] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 29.799024][ T390] usb 1-1: USB disconnect, device number 2 [ 29.809364][ T390] ftdi_sio 1-1:0.0: device disconnected [ 29.869514][ T354] usb 3-1: device descriptor read/64, error -71 [ 29.915859][ T329] rust_binder: 391: undelivered TRANSACTION_COMPLETE [ 30.000114][ T395] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 30.024108][ T399] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 30.080018][ T406] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 30.109541][ T354] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 30.239574][ T354] usb 3-1: device descriptor read/64, error -71 [ 30.329537][ T329] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.480626][ T329] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 30.488825][ T329] usb 1-1: config 0 has no interface number 0 [ 30.494966][ T329] usb 1-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.499507][ T354] usb 3-1: device descriptor read/64, error -71 [ 30.505966][ T329] usb 1-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.522036][ T329] usb 1-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.534934][ T329] usb 1-1: config 0 interface 16 has no altsetting 0 [ 30.541658][ T329] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 30.550735][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.559352][ T329] usb 1-1: config 0 descriptor?? [ 30.619597][ T354] usb usb3-port1: attempt power cycle [ 30.766984][ T329] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x1 [ 30.774280][ T329] saitek 0003:06A3:0CD0.0001: unknown global tag 0xd [ 30.781025][ T329] saitek 0003:06A3:0CD0.0001: item 0 4 1 13 parsing failed [ 30.788360][ T329] saitek 0003:06A3:0CD0.0001: parse failed [ 30.794337][ T329] saitek 0003:06A3:0CD0.0001: probe with driver saitek failed with error -22 [ 30.868577][ T327] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 30.899149][ T327] usb 4-1: USB disconnect, device number 3 [ 30.934839][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.959733][ T354] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 30.968440][ T329] usb 1-1: USB disconnect, device number 3 [ 30.981728][ T354] usb 3-1: device descriptor read/8, error -71 [ 31.110575][ T354] usb 3-1: device descriptor read/8, error -71 [ 31.299543][ T327] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 31.349543][ T354] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 31.370652][ T354] usb 3-1: device descriptor read/8, error -71 [ 31.429522][ T327] usb 4-1: device descriptor read/64, error -71 [ 31.448090][ T351] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 31.459092][ T351] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 31.468729][ T351] usb 2-1: USB disconnect, device number 4 [ 31.480809][ T417] mmap: syz.0.33 (417): VmData 29204480 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 31.516687][ T354] usb 3-1: device descriptor read/8, error -71 [ 31.584943][ T329] rust_binder: 421: undelivered TRANSACTION_COMPLETE [ 31.629698][ T354] usb usb3-port1: unable to enumerate USB device [ 31.669561][ T327] usb 4-1: device descriptor read/64, error -71 [ 31.909566][ T327] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 32.039595][ T327] usb 4-1: device descriptor read/64, error -71 [ 32.199539][ T329] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.235955][ T437] FAULT_INJECTION: forcing a failure. [ 32.235955][ T437] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.249074][ T437] CPU: 0 UID: 0 PID: 437 Comm: syz.2.39 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 32.249092][ T437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 32.249099][ T437] Call Trace: [ 32.249104][ T437] [ 32.249108][ T437] __dump_stack+0x21/0x30 [ 32.249122][ T437] dump_stack_lvl+0x140/0x1c0 [ 32.249132][ T437] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.249142][ T437] ? check_stack_object+0x138/0x150 [ 32.249158][ T437] dump_stack+0x19/0x20 [ 32.249166][ T437] should_fail_ex+0x3c2/0x510 [ 32.249176][ T437] should_fail+0xf/0x20 [ 32.249185][ T437] should_fail_usercopy+0x1e/0x30 [ 32.249195][ T437] _copy_to_user+0x24/0xa0 [ 32.249207][ T437] simple_read_from_buffer+0xed/0x160 [ 32.249220][ T437] proc_fail_nth_read+0x1aa/0x220 [ 32.249233][ T437] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 32.249246][ T437] ? bpf_lsm_file_permission+0xd/0x20 [ 32.249257][ T437] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 32.249269][ T437] vfs_read+0x28b/0xc70 [ 32.249285][ T437] ? __cfi_vfs_read+0x10/0x10 [ 32.249298][ T437] ? __kasan_check_write+0x18/0x20 [ 32.249312][ T437] ? mutex_lock+0x97/0x1d0 [ 32.249325][ T437] ? __cfi_mutex_lock+0x10/0x10 [ 32.249338][ T437] ksys_read+0x145/0x260 [ 32.249352][ T437] ? __cfi_ksys_read+0x10/0x10 [ 32.249366][ T437] ? __kasan_check_write+0x18/0x20 [ 32.249379][ T437] ? fput+0x1a4/0x230 [ 32.249391][ T437] ? __kasan_check_read+0x15/0x20 [ 32.249412][ T437] __x64_sys_read+0x7f/0x90 [ 32.249427][ T437] x64_sys_call+0x2638/0x2ee0 [ 32.249443][ T437] do_syscall_64+0x57/0xf0 [ 32.249453][ T437] ? clear_bhb_loop+0x50/0xa0 [ 32.249477][ T437] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.249497][ T437] RIP: 0033:0x7f7da016034e [ 32.249512][ T437] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 32.249525][ T437] RSP: 002b:00007f7da0fdbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 32.249570][ T437] RAX: ffffffffffffffda RBX: 00007f7da0fdc6c0 RCX: 00007f7da016034e [ 32.249578][ T437] RDX: 000000000000000f RSI: 00007f7da0fdc0a0 RDI: 0000000000000004 [ 32.249585][ T437] RBP: 00007f7da0fdc090 R08: 0000000000000000 R09: 0000000000000000 [ 32.249592][ T437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.249598][ T437] R13: 00007f7da0426038 R14: 00007f7da0425fa0 R15: 00007fffaa9c3648 [ 32.249607][ T437] [ 32.491621][ T327] usb 4-1: device descriptor read/64, error -71 [ 32.498294][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 32.498308][ T36] audit: type=1400 audit(1794037229.989:171): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 32.499665][ T329] usb 2-1: Using ep0 maxpacket: 32 [ 32.535911][ T36] audit: type=1400 audit(1794037230.019:172): avc: denied { read write } for pid=438 comm="syz.2.41" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.561746][ T36] audit: type=1400 audit(1794037230.019:173): avc: denied { open } for pid=438 comm="syz.2.41" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.585392][ T36] audit: type=1400 audit(1794037230.019:174): avc: denied { ioctl } for pid=438 comm="syz.2.41" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x556e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.599596][ T327] usb usb4-port1: attempt power cycle [ 32.610809][ T329] usb 2-1: config 0 has an invalid interface number: 189 but max is 0 [ 32.626763][ T329] usb 2-1: config 0 has no interface number 0 [ 32.632894][ T329] usb 2-1: config 0 interface 189 altsetting 128 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 32.644125][ T329] usb 2-1: config 0 interface 189 altsetting 128 endpoint 0xD has an invalid bInterval 144, changing to 11 [ 32.655666][ T329] usb 2-1: config 0 interface 189 altsetting 128 endpoint 0xD has invalid maxpacket 1853, setting to 1024 [ 32.667155][ T329] usb 2-1: config 0 interface 189 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 32.680525][ T329] usb 2-1: config 0 interface 189 has no altsetting 0 [ 32.688801][ T329] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0134, bcdDevice=aa.35 [ 32.706456][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.714711][ T329] usb 2-1: Product: syz [ 32.719769][ T329] usb 2-1: Manufacturer: syz [ 32.724477][ T329] usb 2-1: SerialNumber: syz [ 32.729838][ T329] usb 2-1: config 0 descriptor?? [ 32.735241][ T434] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 32.736121][ T310] rust_binder: 449: undelivered TRANSACTION_COMPLETE [ 32.948207][ T434] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 32.949547][ T327] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 32.965305][ T329] ftdi_sio 2-1:0.189: FTDI USB Serial Device converter detected [ 32.973443][ T329] ftdi_sio ttyUSB0: unknown device type: 0xaa35 [ 32.981632][ T329] usb 2-1: USB disconnect, device number 5 [ 32.981786][ T327] usb 4-1: device descriptor read/8, error -71 [ 32.988169][ T329] ftdi_sio 2-1:0.189: device disconnected [ 33.059533][ T310] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 33.079582][ T409] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.120513][ T327] usb 4-1: device descriptor read/8, error -71 [ 33.189534][ T310] usb 3-1: device descriptor read/64, error -71 [ 33.229525][ T409] usb 1-1: Using ep0 maxpacket: 32 [ 33.235709][ T409] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 33.243853][ T409] usb 1-1: config 0 has no interface number 0 [ 33.251277][ T409] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 33.260367][ T409] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.268343][ T409] usb 1-1: Product: syz [ 33.272531][ T409] usb 1-1: Manufacturer: syz [ 33.277137][ T409] usb 1-1: SerialNumber: syz [ 33.282290][ T409] usb 1-1: config 0 descriptor?? [ 33.287918][ T409] smsc95xx v2.0.0 [ 33.359541][ T327] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 33.380534][ T327] usb 4-1: device descriptor read/8, error -71 [ 33.429548][ T310] usb 3-1: device descriptor read/64, error -71 [ 33.483310][ T36] audit: type=1326 audit(1794037230.969:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=460 comm="syz.1.49" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77a439fb19 code=0x0 [ 33.530524][ T327] usb 4-1: device descriptor read/8, error -71 [ 33.535620][ T36] audit: type=1400 audit(1794037231.019:176): avc: denied { mounton } for pid=460 comm="syz.1.49" path="/3/file0" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 33.589038][ T36] audit: type=1400 audit(1794037231.069:177): avc: denied { write } for pid=460 comm="syz.1.49" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 33.610460][ T36] audit: type=1400 audit(1794037231.069:178): avc: denied { setattr } for pid=460 comm="syz.1.49" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 33.639587][ T327] usb usb4-port1: unable to enumerate USB device [ 33.669537][ T310] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 33.708025][ T409] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 33.718811][ T409] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 33.809658][ T310] usb 3-1: device descriptor read/64, error -71 [ 34.049526][ T310] usb 3-1: device descriptor read/64, error -71 [ 34.159618][ T310] usb usb3-port1: attempt power cycle [ 34.499521][ T310] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 34.520505][ T310] usb 3-1: device descriptor read/8, error -71 [ 34.650567][ T310] usb 3-1: device descriptor read/8, error -71 [ 34.889527][ T310] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 34.910542][ T310] usb 3-1: device descriptor read/8, error -71 [ 35.040526][ T310] usb 3-1: device descriptor read/8, error -71 [ 35.085470][ T351] rust_binder: 480: undelivered TRANSACTION_COMPLETE [ 35.140493][ T36] audit: type=1400 audit(1794037232.629:179): avc: denied { create } for pid=483 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.140783][ T484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.56'. [ 35.160894][ T36] audit: type=1400 audit(1794037232.629:180): avc: denied { write } for pid=483 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.169686][ T310] usb usb3-port1: unable to enumerate USB device [ 35.201517][ T484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.56'. [ 35.210449][ T484] netlink: 'syz.3.56': attribute type 2 has an invalid length. [ 35.531828][ T409] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 35.542739][ T409] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 35.556811][ T409] usb 1-1: USB disconnect, device number 4 [ 35.616462][ T491] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 35.969762][ T409] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 35.986102][ T506] Zero length message leads to an empty skb [ 35.992763][ T506] @: renamed from veth0_vlan (while UP) [ 36.072305][ T512] netlink: 68 bytes leftover after parsing attributes in process `syz.0.66'. [ 36.099543][ T409] usb 2-1: device descriptor read/64, error -71 [ 36.115134][ T327] rust_binder: 507: undelivered TRANSACTION_COMPLETE [ 36.201975][ T522] capability: warning: `syz.2.68' uses 32-bit capabilities (legacy support in use) [ 36.319562][ T351] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 36.339558][ T409] usb 2-1: device descriptor read/64, error -71 [ 36.459526][ T351] usb 4-1: device descriptor read/64, error -71 [ 36.579544][ T409] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 36.699525][ T351] usb 4-1: device descriptor read/64, error -71 [ 36.709616][ T409] usb 2-1: device descriptor read/64, error -71 [ 36.939529][ T351] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 36.949615][ T409] usb 2-1: device descriptor read/64, error -71 [ 37.059917][ T409] usb usb2-port1: attempt power cycle [ 37.069551][ T351] usb 4-1: device descriptor read/64, error -71 [ 37.250473][ T327] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 37.309526][ T351] usb 4-1: device descriptor read/64, error -71 [ 37.399617][ T409] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 37.409636][ T327] usb 3-1: Using ep0 maxpacket: 32 [ 37.415772][ T327] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 37.423992][ T327] usb 3-1: config 0 has no interface number 0 [ 37.429638][ T351] usb usb4-port1: attempt power cycle [ 37.431627][ T327] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 37.436182][ T409] usb 2-1: device descriptor read/8, error -71 [ 37.444708][ T327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.458779][ T327] usb 3-1: Product: syz [ 37.462958][ T327] usb 3-1: Manufacturer: syz [ 37.467543][ T327] usb 3-1: SerialNumber: syz [ 37.472706][ T327] usb 3-1: config 0 descriptor?? [ 37.478743][ T327] smsc95xx v2.0.0 [ 37.580521][ T409] usb 2-1: device descriptor read/8, error -71 [ 37.769665][ T351] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 37.790479][ T351] usb 4-1: device descriptor read/8, error -71 [ 37.792881][ T310] rust_binder: 540: undelivered TRANSACTION_COMPLETE [ 37.830132][ T409] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 37.851343][ T409] usb 2-1: device descriptor read/8, error -71 [ 37.865627][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 37.865641][ T36] audit: type=1400 audit(1794037235.349:201): avc: denied { read write } for pid=542 comm="syz.0.77" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 37.897147][ T327] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 37.899360][ T36] audit: type=1400 audit(1794037235.349:202): avc: denied { open } for pid=542 comm="syz.0.77" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 37.909757][ T327] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 37.950569][ T351] usb 4-1: device descriptor read/8, error -71 [ 37.969936][ T545] netlink: 'syz.0.78': attribute type 4 has an invalid length. [ 37.980564][ T409] usb 2-1: device descriptor read/8, error -71 [ 38.033526][ T551] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 38.090033][ T409] usb usb2-port1: unable to enumerate USB device [ 38.104835][ T36] audit: type=1400 audit(1794037235.589:203): avc: denied { read } for pid=553 comm="syz.0.82" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 38.127465][ T36] audit: type=1400 audit(1794037235.589:204): avc: denied { open } for pid=553 comm="syz.0.82" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 38.165104][ T559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'. [ 38.189543][ T351] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 38.210962][ T351] usb 4-1: device descriptor read/8, error -71 [ 38.275294][ T310] rust_binder: 560: undelivered TRANSACTION_COMPLETE [ 38.340804][ T351] usb 4-1: device descriptor read/8, error -71 [ 38.360003][ T36] audit: type=1400 audit(1794037235.849:205): avc: denied { write } for pid=562 comm="syz.0.86" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 38.382676][ T36] audit: type=1400 audit(1794037235.849:206): avc: denied { mounton } for pid=562 comm="syz.0.86" path="/41/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 38.449605][ T351] usb usb4-port1: unable to enumerate USB device [ 39.099524][ T310] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 39.209313][ T584] fuse: Bad value for 'group_id' [ 39.214401][ T584] fuse: Bad value for 'group_id' [ 39.269506][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 39.275989][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 39.284771][ T310] usb 2-1: config 0 has an invalid interface number: 111 but max is 0 [ 39.292995][ T310] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.309505][ T310] usb 2-1: config 0 has no interface number 0 [ 39.315626][ T310] usb 2-1: config 0 interface 111 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 39.328958][ T310] usb 2-1: config 0 interface 111 has no altsetting 0 [ 39.343785][ T310] usb 2-1: New USB device found, idVendor=0bda, idProduct=b81a, bcdDevice=b7.54 [ 39.352912][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.367809][ T310] usb 2-1: Product: syz [ 39.372065][ T310] usb 2-1: Manufacturer: syz [ 39.376680][ T310] usb 2-1: SerialNumber: syz [ 39.382272][ T310] usb 2-1: config 0 descriptor?? [ 39.391782][ T10] rust_binder: 588: undelivered TRANSACTION_COMPLETE [ 39.689522][ T351] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 39.761986][ T327] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 39.772947][ T327] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 39.783665][ T327] usb 3-1: USB disconnect, device number 14 [ 39.819517][ T351] usb 1-1: device descriptor read/64, error -71 [ 39.948539][ T36] audit: type=1400 audit(1794037237.429:207): avc: denied { unlink } for pid=593 comm="syz.3.96" name="#1" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 39.961339][ T598] overlay: filesystem on ./file0 not supported as upperdir [ 39.988523][ T36] audit: type=1400 audit(1794037237.469:208): avc: denied { read write } for pid=599 comm="syz.3.97" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 39.989493][ T600] device-mapper: table: 252:0: snapshot: COW device cannot be the same as origin device (-EINVAL) [ 40.011933][ T36] audit: type=1400 audit(1794037237.469:209): avc: denied { open } for pid=599 comm="syz.3.97" path="/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 40.023357][ T600] device-mapper: ioctl: error adding target to table [ 40.053065][ T36] audit: type=1400 audit(1794037237.469:210): avc: denied { ioctl } for pid=599 comm="syz.3.97" path="/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 40.099526][ T351] usb 1-1: device descriptor read/64, error -71 [ 40.120338][ T310] usb 2-1: USB disconnect, device number 10 [ 40.319541][ T45] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 40.339547][ T351] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 40.393008][ T612] SELinux: Context system_u:object_r:ssh_agent_exec_t:s0 is not valid (left unmapped). [ 40.459541][ T310] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 40.469594][ T351] usb 1-1: device descriptor read/64, error -71 [ 40.476804][ T45] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.487732][ T45] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.500526][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 40.507136][ T45] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 40.516185][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.524683][ T45] usb 4-1: config 0 descriptor?? [ 40.589522][ T310] usb 2-1: device descriptor read/64, error -71 [ 40.639518][ T327] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 40.709514][ T351] usb 1-1: device descriptor read/64, error -71 [ 40.735802][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 40.741782][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 40.750441][ T45] usb 4-1: USB disconnect, device number 12 [ 40.769532][ T327] usb 3-1: device descriptor read/64, error -71 [ 40.819639][ T351] usb usb1-port1: attempt power cycle [ 40.829529][ T310] usb 2-1: device descriptor read/64, error -71 [ 41.019538][ T327] usb 3-1: device descriptor read/64, error -71 [ 41.079529][ T310] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 41.159525][ T351] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 41.180512][ T351] usb 1-1: device descriptor read/8, error -71 [ 41.209526][ T310] usb 2-1: device descriptor read/64, error -71 [ 41.269558][ T327] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 41.279448][ T614] mmap: syz.3.101 (614) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.308336][ T617] futex_wake_op: syz.3.102 tries to shift op by 144; fix this program [ 41.317606][ T351] usb 1-1: device descriptor read/8, error -71 [ 41.393585][ T45] rust_binder: 619: undelivered TRANSACTION_COMPLETE [ 41.419531][ T327] usb 3-1: device descriptor read/64, error -71 [ 41.459571][ T310] usb 2-1: device descriptor read/64, error -71 [ 41.559557][ T351] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 41.569652][ T310] usb usb2-port1: attempt power cycle [ 41.580565][ T351] usb 1-1: device descriptor read/8, error -71 [ 41.669537][ T327] usb 3-1: device descriptor read/64, error -71 [ 41.710588][ T351] usb 1-1: device descriptor read/8, error -71 [ 41.749546][ T354] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 41.779597][ T327] usb usb3-port1: attempt power cycle [ 41.819621][ T351] usb usb1-port1: unable to enumerate USB device [ 41.909519][ T354] usb 4-1: Using ep0 maxpacket: 32 [ 41.914695][ T310] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 41.923344][ T354] usb 4-1: config 0 has an invalid interface number: 189 but max is 0 [ 41.931534][ T354] usb 4-1: config 0 has no interface number 0 [ 41.937601][ T354] usb 4-1: config 0 interface 189 altsetting 128 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 41.948771][ T354] usb 4-1: config 0 interface 189 altsetting 128 endpoint 0xD has an invalid bInterval 144, changing to 11 [ 41.960189][ T354] usb 4-1: config 0 interface 189 altsetting 128 endpoint 0xD has invalid maxpacket 1853, setting to 1024 [ 41.971574][ T354] usb 4-1: config 0 interface 189 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 41.984826][ T354] usb 4-1: config 0 interface 189 has no altsetting 0 [ 41.992137][ T310] usb 2-1: device descriptor read/8, error -71 [ 41.999048][ T354] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0134, bcdDevice=aa.35 [ 42.008553][ T354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.016548][ T354] usb 4-1: Product: syz [ 42.020713][ T354] usb 4-1: Manufacturer: syz [ 42.025286][ T354] usb 4-1: SerialNumber: syz [ 42.030472][ T354] usb 4-1: config 0 descriptor?? [ 42.035675][ T622] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 42.119851][ T327] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 42.128268][ T310] usb 2-1: device descriptor read/8, error -71 [ 42.140495][ T327] usb 3-1: device descriptor read/8, error -71 [ 42.250635][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.269720][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.280284][ T327] usb 3-1: device descriptor read/8, error -71 [ 42.337176][ T354] ftdi_sio 4-1:0.189: FTDI USB Serial Device converter detected [ 42.345269][ T354] ftdi_sio ttyUSB0: unknown device type: 0xaa35 [ 42.352861][ T354] usb 4-1: USB disconnect, device number 13 [ 42.359209][ T354] ftdi_sio 4-1:0.189: device disconnected [ 42.379528][ T310] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 42.400655][ T310] usb 2-1: device descriptor read/8, error -71 [ 42.519545][ T327] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 42.530614][ T310] usb 2-1: device descriptor read/8, error -71 [ 42.540482][ T327] usb 3-1: device descriptor read/8, error -71 [ 42.639611][ T310] usb usb2-port1: unable to enumerate USB device [ 42.670522][ T327] usb 3-1: device descriptor read/8, error -71 [ 42.779599][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 42.787225][ T327] usb usb3-port1: unable to enumerate USB device [ 42.863228][ T634] tap0: tun_chr_ioctl cmd 1074025676 [ 42.868570][ T634] tap0: owner set to 0 [ 42.874039][ T634] fuse: Bad value for 'user_id' [ 42.878957][ T634] fuse: Bad value for 'user_id' [ 42.919521][ T10] usb 1-1: device descriptor read/64, error -71 [ 42.977550][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 42.977594][ T36] audit: type=1400 audit(1794037240.459:216): avc: denied { write } for pid=637 comm="syz.3.108" name="tcp" dev="proc" ino=4026532522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 42.990202][ T638] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.005938][ T36] audit: type=1400 audit(1794037240.459:217): avc: denied { name_bind } for pid=637 comm="syz.3.108" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 43.012906][ T639] rust_binder: 637:639 error while translating object: ENOENT [ 43.033811][ T36] audit: type=1400 audit(1794037240.459:218): avc: denied { node_bind } for pid=637 comm="syz.3.108" saddr=224.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 43.041508][ T639] rust_binder: 637:639 transaction async to 637:0 failed ENOENT, code 0 size 72-24 line thread.rs:878 [ 43.074465][ T638] netlink: 'syz.3.108': attribute type 40 has an invalid length. [ 43.090741][ T36] audit: type=1400 audit(1794037240.579:219): avc: denied { read } for pid=642 comm="syz.3.109" path="socket:[10101]" dev="sockfs" ino=10101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.189564][ T10] usb 1-1: device descriptor read/64, error -71 [ 43.439554][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 43.529559][ T354] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 43.569529][ T10] usb 1-1: device descriptor read/64, error -71 [ 43.659536][ T354] usb 2-1: device descriptor read/64, error -71 [ 43.809544][ T10] usb 1-1: device descriptor read/64, error -71 [ 43.899549][ T354] usb 2-1: device descriptor read/64, error -71 [ 43.919621][ T10] usb usb1-port1: attempt power cycle [ 43.968893][ T45] rust_binder: 649: undelivered TRANSACTION_COMPLETE [ 44.070257][ T36] audit: type=1400 audit(1794037241.559:220): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.092411][ T327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.101296][ T327] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.159506][ T354] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 44.269518][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 44.290695][ T10] usb 1-1: device descriptor read/8, error -71 [ 44.299549][ T354] usb 2-1: device descriptor read/64, error -71 [ 44.420473][ T10] usb 1-1: device descriptor read/8, error -71 [ 44.539547][ T354] usb 2-1: device descriptor read/64, error -71 [ 44.649603][ T354] usb usb2-port1: attempt power cycle [ 44.679525][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 44.700458][ T10] usb 1-1: device descriptor read/8, error -71 [ 44.831746][ T10] usb 1-1: device descriptor read/8, error -71 [ 44.940930][ T10] usb usb1-port1: unable to enumerate USB device [ 44.999652][ T354] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 45.021033][ T354] usb 2-1: device descriptor read/8, error -71 [ 45.160481][ T354] usb 2-1: device descriptor read/8, error -71 [ 45.409530][ T354] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 45.430478][ T354] usb 2-1: device descriptor read/8, error -71 [ 45.482746][ T36] audit: type=1400 audit(1794037242.969:221): avc: denied { connect } for pid=677 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.560566][ T354] usb 2-1: device descriptor read/8, error -71 [ 45.669621][ T354] usb usb2-port1: unable to enumerate USB device [ 45.869528][ T351] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 45.999529][ T351] usb 1-1: device descriptor read/64, error -71 [ 46.239518][ T351] usb 1-1: device descriptor read/64, error -71 [ 46.479607][ T351] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 46.609529][ T351] usb 1-1: device descriptor read/64, error -71 [ 46.792518][ T10] rust_binder: 684: undelivered TRANSACTION_COMPLETE [ 46.850157][ T351] usb 1-1: device descriptor read/64, error -71 [ 46.898767][ T36] audit: type=1400 audit(1794037244.379:223): avc: denied { create } for pid=693 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.917968][ T36] audit: type=1400 audit(1794037244.379:222): avc: denied { create } for pid=693 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.937296][ T36] audit: type=1400 audit(1794037244.389:224): avc: denied { read } for pid=693 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.957349][ T36] audit: type=1400 audit(1794037244.389:225): avc: denied { ioctl } for pid=693 comm="syz.2.124" path="socket:[15003]" dev="sockfs" ino=15003 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.959637][ T351] usb usb1-port1: attempt power cycle [ 46.983123][ T697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 47.249767][ T45] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 47.319615][ T351] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 47.340495][ T351] usb 1-1: device descriptor read/8, error -71 [ 47.399511][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 47.405887][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 47.414248][ T45] usb 3-1: config 8 has an invalid interface number: 50 but max is 1 [ 47.422358][ T45] usb 3-1: config 8 has an invalid descriptor of length 226, skipping remainder of the config [ 47.432615][ T45] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 47.441477][ T45] usb 3-1: config 8 has no interface number 0 [ 47.447533][ T45] usb 3-1: config 8 interface 50 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 47.449516][ T354] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 47.458418][ T45] usb 3-1: config 8 interface 50 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.478842][ T45] usb 3-1: config 8 interface 50 has no altsetting 0 [ 47.486330][ T351] usb 1-1: device descriptor read/8, error -71 [ 47.493126][ T45] usb 3-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=82.e4 [ 47.502191][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.510177][ T45] usb 3-1: Product: Ⰺ [ 47.514311][ T45] usb 3-1: Manufacturer: Ѝ [ 47.518787][ T45] usb 3-1: SerialNumber: 㰊 [ 47.529522][ T10] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 47.609505][ T354] usb 2-1: Using ep0 maxpacket: 8 [ 47.615596][ T354] usb 2-1: config 5 has an invalid interface number: 54 but max is 0 [ 47.623841][ T354] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 47.634014][ T354] usb 2-1: config 5 has no interface number 0 [ 47.640113][ T354] usb 2-1: config 5 interface 54 has no altsetting 0 [ 47.648202][ T354] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 9.3a [ 47.657265][ T354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.665289][ T10] usb 4-1: device descriptor read/64, error -71 [ 47.671564][ T354] usb 2-1: Product: syz [ 47.675713][ T354] usb 2-1: Manufacturer: syz [ 47.680360][ T354] usb 2-1: SerialNumber: syz [ 47.726548][ T45] rtl8150 3-1:8.50: couldn't find required endpoints [ 47.733313][ T351] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 47.740956][ T45] rtl8150 3-1:8.50: probe with driver rtl8150 failed with error -5 [ 47.750646][ T45] usb 3-1: USB disconnect, device number 19 [ 47.770458][ T351] usb 1-1: device descriptor read/8, error -71 [ 47.900540][ T351] usb 1-1: device descriptor read/8, error -71 [ 47.929507][ T10] usb 4-1: device descriptor read/64, error -71 [ 48.009629][ T351] usb usb1-port1: unable to enumerate USB device [ 48.169515][ T10] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 48.299512][ T10] usb 4-1: device descriptor read/64, error -71 [ 48.391208][ T354] cdc_ether 2-1:5.54: More than one union descriptor, skipping ... [ 48.399361][ T354] usb 2-1: bad CDC descriptors [ 48.399885][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 48.399898][ T36] audit: type=1326 audit(1794037245.879:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=715 comm="syz.1.133" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a439fb19 code=0x7ffc0000 [ 48.404692][ T354] usb 2-1: unsupported MDLM descriptors [ 48.414792][ T36] audit: type=1326 audit(1794037245.879:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=715 comm="syz.1.133" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a439fb19 code=0x7ffc0000 [ 48.435464][ T354] cdc_acm 2-1:5.54: More than one union descriptor, skipping ... [ 48.441599][ T36] audit: type=1326 audit(1794037245.899:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=715 comm="syz.1.133" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f77a439fb19 code=0x7ffc0000 [ 48.468404][ T354] usb 2-1: USB disconnect, device number 19 [ 48.473751][ T36] audit: type=1326 audit(1794037245.899:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=715 comm=05 exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a439fb19 code=0x7ffc0000 [ 48.528921][ T36] audit: type=1326 audit(1794037245.899:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=715 comm=05 exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a439fb19 code=0x7ffc0000 [ 48.553297][ T36] audit: type=1326 audit(1794037245.899:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=715 comm=05 exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f77a439fb19 code=0x7ffc0000 [ 48.577758][ T36] audit: type=1326 audit(1794037245.899:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=715 comm=05 exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a439fb19 code=0x7ffc0000 [ 48.602173][ T36] audit: type=1326 audit(1794037245.899:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=715 comm=05 exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f77a439fb19 code=0x7ffc0000 [ 48.626725][ T36] audit: type=1326 audit(1794037245.899:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=715 comm=05 exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a439fb19 code=0x7ffc0000 [ 48.651454][ T36] audit: type=1326 audit(1794037245.899:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=715 comm=05 exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f77a439fb19 code=0x7ffc0000 [ 48.651825][ T351] rust_binder: 719: undelivered TRANSACTION_ERROR: 29189 [ 48.675733][ T10] usb 4-1: device descriptor read/64, error -71 [ 48.789706][ T10] usb usb4-port1: attempt power cycle [ 48.819556][ T354] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 48.970664][ T354] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 48.980635][ T354] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 48.990369][ T354] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 49.001282][ T354] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 49.010379][ T354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.019361][ T716] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 49.026683][ T716] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 49.034643][ T354] pl2303 2-1:1.0: pl2303 converter detected [ 49.041394][ T354] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 49.071189][ T351] rust_binder: 712: undelivered TRANSACTION_COMPLETE [ 49.139531][ T10] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 49.160556][ T10] usb 4-1: device descriptor read/8, error -71 [ 49.290505][ T10] usb 4-1: device descriptor read/8, error -71 [ 49.349516][ T351] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 49.349712][ T716] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 49.365432][ T716] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 49.372749][ T716] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 49.379913][ T716] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 49.387915][ T716] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 49.500891][ T351] usb 3-1: unable to get BOS descriptor or descriptor too short [ 49.509267][ T351] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.519427][ T351] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 49.528404][ T351] usb 3-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 49.529512][ T10] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 49.540558][ T351] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 49.555782][ T351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.563801][ T351] usb 3-1: Product: syz [ 49.568838][ T351] usb 3-1: Manufacturer: syz [ 49.570092][ T10] usb 4-1: device descriptor read/8, error -71 [ 49.573476][ T351] usb 3-1: SerialNumber: syz [ 49.601170][ T735] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 49.615967][ T735] overlayfs: conflicting lowerdir path [ 49.660354][ T716] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 49.668088][ T716] pl2303 ttyUSB0: error sending break = -32 [ 49.691080][ T310] usb 2-1: USB disconnect, device number 20 [ 49.698049][ T310] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 49.708002][ T310] pl2303 2-1:1.0: device disconnected [ 49.715111][ T10] usb 4-1: device descriptor read/8, error -71 [ 49.829635][ T10] usb usb4-port1: unable to enumerate USB device [ 49.849558][ T354] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 49.873549][ T351] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 49.885054][ T351] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 49.895634][ T351] usb 3-1: USB disconnect, device number 20 [ 49.944847][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.999533][ T354] usb 1-1: Using ep0 maxpacket: 32 [ 50.005694][ T354] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.015920][ T354] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 50.026274][ T354] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 50.035371][ T354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.043398][ T354] usb 1-1: Product: syz [ 50.047561][ T354] usb 1-1: Manufacturer: syz [ 50.052360][ T354] usb 1-1: SerialNumber: syz [ 50.057420][ T354] usb 1-1: config 0 descriptor?? [ 50.220282][ T295] ------------[ cut here ]------------ [ 50.225933][ T295] WARNING: CPU: 0 PID: 295 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 50.235281][ T295] Modules linked in: [ 50.239176][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 50.251024][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 50.261115][ T295] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 50.267316][ T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 6e 54 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 64 61 03 cc e8 76 97 3d ff <0f> 0b e9 3e ff ff ff e8 6a 97 3d ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 50.287007][ T295] RSP: 0018:ffffc9000b66fb88 EFLAGS: 00010293 [ 50.293511][ T295] RAX: ffffffff824bd25a RBX: 0000000000000000 RCX: ffff888123a4e2c0 [ 50.301560][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.309658][ T295] RBP: ffffc9000b66fbb0 R08: ffff88813367ac3f R09: 1ffff110266cf587 [ 50.317626][ T295] R10: dffffc0000000000 R11: ffffed10266cf588 R12: 0000000000000000 [ 50.325606][ T295] R13: dffffc0000000000 R14: ffff88813367aba0 R15: ffff888112bda220 [ 50.333596][ T295] FS: 0000555590f9b500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 50.342617][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.349216][ T295] CR2: 0000555590fc6998 CR3: 000000010432c000 CR4: 00000000003526b0 [ 50.357192][ T295] Call Trace: [ 50.360487][ T295] [ 50.363409][ T295] ovl_do_remove+0x824/0xd10 [ 50.367984][ T295] ? ovl_set_redirect+0x780/0x780 [ 50.373068][ T295] ? __cfi_down_write+0x10/0x10 [ 50.377922][ T295] ovl_rmdir+0x1e/0x30 [ 50.382022][ T295] vfs_rmdir+0x3db/0x560 [ 50.386281][ T295] incfs_kill_sb+0x102/0x220 [ 50.390882][ T295] deactivate_locked_super+0xd5/0x270 [ 50.396268][ T295] deactivate_super+0xb8/0xe0 [ 50.400982][ T295] cleanup_mnt+0x438/0x4d0 [ 50.405416][ T295] __cleanup_mnt+0x1d/0x40 [ 50.409841][ T295] task_work_run+0x1e8/0x260 [ 50.414438][ T295] ? __cfi_task_work_run+0x10/0x10 [ 50.419558][ T295] ? __x64_sys_umount+0x12e/0x180 [ 50.424588][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 50.429976][ T295] ? __kasan_check_read+0x15/0x20 [ 50.435000][ T295] resume_user_mode_work+0x35/0x50 [ 50.440115][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 50.445573][ T295] do_syscall_64+0x63/0xf0 [ 50.450018][ T295] ? clear_bhb_loop+0x50/0xa0 [ 50.454712][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.460630][ T295] RIP: 0033:0x7f77a43a0d57 [ 50.465037][ T295] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 50.484665][ T295] RSP: 002b:00007fffeb9ff268 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 50.493097][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f77a43a0d57 [ 50.501101][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffeb9ff320 [ 50.509069][ T295] RBP: 00007fffeb9ff320 R08: 00007fffeba00320 R09: 00000000ffffffff [ 50.517041][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffeba003b0 [ 50.525035][ T295] R13: 00007f77a4436fb3 R14: 000000000000c2e1 R15: 00007fffeba003f0 [ 50.533036][ T295] [ 50.536061][ T295] ---[ end trace 0000000000000000 ]--- [ 50.542066][ T295] ------------[ cut here ]------------ [ 50.547537][ T295] WARNING: CPU: 0 PID: 295 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 50.556863][ T295] Modules linked in: [ 50.560807][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Tainted: G W syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 50.573947][ T295] Tainted: [W]=WARN [ 50.577736][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 50.587808][ T295] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 50.593467][ T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 6e 54 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 64 61 03 cc e8 76 97 3d ff <0f> 0b e9 3e ff ff ff e8 6a 97 3d ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 50.613093][ T295] RSP: 0018:ffffc9000b66fb88 EFLAGS: 00010293 [ 50.619153][ T295] RAX: ffffffff824bd25a RBX: 0000000000000000 RCX: ffff888123a4e2c0 [ 50.627134][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.635123][ T295] RBP: ffffc9000b66fbb0 R08: ffff88813367ac3f R09: 1ffff110266cf587 [ 50.643133][ T295] R10: dffffc0000000000 R11: ffffed10266cf588 R12: 0000000000000000 [ 50.651138][ T295] R13: dffffc0000000000 R14: ffff88813367aba0 R15: ffff888112bda220 [ 50.659109][ T295] FS: 0000555590f9b500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 50.668045][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.674669][ T295] CR2: 0000555590fc6998 CR3: 000000010432c000 CR4: 00000000003526b0 [ 50.682657][ T295] Call Trace: [ 50.685925][ T295] [ 50.688835][ T295] ovl_do_remove+0x824/0xd10 [ 50.693666][ T295] ? ovl_set_redirect+0x780/0x780 [ 50.698684][ T295] ? __cfi_down_write+0x10/0x10 [ 50.703553][ T295] ovl_rmdir+0x1e/0x30 [ 50.707624][ T295] vfs_rmdir+0x3db/0x560 [ 50.711881][ T295] incfs_kill_sb+0x197/0x220 [ 50.716489][ T295] deactivate_locked_super+0xd5/0x270 [ 50.721924][ T295] deactivate_super+0xb8/0xe0 [ 50.726602][ T295] cleanup_mnt+0x438/0x4d0 [ 50.731050][ T295] __cleanup_mnt+0x1d/0x40 [ 50.735460][ T295] task_work_run+0x1e8/0x260 [ 50.740064][ T295] ? __cfi_task_work_run+0x10/0x10 [ 50.745176][ T295] ? __x64_sys_umount+0x12e/0x180 [ 50.750232][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 50.755605][ T295] ? __kasan_check_read+0x15/0x20 [ 50.760645][ T295] resume_user_mode_work+0x35/0x50 [ 50.765758][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 50.771226][ T295] do_syscall_64+0x63/0xf0 [ 50.775637][ T295] ? clear_bhb_loop+0x50/0xa0 [ 50.780317][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.786209][ T295] RIP: 0033:0x7f77a43a0d57 [ 50.790663][ T295] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 50.810306][ T295] RSP: 002b:00007fffeb9ff268 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 50.818727][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f77a43a0d57 [ 50.826708][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffeb9ff320 [ 50.834698][ T295] RBP: 00007fffeb9ff320 R08: 00007fffeba00320 R09: 00000000ffffffff [ 50.842700][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffeba003b0 [ 50.850688][ T295] R13: 00007f77a4436fb3 R14: 000000000000c2e1 R15: 00007fffeba003f0 [ 50.858652][ T295] [ 50.861676][ T295] ---[ end trace 0000000000000000 ]--- [ 52.624454][ T310] usb 1-1: USB disconnect, device number 17