last executing test programs: 9.939524511s ago: executing program 3 (id=158): syz_ublk_setup_io_uring(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x4000, 0x0, 0x3dd}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000002c0)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x240280, 0x0) read$FUSE(r0, &(0x7f0000001700)={0x2020}, 0x2020) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000280)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x400455c8, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 9.939080571s ago: executing program 3 (id=159): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') timer_settime(0x0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f00000059c0)={0x2020}, 0x2020) r2 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000004c0)={'ip6gre0\x00', 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff7) 9.875103743s ago: executing program 3 (id=160): futex(&(0x7f0000004000), 0x3, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x1002, 0x20000000001000}) fcntl$lock(r1, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x2, 0x2b, 0x9}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000180)={0x4, 0x0, [{0xc0000001, 0x29be, 0x6, 0x0, 0x7fffffff, 0x80000001, 0x5}, {0xe, 0x2, 0x0, 0xffffffff, 0xfff, 0x6, 0x6}, {0xc0000000, 0x593, 0x0, 0x5, 0x10, 0x7, 0x200000}, {0x40000000, 0x7, 0x1, 0x356ec937, 0xfffffffa, 0xf484f0c, 0xfff}]}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x1, 0x90}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 9.874766963s ago: executing program 3 (id=161): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0xfd9c, 0x4044881, &(0x7f00000000c0)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x19}, 0x12}, 0xfffffdfc) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc0386723, &(0x7f00000000c0)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0, 0x110}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000840)=0x6de0, 0x4) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0xc000, 0x1) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom$inet(r0, 0x0, 0x0, 0x40002002, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) 9.873706953s ago: executing program 3 (id=162): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001fc0)=""/4094, 0xffe}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000003740)=""/40, 0x28}, {&(0x7f0000003800)=""/4096, 0x1020}], 0x5}, 0x400c}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0xffc3}, 0x80002}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 9.775125755s ago: executing program 3 (id=163): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9e}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r10 = fcntl$dupfd(r9, 0x406, r9) write$cgroup_pid(r10, &(0x7f0000000240), 0xb375) syz_ublk_setup_queues(r10, r7, &(0x7f0000000540)={0x0, 0xf281, 0x8, 0x3, 0x28e, 0x0, r1}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf514, 0x1000, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xddca, 0x2, 0x0, 0x330, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x8, 0x0, 0x2db, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x4, 0x0, 0x1fe, 0x0, r1}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r8, 0xc0107525, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r6, '\x00', {0x2, 0xb55, 0x100000, 0x0}}, &(0x7f0000001fc0)) 9.734998616s ago: executing program 32 (id=163): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9e}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r10 = fcntl$dupfd(r9, 0x406, r9) write$cgroup_pid(r10, &(0x7f0000000240), 0xb375) syz_ublk_setup_queues(r10, r7, &(0x7f0000000540)={0x0, 0xf281, 0x8, 0x3, 0x28e, 0x0, r1}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf514, 0x1000, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xddca, 0x2, 0x0, 0x330, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x8, 0x0, 0x2db, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x4, 0x0, 0x1fe, 0x0, r1}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r8, 0xc0107525, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r6, '\x00', {0x2, 0xb55, 0x100000, 0x0}}, &(0x7f0000001fc0)) 4.188190145s ago: executing program 4 (id=213): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x240280, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, &(0x7f0000000280)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x400455c8, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 4.170293035s ago: executing program 4 (id=214): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r4, 0xc144f000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000267000/0x400000)=nil) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = socket$can_bcm(0x1d, 0x2, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendmsg$can_bcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.941677881s ago: executing program 4 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001200), 0x1, 0x0) lseek(r0, 0x5, 0x4) (async) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="660f2933c4e1f9709120171b900dc4e3256b470ce8b92f020000b8ce3c0000ba000000000f30b9800000c00f3235000800000f30f40f20e035000040000f22e066baf80cb8d1028f8def66bafc0cb005ee650f01c9f30f1eca", 0x59}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001600010000000000080000000a000a00"], 0x18}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x0, 0x8, 0x3, 0x1c, 0x8}) (async) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/self/cwd\x00', &(0x7f0000000400)=""/100, 0x64) 3.751499176s ago: executing program 4 (id=216): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000002c0)={0xffffffffffffffff, 0x9, 0x2}) r3 = fsmount(r0, 0x0, 0x0) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@local, 0x0, 0x0, 0x40, 0x0, [{@multicast1}, {@initdev}, {@local}, {@dev}]}}) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000004035121682400001020301090269000301053009080b00010107208c090400000001012000"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) fstat(r0, &(0x7f0000005380)) 2.182087565s ago: executing program 1 (id=229): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume_offset', 0x0, 0x18) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f00000000c0)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x8) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002940)=ANY=[@ANYRES16=r2, @ANYRES16=r0, @ANYRES8=r2, @ANYRES32, @ANYRES8=r2], 0xf00}, 0x1, 0x0, 0x0, 0x800}, 0x0) write(r1, &(0x7f0000000700)='+ 0 0 0', 0x7) 2.126961497s ago: executing program 1 (id=230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000100)=0x3) recvmmsg(r4, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10102, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000100)) shutdown(r4, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f0000000280)=[@rdmsr={0x66, 0x18, {0xc0010140}}], 0x18}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000080)) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000180)=@arm64={0xd, 0x3, 0x7, '\x00', 0x3d35fb28}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d00210000000000000000000700000005000000000000000a00020077a9c6f76f000000060005"], 0x30}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.372984825s ago: executing program 2 (id=232): socket(0x10, 0x803, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r3, 0xc144f000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000267000/0x400000)=nil) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$can_bcm(0x1d, 0x2, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.361369876s ago: executing program 2 (id=233): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9100, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r4, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$tmpfs(0x0, &(0x7f0000000340)='./cgroup\x00', &(0x7f00000003c0), 0x4000, &(0x7f0000000380)={[{@huge_never}], [{@hash}, {@fowner_eq={'fowner', 0x3d, r6}}]}) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000200)={0xe, {0x2, 0x1, 0x40, 0x55, "b900ee1f0e189ca3c9c729ccd10b82e51682f0ae4a090b0db3883e3be34039094ce357c228a5b5e36dc5abb746aaefc07a0cb9cfb514f257007094faa89256545d4c88eb2f416571395cf7e15908217d04f1a9e372"}}, 0x61) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x9361, 0x9) fsetxattr$trusted_overlay_nlink(r7, &(0x7f0000000180), &(0x7f00000001c0)={'L+', 0x8}, 0x16, 0x2) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000000)=0x6, &(0x7f0000000080)=0x2) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000140)={0xa, {0x4, 0x3, 0xff}}, 0xa) ioctl$USBDEVFS_RESET(r7, 0x5514) 1.235146039s ago: executing program 2 (id=234): r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0xe0100) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010102000000106d041ec740000102030109022d000101974008090400200103010307092104004001229a0909058103"], &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x11, 0x5, 0x4, 0x20, 0x4}, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="54393bb30a"], 0x4, [{0x34, &(0x7f0000000200)=@string={0x34, 0x3, "c8929779fb8f7aa4803b4c2f2e3e6f03f7e19d6b085c1e2d042db7503fb24fb317207b32b6f7424b6ca8034ae92d51ea0a00"}}, {0x97, &(0x7f0000000480)=@string={0x97, 0x3, "f271e4780b3ba65cceb931bcb2e0d53da15e7a9979e894a566642bee24d6856443df0edae8ae813d26004514d8bbf039b150a3736be9bd43fda50423d73fdde0c492874ddbdbe785479e699a71ec2d7bce1f3c8058ca544ecf4d20c628392b96d2819dc4d63f53755ab2f1f198ad9ebff9c5a18c1e1f43d2436fca57f136e49a53d352b0c6a56dedc75a6ce9131af214d0f8110baf"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3847}}, {0x33, &(0x7f0000000340)=@string={0x33, 0x3, "4c3b6454924805048ca650d4205b3bf8a94c632c8f5983e4badbd5afea9c8f100d1e9f376f5e353023fd62c38224da9b8c"}}]}) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x9201, 0x0) 1.234442439s ago: executing program 1 (id=235): syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) lsm_set_self_attr(0x65, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000680)={[0x0, 0x8a, 0x7fffffffffffe, 0x5, 0x105, 0xfffffffffbfffffd, 0x4002004c4, 0x1003, 0x3, 0x210001, 0x1000000000000010, 0x2, 0x4, 0x0, 0x2, 0x4000000000000000], 0x70000, 0x2200}) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r4 = dup(r3) utimensat(r4, 0x0, &(0x7f0000000100)={{}, {0x0, 0xfffffff9}}, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x1ffffff, 0x4, 0xc4, 0x52, 0x3e, 0x2, 0x80, 0x44, 0x6f, 0x45, 0x6, 0x7, 0x800000001}, {0xb, 0xa7f2, 0x8, 0x86, 0xf1, 0xfd, 0x6, 0x4, 0x0, 0x7, 0x7, 0x6, 0x40000000000001}, {0x0, 0x7, 0x5, 0x30, 0x21, 0x11, 0x7, 0xff, 0x4, 0x15, 0x0, 0x2, 0xfffffffffffffb97}], 0x9}) ioctl$XFS_IOC_INUMBERS(r3, 0x80405880, &(0x7f0000000140)={{0x401, 0x7, 0x8, 0xffffffff}, [{0x5, 0xb399, 0xa}, {0x3ff, 0x8, 0xc, 0x7f}, {0x80, 0x0, 0x99, 0x4}, {0x8001, 0x7, 0x4, 0x9}]}) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000200)={'\x00', 0x4, 0x9, 0xfffffd23, 0x401, 0x77, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) flock(r6, 0x2) fcntl$lock(r7, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x200000000}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r8, &(0x7f0000002140)=""/17, 0x11, 0x0) syz_open_procfs(r5, &(0x7f0000000280)='net/mcfilter\x00') socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r9 = socket(0x5, 0x1, 0x1) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r9], 0x20}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) 1.18493569s ago: executing program 1 (id=236): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, 0x0) 1.16721225s ago: executing program 1 (id=237): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000005, 0x11, r1, 0xae1e3000) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000000)) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000040)=0xffffffff, 0x4) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000300)="90ff0124044b1050c4ce01770000001d001f4ddc53566b93278bff0a800500000000000000840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456c3efed4959a6215be0000766436d0c80cefd28581d158ba86c9d2893bca2d0000000b0015000400000000000000a4de1df32c1739d7fbee9aa241731ae9e0b390829a8399545cf1d80ab062f4f34eeaa6491ffd375c32c9c41b192784fb008e6cf760a221d1fca6cf9733ebea8a223806f64400"/205, 0xcd, 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f00000000c0)=0xff, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae03, 0x400004023) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x2000)=nil) 1.115112912s ago: executing program 1 (id=238): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x6, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0xc, 0x16, {0x16, 0x2, "55fff6b1cf63e83f422770b5bdf6a4732730cdc7"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x9a82eddd50850248}}}, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0x13, 0x55, "12d0498caafa055079d361d5758e0920b86e8db1038cd3424243ded1fe70588b6959415609ff5d634d3dc408ee73c328bea57ecf3a2a5893796730240755106377aead71d4d25a04cce46510a68d702a9a78477285"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000200)={0x20, 0x81, 0x1, "e7"}, &(0x7f0000000240)={0x20, 0x82, 0x3, "f8be4a"}, &(0x7f0000000280)={0x20, 0x83, 0x3, "2c6295"}, &(0x7f00000002c0)={0x20, 0x84, 0x2, "3191"}, &(0x7f0000000300)={0x20, 0x85, 0x3, "be0a4f"}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000003c0)={0x40, 0x14, 0x6, "a3402c5f26a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x6e, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 720.291632ms ago: executing program 0 (id=239): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e23, @private=0xfffffffc}}) 702.930052ms ago: executing program 0 (id=240): syz_ublk_setup_io_uring(0x1b, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000002c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x240280, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, &(0x7f0000000280)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x400455c8, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 677.475753ms ago: executing program 4 (id=241): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r3, 0xc144f000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000267000/0x400000)=nil) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$can_bcm(0x1d, 0x2, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 676.660503ms ago: executing program 0 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="160006004200010600000000ffdbba3704000000"], 0x14}], 0x1}, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') pread64$ublk_ch(r3, &(0x7f0000002140)=@buf_4k, 0x1000, 0x4) io_setup(0xfff, &(0x7f0000000000)) io_setup(0x5, &(0x7f0000000540)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe, r1, &(0x7f00000000c0)='\f\v', 0x2, 0x0, 0x0, 0x4}]) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = getpid() syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x53b9, 0x40, 0x3, 0x394}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xee1f, 0x80, 0x2, 0x2a4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2bf, 0x8, 0x1, 0x326}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x666a, 0x0, 0x2, 0x25b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcfe8, 0x8000, 0x3, 0x6b}, 0xffffffffffffffff}], 0x4, &(0x7f0000001b00)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x5}, 0x0, 0x0, '\x00', {0x4, 0x6cd, 0x0, &(0x7f0000000b00)=@buf_1k="cb8254bdb3280f2211ec9ac3a235ba0d63cdbc0140fa28843a132b34907f3a7f855b8f3825575153325c91db9bcc420b2b718b647acfc95b650c892fb10ecc96965c83365d4e773f163c137c18f2c6d3d9c14f8cdedef1a6ff8f2e6f3c44bffd9683b4e460172f9338e01de960b920139b2634b81348a56244c8490ba6cc68b4a53e176e21ee7f10ee132c67cb9b08dfafc4cc1bc7c6942fda28f8a5bb1111bcb2d2e9e23a7f2964bdc7301c987e4ef066fab5c2095c16c8e6a064785ee4eb5bd355ed9ddd38f1f428d3bd58ae60b94f88419d81e786bb5459094c2cf6f919b6ef3cb0935cce0341a58d4f30bda0c44a3e738a1801c5777e2bf0fd626529337056492216bb1cebb7759bf9bbb767285f8681b8bf1383f52c663d69fe814c8c0a2b132efe3dd95f390dd9142a5fc111a3e9436ed5c25f928e2c8bffddc165c4432b35b149dfbf669b6a500101cfbd039ff38ac291383710ddbf487a7fcc81c14aaf9f5234c199c3cc7cffab2cf5e732efebdbd2a31b5bf696d1895b7b409a1bba227d19f2d9750dfe46e53268cca4ac7fba97f14c5e2abeca82534a35a9b99bc790d004b4fa74a2cda4baca7c9a47a2150b703002d5b88c97fcc4209bb2faf3c895fe0ad9eca37afbe0d3c296f0aca6e68aa76e51d36dd81c2c38e14e269bff42f566ba6518c829b614bd5fc7414fee109a8e7a0bba6dc0c5ed1b7d8e10b3bd47a598e555fb898cbb5d4defc0ffb86f1725116bce1805e96fcbeb1f65c5826e0933e3a7755fba88d8816cfa6dda7175952ee93a7a54224655f6f4b2a81eb96e7ee0fbb11a1357861cbe51abeffacdbefaabe2561e3605a2b771526f5e4b2ad4ce22484776b9485922ca5a0c1cb5878e25186ba1922fea1efee0a7343bab3066b84a7a13f7fa6dae28f26364f64782a6472caee194c1a2d0730acf15e376983a42db3ecd4f9bd669d50696cf6327708d7589df5de293eb1aa25cd22907c15a453998c055911a054cc4781aae8154d30d8feecab71d229105bfc429df686259604c24a1168f3f537ec72f58a0acea2e7aae06c181812cacf803df0d631ad9520ca0e38470b58be3d27e8c1e37150d5fa423415a5aefb11251725bc1c64da5ea14426c13af490709fa12438844cdc67ed1f64bd1658ffb1a0fe1e2ce99f066f42765d2de7c97495764ebe346256f48e203adf16b13b3df8bd5b10cbcb310192e3e1444cdf9113a21bd18526b0d27c5748a5a50da075af9af75c05f34598d694192ba384669de6c8f242bd8f5d293fdbdd350fcb950d6578cfbdbb4f140265b0cc6d17cddf7c153273e3ac30cd1e4a179382ecd9ed00687acb3291d81159ce4e9ba3c14db141f7c56b897a207fe1feef44930146a6370ec109b1d4dd395ee1b708e300c08bc90922f8f4ba5f691ab0d0ed91be316ee74bafe1d011a7a8d4a6685f60a"}}, &(0x7f0000001b80)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r7, r8, r9, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)) r10 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001bc0)={0x0, 0x22a9, 0x20, 0x2, 0xe3}, &(0x7f0000001c40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x14c, 0x0, 0x1, 0x200}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x25dc, 0x800, 0x2, 0xce}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42e8, 0x8000, 0x3, 0x1b5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4023, 0x8, 0x1, 0x1af}}], 0x4, &(0x7f0000002ec0)={0x2e, 0x68, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x3, 0x7ea, 0x0, &(0x7f0000001ec0)=@buf_1k="7b60abb28541734edbbf610dd0b0bb863e4d1d0e75a76e3d21441105e5239dfd4c21ed8205da4d3fe53ff842f0ad12cff665b89e1dbafe8069ce39ad986dc145185a974522aa62dbe9f1e517750a8af22610db2a3461d40b7714e1c08bed062f5a094471ac3188d1a7028e99758004e9d0e389e29b247d4e312dfbd97ef3dcbfc873aeeaeda5677565b44c00a668b3ecf8438671edc043af6c0d26575d95f2981c3528cbfdeedc8c79d10f204e589bc3026985503d72b6e51fd3384a60d75c6f95287836576ba5b1d3a0ff5250d45b1129f5ea4068adb5cb94bcb2a64f890b628b18f7bf8338999064623b69288ecaacf3dda70065f1e59cbe30dd43b776c677d10949b265e297de4e2107757f270f33cf0d547e35d06798c8ae0b4e34a8203ad6863f6d09b6e50c95a381dc496484efdab99f1d501ea70d41f2069a8dfc3dadf9eba9d7ffae5a45dd3034e64bd9f42361cc369487df696cb39bcd153dd70d536f9c93600da74bd00fab57fca49b14c281e5b5a3de3a32e82be3f99206e42c8c123844761c29ca4bee6d4d2e80448a25a96b7851f90aa1f3101aef9af766e0c12351ae50af313c6464ea6ad09f3752ed3ac4c2dc2a7e70af199187e2a27df7af29b95a66d1b4ddba6215bf24f5ad413dbaa8a14d603836b4af2db0115bda13ba7fb973fd6577f3fe715f0d8d8a5e75e7c2cb13f321aec064345907031cf63ec8aa3bde3f75edaf40d1d382f268ba0df00186611b4f8673ca058fa6c4f8b8b154e81f2e7609020e5ef09e446e6f15cd762498a5780ca0df8d344c9d2d07081ad8790a925f8649586aacc35dbb3ed6f4ba3b53ed72a12339f1fb7daa1edca8fc6f830d7fbbd5fb2d452c15a99dc5f85e4ca18daa08077be46c1421b13d1f419960e36e68ba7e2b7a17282325ea4018b323f1cbd761311aa93419281be59c428aa37f41b09bfb5ce58ae4f53264a5815907d1ff7ce3b1843db37946aaf6bda567adf77e366e0db25018b2a82bfd62a766c893b39bf68a4e030ee75eee3d17d26d0ab069938ff2c8ae9c69fc2e567a0fc60cfd052a60bea826600b97b66b237cf6911cea9610e1fe3b3a354479555cb7ba41312f8c1bb12bd2cf13091de2c9c429a21879bdb987f437466a05e1f79953cada49d2609624becda21aa24594f87b77598e1c5728b0a63043ef70b6c5bbd1b50db5210bf7516ce5179a89071531044ec6c3840553553902871303f22a45ecdbcb7dd88cb48c3c93f6f33763dd46e63234d2e0fab4beed88791096fefaa1a331731a838bb8d92539bb0a2ebeb2e67dc6ad0e9ba3d6108b6086644e0e66bf9065eb6fb6d5387b65c99926b10b6f3cb2d4c8a3645f898afc544c5fd0434f92d267e892ad2214a9409b7bfbab3a31e18f337900d729b71f5599f17c358d6f82a2f8177629ba8d9a94bbbeb6589725bd5ad0ea"}}, &(0x7f0000002f40)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002fc0)={0x2e, 0x25, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3ff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002f80)=@any_dev={0x3, 0x8e0, 0x0, 0x0, 0x1000, 0x33, r5, 0x0, 0x11d}}}, &(0x7f0000003040)) syz_ublk_add_dev(r6, r7, r12, r14, &(0x7f00000030c0)={0x2e, 0x40, 0x0, r15, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003080)=@new_dev={0x1, 0xf78, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x20}}}, &(0x7f0000003140)) r16 = syz_pidfd_open(r5, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setns(r16, 0x2000000) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x40c8, &(0x7f0000000280)={[{@uuid_off}, {@nfs_export_off}, {@redirect_dir_follow}, {@redirect_dir_follow}, {@uuid_auto}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r17}}, {@fsname}, {@context={'context', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '}*.'}}]}) 649.763783ms ago: executing program 4 (id=243): r0 = socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) syz_ublk_setup_io_uring(0x40020, 0x0, 0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000180)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r9, 0x0) ioctl$KVM_INTERRUPT(r9, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x9, 0x0, 0x1, 0x0, 0xd, 0x87b, 0x2, 0x0, 0x0, 0x0, 0x5, 0x6, 0x1, 0x3], 0x70000, 0x8340}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x700, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x80, 0x0, @in6={0xa, 0x4e21, 0x10000, @empty, 0x73f}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}}, @sadb_lifetime={0x4, 0x3, 0x0, 0x18de0f3b, 0x2, 0xff}, @sadb_sa={0x2, 0x1, 0x4d5, 0x40, 0x7, 0x38, 0x3, 0x40000000}]}, 0x98}, 0x1, 0x7}, 0x3400c014) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500200000040532b24004000010202010902690003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000905010910003200090825010230000100090402000001022000090402010101022000090582d5db"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 538.926677ms ago: executing program 0 (id=244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000101620000080006"], 0x24}], 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000140)="b9c50a0000b800180000ba000000000f30b9800000c00f3235010000000f302e3e0f01cf0f2206b9d40200000f320f21edd9e566ba200066b8210066efb9800000c00f3235010000000f3064f30f1ef9", 0x50}], 0x1, 0x40, &(0x7f00000002c0)=[@cr0={0x0, 0x80040028}, @cstype0={0x4, 0xd}], 0x2) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000040)=0xfff) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000080)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x7f, 0x6, 0x0, 0xf, 0x6, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0xff, 0xfd, 0x2, '\x00', 0xfd}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 354.506241ms ago: executing program 0 (id=245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x200000000000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="67f2e00d64360fae8197530f00cf64f75dd72e3edb3b0f38f173882e64640f01c5baf80c66b866878a8566efbafc0ced0fc72ff30fc7b30000", 0x39}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 340.782721ms ago: executing program 0 (id=246): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x68, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x40, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_usb_connect(0x3, 0x1b, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0xd0, 0x97, 0xee, 0x8, 0x2100, 0x9e5a, 0x9e95, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x7f, 0x24, 0x80, 0x5}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xe4, &(0x7f0000000000)=@string={0xe4, 0x3, "9537b6228ce0d1f35181338bb6b8f4e1f67ba2cd7869b6bff5ab5e141e814a31f611f59ea21b37e63b9910c0693baba0324ab8e74d7f40acb4d881398cdc3a00e82e9167bf7408092fa27985ae6ce1fa675b885e79f9427659ce605d07d7de703f472adcefdd1e7a92ca4dbbb20697466205720eaa0cec85e3e9b5e3d39614fac79169045fd9466b33eadd375cf6c5a0b5fe8f19ce6acc9ca101d21f16c98efcddacad1ca94bc7730e30f8efa9e8c55921107498b24fac8844579d529f766b17a89eb900000000000000c1cace894946e82e830a784b1dabf5a1815593dcd1b2d6f7"}}]}) 1.09967ms ago: executing program 2 (id=247): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x5c57, &(0x7f0000000180)={0x0, 0x5d9b, 0x20000, 0x2, 0x3c7, 0x0, r1}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r8, &(0x7f0000000440)={0x2e, 0x44, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, r6, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x4, 0x63e, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x8}}}, &(0x7f00000004c0)) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r9, r7, &(0x7f0000000280)={0x0, 0xf5b8, 0x10, 0x1, 0x215, 0x0, r1}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe4b8, 0x2, 0x3, 0xf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b4f, 0x4000, 0x0, 0x344}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f38, 0x1, 0x3, 0x221, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa5df, 0x200, 0x2, 0x2bd, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0xc, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff9}, 0x0, r6, '\x00', {0x1, 0x362, 0x0, 0x0}}, &(0x7f0000001e40)) 842.35µs ago: executing program 2 (id=248): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e23, @private=0xfffffffc}}) 0s ago: executing program 2 (id=249): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x10091, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) read$FUSE(r0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts. [ 22.393534][ T36] audit: type=1400 audit(1785509296.210:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.394662][ T286] cgroup: Unknown subsys name 'net' [ 22.416570][ T36] audit: type=1400 audit(1785509296.210:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.443934][ T36] audit: type=1400 audit(1785509296.240:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.444164][ T286] cgroup: Unknown subsys name 'devices' [ 22.571349][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.576984][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.669507][ T36] audit: type=1400 audit(1785509296.490:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.692817][ T36] audit: type=1400 audit(1785509296.490:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.717994][ T36] audit: type=1400 audit(1785509296.490:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.734030][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.749856][ T36] audit: type=1400 audit(1785509296.570:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.772095][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.775613][ T36] audit: type=1400 audit(1785509296.570:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.810610][ T36] audit: type=1400 audit(1785509296.590:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.836249][ T36] audit: type=1400 audit(1785509296.590:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.118026][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.125170][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.132364][ T293] bridge_slave_0: entered allmulticast mode [ 24.138670][ T293] bridge_slave_0: entered promiscuous mode [ 24.145274][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.152353][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.159457][ T293] bridge_slave_1: entered allmulticast mode [ 24.165655][ T293] bridge_slave_1: entered promiscuous mode [ 24.266007][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.273203][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.280364][ T294] bridge_slave_0: entered allmulticast mode [ 24.286727][ T294] bridge_slave_0: entered promiscuous mode [ 24.295068][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.302191][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.309428][ T294] bridge_slave_1: entered allmulticast mode [ 24.315622][ T294] bridge_slave_1: entered promiscuous mode [ 24.369765][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.376834][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.384079][ T298] bridge_slave_0: entered allmulticast mode [ 24.390401][ T298] bridge_slave_0: entered promiscuous mode [ 24.398275][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.405478][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.412713][ T298] bridge_slave_1: entered allmulticast mode [ 24.418954][ T298] bridge_slave_1: entered promiscuous mode [ 24.460924][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.467999][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.475110][ T297] bridge_slave_0: entered allmulticast mode [ 24.481373][ T297] bridge_slave_0: entered promiscuous mode [ 24.487855][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.495030][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.502224][ T297] bridge_slave_1: entered allmulticast mode [ 24.508385][ T297] bridge_slave_1: entered promiscuous mode [ 24.532058][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.539142][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.546425][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.553561][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.606313][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.613425][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.620744][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.627777][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.675838][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.682929][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.690247][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.697271][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.714271][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.721768][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.729509][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.736658][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.744238][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.751415][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.770271][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.777335][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.784856][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.791947][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.838308][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.845422][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.853602][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.860688][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.889592][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.896658][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.910246][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.917293][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.932521][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.939601][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.952677][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.959944][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.979370][ T293] veth0_vlan: entered promiscuous mode [ 25.003773][ T294] veth0_vlan: entered promiscuous mode [ 25.011463][ T293] veth1_macvtap: entered promiscuous mode [ 25.042320][ T298] veth0_vlan: entered promiscuous mode [ 25.054812][ T297] veth0_vlan: entered promiscuous mode [ 25.061608][ T294] veth1_macvtap: entered promiscuous mode [ 25.079551][ T297] veth1_macvtap: entered promiscuous mode [ 25.092606][ T298] veth1_macvtap: entered promiscuous mode [ 25.108674][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.217661][ T309] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.237867][ T328] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.472695][ T340] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9'. [ 25.509012][ T311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.528975][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.680317][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 25.694159][ T10] usb 2-1: config 1 interface 1 has no altsetting 0 [ 25.704396][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.714589][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.722829][ T10] usb 2-1: Product: syz [ 25.727018][ T10] usb 2-1: Manufacturer: syz [ 25.732672][ T10] usb 2-1: SerialNumber: syz [ 25.740332][ T10] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 25.747747][ T10] cdc_ncm 2-1:1.0: bind() failure [ 26.014264][ T333] kvm: MWAIT instruction emulated as NOP! [ 26.281061][ T31] usb 2-1: USB disconnect, device number 2 [ 26.559007][ T311] usb 3-1: device descriptor read/64, error -71 [ 26.795910][ T357] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 26.801570][ T357] dvmrp1: linktype set to 768 [ 26.840288][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.851392][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.861271][ T311] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 26.870517][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.879315][ T311] usb 3-1: config 0 descriptor?? [ 27.048984][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.200438][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 27.209018][ T10] usb 2-1: config 7 has an invalid interface number: 13 but max is 0 [ 27.217151][ T10] usb 2-1: config 7 has no interface number 0 [ 27.223500][ T10] usb 2-1: config 7 interface 13 has no altsetting 0 [ 27.231821][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=d2.06 [ 27.240929][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.249048][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 27.255399][ T10] usb 2-1: Product: syz [ 27.260340][ T10] usb 2-1: Manufacturer: syz [ 27.264974][ T10] usb 2-1: SerialNumber: syz [ 27.429635][ T364] Zero length message leads to an empty skb [ 27.438318][ T36] kauditd_printk_skb: 71 callbacks suppressed [ 27.438354][ T36] audit: type=1400 audit(1785509301.250:145): avc: denied { setopt } for pid=363 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.489342][ T311] hid-led 0003:1D34:000A.0001: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 27.501646][ T36] audit: type=1400 audit(1785509301.320:146): avc: denied { create } for pid=366 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 27.502827][ T311] hid-led 0003:1D34:000A.0001: Dream Cheeky Webmail Notifier initialized [ 27.535696][ T36] audit: type=1400 audit(1785509301.340:147): avc: denied { create } for pid=366 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 27.554061][ T374] overlayfs: failed to resolve './file0': -2 [ 27.561044][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.562464][ T36] audit: type=1400 audit(1785509301.340:148): avc: denied { write } for pid=366 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 27.601491][ T36] audit: type=1400 audit(1785509301.350:149): avc: denied { ioctl } for pid=366 comm="syz.3.18" path="socket:[5399]" dev="sockfs" ino=5399 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 27.629053][ T36] audit: type=1400 audit(1785509301.350:150): avc: denied { connect } for pid=366 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 27.648699][ T36] audit: type=1400 audit(1785509301.350:151): avc: denied { write } for pid=366 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 27.668022][ T36] audit: type=1400 audit(1785509301.430:152): avc: denied { create } for pid=375 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.687310][ T36] audit: type=1400 audit(1785509301.430:153): avc: denied { read } for pid=375 comm="syz.3.20" path="socket:[5412]" dev="sockfs" ino=5412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.710446][ T10] net1080 2-1:7.13: probe with driver net1080 failed with error -22 [ 27.722188][ T10] usb 2-1: USB disconnect, device number 3 [ 27.722624][ T311] usb 3-1: USB disconnect, device number 2 [ 27.748952][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 27.756022][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.764690][ T31] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 27.780995][ T31] usb 1-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 27.790118][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.798192][ T31] usb 1-1: Product: syz [ 27.803259][ T31] usb 1-1: Manufacturer: syz [ 27.808062][ T31] usb 1-1: SerialNumber: syz [ 28.235633][ T36] audit: type=1400 audit(1785509302.050:154): avc: denied { mounton } for pid=379 comm="syz.2.21" path="/3/file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 28.534466][ T31] usb 1-1: USB disconnect, device number 2 [ 28.562338][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.788996][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 28.889018][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.940367][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 28.950097][ T10] usb 4-1: config 1 interface 0 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 28.963252][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 28.971378][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.40 [ 28.980708][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.988701][ T10] usb 4-1: Product: 㡇 [ 28.992986][ T10] usb 4-1: Manufacturer: 燲磤㬋岦많백㷕庡饺ꖔ摦혤撅껨㶁&ᑅ믘㧰傱玣䎽ꗽ⌄㿗鋄䶇藧鹇驩笭῎耼쩘乔䷏옠㤨阫臒쒝㿖畓뉚궘뾞엹財἞퉃潃埊㛱髤퍓끒ꗆ嫇ᨓᓲ଑ [ 29.016013][ T10] usb 4-1: SerialNumber: 㭌呤䢒ЅꚌ푐嬠䲩Ᵽ妏꿕鳪ႏḍ㞟幯〵ﴣ썢⒂鯚 [ 29.028024][ T408] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 29.048921][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 29.055410][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.066510][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.076329][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 29.085633][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.094784][ T31] usb 1-1: config 0 descriptor?? [ 29.101394][ T31] hub 1-1:0.0: USB hub found [ 29.269646][ T10] usbhid 4-1:1.0: can't add hid device: -71 [ 29.278179][ T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 29.287461][ T411] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.288315][ T10] usb 4-1: USB disconnect, device number 2 [ 29.303268][ T31] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 29.705185][ T31] hid-generic 0003:046D:C31C.0002: unknown main item tag 0x0 [ 29.713790][ T31] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 30.049331][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.198935][ T10] usb 4-1: device descriptor read/64, error -71 [ 30.319129][ T406] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 30.438938][ T10] usb 4-1: device descriptor read/64, error -71 [ 30.469548][ T406] usb 1-1: device firmware changed [ 30.474964][ T31] usb 1-1: USB disconnect, device number 3 [ 30.609106][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.689113][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.758920][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 30.765242][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.776684][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.786559][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=2377, bcdDevice= 0.00 [ 30.795663][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.804495][ T31] usb 1-1: config 0 descriptor?? [ 30.810881][ T31] hub 1-1:0.0: USB hub found [ 30.818917][ T10] usb 4-1: device descriptor read/64, error -71 [ 31.013260][ T31] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 31.058942][ T10] usb 4-1: device descriptor read/64, error -71 [ 31.169539][ T10] usb usb4-port1: attempt power cycle [ 31.211323][ T441] kvm: emulating exchange as write [ 31.218054][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 31.224839][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 31.249338][ T31] usb 1-1: USB disconnect, device number 4 [ 31.508987][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 31.528944][ T311] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 31.528957][ T315] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.530083][ T10] usb 4-1: device descriptor read/8, error -71 [ 31.679018][ T315] usb 2-1: Using ep0 maxpacket: 32 [ 31.685340][ T10] usb 4-1: device descriptor read/8, error -71 [ 31.691768][ T315] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 31.699887][ T315] usb 2-1: config 0 has no interface number 0 [ 31.700465][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.707537][ T315] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 31.715919][ T311] usb 3-1: config 1 interface 0 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 31.722848][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.736175][ T311] usb 3-1: config 1 interface 0 has no altsetting 0 [ 31.744029][ T315] usb 2-1: Product: syz [ 31.752371][ T311] usb 3-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.40 [ 31.754696][ T315] usb 2-1: Manufacturer: syz [ 31.764045][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.768526][ T315] usb 2-1: SerialNumber: syz [ 31.776827][ T311] usb 3-1: Product: 㡇 [ 31.781934][ T315] usb 2-1: config 0 descriptor?? [ 31.785483][ T311] usb 3-1: Manufacturer: 燲磤㬋岦많백㷕庡饺ꖔ摦혤撅껨㶁&ᑅ믘㧰傱玣䎽ꗽ⌄㿗鋄䶇藧鹇驩笭῎耼쩘乔䷏옠㤨阫臒쒝㿖畓뉚궘뾞엹財἞퉃潃埊㛱髤퍓끒ꗆ嫇ᨓᓲ଑ [ 31.792831][ T315] smsc95xx v2.0.0 [ 31.813097][ T311] usb 3-1: SerialNumber: 㭌呤䢒ЅꚌ푐嬠䲩Ᵽ妏꿕鳪ႏḍ㞟幯〵ﴣ썢⒂鯚 [ 31.828182][ T446] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 31.938933][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 31.961309][ T10] usb 4-1: device descriptor read/8, error -71 [ 32.041023][ T311] usbhid 3-1:1.0: can't add hid device: -71 [ 32.047033][ T311] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 32.057446][ T311] usb 3-1: USB disconnect, device number 3 [ 32.089983][ T10] usb 4-1: device descriptor read/8, error -71 [ 32.194530][ T315] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 32.205340][ T315] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 32.214623][ T10] usb usb4-port1: unable to enumerate USB device [ 32.219008][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.380094][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.390273][ T31] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 32.399272][ T31] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 32.408413][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.417203][ T31] usb 1-1: config 0 descriptor?? [ 32.623458][ T444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=444 comm=syz.1.39 [ 32.691318][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 32.691339][ T36] audit: type=1400 audit(1785509306.510:181): avc: denied { mounton } for pid=443 comm="syz.1.39" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 32.729391][ T10] usb 1-1: USB disconnect, device number 5 [ 32.799378][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.851761][ T36] audit: type=1400 audit(1785509306.670:182): avc: denied { map } for pid=456 comm="syz.3.44" path="socket:[4070]" dev="sockfs" ino=4070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.874641][ T36] audit: type=1400 audit(1785509306.670:183): avc: denied { read } for pid=456 comm="syz.3.44" path="socket:[4070]" dev="sockfs" ino=4070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.892230][ T459] netlink: 'syz.3.45': attribute type 10 has an invalid length. [ 32.920512][ T36] audit: type=1400 audit(1785509306.740:184): avc: denied { write } for pid=460 comm="syz.3.46" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.922811][ T461] input: syz0 as /devices/virtual/input/input4 [ 32.949917][ T461] input: failed to attach handler leds to device input4, error: -6 [ 32.959003][ T36] audit: type=1400 audit(1785509306.770:185): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=460 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.981300][ T36] audit: type=1400 audit(1785509306.770:186): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=460 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.004920][ T36] audit: type=1400 audit(1785509306.770:187): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=460 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.007502][ T461] SELinux: Context system_u:object_r:devicekit_exec_t:s0 is not valid (left unmapped). [ 33.029982][ T36] audit: type=1400 audit(1785509306.820:188): avc: denied { relabelfrom } for pid=460 comm="syz.3.46" name="HIDP" dev="sockfs" ino=5797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.062868][ T36] audit: type=1400 audit(1785509306.860:189): avc: denied { relabelto } for pid=460 comm="syz.3.46" name="HIDP" dev="sockfs" ino=5797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=bluetooth_socket permissive=1 trawcon="system_u:object_r:devicekit_exec_t:s0" [ 33.090650][ T36] audit: type=1400 audit(1785509306.860:190): avc: denied { append } for pid=460 comm="syz.3.46" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.113830][ T31] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 33.123756][ T31] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 33.132069][ T31] usb 3-1: Product: syz [ 33.138682][ T31] usb 3-1: config 0 descriptor?? [ 33.146932][ T31] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 33.155327][ T31] usb 3-1: Detected FT232H [ 33.311391][ T471] x_tables: duplicate underflow at hook 1 [ 33.346578][ T31] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 33.518916][ T348] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 33.569047][ T311] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 33.670357][ T348] usb 4-1: unable to get BOS descriptor or descriptor too short [ 33.678442][ T348] usb 4-1: not running at top speed; connect to a high speed hub [ 33.686979][ T348] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 33.697188][ T348] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 33.707758][ T348] usb 4-1: New USB device found, idVendor=050d, idProduct=0115, bcdDevice= 1.33 [ 33.716872][ T348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.725001][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 33.730344][ T348] usb 4-1: Product: syz [ 33.734530][ T348] usb 4-1: Manufacturer: syz [ 33.739243][ T348] usb 4-1: SerialNumber: syz [ 33.744939][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.758594][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.769330][ T311] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 33.778613][ T31] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 33.787823][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.806145][ T311] usb 1-1: config 0 descriptor?? [ 33.815227][ T311] hub 1-1:0.0: USB hub found [ 33.959131][ T31] usb 3-1: USB disconnect, device number 4 [ 33.970410][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 33.980935][ T348] usb 4-1: USB disconnect, device number 7 [ 33.988774][ T31] ftdi_sio 3-1:0.0: device disconnected [ 34.015824][ T311] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 34.417709][ T311] hid-generic 0003:046D:C31C.0003: unknown main item tag 0x0 [ 34.426432][ T311] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 34.688933][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.701075][ T315] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 34.725236][ T315] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 34.745943][ T315] usb 2-1: USB disconnect, device number 4 [ 34.798957][ T311] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 34.948943][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 34.955429][ T311] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 34.963937][ T311] usb 3-1: config 0 has no interface number 0 [ 34.971546][ T311] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 34.980769][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.988773][ T311] usb 3-1: Product: syz [ 34.992994][ T311] usb 3-1: Manufacturer: syz [ 34.997594][ T311] usb 3-1: SerialNumber: syz [ 35.002953][ T311] usb 3-1: config 0 descriptor?? [ 35.008757][ T311] smsc95xx v2.0.0 [ 35.078924][ T315] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.230153][ T315] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.241366][ T315] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 35.253218][ T315] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.262319][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.270349][ T315] usb 2-1: Product: syz [ 35.274521][ T315] usb 2-1: Manufacturer: syz [ 35.279138][ T315] usb 2-1: SerialNumber: syz [ 35.286857][ T315] cdc_mbim 2-1:1.0: skipping garbage [ 35.329789][ T473] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 35.409625][ T311] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 35.420563][ T311] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 35.487357][ T492] capability: warning: `syz.1.58' uses deprecated v2 capabilities in a way that may be insecure [ 35.498444][ T473] usb 1-1: device firmware changed [ 35.505155][ T492] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 35.512547][ T10] usb 1-1: USB disconnect, device number 6 [ 35.648919][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 35.798919][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 35.805326][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.816359][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.826587][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=2377, bcdDevice= 0.00 [ 35.835680][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.844879][ T10] usb 1-1: config 0 descriptor?? [ 35.850984][ T10] hub 1-1:0.0: USB hub found [ 36.010718][ T485] overlayfs: missing 'lowerdir' [ 36.018830][ T311] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 36.030096][ T311] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 36.039339][ T311] usb 3-1: USB disconnect, device number 5 [ 36.051212][ T10] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 36.119944][ T492] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 36.127395][ T315] cdc_mbim 2-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 36.134997][ T315] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 36.253723][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 36.261016][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 36.289358][ T10] usb 1-1: USB disconnect, device number 7 [ 36.327798][ T315] cdc_mbim 2-1:1.0: setting tx_max = 60 [ 36.334500][ T315] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 36.341682][ T315] wwan wwan0: port wwan0mbim0 attached [ 36.348808][ T315] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, ea:97:10:0c:ea:92 [ 36.462019][ T149] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 36.498933][ T311] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 36.532786][ T31] usb 2-1: USB disconnect, device number 5 [ 36.543995][ T31] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 36.607488][ T31] wwan wwan0: port wwan0mbim0 disconnected [ 36.638940][ T311] usb 4-1: device descriptor read/64, error -71 [ 36.798935][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.879060][ T311] usb 4-1: device descriptor read/64, error -71 [ 36.928989][ T10] usb 3-1: device descriptor read/64, error -71 [ 36.975241][ T546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.63'. [ 36.985049][ T546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.63'. [ 37.118923][ T311] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 37.129524][ T561] rtc_cmos 00:00: Alarms can be up to one day in the future [ 37.168986][ T10] usb 3-1: device descriptor read/64, error -71 [ 37.248997][ T311] usb 4-1: device descriptor read/64, error -71 [ 37.408956][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 37.489336][ T311] usb 4-1: device descriptor read/64, error -71 [ 37.509011][ T315] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 37.538958][ T10] usb 3-1: device descriptor read/64, error -71 [ 37.599044][ T311] usb usb4-port1: attempt power cycle [ 37.658971][ T315] usb 1-1: Using ep0 maxpacket: 32 [ 37.665217][ T315] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 37.673497][ T315] usb 1-1: config 0 has no interface number 0 [ 37.681078][ T315] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 37.690200][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.698265][ T315] usb 1-1: Product: syz [ 37.702491][ T315] usb 1-1: Manufacturer: syz [ 37.707240][ T315] usb 1-1: SerialNumber: syz [ 37.712992][ T315] usb 1-1: config 0 descriptor?? [ 37.718779][ T315] smsc95xx v2.0.0 [ 37.778982][ T10] usb 3-1: device descriptor read/64, error -71 [ 37.889104][ T10] usb usb3-port1: attempt power cycle [ 37.938931][ T311] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 37.960020][ T311] usb 4-1: device descriptor read/8, error -71 [ 38.090009][ T311] usb 4-1: device descriptor read/8, error -71 [ 38.119402][ T315] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 38.132123][ T315] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 38.148965][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.248934][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 38.269833][ T10] usb 3-1: device descriptor read/8, error -71 [ 38.298921][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 38.305223][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.316211][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.326075][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 38.338971][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 38.348042][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.348906][ T311] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 38.357391][ T9] usb 2-1: config 0 descriptor?? [ 38.380032][ T311] usb 4-1: device descriptor read/8, error -71 [ 38.400189][ T10] usb 3-1: device descriptor read/8, error -71 [ 38.510046][ T311] usb 4-1: device descriptor read/8, error -71 [ 38.619047][ T311] usb usb4-port1: unable to enumerate USB device [ 38.638934][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 38.660055][ T10] usb 3-1: device descriptor read/8, error -71 [ 38.727059][ T565] overlayfs: missing 'lowerdir' [ 38.736686][ T315] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 38.747742][ T315] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 38.757607][ T315] usb 1-1: USB disconnect, device number 8 [ 38.772827][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 38.780179][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 38.787480][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 38.795005][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 38.802435][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 38.809797][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 38.817201][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 38.824516][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 38.831821][ T10] usb 3-1: device descriptor read/8, error -71 [ 38.838304][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 38.847015][ T9] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 38.855484][ T9] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 38.867155][ T9] microsoft 0003:045E:07DA.0004: no inputs found [ 38.873654][ T9] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 38.939050][ T10] usb usb3-port1: unable to enumerate USB device [ 38.976722][ T311] usb 2-1: USB disconnect, device number 6 [ 39.511646][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 39.511668][ T36] audit: type=1400 audit(1785509313.330:225): avc: denied { setopt } for pid=587 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.519037][ T588] netlink: 'syz.1.77': attribute type 63 has an invalid length. [ 39.545065][ T588] netlink: 5 bytes leftover after parsing attributes in process `syz.1.77'. [ 39.553804][ T588] gretap0: entered allmulticast mode [ 39.559683][ T588] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 39.839212][ T315] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 39.958942][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 39.968964][ T568] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 39.990405][ T315] usb 2-1: unable to get BOS descriptor or descriptor too short [ 39.998425][ T315] usb 2-1: not running at top speed; connect to a high speed hub [ 40.007298][ T315] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 40.014909][ T315] usb 2-1: can't read configurations, error -61 [ 40.095800][ T36] audit: type=1400 audit(1785509313.910:226): avc: denied { read } for pid=601 comm="syz.0.83" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.118458][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 40.121455][ T36] audit: type=1400 audit(1785509313.930:227): avc: denied { open } for pid=601 comm="syz.0.83" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.125068][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 40.147888][ T36] audit: type=1400 audit(1785509313.930:228): avc: denied { ioctl } for pid=601 comm="syz.0.83" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.156169][ T315] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 40.188894][ T10] usb 3-1: config 0 has no interface number 0 [ 40.195933][ T568] usb 4-1: unable to get BOS descriptor or descriptor too short [ 40.204769][ T568] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.215435][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 40.224595][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.232994][ T10] usb 3-1: Product: syz [ 40.237230][ T10] usb 3-1: Manufacturer: syz [ 40.242006][ T10] usb 3-1: SerialNumber: syz [ 40.246829][ T568] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 40.255916][ T568] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.264226][ T568] usb 4-1: Product: syz [ 40.268634][ T10] usb 3-1: config 0 descriptor?? [ 40.273674][ T568] usb 4-1: Manufacturer: syz [ 40.278283][ T568] usb 4-1: SerialNumber: syz [ 40.283800][ T10] smsc95xx v2.0.0 [ 40.360355][ T315] usb 2-1: unable to get BOS descriptor or descriptor too short [ 40.368590][ T315] usb 2-1: not running at top speed; connect to a high speed hub [ 40.377447][ T315] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 40.385285][ T315] usb 2-1: can't read configurations, error -61 [ 40.391807][ T315] usb usb2-port1: attempt power cycle [ 40.489595][ T36] audit: type=1400 audit(1785509314.310:229): avc: denied { bind } for pid=599 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.508720][ T36] audit: type=1400 audit(1785509314.310:230): avc: denied { node_bind } for pid=599 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 40.542626][ T604] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.549987][ T604] netlink: 'syz.3.82': attribute type 1 has an invalid length. [ 40.557583][ T604] netlink: 9 bytes leftover after parsing attributes in process `syz.3.82'. [ 40.568248][ T604] TCP: TCP_TX_DELAY enabled [ 40.574092][ T36] audit: type=1400 audit(1785509314.390:231): avc: denied { connect } for pid=599 comm="syz.3.82" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.684422][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 40.695664][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 40.738936][ T315] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 40.760701][ T315] usb 2-1: unable to get BOS descriptor or descriptor too short [ 40.768800][ T315] usb 2-1: not running at top speed; connect to a high speed hub [ 40.777817][ T315] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 40.785565][ T315] usb 2-1: can't read configurations, error -61 [ 40.918939][ T315] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 40.940562][ T315] usb 2-1: unable to get BOS descriptor or descriptor too short [ 40.948770][ T315] usb 2-1: not running at top speed; connect to a high speed hub [ 40.957746][ T315] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 40.965378][ T315] usb 2-1: can't read configurations, error -61 [ 40.972017][ T315] usb usb2-port1: unable to enumerate USB device [ 41.238918][ T315] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 41.285668][ T595] overlayfs: missing 'lowerdir' [ 41.293638][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 41.305229][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 41.315822][ T10] usb 3-1: USB disconnect, device number 10 [ 41.390154][ T315] usb 1-1: unable to get BOS descriptor or descriptor too short [ 41.405260][ T315] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 41.415964][ T315] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 42.058924][ T311] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 42.208921][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 42.215369][ T311] usb 3-1: config 1 has an invalid descriptor of length 169, skipping remainder of the config [ 42.225726][ T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.236448][ T311] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.245766][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.253788][ T311] usb 3-1: Product: syz [ 42.257950][ T311] usb 3-1: Manufacturer: syz [ 42.262575][ T311] usb 3-1: SerialNumber: syz [ 42.469708][ T311] usb 3-1: 0:2 : does not exist [ 42.477332][ T311] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 42.488604][ T311] usb 3-1: USB disconnect, device number 11 [ 42.499167][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.621275][ T36] audit: type=1400 audit(1785509316.440:232): avc: denied { write } for pid=611 comm="syz.1.87" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 42.643999][ T36] audit: type=1400 audit(1785509316.440:233): avc: denied { getattr } for pid=611 comm="syz.1.87" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.681485][ T617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 42.743309][ T568] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 42.758231][ T568] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 42.776071][ T36] audit: type=1400 audit(1785509316.590:234): avc: denied { setopt } for pid=619 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.790075][ T568] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 42.807760][ T568] usb 4-1: USB disconnect, device number 12 [ 42.817984][ T369] udevd[369]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.178934][ T568] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 43.249021][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 43.308924][ T568] usb 4-1: device descriptor read/64, error -71 [ 43.398935][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 43.405262][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 43.413490][ T9] usb 3-1: config 0 has no interface number 0 [ 43.422144][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 43.431350][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.439506][ T9] usb 3-1: Product: syz [ 43.443874][ T9] usb 3-1: Manufacturer: syz [ 43.448483][ T9] usb 3-1: SerialNumber: syz [ 43.453999][ T9] usb 3-1: config 0 descriptor?? [ 43.460082][ T9] smsc95xx v2.0.0 [ 43.558985][ T568] usb 4-1: device descriptor read/64, error -71 [ 43.798953][ T568] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 43.863801][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 43.874928][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 43.928922][ T568] usb 4-1: device descriptor read/64, error -71 [ 43.958916][ T311] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 44.012576][ T315] usb 1-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 44.021823][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.031774][ T315] usb 1-1: can't set config #1, error -71 [ 44.038530][ T315] usb 1-1: USB disconnect, device number 9 [ 44.111492][ T311] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.120803][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.129219][ T311] usb 2-1: Product: syz [ 44.133490][ T311] usb 2-1: Manufacturer: syz [ 44.138209][ T311] usb 2-1: SerialNumber: syz [ 44.150247][ T650] netlink: 'syz.0.100': attribute type 11 has an invalid length. [ 44.158780][ T650] syzkaller1: entered promiscuous mode [ 44.164466][ T650] syzkaller1: entered allmulticast mode [ 44.170138][ T568] usb 4-1: device descriptor read/64, error -71 [ 44.279125][ T568] usb usb4-port1: attempt power cycle [ 44.458949][ T475] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 44.476070][ T638] overlayfs: missing 'lowerdir' [ 44.484152][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 44.496489][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 44.506018][ T9] usb 3-1: USB disconnect, device number 12 [ 44.618937][ T568] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 44.621565][ T475] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 44.635849][ T475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.644130][ T475] usb 1-1: Product: syz [ 44.648341][ T475] usb 1-1: Manufacturer: syz [ 44.650163][ T568] usb 4-1: device descriptor read/8, error -71 [ 44.653120][ T475] usb 1-1: SerialNumber: syz [ 44.790077][ T568] usb 4-1: device descriptor read/8, error -71 [ 44.868681][ T475] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 44.879038][ T475] usb 1-1: USB disconnect, device number 10 [ 45.019142][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 45.019161][ T36] audit: type=1400 audit(1785509318.840:244): avc: denied { ioctl } for pid=656 comm="syz.2.103" path="/dev/usbmon0" dev="devtmpfs" ino=91 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.028944][ T568] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 45.079912][ T568] usb 4-1: device descriptor read/8, error -71 [ 45.148035][ T311] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 45.154675][ T311] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 45.162154][ T311] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 45.210154][ T568] usb 4-1: device descriptor read/8, error -71 [ 45.308931][ T315] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 45.319094][ T568] usb usb4-port1: unable to enumerate USB device [ 45.348451][ T644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'. [ 45.425316][ T311] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 45.438315][ T311] usb 2-1: USB disconnect, device number 11 [ 45.445094][ T311] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 45.460326][ T315] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 45.467913][ T315] usb 3-1: can't read configurations, error -61 [ 45.518333][ T674] can0: slcan on ptm0. [ 45.608924][ T315] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 45.780321][ T315] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 45.787937][ T315] usb 3-1: can't read configurations, error -61 [ 45.794541][ T315] usb usb3-port1: attempt power cycle [ 45.990972][ T714] FAULT_INJECTION: forcing a failure. [ 45.990972][ T714] name failslab, interval 1, probability 0, space 0, times 1 [ 46.003727][ T714] CPU: 0 UID: 0 PID: 714 Comm: syz.1.108 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 46.003751][ T714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.003759][ T714] Call Trace: [ 46.003764][ T714] [ 46.003770][ T714] __dump_stack+0x21/0x30 [ 46.003793][ T714] dump_stack_lvl+0x140/0x1c0 [ 46.003807][ T714] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.003823][ T714] ? __cfi_handle_mm_fault+0x10/0x10 [ 46.003837][ T714] dump_stack+0x19/0x20 [ 46.003851][ T714] should_fail_ex+0x3c2/0x510 [ 46.003865][ T714] should_failslab+0xac/0x100 [ 46.003879][ T714] kmem_cache_alloc_noprof+0x42/0x410 [ 46.003895][ T714] ? io_submit_one+0x14e/0x19e0 [ 46.003921][ T714] io_submit_one+0x14e/0x19e0 [ 46.003947][ T714] ? lookup_ioctx+0x360/0x360 [ 46.003962][ T714] ? asm_exc_page_fault+0x2b/0x30 [ 46.003978][ T714] ? __get_user_4+0x18/0x40 [ 46.003989][ T714] ? lookup_ioctx+0x206/0x360 [ 46.004020][ T714] __se_sys_io_submit+0x17f/0x3f0 [ 46.004061][ T714] ? __x64_sys_io_submit+0xa0/0xa0 [ 46.004074][ T714] ? ksys_write+0x1f3/0x260 [ 46.004087][ T714] ? __kasan_check_read+0x15/0x20 [ 46.004098][ T714] __x64_sys_io_submit+0x7f/0xa0 [ 46.004111][ T714] x64_sys_call+0x1c95/0x2ee0 [ 46.004121][ T714] do_syscall_64+0x57/0xf0 [ 46.004134][ T714] ? clear_bhb_loop+0x50/0xa0 [ 46.004148][ T714] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.004162][ T714] RIP: 0033:0x7f279d59e019 [ 46.004174][ T714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.004184][ T714] RSP: 002b:00007f279e394028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 46.004198][ T714] RAX: ffffffffffffffda RBX: 00007f279d825fa0 RCX: 00007f279d59e019 [ 46.004207][ T714] RDX: 0000200000000780 RSI: 0000000000000002 RDI: 00007f279e36b000 [ 46.004215][ T714] RBP: 00007f279e394090 R08: 0000000000000000 R09: 0000000000000000 [ 46.004222][ T714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.004230][ T714] R13: 00007f279d826038 R14: 00007f279d825fa0 R15: 00007ffe04d20eb8 [ 46.004239][ T714] [ 46.272705][ T672] can0 (unregistered): slcan off ptm0. [ 46.282178][ T315] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 46.311041][ T315] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 46.318794][ T315] usb 3-1: can't read configurations, error -61 [ 46.378645][ T736] FAULT_INJECTION: forcing a failure. [ 46.378645][ T736] name failslab, interval 1, probability 0, space 0, times 0 [ 46.391574][ T736] CPU: 0 UID: 0 PID: 736 Comm: syz.0.111 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 46.391611][ T736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.391624][ T736] Call Trace: [ 46.391631][ T736] [ 46.391639][ T736] __dump_stack+0x21/0x30 [ 46.391673][ T736] dump_stack_lvl+0x140/0x1c0 [ 46.391707][ T736] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.391732][ T736] ? __cfi_selinux_file_open+0x10/0x10 [ 46.391753][ T736] dump_stack+0x19/0x20 [ 46.391778][ T736] should_fail_ex+0x3c2/0x510 [ 46.391801][ T736] should_failslab+0xac/0x100 [ 46.391826][ T736] kmem_cache_alloc_node_noprof+0x45/0x420 [ 46.391848][ T736] ? __alloc_skb+0x10c/0x360 [ 46.391875][ T736] __alloc_skb+0x10c/0x360 [ 46.391899][ T736] ? tcp_current_mss+0x539/0x8b0 [ 46.391919][ T736] tcp_stream_alloc_skb+0x43/0x370 [ 46.391939][ T736] tcp_sendmsg_locked+0xcbc/0x4ac0 [ 46.391960][ T736] ? avc_has_perm_noaudit+0x289/0x360 [ 46.391985][ T736] ? __kasan_check_write+0x18/0x20 [ 46.392004][ T736] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 46.392028][ T736] ? kstrtouint_from_user+0x117/0x170 [ 46.392054][ T736] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 46.392073][ T736] ? __kasan_check_write+0x18/0x20 [ 46.392092][ T736] ? proc_fail_nth_write+0x184/0x220 [ 46.392121][ T736] ? __cfi_tcp_sendmsg+0x10/0x10 [ 46.392140][ T736] tcp_sendmsg+0x3e/0xd0 [ 46.392158][ T736] ? __cfi_tcp_sendmsg+0x10/0x10 [ 46.392176][ T736] inet_sendmsg+0xb7/0x120 [ 46.392198][ T736] ? __cfi_inet_sendmsg+0x10/0x10 [ 46.392219][ T736] __sys_sendto+0x5ea/0x700 [ 46.392247][ T736] ? __cfi___sys_sendto+0x10/0x10 [ 46.392276][ T736] ? __kasan_check_write+0x18/0x20 [ 46.392297][ T736] ? __cfi_ksys_write+0x10/0x10 [ 46.392318][ T736] __x64_sys_sendto+0xe9/0x100 [ 46.392347][ T736] x64_sys_call+0x2c2c/0x2ee0 [ 46.392365][ T736] do_syscall_64+0x57/0xf0 [ 46.392386][ T736] ? clear_bhb_loop+0x50/0xa0 [ 46.392413][ T736] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.392438][ T736] RIP: 0033:0x7fb82699e019 [ 46.392457][ T736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.392473][ T736] RSP: 002b:00007fb8277db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 46.392496][ T736] RAX: ffffffffffffffda RBX: 00007fb826c25fa0 RCX: 00007fb82699e019 [ 46.392510][ T736] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 46.392523][ T736] RBP: 00007fb8277db090 R08: 0000000000000000 R09: 0000000000000000 [ 46.392536][ T736] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 46.392548][ T736] R13: 00007fb826c26038 R14: 00007fb826c25fa0 R15: 00007ffd0fd5d708 [ 46.392565][ T736] [ 46.671465][ T315] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 46.708155][ T315] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 46.715842][ T315] usb 3-1: can't read configurations, error -61 [ 46.722312][ T315] usb usb3-port1: unable to enumerate USB device [ 46.738927][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 46.747121][ T568] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 46.898913][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 46.905449][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 46.913644][ T9] usb 2-1: config 0 has no interface number 0 [ 46.919880][ T568] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 46.927483][ T568] usb 4-1: can't read configurations, error -61 [ 46.935520][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 46.944607][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.952709][ T9] usb 2-1: Product: syz [ 46.956986][ T9] usb 2-1: Manufacturer: syz [ 46.961604][ T9] usb 2-1: SerialNumber: syz [ 46.966882][ T9] usb 2-1: config 0 descriptor?? [ 46.972718][ T9] smsc95xx v2.0.0 [ 47.058910][ T568] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 47.210418][ T568] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 47.218179][ T568] usb 4-1: can't read configurations, error -61 [ 47.228824][ T568] usb usb4-port1: attempt power cycle [ 47.240232][ T36] audit: type=1400 audit(1785509321.050:245): avc: denied { read } for pid=748 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.373307][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 47.384078][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 47.528923][ T475] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 47.568965][ T568] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 47.590817][ T568] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 47.598823][ T568] usb 4-1: can't read configurations, error -61 [ 47.690372][ T475] usb 1-1: unable to get BOS descriptor or descriptor too short [ 47.699042][ T475] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 47.711555][ T475] usb 1-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 47.720988][ T475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.729077][ T475] usb 1-1: Product: syz [ 47.733246][ T475] usb 1-1: Manufacturer: syz [ 47.737845][ T475] usb 1-1: SerialNumber: syz [ 47.738992][ T568] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 47.780631][ T568] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 47.788508][ T568] usb 4-1: can't read configurations, error -61 [ 47.794992][ T568] usb usb4-port1: unable to enumerate USB device [ 47.952019][ T750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.960688][ T750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.971595][ T475] usb 1-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 47.978983][ T475] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 47.979404][ T725] overlayfs: missing 'lowerdir' [ 47.989410][ T475] usb 1-1: unit 2 not found! [ 47.998200][ T475] usb 1-1: unit 236 not found! [ 48.004368][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 48.015811][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 48.019435][ T475] usb 1-1: USB disconnect, device number 11 [ 48.027740][ T9] usb 2-1: USB disconnect, device number 12 [ 48.040479][ T369] udevd[369]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.299657][ T36] audit: type=1400 audit(1785509322.120:246): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 48.558961][ T348] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 48.688910][ T348] usb 3-1: device descriptor read/64, error -71 [ 48.758960][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 48.848955][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 48.892098][ T9] usb 1-1: device descriptor read/64, error -71 [ 48.938948][ T348] usb 3-1: device descriptor read/64, error -71 [ 49.000916][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 49.011450][ T10] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 49.022984][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.033264][ T10] usb 2-1: Product: syz [ 49.037472][ T10] usb 2-1: Manufacturer: syz [ 49.042108][ T10] usb 2-1: SerialNumber: syz [ 49.050497][ T10] usb 2-1: selecting invalid altsetting 1 [ 49.056514][ T10] usb 2-1: unit 6 not found! [ 49.128920][ T9] usb 1-1: device descriptor read/64, error -71 [ 49.178906][ T348] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 49.308907][ T348] usb 3-1: device descriptor read/64, error -71 [ 49.368922][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 49.498930][ T9] usb 1-1: device descriptor read/64, error -71 [ 49.548909][ T348] usb 3-1: device descriptor read/64, error -71 [ 49.659062][ T348] usb usb3-port1: attempt power cycle [ 49.738925][ T9] usb 1-1: device descriptor read/64, error -71 [ 49.845007][ T36] audit: type=1400 audit(1785509323.660:247): avc: denied { create } for pid=775 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.865153][ T9] usb usb1-port1: attempt power cycle [ 49.871217][ T36] audit: type=1400 audit(1785509323.690:248): avc: denied { bind } for pid=775 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.890467][ T36] audit: type=1400 audit(1785509323.690:249): avc: denied { listen } for pid=775 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 49.910480][ T36] audit: type=1400 audit(1785509323.690:250): avc: denied { connect } for pid=775 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.930156][ T36] audit: type=1400 audit(1785509323.690:251): avc: denied { read } for pid=775 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.018945][ T348] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 50.040045][ T348] usb 3-1: device descriptor read/8, error -71 [ 50.065733][ T10] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 50.073766][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 50.083411][ T10] usb 2-1: selecting invalid altsetting 1 [ 50.089537][ T10] usb 2-1: unit 6 not found! [ 50.094338][ T10] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 50.102249][ T10] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 50.111850][ T10] usb 2-1: selecting invalid altsetting 1 [ 50.117798][ T10] usb 2-1: unit 6 not found! [ 50.122667][ T10] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 50.132115][ T10] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 50.143228][ T10] usb 2-1: USB disconnect, device number 13 [ 50.153364][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.189567][ T36] audit: type=1400 audit(1785509324.000:252): avc: denied { mount } for pid=783 comm="syz.3.125" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.212163][ T348] usb 3-1: device descriptor read/8, error -71 [ 50.215150][ T36] audit: type=1400 audit(1785509324.000:253): avc: denied { search } for pid=783 comm="syz.3.125" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 50.244714][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 50.252570][ T36] audit: type=1400 audit(1785509324.000:254): avc: denied { write } for pid=783 comm="syz.3.125" name="instances" dev="tracefs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 50.275220][ T36] audit: type=1400 audit(1785509324.000:255): avc: denied { add_name } for pid=783 comm="syz.3.125" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 50.295922][ T36] audit: type=1400 audit(1785509324.000:256): avc: denied { create } for pid=783 comm="syz.3.125" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 50.319261][ T9] usb 1-1: device descriptor read/8, error -71 [ 50.350133][ T784] kvm: pic: level sensitive irq not supported [ 50.383887][ T36] audit: type=1400 audit(1785509324.200:257): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.412838][ T36] audit: type=1400 audit(1785509324.210:258): avc: denied { setopt } for pid=786 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.432364][ T36] audit: type=1400 audit(1785509324.210:259): avc: denied { read } for pid=786 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.457103][ T36] audit: type=1400 audit(1785509324.260:260): avc: denied { cmd } for pid=786 comm="iou-wrk-788" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 50.481486][ T9] usb 1-1: device descriptor read/8, error -71 [ 50.489054][ T348] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 50.504738][ T36] audit: type=1400 audit(1785509324.320:261): avc: denied { map } for pid=786 comm="syz.3.126" path="/dev/ublkc0" dev="devtmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.530106][ T348] usb 3-1: device descriptor read/8, error -71 [ 50.660065][ T348] usb 3-1: device descriptor read/8, error -71 [ 50.718929][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 50.740049][ T9] usb 1-1: device descriptor read/8, error -71 [ 50.769026][ T348] usb usb3-port1: unable to enumerate USB device [ 50.858964][ T315] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 50.880081][ T9] usb 1-1: device descriptor read/8, error -71 [ 50.989466][ T9] usb usb1-port1: unable to enumerate USB device [ 51.008900][ T315] usb 2-1: Using ep0 maxpacket: 32 [ 51.015307][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.026611][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.037100][ T315] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 51.046433][ T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.055597][ T315] usb 2-1: config 0 descriptor?? [ 51.061492][ T315] hub 2-1:0.0: USB hub found [ 51.267524][ T315] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 51.630586][ T850] loop7: detected capacity change from 0 to 7 [ 51.647456][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.656738][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.669870][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.679107][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.687719][ T850] loop7: unable to read partition table [ 51.696249][ T315] hid-generic 0003:046D:C31C.0005: unknown main item tag 0x0 [ 51.709776][ T850] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`4FLQk݊5) failed (rc=-5) [ 51.727586][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.736818][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.745235][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.754505][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.778859][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.788135][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.796652][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.805804][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.815926][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.825117][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.843401][ T315] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 51.857219][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.866512][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.875387][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.884575][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.894225][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.903523][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.926484][ T31] usb 2-1: USB disconnect, device number 14 [ 52.038992][ T348] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 52.218903][ T348] usb 4-1: Using ep0 maxpacket: 32 [ 52.226268][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.262762][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.272757][ T348] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 52.281891][ T348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.291042][ T348] usb 4-1: config 0 descriptor?? [ 52.296924][ T348] hub 4-1:0.0: USB hub found [ 52.418942][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 52.438942][ T475] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 52.500581][ T348] hub 4-1:0.0: 1 port detected [ 52.568903][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 52.574204][ T475] usb 3-1: device descriptor read/64, error -71 [ 52.581701][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.592768][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.602710][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 52.611812][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.620665][ T31] usb 2-1: config 0 descriptor?? [ 52.626720][ T31] hub 2-1:0.0: USB hub found [ 52.693751][ T869] rust_binder: Write failure EINVAL in pid:86 [ 52.700991][ T348] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 52.716156][ T348] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 52.724018][ T110] loop7: unable to read partition table [ 52.738199][ T348] usbhid 4-1:0.0: can't add hid device: -71 [ 52.744431][ T348] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 52.769446][ T348] usb 4-1: USB disconnect, device number 21 [ 52.818943][ T475] usb 3-1: device descriptor read/64, error -71 [ 52.968976][ T315] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 53.027475][ T31] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 53.036921][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 53.043070][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 53.069387][ T475] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 53.077167][ T31] usb 2-1: USB disconnect, device number 15 [ 53.118943][ T315] usb 1-1: Using ep0 maxpacket: 16 [ 53.125427][ T315] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 53.133839][ T315] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.144007][ T315] usb 1-1: config 0 has no interface number 0 [ 53.151445][ T315] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 53.160542][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.168561][ T315] usb 1-1: Product: syz [ 53.172768][ T315] usb 1-1: Manufacturer: syz [ 53.177380][ T315] usb 1-1: SerialNumber: syz [ 53.182788][ T315] usb 1-1: config 0 descriptor?? [ 53.208957][ T475] usb 3-1: device descriptor read/64, error -71 [ 53.362011][ T875] FAULT_INJECTION: forcing a failure. [ 53.362011][ T875] name failslab, interval 1, probability 0, space 0, times 0 [ 53.375161][ T875] CPU: 0 UID: 0 PID: 875 Comm: syz.3.146 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 53.375186][ T875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.375194][ T875] Call Trace: [ 53.375199][ T875] [ 53.375205][ T875] __dump_stack+0x21/0x30 [ 53.375227][ T875] dump_stack_lvl+0x140/0x1c0 [ 53.375242][ T875] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.375257][ T875] ? mlock_folio_batch+0x3162/0x31e0 [ 53.375278][ T875] ? kasan_save_track+0x4f/0x80 [ 53.375291][ T875] ? kasan_save_alloc_info+0x3a/0x50 [ 53.375308][ T875] dump_stack+0x19/0x20 [ 53.375322][ T875] should_fail_ex+0x3c2/0x510 [ 53.375337][ T875] should_failslab+0xac/0x100 [ 53.375351][ T875] kmem_cache_alloc_noprof+0x42/0x410 [ 53.375362][ T875] ? mas_wr_store_type+0x13f3/0x1b40 [ 53.375382][ T875] ? mas_alloc_nodes+0x254/0x9d0 [ 53.375399][ T875] mas_alloc_nodes+0x254/0x9d0 [ 53.375415][ T875] mas_preallocate+0x79b/0xc90 [ 53.375430][ T875] ? __cfi_mas_preallocate+0x10/0x10 [ 53.375445][ T875] ? __kasan_check_read+0x15/0x20 [ 53.375456][ T875] ? anon_vma_name+0x51/0xa0 [ 53.375472][ T875] ? vm_area_dup+0x415/0x560 [ 53.375492][ T875] __split_vma+0x449/0xc10 [ 53.375505][ T875] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 53.375518][ T875] ? find_vma+0xd3/0x120 [ 53.375529][ T875] ? can_vma_merge_left+0x184/0x4b0 [ 53.375541][ T875] vma_modify+0x60c/0x1540 [ 53.375554][ T875] vma_modify_flags+0x182/0x1c0 [ 53.375567][ T875] mlock_fixup+0x1c9/0x740 [ 53.375582][ T875] apply_vma_lock_flags+0x28a/0x3b0 [ 53.375599][ T875] ? do_mlock+0xa10/0xa10 [ 53.375614][ T875] ? __cfi_down_write_killable+0x10/0x10 [ 53.375631][ T875] ? sched_clock+0x44/0x60 [ 53.375645][ T875] ? sched_clock_cpu+0x75/0x400 [ 53.375662][ T875] do_mlock+0x71d/0xa10 [ 53.375677][ T875] ? lru_gen_add_folio+0x880/0x880 [ 53.375692][ T875] ? irqtime_account_irq+0x51/0x1c0 [ 53.375709][ T875] ? handle_softirqs+0x54c/0x620 [ 53.375721][ T875] ? __kasan_check_read+0x15/0x20 [ 53.375732][ T875] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 53.375747][ T875] __x64_sys_mlock+0x64/0x80 [ 53.375762][ T875] x64_sys_call+0x670/0x2ee0 [ 53.375772][ T875] do_syscall_64+0x57/0xf0 [ 53.375784][ T875] ? clear_bhb_loop+0x50/0xa0 [ 53.375801][ T875] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.375815][ T875] RIP: 0033:0x7f8a1339e019 [ 53.375828][ T875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.375838][ T875] RSP: 002b:00007f8a141f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 53.375853][ T875] RAX: ffffffffffffffda RBX: 00007f8a13625fa0 RCX: 00007f8a1339e019 [ 53.375862][ T875] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 00002000007fe000 [ 53.375871][ T875] RBP: 00007f8a141f6090 R08: 0000000000000000 R09: 0000000000000000 [ 53.375878][ T875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.375886][ T875] R13: 00007f8a13626038 R14: 00007f8a13625fa0 R15: 00007ffdaf24c4b8 [ 53.375896][ T875] [ 53.539293][ T475] usb 3-1: device descriptor read/64, error -71 [ 53.544737][ T315] usb 1-1: Found UVC 0.00 device syz (046c:14e8) [ 53.669071][ T475] usb usb3-port1: attempt power cycle [ 53.674317][ T315] usb 1-1: No valid video chain found. [ 53.752478][ T9] usb 1-1: USB disconnect, device number 16 [ 53.928917][ T31] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 53.961725][ T311] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 53.970268][ T311] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.028905][ T475] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 54.050043][ T475] usb 3-1: device descriptor read/8, error -71 [ 54.088919][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 54.096685][ T31] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 54.106027][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.114188][ T31] usb 4-1: Product: syz [ 54.118494][ T31] usb 4-1: Manufacturer: syz [ 54.123187][ T31] usb 4-1: SerialNumber: syz [ 54.180122][ T475] usb 3-1: device descriptor read/8, error -71 [ 54.354966][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 54.368822][ T31] usb 4-1: USB disconnect, device number 22 [ 54.378960][ T348] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 54.418937][ T475] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 54.439951][ T475] usb 3-1: device descriptor read/8, error -71 [ 54.528899][ T348] usb 2-1: Using ep0 maxpacket: 8 [ 54.536986][ T348] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 54.538890][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 54.546164][ T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.561814][ T348] usb 2-1: Product: syz [ 54.566088][ T348] usb 2-1: Manufacturer: syz [ 54.570704][ T348] usb 2-1: SerialNumber: syz [ 54.579984][ T475] usb 3-1: device descriptor read/8, error -71 [ 54.688999][ T475] usb usb3-port1: unable to enumerate USB device [ 54.699045][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 54.705431][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.716643][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.726513][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 54.735620][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.744375][ T9] usb 1-1: config 0 descriptor?? [ 54.750334][ T9] hub 1-1:0.0: USB hub found [ 54.958752][ T9] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 55.179738][ T900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.188357][ T900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.214503][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 55.214534][ T36] audit: type=1400 audit(1785509329.020:290): avc: denied { mounton } for pid=919 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.274372][ T919] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.281763][ T919] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.289209][ T919] bridge_slave_0: entered allmulticast mode [ 55.296275][ T919] bridge_slave_0: entered promiscuous mode [ 55.303799][ T919] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.311092][ T919] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.319832][ T919] bridge_slave_1: entered allmulticast mode [ 55.326502][ T919] bridge_slave_1: entered promiscuous mode [ 55.333021][ T798] bridge_slave_1: left allmulticast mode [ 55.339983][ T798] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.347668][ T798] bridge_slave_0: left allmulticast mode [ 55.353697][ T798] bridge_slave_0: left promiscuous mode [ 55.359480][ T798] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.367998][ T9] hid-generic 0003:046D:C31C.0007: unknown main item tag 0x0 [ 55.382623][ T9] hid-generic 0003:046D:C31C.0007: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 55.404323][ T348] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 55.419261][ T348] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 55.432462][ T348] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 55.441258][ T348] usb 2-1: clock source 0 is not valid, cannot use [ 55.448278][ T348] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 55.456155][ T348] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 55.471906][ T348] usb 2-1: USB disconnect, device number 16 [ 55.538809][ T798] veth1_macvtap: left promiscuous mode [ 55.544441][ T798] veth0_vlan: left promiscuous mode [ 55.593923][ T919] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.601146][ T919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.608496][ T919] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.615634][ T919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.637820][ T825] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.645734][ T825] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.656331][ T792] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.663523][ T792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.687902][ T825] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.695014][ T825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.720989][ T919] veth0_vlan: entered promiscuous mode [ 55.732663][ T919] veth1_macvtap: entered promiscuous mode [ 55.752359][ T36] audit: type=1400 audit(1785509329.570:291): avc: denied { mounton } for pid=919 comm="syz-executor" path="/root/syzkaller.iPfNt0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 55.919209][ T348] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 56.028982][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.079306][ T348] usb 3-1: Using ep0 maxpacket: 32 [ 56.085827][ T348] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 56.094435][ T348] usb 3-1: config 0 has no interface number 0 [ 56.102616][ T348] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 56.113629][ T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.122231][ T348] usb 3-1: Product: syz [ 56.126548][ T348] usb 3-1: Manufacturer: syz [ 56.131786][ T348] usb 3-1: SerialNumber: syz [ 56.137870][ T348] usb 3-1: config 0 descriptor?? [ 56.144755][ T348] smsc95xx v2.0.0 [ 56.190383][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 56.201452][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.212810][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 56.226776][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 56.236224][ T10] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 56.244362][ T10] usb 5-1: Manufacturer: syz [ 56.249956][ T10] usb 5-1: config 0 descriptor?? [ 56.279243][ T907] usb 1-1: reset high-speed USB device number 17 using dummy_hcd [ 56.398945][ T315] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 56.529193][ T315] usb 2-1: device descriptor read/64, error -71 [ 56.545650][ T348] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 56.556574][ T348] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 56.658642][ T10] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 56.666065][ T10] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 56.769235][ T315] usb 2-1: device descriptor read/64, error -71 [ 56.831771][ T907] usbhid 1-1:0.0: reset_resume error -71 [ 56.831774][ T31] usb 1-1: USB disconnect, device number 17 [ 56.899709][ T10] appleir 0003:05AC:8243.0008: hiddev96,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 56.918040][ T10] usb 5-1: USB disconnect, device number 2 [ 56.940502][ T945] fido_id[945]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 57.018937][ T315] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 57.148898][ T315] usb 2-1: device descriptor read/64, error -71 [ 57.155771][ T933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.165797][ T348] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 57.166088][ T933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.177079][ T348] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 57.195011][ T348] usb 3-1: USB disconnect, device number 25 [ 57.217462][ T36] audit: type=1400 audit(1785509331.030:292): avc: denied { search } for pid=949 comm="syz.2.173" name="/" dev="configfs" ino=2558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.293523][ T952] kvm: pic: level sensitive irq not supported [ 57.389318][ T315] usb 2-1: device descriptor read/64, error -71 [ 57.462150][ T36] audit: type=1400 audit(1785509331.280:293): avc: denied { module_load } for pid=965 comm="syz.2.180" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 57.462566][ T966] kernel read not supported for file /policy (pid: 966 comm: syz.2.180) [ 57.510600][ T315] usb usb2-port1: attempt power cycle [ 57.566119][ T975] capability: warning: `syz.4.184' uses 32-bit capabilities (legacy support in use) [ 57.576353][ T975] FAULT_INJECTION: forcing a failure. [ 57.576353][ T975] name failslab, interval 1, probability 0, space 0, times 0 [ 57.594552][ T977] overlayfs: empty lowerdir [ 57.596368][ T975] CPU: 0 UID: 0 PID: 975 Comm: syz.4.184 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 57.596407][ T975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.596419][ T975] Call Trace: [ 57.596425][ T975] [ 57.596432][ T975] __dump_stack+0x21/0x30 [ 57.596462][ T975] dump_stack_lvl+0x140/0x1c0 [ 57.596486][ T975] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.596511][ T975] dump_stack+0x19/0x20 [ 57.596532][ T975] should_fail_ex+0x3c2/0x510 [ 57.596554][ T975] should_failslab+0xac/0x100 [ 57.596575][ T975] kmem_cache_alloc_noprof+0x42/0x410 [ 57.596594][ T975] ? security_file_alloc+0x49/0x220 [ 57.596621][ T975] ? kasan_save_alloc_info+0x3a/0x50 [ 57.596646][ T975] security_file_alloc+0x49/0x220 [ 57.596671][ T975] init_file+0x9e/0x210 [ 57.596692][ T975] alloc_empty_file+0xd9/0x270 [ 57.596714][ T975] path_openat+0xf4/0x35a0 [ 57.596736][ T975] ? stack_depot_save_flags+0x38/0x800 [ 57.596757][ T975] ? kasan_save_track+0x4f/0x80 [ 57.596776][ T975] ? kasan_save_track+0x3e/0x80 [ 57.596795][ T975] ? kasan_save_alloc_info+0x3a/0x50 [ 57.596819][ T975] ? __kasan_slab_alloc+0x73/0x90 [ 57.596839][ T975] ? getname+0x1b/0x30 [ 57.596856][ T975] ? do_sys_openat2+0xda/0x1d0 [ 57.596879][ T975] ? __x64_sys_openat+0x13a/0x170 [ 57.596902][ T975] ? x64_sys_call+0xe69/0x2ee0 [ 57.596918][ T975] ? do_syscall_64+0x57/0xf0 [ 57.596939][ T975] ? do_filp_open+0x440/0x440 [ 57.596962][ T975] do_filp_open+0x1f2/0x440 [ 57.596984][ T975] ? __cfi_do_filp_open+0x10/0x10 [ 57.597009][ T975] ? alloc_fd+0x4c1/0x570 [ 57.597029][ T975] do_sys_openat2+0x134/0x1d0 [ 57.597052][ T975] ? fput+0x1a4/0x230 [ 57.597073][ T975] ? do_sys_open+0x100/0x100 [ 57.597095][ T975] ? ksys_write+0x1f3/0x260 [ 57.597113][ T975] ? __cfi_ksys_write+0x10/0x10 [ 57.597131][ T975] __x64_sys_openat+0x13a/0x170 [ 57.597156][ T975] x64_sys_call+0xe69/0x2ee0 [ 57.597172][ T975] do_syscall_64+0x57/0xf0 [ 57.597190][ T975] ? clear_bhb_loop+0x50/0xa0 [ 57.597213][ T975] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.597234][ T975] RIP: 0033:0x7fb59199e019 [ 57.597250][ T975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.597265][ T975] RSP: 002b:00007fb5928b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 57.597286][ T975] RAX: ffffffffffffffda RBX: 00007fb591c25fa0 RCX: 00007fb59199e019 [ 57.597300][ T975] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 57.597312][ T975] RBP: 00007fb5928b4090 R08: 0000000000000000 R09: 0000000000000000 [ 57.597324][ T975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.597335][ T975] R13: 00007fb591c26038 R14: 00007fb591c25fa0 R15: 00007ffdd63175b8 [ 57.597350][ T975] [ 57.868915][ T315] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 57.889910][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 57.920032][ T315] usb 2-1: device descriptor read/8, error -71 [ 57.970755][ T36] audit: type=1400 audit(1785509331.790:294): avc: denied { mount } for pid=986 comm="syz.2.190" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 57.994373][ T36] audit: type=1400 audit(1785509331.790:295): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 57.999474][ T985] netlink: 'syz.0.189': attribute type 8 has an invalid length. [ 58.029001][ T9] usb 5-1: device descriptor read/64, error -71 [ 58.060423][ T315] usb 2-1: device descriptor read/8, error -71 [ 58.077253][ T990] overlayfs: missing 'lowerdir' [ 58.298920][ T9] usb 5-1: device descriptor read/64, error -71 [ 58.328931][ T315] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 58.379995][ T315] usb 2-1: device descriptor read/8, error -71 [ 58.509984][ T315] usb 2-1: device descriptor read/8, error -71 [ 58.558917][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 58.628889][ T315] usb usb2-port1: unable to enumerate USB device [ 58.650950][ T36] audit: type=1400 audit(1785509332.470:296): avc: denied { bind } for pid=995 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.670447][ T36] audit: type=1400 audit(1785509332.470:297): avc: denied { create } for pid=995 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 58.698890][ T36] audit: type=1400 audit(1785509332.490:298): avc: denied { sys_admin } for pid=995 comm="syz.2.193" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 58.698938][ T9] usb 5-1: device descriptor read/64, error -71 [ 58.794234][ T36] audit: type=1400 audit(1785509332.610:299): avc: denied { read write } for pid=1002 comm="syz.0.196" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 58.968962][ T9] usb 5-1: device descriptor read/64, error -71 [ 59.008918][ T348] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 59.080509][ T9] usb usb5-port1: attempt power cycle [ 59.101188][ T1014] kvm: kvm [1013]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 59.161902][ T348] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 59.172997][ T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.187463][ T348] usb 3-1: Product: syz [ 59.191774][ T348] usb 3-1: Manufacturer: syz [ 59.196407][ T348] usb 3-1: SerialNumber: syz [ 59.406593][ T348] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 59.417859][ T348] usb 3-1: USB disconnect, device number 26 [ 59.429055][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 59.450027][ T9] usb 5-1: device descriptor read/8, error -71 [ 59.568972][ T62] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 59.580108][ T9] usb 5-1: device descriptor read/8, error -71 [ 59.720068][ T62] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.730300][ T62] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.739924][ T62] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 59.749074][ T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 59.757052][ T62] usb 2-1: SerialNumber: syz [ 59.818976][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 59.840034][ T9] usb 5-1: device descriptor read/8, error -71 [ 59.964645][ T62] usb 2-1: 0:2 : does not exist [ 59.971052][ T62] usb 2-1: unit 5 not found! [ 59.976652][ T9] usb 5-1: device descriptor read/8, error -71 [ 59.987338][ T62] usb 2-1: USB disconnect, device number 21 [ 60.005631][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.089049][ T9] usb usb5-port1: unable to enumerate USB device [ 60.191351][ T1029] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 60.209478][ T1029] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2050775556 (131249635584 ns) > initial count (104209035072 ns). Using initial count to start timer. [ 60.271902][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 60.271920][ T36] audit: type=1400 audit(1785509334.090:307): avc: denied { cmd } for pid=1032 comm="iou-wrk-1033" path="socket:[10318]" dev="sockfs" ino=10318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 60.322409][ T1042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.207'. [ 60.345047][ T1044] overlay: ./file0 is not a directory [ 60.419270][ T36] audit: type=1400 audit(1785509334.240:308): avc: denied { create } for pid=1048 comm="syz.2.210" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 60.449744][ T36] audit: type=1400 audit(1785509334.240:309): avc: denied { read append } for pid=1048 comm="syz.2.210" name="file1" dev="tmpfs" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 60.476041][ T36] audit: type=1400 audit(1785509334.240:310): avc: denied { open } for pid=1048 comm="syz.2.210" path="/47/file0/file1" dev="overlay" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 60.500815][ T36] audit: type=1400 audit(1785509334.320:311): avc: denied { connect } for pid=1051 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.547450][ T1054] FAULT_INJECTION: forcing a failure. [ 60.547450][ T1054] name failslab, interval 1, probability 0, space 0, times 0 [ 60.554918][ T828] tipc: Subscription rejected, illegal request [ 60.569042][ T1054] CPU: 0 UID: 0 PID: 1054 Comm: syz.1.212 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 60.569073][ T1054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.569084][ T1054] Call Trace: [ 60.569091][ T1054] [ 60.569098][ T1054] __dump_stack+0x21/0x30 [ 60.569130][ T1054] dump_stack_lvl+0x140/0x1c0 [ 60.569155][ T1054] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.569184][ T1054] dump_stack+0x19/0x20 [ 60.569209][ T1054] should_fail_ex+0x3c2/0x510 [ 60.569231][ T1054] should_failslab+0xac/0x100 [ 60.569256][ T1054] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 60.569278][ T1054] ? __kasan_kmalloc+0x96/0xb0 [ 60.569299][ T1054] ? p9_client_create+0x32c/0x12d0 [ 60.569329][ T1054] kstrdup+0x4d/0x130 [ 60.569356][ T1054] p9_client_create+0x32c/0x12d0 [ 60.569384][ T1054] ? __cfi_p9_client_create+0x10/0x10 [ 60.569412][ T1054] ? __kasan_kmalloc+0x96/0xb0 [ 60.569434][ T1054] ? __kmalloc_cache_noprof+0x23c/0x470 [ 60.569455][ T1054] ? v9fs_mount+0xc1/0x9d0 [ 60.569477][ T1054] ? kasan_save_alloc_info+0x3a/0x50 [ 60.569505][ T1054] ? __kasan_kmalloc+0x96/0xb0 [ 60.569529][ T1054] ? kstrdup+0x7b/0x130 [ 60.569556][ T1054] ? __asan_memset+0x39/0x50 [ 60.569574][ T1054] v9fs_session_init+0x1c4/0x18a0 [ 60.569596][ T1054] ? __cfi_v9fs_session_init+0x10/0x10 [ 60.569615][ T1054] ? kasan_save_alloc_info+0x3a/0x50 [ 60.569643][ T1054] ? __kasan_kmalloc+0x96/0xb0 [ 60.569675][ T1054] ? __kmalloc_cache_noprof+0x23c/0x470 [ 60.569695][ T1054] ? v9fs_mount+0xc1/0x9d0 [ 60.569718][ T1054] v9fs_mount+0xdb/0x9d0 [ 60.569740][ T1054] ? __cfi_v9fs_mount+0x10/0x10 [ 60.569763][ T1054] ? selinux_capable+0x38/0x50 [ 60.569788][ T1054] legacy_get_tree+0x103/0x1b0 [ 60.569813][ T1054] ? __cfi_v9fs_mount+0x10/0x10 [ 60.569836][ T1054] vfs_get_tree+0x9e/0x290 [ 60.569855][ T1054] do_new_mount+0x251/0xb40 [ 60.569875][ T1054] ? security_capable+0x44/0x130 [ 60.569897][ T1054] path_mount+0x66a/0xff0 [ 60.569916][ T1054] ? putname+0x113/0x150 [ 60.569938][ T1054] __se_sys_mount+0x2bf/0x480 [ 60.569957][ T1054] ? ksys_write+0x1f3/0x260 [ 60.569977][ T1054] ? __x64_sys_mount+0xf0/0xf0 [ 60.569999][ T1054] __x64_sys_mount+0xc3/0xf0 [ 60.570019][ T1054] x64_sys_call+0x2021/0x2ee0 [ 60.570038][ T1054] do_syscall_64+0x57/0xf0 [ 60.570059][ T1054] ? clear_bhb_loop+0x50/0xa0 [ 60.570084][ T1054] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.570107][ T1054] RIP: 0033:0x7f279d59e019 [ 60.570124][ T1054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.570140][ T1054] RSP: 002b:00007f279e394028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.570161][ T1054] RAX: ffffffffffffffda RBX: 00007f279d825fa0 RCX: 00007f279d59e019 [ 60.570175][ T1054] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 60.570188][ T1054] RBP: 00007f279e394090 R08: 0000200000000540 R09: 0000000000000000 [ 60.570201][ T1054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.570213][ T1054] R13: 00007f279d826038 R14: 00007f279d825fa0 R15: 00007ffe04d20eb8 [ 60.570229][ T1054] [ 60.889044][ T348] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 60.923780][ T36] audit: type=1400 audit(1785509334.740:312): avc: denied { mounton } for pid=1061 comm="syz.4.215" path="/7/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 61.038986][ T348] usb 3-1: device descriptor read/64, error -71 [ 61.279157][ T348] usb 3-1: device descriptor read/64, error -71 [ 61.338963][ T347] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 61.401511][ T36] audit: type=1400 audit(1785509335.220:313): avc: denied { read } for pid=1075 comm="syz.1.220" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 61.404574][ T1076] Dead loop on virtual device ip6_vti0, fix it urgently! [ 61.427143][ T36] audit: type=1400 audit(1785509335.220:314): avc: denied { open } for pid=1075 comm="syz.1.220" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 61.433279][ T475] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 61.458118][ T36] audit: type=1400 audit(1785509335.220:315): avc: denied { mount } for pid=1075 comm="syz.1.220" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.491140][ T36] audit: type=1400 audit(1785509335.220:316): avc: denied { ioctl } for pid=1075 comm="syz.1.220" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 61.518954][ T347] usb 5-1: device descriptor read/64, error -71 [ 61.528969][ T348] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 61.630575][ T475] usb 1-1: unable to get BOS descriptor or descriptor too short [ 61.638739][ T475] usb 1-1: not running at top speed; connect to a high speed hub [ 61.647610][ T475] usb 1-1: config 1 interface 0 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 61.661321][ T475] usb 1-1: config 1 interface 0 has no altsetting 0 [ 61.668080][ T348] usb 3-1: device descriptor read/64, error -71 [ 61.675960][ T475] usb 1-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.40 [ 61.685214][ T475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.693484][ T475] usb 1-1: Product: 㡇 [ 61.697675][ T475] usb 1-1: Manufacturer: 燲磤㬋岦많백㷕庡饺ꖔ摦혤撅껨㶁&ᑅ믘㧰傱玣䎽ꗽ⌄㿗鋄䶇藧鹇驩笭῎耼쩘乔䷏옠㤨阫臒쒝㿖畓뉚궘뾞엹財἞퉃潃埊㛱髤퍓끒ꗆ嫇ᨓᓲ଑ [ 61.720527][ T475] usb 1-1: SerialNumber: 㭌呤䢒ЅꚌ푐嬠䲩Ᵽ妏꿕鳪ႏḍ㞟幯〵ﴣ썢⒂鯚 [ 61.733376][ T1072] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 61.788951][ T347] usb 5-1: device descriptor read/64, error -71 [ 61.908956][ T348] usb 3-1: device descriptor read/64, error -71 [ 61.945795][ T475] usbhid 1-1:1.0: can't add hid device: -71 [ 61.951868][ T475] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 61.962097][ T475] usb 1-1: USB disconnect, device number 18 [ 62.019066][ T348] usb usb3-port1: attempt power cycle [ 62.028962][ T347] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 62.158952][ T347] usb 5-1: device descriptor read/64, error -71 [ 62.358909][ T348] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 62.380028][ T348] usb 3-1: device descriptor read/8, error -71 [ 62.406786][ T347] usb 5-1: device descriptor read/64, error -71 [ 62.522386][ T348] usb 3-1: device descriptor read/8, error -71 [ 62.530120][ T347] usb usb5-port1: attempt power cycle [ 62.711811][ T1099] program syz.1.230 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.778949][ T348] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 62.788969][ T475] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 62.799992][ T348] usb 3-1: device descriptor read/8, error -71 [ 62.888922][ T347] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 62.910036][ T347] usb 5-1: device descriptor read/8, error -71 [ 62.930231][ T348] usb 3-1: device descriptor read/8, error -71 [ 62.938939][ T475] usb 1-1: Using ep0 maxpacket: 16 [ 62.945501][ T475] usb 1-1: unable to get BOS descriptor or descriptor too short [ 62.953931][ T475] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 62.964079][ T475] usb 1-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 62.976414][ T475] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 62.985527][ T475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.993561][ T475] usb 1-1: Product: syz [ 62.997762][ T475] usb 1-1: Manufacturer: syz [ 63.002387][ T475] usb 1-1: SerialNumber: syz [ 63.039100][ T348] usb usb3-port1: unable to enumerate USB device [ 63.046530][ T347] usb 5-1: device descriptor read/8, error -71 [ 63.209537][ T475] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 63.217798][ T475] snd-usb-audio 1-1:5.0: probe with driver snd-usb-audio failed with error -22 [ 63.288936][ T347] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 63.310010][ T347] usb 5-1: device descriptor read/8, error -71 [ 63.409292][ T475] usb 1-1: 2:1 : can't get High Capability descriptor [ 63.440032][ T347] usb 5-1: device descriptor read/8, error -71 [ 63.494766][ T62] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 63.504448][ T62] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 63.549493][ T347] usb usb5-port1: unable to enumerate USB device [ 63.552952][ T1107] tmpfs: Unknown parameter 'hash' [ 63.611644][ T475] usb 1-1: USB disconnect, device number 19 [ 63.828952][ T62] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 63.938932][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 63.980452][ T62] usb 3-1: unable to get BOS descriptor or descriptor too short [ 63.988492][ T62] usb 3-1: not running at top speed; connect to a high speed hub [ 63.996990][ T62] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.007255][ T62] usb 3-1: config 1 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 64.018372][ T62] usb 3-1: config 1 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.028421][ T62] usb 3-1: config 1 interface 0 has no altsetting 0 [ 64.036606][ T62] usb 3-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.40 [ 64.045778][ T62] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.054026][ T62] usb 3-1: Product: 㡇 [ 64.058201][ T62] usb 3-1: Manufacturer: 燲磤㬋岦많백㷕庡饺ꖔ摦혤撅껨㶁&ᑅ믘㧰傱玣䎽ꗽ⌄㿗鋄䶇藧鹇驩笭῎耼쩘乔䷏옠㤨阫臒쒝㿖畓뉚궘뾞엹財἞퉃潃埊㛱髤퍓끒ꗆ嫇ᨓᓲ଑ [ 64.081575][ T62] usb 3-1: SerialNumber: 㭌呤䢒ЅꚌ푐嬠䲩Ᵽ妏꿕鳪ႏḍ㞟幯〵ﴣ썢⒂鯚 [ 64.099327][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 64.105871][ T31] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 64.114230][ T31] usb 2-1: config 0 has no interface number 0 [ 64.120466][ T31] usb 2-1: config 0 interface 184 has no altsetting 0 [ 64.129002][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 64.148903][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.157049][ T31] usb 2-1: Product: syz [ 64.171754][ T31] usb 2-1: Manufacturer: syz [ 64.180642][ T31] usb 2-1: SerialNumber: syz [ 64.188101][ T31] usb 2-1: config 0 descriptor?? [ 64.198740][ T31] smsc75xx v1.0.0 [ 64.224177][ T1129] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 64.232206][ T1129] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 64.240939][ T1129] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 64.248988][ T1129] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 64.282204][ T1129] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 64.303944][ T62] usbhid 3-1:1.0: can't add hid device: -71 [ 64.309539][ T1131] tipc: Started in network mode [ 64.310354][ T62] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 64.314983][ T1131] tipc: Node identity 7af59b7784ae, cluster identity 4711 [ 64.315090][ T1131] tipc: Enabled bearer , priority 0 [ 64.315698][ T1131] syzkaller0: entered promiscuous mode [ 64.324765][ T62] usb 3-1: USB disconnect, device number 31 [ 64.333213][ T1131] syzkaller0: entered allmulticast mode [ 64.359097][ T1131] tipc: Resetting bearer [ 64.391744][ T1130] tipc: Resetting bearer [ 64.399679][ T1130] tipc: Disabling bearer [ 64.607031][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 64.618006][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 64.628543][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 64.639063][ T31] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 64.769002][ T347] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 64.832672][ T798] ------------[ cut here ]------------ [ 64.838263][ T798] WARNING: CPU: 1 PID: 798 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x351/0x410 [ 64.848896][ T798] Modules linked in: [ 64.852840][ T798] CPU: 1 UID: 0 PID: 798 Comm: kworker/u8:11 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 64.864721][ T798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.874864][ T798] Workqueue: iou_exit io_ring_exit_work [ 64.881054][ T798] RIP: 0010:ublk_uring_cmd_cancel_fn+0x351/0x410 [ 64.887497][ T798] Code: 5d e9 43 2d 52 02 cc e8 1d 90 33 fe 0f 0b eb e3 e8 14 90 33 fe 0f 0b eb da e8 0b 90 33 fe 0f 0b e9 4d fe ff ff e8 ff 8f 33 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0a fd ff ff 4c 89 [ 64.907348][ T798] RSP: 0018:ffffc9000f93f990 EFLAGS: 00010293 [ 64.913483][ T798] RAX: ffffffff8353e1c1 RBX: 1ffff110237d8ef5 RCX: ffff88810e788000 [ 64.921982][ T798] RDX: 0000000000000000 RSI: 0000000000000036 RDI: 0000000000000104 [ 64.930111][ T798] RBP: ffffc9000f93f9e0 R08: 0000000000000003 R09: 0000000000000004 [ 64.938212][ T798] R10: 0000000000000000 R11: ffffffff8353d1a0 R12: ffff88811f1adf00 [ 64.946255][ T798] R13: ffff88811bec7780 R14: ffff88811e3118a8 R15: ffff88811e3118b8 [ 64.954393][ T798] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 64.963409][ T798] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.970132][ T798] CR2: 000000110c332a4c CR3: 0000000106eee000 CR4: 00000000003526b0 [ 64.978144][ T798] Call Trace: [ 64.981464][ T798] [ 64.984514][ T798] ublk_ch_uring_cmd+0x6f/0xa0 [ 64.989368][ T798] io_uring_try_cancel_uring_cmd+0x193/0x280 [ 64.995399][ T798] io_uring_try_cancel_requests+0x4d6/0x5b5 [ 65.001348][ T798] ? io_uring_cancel_generic+0x6eb/0x6eb [ 65.007020][ T798] io_ring_exit_work+0x23d/0x83b [ 65.012007][ T798] ? finish_task_switch+0x139/0x770 [ 65.017271][ T798] ? __cfi_io_ring_exit_work+0x10/0x10 [ 65.022806][ T798] ? kick_pool+0xb9/0x540 [ 65.027158][ T798] process_scheduled_works+0x7f7/0x1060 [ 65.032768][ T798] worker_thread+0xc99/0x13f0 [ 65.037484][ T798] kthread+0x2c7/0x360 [ 65.041721][ T798] ? __cfi_worker_thread+0x10/0x10 [ 65.046858][ T798] ? __cfi_kthread+0x10/0x10 [ 65.051492][ T798] ret_from_fork+0x67/0xa0 [ 65.056115][ T798] ? __cfi_kthread+0x10/0x10 [ 65.060736][ T798] ret_from_fork_asm+0x1a/0x30 [ 65.065691][ T798] [ 65.068734][ T798] ---[ end trace 0000000000000000 ]--- [ 65.148889][ T347] usb 1-1: Using ep0 maxpacket: 8 [ 65.155693][ T347] usb 1-1: unable to get BOS descriptor or descriptor too short [ 65.165314][ T347] usb 1-1: config 127 has no interfaces? [ 65.173301][ T347] usb 1-1: New USB device found, idVendor=2100, idProduct=9e5a, bcdDevice=9e.95 [ 65.182732][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.190981][ T347] usb 1-1: Product: syz [ 65.195366][ T347] usb 1-1: Manufacturer: syz [ 65.200374][ T347] usb 1-1: SerialNumber: syz [ 65.414382][ T347] usb 1-1: USB disconnect, device number 20 [ 66.713720][ T347] usb 2-1: USB disconnect, device number 22