last executing test programs:

3.998996855s ago: executing program 3 (id=1445):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x252c000000000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1808000, 0x0)
ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074657374")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x16)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
write(0xffffffffffffffff, &(0x7f0000000138), 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x20000000, 0x5, 0x0, 0xffffffffffffffee, 0x1ff, 'syz0\x00', 0x0})
ioctl(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42)

3.908937484s ago: executing program 3 (id=1446):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
pipe2(&(0x7f00000000c0), 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
creat(&(0x7f0000000580)='./file0\x00', 0x3)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x10, 0x3000002, 0x401d031, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x40286608, 0x0)

3.792578949s ago: executing program 3 (id=1448):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0)
syz_usb_connect(0x3, 0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040f00a116700000102000109022a00010100c0000904000003ff000000032401070581020002"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x10, &(0x7f0000000400)={0x0, 0x1, 0x8, "ebaa550303010000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x40400)
read$hidraw(r2, 0x0, 0x60)
write$hidraw(r2, &(0x7f0000000240)="b6e027e1c638fc5c0f27162eb4c065f8241ef8b1f6b690bc1452e5594df31cbc811624f9406959da650c834415322ad1cdcb223022ee918ef7e4528544ba48246017a33d182ef4b1c2b3fe3e9e090946bf3edea5be6cbf5dd87cf72878c50370abbf74ecb2eef88b304549dbe55f5d6065df0f060c2c1d3f43eb02a0a7cdd4e4f271e5b029ece9e1254a203a21117b0927861aac466006686d34648ba973aaa3563b07dd4f487ed06a8e66e1e85065f6d321", 0xb2)
syz_usb_control_io$uac3(r1, 0x0, 0x0)

3.396914448s ago: executing program 4 (id=1456):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ab)
mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/del_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000600)="77776e6e3d3078333333bda88f7044778b4d3333333333", 0x17)

3.312501411s ago: executing program 4 (id=1458):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x13, 0x7, 0x12d, 0x0})

3.267949104s ago: executing program 4 (id=1459):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
pipe2(&(0x7f00000000c0), 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
creat(&(0x7f0000000580)='./file0\x00', 0x3)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x10, 0x3000002, 0x401d031, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x40286608, 0x0)

3.14828661s ago: executing program 4 (id=1461):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c0"}}, 0x13f)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='+p', 0x2)
write$UHID_INPUT2(r0, &(0x7f0000000700)={0xc, {0x1, "11"}}, 0x7)

3.06477861s ago: executing program 4 (id=1462):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000d00)={0x0, 'syz_tun\x00', {0x4}, 0xa})
syz_emit_ethernet(0x10, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@generic={0x88f5, "d14d"}}}, 0x0)

2.925696072s ago: executing program 4 (id=1463):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0x0, 0x9, 0x5, 0xfffffffd, 0x1a, "6518883aa267cb6a471bfcd183cc274d6d5cd0"})

2.47523198s ago: executing program 0 (id=1469):
ioctl(0xffffffffffffffff, 0x8b1a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0e010410"], 0x11)
syz_emit_vhci(0x0, 0x7)

2.410552457s ago: executing program 0 (id=1470):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r3, &(0x7f0000000100)='+p', 0x2)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

2.303852205s ago: executing program 0 (id=1472):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c0"}}, 0x13f)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='+p', 0x2)
write$UHID_INPUT2(r0, &(0x7f0000000700)={0xc, {0x1, "11"}}, 0x7)

2.149779074s ago: executing program 0 (id=1474):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000280), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='raid1', 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='1:0', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0)
write(r3, &(0x7f0000000400)='1', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0)
write(r4, &(0x7f0000000480)='0', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000500)='active', 0x6)

1.912739108s ago: executing program 1 (id=1475):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff016029", @ANYRES16], 0x0)
r0 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1)
write$P9_RVERSION(r0, 0x0, 0xfffffcd9)

1.874762729s ago: executing program 0 (id=1477):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0xa)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
ioctl(r0, 0xc138fd0f, &(0x7f0000000000))

1.78000182s ago: executing program 0 (id=1478):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0x0, 0x9, 0x5, 0xfffffffd, 0x1a, "6518883aa267cb6a471bfcd183cc274d6d5cd0"})

740.403568ms ago: executing program 2 (id=1490):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000480)=[{0x32, '\x00', @st={0x4, [{0x1, @uvalue=0x80000001}, {0x1, @uvalue=0xd093}, {0x1, @svalue=0x1}, {0x1, @uvalue=0x8}]}, 0x87}, {0x15, '\x00', @data=0x2, 0x86}, {0x38, '\x00', @data, 0x6}]})

690.863032ms ago: executing program 2 (id=1491):
ioctl(0xffffffffffffffff, 0x8b1a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0e010410"], 0x11)
syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x7)

657.861836ms ago: executing program 1 (id=1492):
socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x52cc)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000), 0x0)

589.119416ms ago: executing program 1 (id=1493):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x252c000000000000)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1808000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074657374")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x16)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
write(0xffffffffffffffff, &(0x7f0000000138), 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x20000000, 0x5, 0x0, 0xffffffffffffffee, 0x1ff, 'syz0\x00', 0x0})
ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42)

588.473444ms ago: executing program 2 (id=1494):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)

539.790946ms ago: executing program 3 (id=1495):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c0"}}, 0x13f)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='+p', 0x2)
write$UHID_INPUT2(r0, &(0x7f0000000700)={0xc, {0x1, "11"}}, 0x7)

424.883091ms ago: executing program 1 (id=1496):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r2 = dup(r1)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c)

422.992707ms ago: executing program 2 (id=1497):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7a5, 0x0)

389.976781ms ago: executing program 3 (id=1498):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000280)='md', 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='raid1', 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='1:0', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0)
write(r3, &(0x7f0000000400)='1', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0)
write(r4, &(0x7f0000000480)='0', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000500)='active', 0x6)

335.235113ms ago: executing program 2 (id=1499):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf2502000008"], 0x24}, 0x1, 0x0, 0x0, 0x2c0480d4}, 0x8080)

234.697679ms ago: executing program 2 (id=1500):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r1, &(0x7f0000000380)='100000', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='1', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r3, &(0x7f0000000280)='0', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
socket$nl_netfilter(0x10, 0x3, 0xc)
mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r4, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
socket$inet6(0xa, 0x1, 0x0)
r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
r7 = openat$cgroup_pressure(r6, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0)
read(r7, &(0x7f0000000100)=""/43, 0x2b)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

229.273873ms ago: executing program 1 (id=1501):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1808000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074")
write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 no', 0x36)
ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42)
syz_open_dev$mtd(0x0, 0x46, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)

68.208803ms ago: executing program 1 (id=1502):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr', 0x1b)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/events/msr/read_msr/enable\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='1', 0x1)
r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
pread64(r4, &(0x7f0000000340)=""/8, 0x8, 0x10)

0s ago: executing program 3 (id=1503):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000"], 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)

kernel console output (not intermixed with test programs):

onfig 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.729089][ T5598] usb 3-1: config 0 has no interfaces?
[  113.729133][ T5598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.731666][ T5598] usb 3-1: config 0 descriptor??
[  113.825017][  T237] Bluetooth: hci5: Frame reassembly failed (-84)
[  113.968728][  T118] Bluetooth: hci6: Frame reassembly failed (-84)
[  113.969380][  T118] Bluetooth: hci6: Frame reassembly failed (-84)
[  113.969435][  T118] Bluetooth: hci6: Frame reassembly failed (-84)
[  113.969505][  T118] Bluetooth: hci6: Frame reassembly failed (-84)
[  113.969572][  T118] Bluetooth: hci6: Frame reassembly failed (-84)
[  114.082333][   T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  114.091725][ T5690] hid_parser_main: 464 callbacks suppressed
[  114.091738][ T5690] wacom 0003:056A:5000.0012: unknown main item tag 0x0
[  114.091757][ T5690] wacom 0003:056A:5000.0012: unknown main item tag 0x0
[  114.091774][ T5690] wacom 0003:056A:5000.0012: unknown main item tag 0x0
[  114.091792][ T5690] wacom 0003:056A:5000.0012: unknown main item tag 0x0
[  114.091808][ T5690] wacom 0003:056A:5000.0012: unknown main item tag 0x0
[  114.091826][ T5690] wacom 0003:056A:5000.0012: unknown main item tag 0x0
[  114.091843][ T5690] wacom 0003:056A:5000.0012: unknown main item tag 0x0
[  114.091860][ T5690] wacom 0003:056A:5000.0012: unknown main item tag 0x0
[  114.091877][ T5690] wacom 0003:056A:5000.0012: unknown main item tag 0x0
[  114.091894][ T5690] wacom 0003:056A:5000.0012: unknown main item tag 0x0
[  114.093709][ T5690] wacom 0003:056A:5000.0012: unexpected long global item
[  114.094258][ T5690] wacom 0003:056A:5000.0012: parse failed
[  114.094325][ T5690] wacom 0003:056A:5000.0012: probe with driver wacom failed with error -22
[  114.238015][   T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00
[  114.238967][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.239020][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  114.240928][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.240941][   T10] usb 4-1: Product: syz
[  114.240949][   T10] usb 4-1: Manufacturer: syz
[  114.240957][   T10] usb 4-1: SerialNumber: syz
[  114.292399][ T5690] usb 5-1: USB disconnect, device number 11
[  114.649296][   T10] usb 4-1: cannot create comm data receiver.
[  114.650451][   T10] snd-usb-6fire 4-1:1.0: probe with driver snd-usb-6fire failed with error -2
[  114.832892][ T6800] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  114.853450][   T10] usb 4-1: USB disconnect, device number 16
[  115.167144][ T5690] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  115.257135][    C1] net_ratelimit: 64 callbacks suppressed
[  115.317692][ T5690] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  115.318576][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  115.318591][ T5690] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  115.318623][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.320405][ T5690] usb 5-1: config 0 descriptor??
[  115.434590][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.407'.
[  115.771875][ T5690] kovaplus 0003:1E7D:2D50.0013: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0
[  115.898321][ T4916] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  115.922397][   T30] usb 1-1: USB disconnect, device number 13
[  115.977565][ T5603] Bluetooth: hci6: command 0x1003 tx timeout
[  115.979433][ T5608] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  116.020226][ T5598] usb 3-1: USB disconnect, device number 17
[  116.532850][ T5690] kovaplus 0003:1E7D:2D50.0013: couldn't init struct kovaplus_device
[  116.532890][ T5690] kovaplus 0003:1E7D:2D50.0013: couldn't install mouse
[  116.535819][ T5690] kovaplus 0003:1E7D:2D50.0013: probe with driver kovaplus failed with error -5
[  116.606971][ T6823] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups)
[  116.744253][ T5690] usb 5-1: USB disconnect, device number 12
[  116.771315][ T6827] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  116.841693][ T6829] FAULT_INJECTION: forcing a failure.
[  116.841693][ T6829] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  116.841717][ T6829] CPU: 1 UID: 0 PID: 6829 Comm: syz.2.416 Not tainted syzkaller #0 PREEMPT(full) 
[  116.841733][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  116.841740][ T6829] Call Trace:
[  116.841745][ T6829]  <TASK>
[  116.841750][ T6829]  dump_stack_lvl+0x100/0x190
[  116.841772][ T6829]  should_fail_ex.cold+0x5/0xa
[  116.841790][ T6829]  strncpy_from_user+0x3b/0x2d0
[  116.841806][ T6829]  do_getname+0x78/0x390
[  116.841823][ T6829]  user_path_at+0x26/0x60
[  116.841836][ T6829]  __x64_sys_mount+0x1fb/0x310
[  116.841853][ T6829]  ? __pfx___x64_sys_mount+0x10/0x10
[  116.841874][ T6829]  do_syscall_64+0x123/0x790
[  116.841892][ T6829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.841903][ T6829] RIP: 0033:0x7f472e19e159
[  116.841913][ T6829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  116.841924][ T6829] RSP: 002b:00007f472f082028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  116.841935][ T6829] RAX: ffffffffffffffda RBX: 00007f472e425fa0 RCX: 00007f472e19e159
[  116.841943][ T6829] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000
[  116.841949][ T6829] RBP: 00007f472e23506b R08: 0000000000000000 R09: 0000000000000000
[  116.841956][ T6829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.841963][ T6829] R13: 00007f472e426038 R14: 00007f472e425fa0 R15: 00007ffe760c00a8
[  116.841976][ T6829]  </TASK>
[  117.066404][ T6794] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  117.259535][   T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  117.396933][ T6840] syzkaller0: entered promiscuous mode
[  117.396955][ T6840] syzkaller0: entered allmulticast mode
[  117.417755][   T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  117.418355][   T10] usb 3-1: config 0 has no interfaces?
[  117.418402][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.423861][   T10] usb 3-1: config 0 descriptor??
[  117.438577][ T6849] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups)
[  117.620700][ T5704] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  117.643051][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.646068][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.663367][   T31] audit: type=1400 audit(1789610801.309:351): avc:  denied  { unmount } for  pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  117.767936][ T5704] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  117.768948][ T5704] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0
[  117.768971][ T5704] usb 5-1: config 0 interface 0 has no altsetting 0
[  117.771049][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  117.771069][ T5704] usb 5-1: Product: syz
[  117.771083][ T5704] usb 5-1: Manufacturer: syz
[  117.771096][ T5704] usb 5-1: SerialNumber: syz
[  117.776595][ T5704] usb 5-1: config 0 descriptor??
[  117.834143][ T5704] usb 5-1: selecting invalid altsetting 0
[  117.856265][   T30] usb 3-1: USB disconnect, device number 18
[  117.979540][ T5598] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  118.040968][   T30] usb 5-1: USB disconnect, device number 13
[  118.137393][ T5598] usb 1-1: Using ep0 maxpacket: 16
[  118.139126][ T5598] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  118.141752][ T5598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.141777][ T5598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.141799][ T5598] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  118.141854][ T5598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.145245][ T5598] usb 1-1: config 0 descriptor??
[  118.349651][ T5738] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  118.517545][ T5738] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00
[  118.538664][ T5738] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.538730][ T5738] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  118.554168][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.554190][ T5738] usb 3-1: Product: syz
[  118.554203][ T5738] usb 3-1: Manufacturer: syz
[  118.554234][ T5738] usb 3-1: SerialNumber: syz
[  118.647781][ T5598] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0014/input/input13
[  118.749070][ T5598] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  118.836514][ T5764] usb 1-1: USB disconnect, device number 14
[  118.879924][ T6859] fido_id[6859]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  118.990582][ T5738] usb 3-1: cannot create comm data receiver.
[  118.991012][ T5738] snd-usb-6fire 3-1:1.0: probe with driver snd-usb-6fire failed with error -2
[  119.195808][ T5598] usb 3-1: USB disconnect, device number 19
[  119.337668][ T5603] Bluetooth: hci5: command 0x1003 tx timeout
[  119.338285][ T5608] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  119.839756][   T31] audit: type=1400 audit(1789610803.489:352): avc:  denied  { allowed } for  pid=6878 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  120.037442][ T5598] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  120.203410][ T5598] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  120.205366][ T5598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  120.205390][ T5598] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  120.205440][ T5598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.216101][ T5598] usb 1-1: config 0 descriptor??
[  120.630189][ T5598] hid_parser_main: 556 callbacks suppressed
[  120.630206][ T5598] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0
[  120.630229][ T5598] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0
[  120.630249][ T5598] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0
[  120.630270][ T5598] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0
[  120.630290][ T5598] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0
[  120.630310][ T5598] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0
[  120.630330][ T5598] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0
[  120.630349][ T5598] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0
[  120.630369][ T5598] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0
[  120.630389][ T5598] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0
[  120.636063][ T5598] kovaplus 0003:1E7D:2D50.0015: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0
[  120.672937][ T6897] net_ratelimit: 80 callbacks suppressed
[  121.428568][ T5598] kovaplus 0003:1E7D:2D50.0015: couldn't init struct kovaplus_device
[  121.428607][ T5598] kovaplus 0003:1E7D:2D50.0015: couldn't install mouse
[  121.429910][ T5598] kovaplus 0003:1E7D:2D50.0015: probe with driver kovaplus failed with error -5
[  121.632664][ T5598] usb 1-1: USB disconnect, device number 15
[  121.990164][ T6861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  122.130865][ T6907] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  122.209345][ T6907] md: could not open device unknown-block(1,0).
[  122.220261][ T5608] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  122.299282][ T5690] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  122.336557][ T6907] md/raid1:md0: active with 1 out of 1 mirrors
[  122.428515][ T5704] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  122.449704][ T5690] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  122.450242][ T5690] usb 4-1: config 0 has no interfaces?
[  122.450290][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.483144][ T5690] usb 4-1: config 0 descriptor??
[  122.553659][ T6925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.460'.
[  122.580513][ T5704] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  122.584718][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.584741][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.584791][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.633254][ T5704] usb 2-1: config 0 descriptor??
[  122.705157][ T6903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.723769][ T6903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.883544][   T12] Bluetooth: hci5: Frame reassembly failed (-84)
[  122.943716][ T5712] usb 4-1: USB disconnect, device number 17
[  123.002707][   T31] audit: type=1400 audit(1789610806.659:353): avc:  denied  { mount } for  pid=6943 comm="syz.0.468" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  123.004021][   T31] audit: type=1400 audit(1789610806.659:354): avc:  denied  { map_read map_write } for  pid=6943 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  123.006714][ T6944] xt_hashlimit: max too large, truncated to 1048576
[  123.075617][ T6948] evm: overlay not supported
[  123.252370][ T5704] usbhid 2-1:0.0: can't add hid device: -32
[  123.252492][ T5704] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  123.254492][ T6909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.263372][ T6909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.286748][ T5712] usb 2-1: USB disconnect, device number 19
[  123.311901][ T6954] ftl_cs: FTL header not found.
[  123.400559][ T6954] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096]
[  123.407153][ T5704] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  123.447322][ T5690] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  123.558119][ T5704] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00
[  123.559069][ T5704] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.559100][ T5704] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  123.560824][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.560834][ T5704] usb 4-1: Product: syz
[  123.560841][ T5704] usb 4-1: Manufacturer: syz
[  123.560849][ T5704] usb 4-1: SerialNumber: syz
[  123.637993][ T5690] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00
[  123.638968][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  123.638984][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.639027][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.641429][ T5690] usb 5-1: config 0 descriptor??
[  123.840056][ T6959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.473'.
[  123.969215][ T5704] usb 4-1: cannot create comm data receiver.
[  123.973096][ T5704] snd-usb-6fire 4-1:1.0: probe with driver snd-usb-6fire failed with error -2
[  124.063659][ T5690] wacom 0003:056A:5000.0016: unexpected long global item
[  124.064135][ T5690] wacom 0003:056A:5000.0016: parse failed
[  124.064210][ T5690] wacom 0003:056A:5000.0016: probe with driver wacom failed with error -22
[  124.169606][ T5690] usb 4-1: USB disconnect, device number 18
[  124.262667][   T10] usb 5-1: USB disconnect, device number 14
[  124.632537][ T6983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.937211][ T5603] Bluetooth: hci5: command 0x1003 tx timeout
[  124.937477][ T5598] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  124.937500][ T5608] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  125.100317][ T5598] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  125.101439][ T5598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.101464][ T5598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.101514][ T5598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.116699][ T5598] usb 4-1: config 0 descriptor??
[  125.441115][ T7004] syzkaller0: entered promiscuous mode
[  125.441139][ T7004] syzkaller0: entered allmulticast mode
[  125.637173][   T10] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  125.672793][ T7017] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  125.739725][ T5598] usbhid 4-1:0.0: can't add hid device: -32
[  125.739832][ T5598] usbhid 4-1:0.0: probe with driver usbhid failed with error -32
[  125.763274][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.765813][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.776181][ T5704] usb 4-1: USB disconnect, device number 19
[  125.788303][   T10] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00
[  125.789932][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  125.789955][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.789998][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.810676][   T10] usb 5-1: config 0 descriptor??
[  125.869516][ T7019] md: could not open device unknown-block(1,0).
[  126.067135][    C1] net_ratelimit: 121 callbacks suppressed
[  126.073872][ T7026] md: could not open device unknown-block(1,0).
[  126.271031][   T10] hid_parser_main: 546 callbacks suppressed
[  126.271048][   T10] wacom 0003:056A:5000.0017: unknown main item tag 0x0
[  126.271070][   T10] wacom 0003:056A:5000.0017: unknown main item tag 0x0
[  126.271091][   T10] wacom 0003:056A:5000.0017: unknown main item tag 0x0
[  126.271112][   T10] wacom 0003:056A:5000.0017: unknown main item tag 0x0
[  126.271132][   T10] wacom 0003:056A:5000.0017: unknown main item tag 0x0
[  126.271152][   T10] wacom 0003:056A:5000.0017: unknown main item tag 0x0
[  126.271172][   T10] wacom 0003:056A:5000.0017: unknown main item tag 0x0
[  126.271193][   T10] wacom 0003:056A:5000.0017: unknown main item tag 0x0
[  126.271214][   T10] wacom 0003:056A:5000.0017: unknown main item tag 0x0
[  126.271235][   T10] wacom 0003:056A:5000.0017: unknown main item tag 0x0
[  126.276249][   T10] wacom 0003:056A:5000.0017: unexpected long global item
[  126.276759][   T10] wacom 0003:056A:5000.0017: parse failed
[  126.276837][   T10] wacom 0003:056A:5000.0017: probe with driver wacom failed with error -22
[  126.455789][   T10] usb 5-1: USB disconnect, device number 15
[  126.485481][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'.
[  126.550883][ T5764] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  126.976864][ T5764] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  126.977917][ T5764] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.977933][ T5764] usb 1-1: config 0 has no interfaces?
[  126.977971][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.989248][ T5764] usb 1-1: config 0 descriptor??
[  127.136859][ T7047] capability: warning: `syz.2.506' uses 32-bit capabilities (legacy support in use)
[  127.160569][ T7047] VFS: file-max limit 0 reached
[  127.310972][ T5738] usb 1-1: USB disconnect, device number 16
[  127.325902][ T7054] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  127.422618][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  127.423703][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  127.467195][   T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  127.494545][ T7054] md: md0: raid1 would not accept array
[  127.494726][ T7058] md: could not open device unknown-block(1,0).
[  127.629895][   T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  127.631081][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  127.631109][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  127.631162][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.638821][   T10] usb 5-1: config 0 descriptor??
[  128.109268][   T10] kovaplus 0003:1E7D:2D50.0018: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0
[  128.278518][   T31] audit: type=1400 audit(1789610811.929:355): avc:  denied  { create } for  pid=7078 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  128.278560][   T31] audit: type=1400 audit(1789610811.929:356): avc:  denied  { bind } for  pid=7078 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  128.326363][   T31] audit: type=1400 audit(1789610811.969:357): avc:  denied  { setopt } for  pid=7078 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  128.326403][   T31] audit: type=1400 audit(1789610811.969:358): avc:  denied  { accept } for  pid=7078 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  128.326436][   T31] audit: type=1400 audit(1789610811.969:359): avc:  denied  { write } for  pid=7078 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  128.493057][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.520'.
[  128.509547][ T7067] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  128.899254][ T7093] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  128.927201][ T5598] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  129.079821][ T5598] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  129.080825][ T5598] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.080862][ T5598] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.080885][ T5598] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  129.082435][ T5598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  129.082454][ T5598] usb 3-1: Product: syz
[  129.082467][ T5598] usb 3-1: Manufacturer: syz
[  129.122853][   T10] kovaplus 0003:1E7D:2D50.0018: couldn't init struct kovaplus_device
[  129.122889][   T10] kovaplus 0003:1E7D:2D50.0018: couldn't install mouse
[  129.129224][   T10] kovaplus 0003:1E7D:2D50.0018: probe with driver kovaplus failed with error -5
[  129.173190][ T7093] md: md0: raid1 would not accept array
[  129.174180][ T7094] md: could not open device unknown-block(1,0).
[  129.197968][ T5598] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected
[  129.205512][ T5598] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  129.206656][ T5598] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  129.333959][   T10] usb 5-1: USB disconnect, device number 16
[  129.382287][   T31] audit: type=1400 audit(1789610813.039:360): avc:  denied  { create } for  pid=7110 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  129.383725][   T31] audit: type=1400 audit(1789610813.039:361): avc:  denied  { setopt } for  pid=7110 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  129.438894][ T5764] usb 3-1: USB disconnect, device number 20
[  129.454556][ T5764] garmin_gps 3-1:1.0: device disconnected
[  129.487229][ T5712] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  129.496689][   T31] audit: type=1400 audit(1789610813.149:362): avc:  denied  { bind } for  pid=7110 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  129.638408][ T5712] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  129.640739][ T5712] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.640768][ T5712] usb 2-1: config 0 has no interfaces?
[  129.640842][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.644750][ T7117] syzkaller0: entered promiscuous mode
[  129.644785][ T7117] syzkaller0: entered allmulticast mode
[  129.648475][ T5712] usb 2-1: config 0 descriptor??
[  130.129089][ T5764] usb 2-1: USB disconnect, device number 20
[  130.283818][   T10] logitech-hidpp-device 0005:046D:B012.0019: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  130.378204][ T5598] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  130.406196][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'.
[  130.487689][ T5712] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  130.560319][ T5598] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  130.561364][ T5598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.561388][ T5598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.561434][ T5598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.572927][ T5598] usb 5-1: config 0 descriptor??
[  130.638388][ T5712] usb 3-1: Using ep0 maxpacket: 16
[  130.640095][ T5712] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  130.641064][ T5712] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.641083][ T5712] usb 3-1: config 0 has no interfaces?
[  130.643032][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.643050][ T5712] usb 3-1: Product: syz
[  130.643064][ T5712] usb 3-1: Manufacturer: syz
[  130.643078][ T5712] usb 3-1: SerialNumber: syz
[  130.659737][ T7132] md: md0: raid1 would not accept array
[  130.659917][ T7134] md: could not open device unknown-block(1,0).
[  130.716563][ T5712] usb 3-1: config 0 descriptor??
[  130.758889][ T7139] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  130.901200][ T7139] md: md0: raid1 would not accept array
[  130.902338][ T7141] md: could not open device unknown-block(1,0).
[  131.097126][    C0] net_ratelimit: 116 callbacks suppressed
[  131.113624][ T7153] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  131.194064][ T5598] usbhid 5-1:0.0: can't add hid device: -32
[  131.194172][ T5598] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[  131.214568][ T7125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.215089][ T7125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.289828][ T5712] usb 5-1: USB disconnect, device number 17
[  131.310840][   T31] audit: type=1400 audit(1789610814.969:363): avc:  denied  { write } for  pid=7156 comm="syz.1.543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  131.663899][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.549'.
[  131.766119][ T7171] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  131.914528][ T7171] md: md0: raid1 would not accept array
[  131.914702][ T7173] md: could not open device unknown-block(1,0).
[  132.514779][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'.
[  132.740866][ T7209] VFS: file-max limit 0 reached
[  133.261222][ T5712] usb 3-1: USB disconnect, device number 21
[  133.277815][ T3100] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  133.386503][ T7228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'.
[  133.612496][ T7222] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14
[  133.651168][ T5764] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  133.899468][ T3100] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00
[  133.900740][ T3100] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  133.900762][ T3100] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.900811][ T3100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.904133][ T3100] usb 4-1: config 0 descriptor??
[  134.021971][ T5764] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  134.022535][ T5764] usb 1-1: config 0 has no interfaces?
[  134.022582][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.034362][ T5764] usb 1-1: config 0 descriptor??
[  134.253447][ T7233] netlink: 16 bytes leftover after parsing attributes in process `syz.4.574'.
[  134.256474][ T7226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.278628][ T7226] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.373383][ T3100] hid (null): unknown global tag 0xc
[  134.395165][ T3100] hid_parser_main: 546 callbacks suppressed
[  134.395182][ T3100] wacom 0003:056A:5000.001A: unknown main item tag 0x0
[  134.395204][ T3100] wacom 0003:056A:5000.001A: unknown main item tag 0x0
[  134.395222][ T3100] wacom 0003:056A:5000.001A: unknown main item tag 0x0
[  134.395241][ T3100] wacom 0003:056A:5000.001A: unknown main item tag 0x0
[  134.395260][ T3100] wacom 0003:056A:5000.001A: unknown main item tag 0x0
[  134.395279][ T3100] wacom 0003:056A:5000.001A: unknown main item tag 0x0
[  134.395298][ T3100] wacom 0003:056A:5000.001A: unknown main item tag 0x0
[  134.395316][ T3100] wacom 0003:056A:5000.001A: unknown main item tag 0x0
[  134.395335][ T3100] wacom 0003:056A:5000.001A: unknown main item tag 0x0
[  134.395353][ T3100] wacom 0003:056A:5000.001A: unknown main item tag 0x0
[  134.482030][ T3100] wacom 0003:056A:5000.001A: unexpected long global item
[  134.482516][ T3100] wacom 0003:056A:5000.001A: parse failed
[  134.482592][ T3100] wacom 0003:056A:5000.001A: probe with driver wacom failed with error -22
[  134.511477][ T5712] usb 1-1: USB disconnect, device number 17
[  134.570883][ T3100] usb 4-1: USB disconnect, device number 20
[  134.831865][ T7241] syzkaller0: entered promiscuous mode
[  134.831894][ T7241] syzkaller0: entered allmulticast mode
[  134.977197][ T5712] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  134.990134][ T5598] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  135.128085][ T5712] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00
[  135.129069][ T5712] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.129133][ T5712] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.129154][ T5712] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  135.129177][ T5712] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  135.131540][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.131558][ T5712] usb 1-1: Product: syz
[  135.131570][ T5712] usb 1-1: Manufacturer: syz
[  135.131581][ T5712] usb 1-1: SerialNumber: syz
[  135.137852][ T5598] usb 5-1: Using ep0 maxpacket: 8
[  135.139425][ T5598] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  135.141940][ T5598] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  135.141961][ T5598] usb 5-1: config 179 has no interface number 0
[  135.141994][ T5598] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  135.142016][ T5598] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  135.142039][ T5598] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 230, changing to 11
[  135.142061][ T5598] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 57438, setting to 1024
[  135.142083][ T5598] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  135.142106][ T5598] usb 5-1: config 179 interface 65 has no altsetting 0
[  135.142145][ T5598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.264907][ T5598] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input15
[  135.336047][ T4951] input input15: unable to receive magic message: -110
[  135.405740][ T7239] input input15: unable to receive magic message: -32
[  135.435634][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  135.435876][ T5598] usb 5-1: USB disconnect, device number 18
[  135.604281][ T5712] usb 1-1: cannot create comm data receiver.
[  135.604707][ T5712] snd-usb-6fire 1-1:1.0: probe with driver snd-usb-6fire failed with error -90
[  135.779481][ T5712] usb 1-1: USB disconnect, device number 18
[  136.154722][ T7262] md: md0: raid1 would not accept array
[  136.157700][ T7265] md: could not open device unknown-block(1,0).
[  136.221804][    C0] net_ratelimit: 67 callbacks suppressed
[  136.311884][ T7271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.586'.
[  136.386552][ T7274] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  137.181014][ T7277] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  137.185418][ T7277] bridge0: port 3(syz_tun) entered disabled state
[  137.186399][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.187521][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.291046][ T7279] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  137.376034][ T7283] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  137.409382][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.595'.
[  137.465807][ T7285] FAULT_INJECTION: forcing a failure.
[  137.465807][ T7285] name failslab, interval 1, probability 0, space 0, times 0
[  137.465831][ T7285] CPU: 1 UID: 0 PID: 7285 Comm: syz.4.595 Not tainted syzkaller #0 PREEMPT(full) 
[  137.465851][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  137.465864][ T7285] Call Trace:
[  137.465871][ T7285]  <TASK>
[  137.465878][ T7285]  dump_stack_lvl+0x100/0x190
[  137.465919][ T7285]  should_fail_ex.cold+0x5/0xa
[  137.465943][ T7285]  ? rcu_is_watching+0x13/0xc0
[  137.465973][ T7285]  should_failslab+0xc2/0x120
[  137.465999][ T7285]  __kmalloc_noprof+0xfc/0x840
[  137.466021][ T7285]  ? hash_ipportip6_resize+0xce7/0x1da0
[  137.466047][ T7285]  ? hash_ipportip6_resize+0xd5a/0x1da0
[  137.466079][ T7285]  hash_ipportip6_resize+0xd5a/0x1da0
[  137.466122][ T7285]  ? __pfx_hash_ipportip6_resize+0x10/0x10
[  137.466148][ T7285]  ? is_bpf_text_address+0x8a/0x1a0
[  137.466174][ T7285]  ? is_bpf_text_address+0x8a/0x1a0
[  137.466203][ T7285]  call_ad.isra.0+0x37f/0x950
[  137.466231][ T7285]  ? __pfx_hash_ipportip6_resize+0x10/0x10
[  137.466262][ T7285]  ? __pfx_call_ad.isra.0+0x10/0x10
[  137.466285][ T7285]  ? __pfx___nla_validate_parse+0x10/0x10
[  137.466323][ T7285]  ? __nla_parse+0x40/0x60
[  137.466353][ T7285]  ip_set_ad.isra.0+0x3f1/0x8b0
[  137.466386][ T7285]  ? __pfx_ip_set_ad.isra.0+0x10/0x10
[  137.466414][ T7285]  ? trace_contention_end+0x126/0x160
[  137.466458][ T7285]  ? find_held_lock+0x2b/0x80
[  137.466490][ T7285]  nfnetlink_rcv_msg+0x9d5/0x11e0
[  137.466525][ T7285]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  137.466555][ T7285]  ? __lock_acquire+0x5c0/0x1f40
[  137.466597][ T7285]  ? avc_has_perm_noaudit+0x145/0x3b0
[  137.466631][ T7285]  netlink_rcv_skb+0x159/0x420
[  137.466654][ T7285]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  137.466683][ T7285]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  137.466715][ T7285]  ? ns_capable+0xd2/0xf0
[  137.466738][ T7285]  nfnetlink_rcv+0x1b3/0x440
[  137.466764][ T7285]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  137.466789][ T7285]  ? netlink_deliver_tap+0x1ae/0xcc0
[  137.466814][ T7285]  netlink_unicast+0x585/0x850
[  137.466839][ T7285]  ? __pfx_netlink_unicast+0x10/0x10
[  137.466867][ T7285]  netlink_sendmsg+0x8b0/0xda0
[  137.466900][ T7285]  ? __pfx_netlink_sendmsg+0x10/0x10
[  137.466926][ T7285]  ? selinux_socket_sendmsg+0x198/0x2f0
[  137.466952][ T7285]  ____sys_sendmsg+0xa4d/0xbe0
[  137.466979][ T7285]  ? __pfx_netlink_sendmsg+0x10/0x10
[  137.467002][ T7285]  ? __pfx_____sys_sendmsg+0x10/0x10
[  137.467033][ T7285]  ? futex_unqueue+0x133/0x2c0
[  137.467061][ T7285]  ___sys_sendmsg+0x190/0x1e0
[  137.467087][ T7285]  ? __pfx____sys_sendmsg+0x10/0x10
[  137.467111][ T7285]  ? __pfx___futex_wait+0x10/0x10
[  137.467126][ T7285]  ? __pfx_try_to_wake_up+0x10/0x10
[  137.467147][ T7285]  ? futex_hash+0x311/0x400
[  137.467178][ T7285]  ? __fget_files+0x34/0x3d0
[  137.467220][ T7285]  __sys_sendmmsg+0x20c/0x440
[  137.467249][ T7285]  ? __pfx___sys_sendmmsg+0x10/0x10
[  137.467271][ T7285]  ? file_init_path+0x48e/0x670
[  137.467303][ T7285]  ? __pfx_do_futex+0x10/0x10
[  137.467335][ T7285]  ? __sys_socket+0xac/0x260
[  137.467353][ T7285]  ? xfd_validate_state+0x129/0x190
[  137.467378][ T7285]  __x64_sys_sendmmsg+0x9c/0x100
[  137.467401][ T7285]  ? lockdep_hardirqs_on+0x7d/0x110
[  137.467428][ T7285]  do_syscall_64+0x123/0x790
[  137.467454][ T7285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.467473][ T7285] RIP: 0033:0x7eff39f9e159
[  137.467491][ T7285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  137.467508][ T7285] RSP: 002b:00007eff3adfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  137.467528][ T7285] RAX: ffffffffffffffda RBX: 00007eff3a225fa0 RCX: 00007eff39f9e159
[  137.467538][ T7285] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005
[  137.467548][ T7285] RBP: 00007eff3a03506b R08: 0000000000000000 R09: 0000000000000000
[  137.467556][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  137.467565][ T7285] R13: 00007eff3a226038 R14: 00007eff3a225fa0 R15: 00007ffceda3b928
[  137.467585][ T7285]  </TASK>
[  137.813873][ T7283] md: md0: raid1 would not accept array
[  137.814060][ T7291] md: could not open device unknown-block(1,0).
[  138.242063][ T7312] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  138.284428][ T7311] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  138.285629][ T5608] Bluetooth: hci4: connection err: -111
[  138.323410][ T7318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.603'.
[  138.514238][ T7328] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  138.535599][ T7308] md: md0: raid1 would not accept array
[  138.535768][ T7316] md: could not open device unknown-block(1,0).
[  138.666943][ T7336] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  138.981254][ T7336] md: md0: raid1 would not accept array
[  138.982209][ T7344] md: could not open device unknown-block(1,0).
[  139.009832][ T7350] vxlan: RTM_NEWNEIGH with invalid state 0x0
[  139.482814][ T7366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.618'.
[  139.581329][ T7370] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  139.678461][ T7360] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16
[  139.976644][ T7380] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  140.038310][ T7375] md: md0: raid1 would not accept array
[  140.038522][ T7378] md: could not open device unknown-block(1,0).
[  140.134516][ T7380] md: md0: raid1 would not accept array
[  140.134688][ T7389] md: could not open device unknown-block(1,0).
[  140.240510][ T5598] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  140.250489][ T5598] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  140.514040][ T5598] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  140.650061][ T7410] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  140.956755][ T7424] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  141.028969][ T5598] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  141.089892][ T7433] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  141.142323][ T7424] md: md0: raid1 would not accept array
[  141.142482][ T7428] md: could not open device unknown-block(1,0).
[  141.260224][ T7396] ceph: No mds server is up or the cluster is laggy
[  141.347111][    C1] net_ratelimit: 101 callbacks suppressed
[  141.456841][ T7443] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  141.745078][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.650'.
[  141.874531][ T7459] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  142.139867][ T7459] md: md0: raid1 would not accept array
[  142.141848][ T7463] md: could not open device unknown-block(1,0).
[  142.145823][ T7472] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  142.232857][ T5598] logitech-hidpp-device 0005:046D:B012.001B: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  142.326241][ T7479] fido_id[7479]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  142.386855][ T7482] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  142.495755][ T7484] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  142.606897][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.664'.
[  142.710552][   T31] audit: type=1400 audit(1789610826.369:364): avc:  denied  { setopt } for  pid=7492 comm="syz.0.668" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  142.710904][ T7497] xt_hashlimit: size too large, truncated to 1048576
[  142.815681][ T7502] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  142.935810][ T7511] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  142.984879][ T7502] md: md0: raid1 would not accept array
[  142.985070][ T7509] md: could not open device unknown-block(1,0).
[  143.063351][ T1189] logitech-hidpp-device 0005:046D:B012.001C: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  143.182487][ T7507] md: md0: raid1 would not accept array
[  143.300460][ T7516] md: could not open device unknown-block(1,0).
[  143.402115][ T7530] fido_id[7530]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  143.443676][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.682'.
[  143.586900][ T7544] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  143.611411][   T10] logitech-hidpp-device 0005:046D:B012.001D: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  143.650187][ T7544] md: could not open device unknown-block(1,0).
[  143.892202][ T7563] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  143.894015][ T7541] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17
[  143.896191][ T7556] fido_id[7556]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  144.010825][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.695'.
[  144.071869][   T31] audit: type=1400 audit(1789610827.729:365): avc:  denied  { read } for  pid=7575 comm="syz.3.697" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  144.098174][ T7563] md: md0: raid1 would not accept array
[  144.230838][ T7564] md: md0: raid1 would not accept array
[  144.232525][ T7568] md: could not open device unknown-block(1,0).
[  144.232707][ T7569] md: could not open device unknown-block(1,0).
[  144.454105][ T5608] Bluetooth: hci1: connection err: -111
[  144.526389][ T7599] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  144.610653][ T7599] md: could not open device unknown-block(1,0).
[  144.681228][ T7605] syzkaller0: entered promiscuous mode
[  144.681250][ T7605] syzkaller0: entered allmulticast mode
[  144.875624][ T7621] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  144.985486][ T7619] md: md0: raid1 would not accept array
[  144.985691][ T7621] md: could not open device unknown-block(1,0).
[  144.985855][ T7623] md: could not open device unknown-block(1,0).
[  145.101619][ T7609] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18
[  145.427701][ T3100] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  145.567135][ T3100] usb 5-1: device descriptor read/64, error -71
[  145.817935][ T3100] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  145.958768][ T3100] usb 5-1: device descriptor read/64, error -71
[  146.082328][ T3100] usb usb5-port1: attempt power cycle
[  146.377105][    C1] net_ratelimit: 82 callbacks suppressed
[  146.431253][ T3100] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  146.448501][ T3100] usb 5-1: device descriptor read/8, error -71
[  146.687173][ T3100] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  146.707821][ T3100] usb 5-1: device descriptor read/8, error -71
[  146.819652][ T3100] usb usb5-port1: unable to enumerate USB device
[  146.905143][ T3100] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  146.924555][ T7653] md: md0: raid1 would not accept array
[  146.924713][ T7657] md: could not open device unknown-block(1,0).
[  146.955542][ T3100] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  146.979326][ T7680] misc userio: No port type given on /dev/userio
[  147.146200][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.736'.
[  147.208127][ T3100] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  147.239684][ T7673] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19
[  147.281375][ T7692] device-mapper: ioctl: Unable to interpret geometry settings.
[  147.583244][ T7660] ceph: No mds server is up or the cluster is laggy
[  147.750962][ T7719] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  147.776918][ T7707] md: md0: raid1 would not accept array
[  147.777201][ T7713] md: could not open device unknown-block(1,0).
[  147.877297][ T7719] md: could not open device unknown-block(1,0).
[  147.967323][ T3100] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  148.006356][ T7732] use of bytesused == 0 is deprecated and will be removed in the future,
[  148.006370][ T7732] use the actual size instead.
[  148.127849][ T3100] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  148.128378][ T3100] usb 4-1: config 0 has no interfaces?
[  148.128423][ T3100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.133952][ T3100] usb 4-1: config 0 descriptor??
[  148.225911][   T31] audit: type=1400 audit(1789610831.879:366): avc:  denied  { read write } for  pid=7742 comm="syz.0.760" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  148.225955][   T31] audit: type=1400 audit(1789610831.879:367): avc:  denied  { open } for  pid=7742 comm="syz.0.760" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  148.225984][   T31] audit: type=1400 audit(1789610831.879:368): avc:  denied  { ioctl } for  pid=7742 comm="syz.0.760" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  148.309936][   T31] audit: type=1400 audit(1789610831.969:369): avc:  denied  { mounton } for  pid=7742 comm="syz.0.760" path="/161/file0" dev="tmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  148.345555][ T7716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.346161][ T7716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.426350][ T5738] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  148.450601][ T5738] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  148.493874][ T7754] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  148.537829][ T7754] md: could not open device unknown-block(1,0).
[  148.556705][ T5738] usb 4-1: USB disconnect, device number 21
[  148.703528][ T7761] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  148.711498][ T7761] md: could not open device unknown-block(1,0).
[  148.711676][ T5598] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  148.901283][   T31] audit: type=1400 audit(1789610832.559:370): avc:  denied  { write } for  pid=7769 comm="syz.1.770" name="core" dev="configfs" ino=3580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  149.163975][ T7785] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  149.177591][ T7785] md: could not open device unknown-block(1,0).
[  149.202302][ T7749] ceph: No mds server is up or the cluster is laggy
[  149.220909][ T5598] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  149.319997][   T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  149.477483][   T10] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  149.479660][   T10] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  149.482205][   T10] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  149.486537][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.486556][   T10] usb 2-1: Product: syz
[  149.486572][   T10] usb 2-1: Manufacturer: syz
[  149.486586][   T10] usb 2-1: SerialNumber: syz
[  149.519300][   T10] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected
[  149.552917][   T10] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  149.594945][   T10] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  149.716843][   T31] audit: type=1400 audit(1789610833.369:371): avc:  denied  { create } for  pid=7810 comm="syz.4.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  149.734888][ T7812] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 14 (only 8 groups)
[  149.945678][ T7821] FAULT_INJECTION: forcing a failure.
[  149.945678][ T7821] name failslab, interval 1, probability 0, space 0, times 0
[  149.945701][ T7821] CPU: 1 UID: 0 PID: 7821 Comm: syz.4.791 Not tainted syzkaller #0 PREEMPT(full) 
[  149.945724][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  149.945738][ T7821] Call Trace:
[  149.945746][ T7821]  <TASK>
[  149.945755][ T7821]  dump_stack_lvl+0x100/0x190
[  149.945791][ T7821]  should_fail_ex.cold+0x5/0xa
[  149.945818][ T7821]  should_failslab+0xc2/0x120
[  149.945844][ T7821]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  149.945867][ T7821]  ? __alloc_skb+0x140/0x710
[  149.945896][ T7821]  __alloc_skb+0x140/0x710
[  149.945917][ T7821]  ? __alloc_skb+0x5b7/0x710
[  149.945940][ T7821]  ? __pfx___alloc_skb+0x10/0x10
[  149.945969][ T7821]  _sctp_make_chunk+0x51/0x270
[  149.945996][ T7821]  sctp_make_control+0x2f/0x2d0
[  149.946023][ T7821]  sctp_make_init+0x6d0/0xda0
[  149.946054][ T7821]  ? __pfx_sctp_make_init+0x10/0x10
[  149.946089][ T7821]  ? sctp_sm_lookup_event+0x10e/0x520
[  149.946113][ T7821]  ? sctp_pname+0x9d/0x130
[  149.946142][ T7821]  sctp_sf_do_prm_asoc+0xbf/0x360
[  149.946164][ T7821]  ? __pfx_sctp_pname+0x10/0x10
[  149.946189][ T7821]  sctp_do_sm+0x17a/0x5c30
[  149.946221][ T7821]  ? sctp_sendmsg+0x1144/0x22e0
[  149.946243][ T7821]  ? __sys_sendmmsg+0x20c/0x440
[  149.946265][ T7821]  ? __x64_sys_sendmmsg+0x9c/0x100
[  149.946288][ T7821]  ? do_syscall_64+0x123/0x790
[  149.946316][ T7821]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.946341][ T7821]  ? __pfx_sctp_do_sm+0x10/0x10
[  149.946393][ T7821]  ? __kasan_kmalloc+0xaa/0xb0
[  149.946417][ T7821]  ? __sk_mem_raise_allocated+0x789/0x1570
[  149.946449][ T7821]  sctp_primitive_ASSOCIATE+0x9c/0xd0
[  149.946476][ T7821]  sctp_sendmsg_to_asoc+0xa6a/0x1c50
[  149.946494][ T7821]  ? __asan_memmove+0x10/0x60
[  149.946513][ T7821]  ? sctp_assoc_set_primary+0x276/0x310
[  149.946533][ T7821]  ? sctp_assoc_add_peer+0x256/0x1550
[  149.946558][ T7821]  ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10
[  149.946577][ T7821]  ? sctp_connect_new_asoc+0x41e/0x770
[  149.946600][ T7821]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  149.946632][ T7821]  sctp_sendmsg+0x1144/0x22e0
[  149.946660][ T7821]  ? __pfx_sctp_sendmsg+0x10/0x10
[  149.946681][ T7821]  ? sock_has_perm+0x25a/0x2f0
[  149.946710][ T7821]  ? __pfx_sock_has_perm+0x10/0x10
[  149.946757][ T7821]  ? __pfx_sctp_sendmsg+0x10/0x10
[  149.946781][ T7821]  inet_sendmsg+0x11c/0x140
[  149.946809][ T7821]  ____sys_sendmsg+0x9c9/0xbe0
[  149.946837][ T7821]  ? __pfx_inet_sendmsg+0x10/0x10
[  149.946867][ T7821]  ? __pfx_____sys_sendmsg+0x10/0x10
[  149.946895][ T7821]  ? futex_unqueue+0x133/0x2c0
[  149.946925][ T7821]  ___sys_sendmsg+0x190/0x1e0
[  149.946953][ T7821]  ? __pfx____sys_sendmsg+0x10/0x10
[  149.946983][ T7821]  ? __pfx___futex_wait+0x10/0x10
[  149.947000][ T7821]  ? __pfx_try_to_wake_up+0x10/0x10
[  149.947025][ T7821]  ? futex_hash+0x311/0x400
[  149.947052][ T7821]  ? __fget_files+0x34/0x3d0
[  149.947092][ T7821]  __sys_sendmmsg+0x20c/0x440
[  149.947117][ T7821]  ? __pfx___sys_sendmmsg+0x10/0x10
[  149.947138][ T7821]  ? file_init_path+0x48e/0x670
[  149.947169][ T7821]  ? __pfx_do_futex+0x10/0x10
[  149.947208][ T7821]  ? __sys_socket+0xac/0x260
[  149.947226][ T7821]  ? xfd_validate_state+0x129/0x190
[  149.947253][ T7821]  __x64_sys_sendmmsg+0x9c/0x100
[  149.947279][ T7821]  ? lockdep_hardirqs_on+0x7d/0x110
[  149.947306][ T7821]  do_syscall_64+0x123/0x790
[  149.947336][ T7821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.947355][ T7821] RIP: 0033:0x7eff39f9e159
[  149.947372][ T7821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  149.947389][ T7821] RSP: 002b:00007eff3adfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  149.947409][ T7821] RAX: ffffffffffffffda RBX: 00007eff3a225fa0 RCX: 00007eff39f9e159
[  149.947422][ T7821] RDX: 0000000000000001 RSI: 0000200000002f00 RDI: 0000000000000005
[  149.947434][ T7821] RBP: 00007eff3a03506b R08: 0000000000000000 R09: 0000000000000000
[  149.947447][ T7821] R10: 0000000010004040 R11: 0000000000000246 R12: 0000000000000000
[  149.947458][ T7821] R13: 00007eff3a226038 R14: 00007eff3a225fa0 R15: 00007ffceda3b928
[  149.947484][ T7821]  </TASK>
[  150.289092][ T7828] misc userio: No port type given on /dev/userio
[  150.503415][ T7836] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  150.553628][ T7827] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20
[  150.828499][ T1189] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  150.861982][   T31] audit: type=1400 audit(1789610834.519:372): avc:  denied  { append } for  pid=7854 comm="syz.0.806" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  150.870415][ T7855] usb usb1: check_ctrlrecip: process 7855 (syz.0.806) requesting ep 01 but needs 81
[  150.870436][ T7855] usb usb1: usbfs: process 7855 (syz.0.806) did not claim interface 0 before use
[  150.969992][ T1189] usb 5-1: device descriptor read/64, error -71
[  151.184776][   T31] audit: type=1400 audit(1789610834.839:373): avc:  denied  { create } for  pid=7865 comm="syz.0.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  151.194583][   T31] audit: type=1400 audit(1789610834.849:374): avc:  denied  { write } for  pid=7865 comm="syz.0.813" path="socket:[18697]" dev="sockfs" ino=18697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  151.195363][   T31] audit: type=1400 audit(1789610834.849:375): avc:  denied  { bind } for  pid=7865 comm="syz.0.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  151.207735][ T1189] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  151.267959][   T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  151.338441][ T1189] usb 5-1: device descriptor read/64, error -71
[  151.417136][    C1] net_ratelimit: 125 callbacks suppressed
[  151.447542][ T1189] usb usb5-port1: attempt power cycle
[  151.539179][ T5712] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  151.819056][ T1189] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[  151.838880][ T1189] usb 5-1: device descriptor read/8, error -71
[  152.022201][ T5598] logitech-hidpp-device 0005:046D:B012.001E: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  152.068143][ T5712] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  152.070485][ T7871] ceph: No mds server is up or the cluster is laggy
[  152.079036][ T1189] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[  152.108509][ T1189] usb 5-1: device descriptor read/8, error -71
[  152.217995][ T1189] usb usb5-port1: unable to enumerate USB device
[  152.276035][ T7895] fido_id[7895]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  152.485647][ T7912] device-mapper: table: 248:2: too large device
[  152.485661][ T7912] device-mapper: ioctl: error adding target to table
[  152.646739][ T7923] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 14 (only 8 groups)
[  152.754486][ T7926] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 5 out of range (51000000..2150000000)
[  152.857548][ T7780] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110
[  152.857798][ T7780] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32
[  152.857828][ T7780] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32
[  152.912747][ T7779] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32
[  153.564495][ T7947] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  153.691985][ T7947] md: personality for level rai is not loaded!
[  153.696240][ T7949] md: could not open device unknown-block(1,0).
[  153.834654][ T7956] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 14 (only 8 groups)
[  153.912813][ T7779] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32
[  153.925792][ T1189] usb 2-1: USB disconnect, device number 21
[  153.964113][ T1189] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  153.990259][ T1189] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  153.996519][ T1189] ti_usb_3410_5052 2-1:2.0: device disconnected
[  154.042622][ T7964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.852'.
[  154.109158][ T5598] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  154.257965][ T5598] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  154.258939][ T5598] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.258958][ T5598] usb 1-1: config 0 has no interfaces?
[  154.259001][ T5598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.265175][ T5598] usb 1-1: config 0 descriptor??
[  154.341284][ T3100] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  154.342716][ T3100] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  154.347832][ T5738] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  154.498280][ T5738] usb 3-1: Using ep0 maxpacket: 8
[  154.499176][ T5738] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  154.500596][ T5738] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  154.500609][ T5738] usb 3-1: config 179 has no interface number 0
[  154.500631][ T5738] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  154.500645][ T5738] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  154.500660][ T5738] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  154.500673][ T5738] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  154.500684][ T5738] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  154.500697][ T5738] usb 3-1: config 179 interface 65 has no altsetting 0
[  154.500722][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.526978][ T5738] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input21
[  154.530478][ T5598] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  154.546363][ T3100] usb 1-1: USB disconnect, device number 19
[  154.598632][ T5764] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  154.657810][ T5598] usb 5-1: device descriptor read/64, error -71
[  154.714647][ T5738] usb 3-1: USB disconnect, device number 22
[  154.714773][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  154.897176][ T5598] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  155.027133][ T5598] usb 5-1: device descriptor read/64, error -71
[  155.108195][ T5738] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  155.137516][ T5598] usb usb5-port1: attempt power cycle
[  155.415733][   T31] kauditd_printk_skb: 2 callbacks suppressed
[  155.415746][   T31] audit: type=1400 audit(1789610839.069:378): avc:  denied  { create } for  pid=8006 comm="syz.3.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  155.429211][   T31] audit: type=1400 audit(1789610839.079:379): avc:  denied  { write } for  pid=8006 comm="syz.3.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  155.517139][ T5598] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  155.538078][ T5598] usb 5-1: device descriptor read/8, error -71
[  155.627342][ T1189] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  155.641355][ T5738] logitech-hidpp-device 0005:046D:B012.001F: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  155.713103][ T8020] fido_id[8020]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  155.778021][ T1189] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  155.778569][ T1189] usb 1-1: config 0 has no interfaces?
[  155.778614][ T1189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.781264][ T1189] usb 1-1: config 0 descriptor??
[  155.787371][ T5598] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  155.811863][ T5598] usb 5-1: device descriptor read/8, error -71
[  155.874827][ T8030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.881'.
[  155.911979][   T31] audit: type=1400 audit(1789610839.569:380): avc:  denied  { listen } for  pid=8031 comm="syz.3.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  155.912859][ T8032] netlink: 'syz.3.882': attribute type 2 has an invalid length.
[  155.913696][   T31] audit: type=1400 audit(1789610839.569:381): avc:  denied  { connect } for  pid=8031 comm="syz.3.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  155.914334][   T31] audit: type=1400 audit(1789610839.569:382): avc:  denied  { write } for  pid=8031 comm="syz.3.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  155.914776][   T31] audit: type=1400 audit(1789610839.569:383): avc:  denied  { accept } for  pid=8031 comm="syz.3.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  155.917731][ T5598] usb usb5-port1: unable to enumerate USB device
[  155.971995][   T31] audit: type=1400 audit(1789610839.619:384): avc:  denied  { connect } for  pid=8031 comm="syz.3.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  155.987538][ T8005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.988164][ T8005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.011050][ T3100] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  156.189524][ T5598] usb 1-1: USB disconnect, device number 20
[  156.207577][ T3100] usb 3-1: Using ep0 maxpacket: 8
[  156.209904][ T3100] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  156.210871][ T3100] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  156.210892][ T3100] usb 3-1: config 179 has no interface number 0
[  156.210918][ T3100] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  156.210931][ T3100] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  156.210945][ T3100] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 230, changing to 11
[  156.210958][ T3100] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 57438, setting to 1024
[  156.210971][ T3100] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  156.210984][ T3100] usb 3-1: config 179 interface 65 has no altsetting 0
[  156.211009][ T3100] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.224427][ T3100] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input22
[  156.294610][ T4951] input input22: unable to receive magic message: -110
[  156.343539][ T4951] input input22: unable to receive magic message: -32
[  156.354179][ T4951] input input22: unable to receive magic message: -32
[  156.356290][ T4951] input input22: unable to receive magic message: -32
[  156.365844][ T4951] input input22: unable to receive magic message: -32
[  156.379578][ T4951] input input22: unable to receive magic message: -32
[  156.422566][ T1189] usb 3-1: USB disconnect, device number 23
[  156.422602][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  156.537201][    C0] net_ratelimit: 58 callbacks suppressed
[  156.538044][ T3100] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  156.647254][ T5598] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  156.774173][ T8035] syzkaller0: entered promiscuous mode
[  156.774187][ T8035] syzkaller0: entered allmulticast mode
[  156.789649][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  156.789684][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  156.789711][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  156.789739][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  156.828835][ T5598] usb 1-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00
[  156.839077][ T5598] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.839134][ T5598] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  156.863963][ T5598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  156.863981][ T5598] usb 1-1: Product: syz
[  156.863995][ T5598] usb 1-1: Manufacturer: syz
[  156.879569][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.885'.
[  156.903312][ T5598] hso 1-1:1.0: Can't find BULK endpoints
[  157.014097][ T5598] logitech-hidpp-device 0005:046D:B012.0020: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  157.084974][ T8046] fido_id[8046]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  157.334647][ T7983] ceph: No mds server is up or the cluster is laggy
[  157.336765][ T8060] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 14 (only 8 groups)
[  157.554490][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.898'.
[  157.615041][   T10] logitech-hidpp-device 0005:046D:B012.0021: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  157.802831][ T8080] fido_id[8080]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  158.114270][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'.
[  158.334334][ T8122] block2mtd: error: cannot open device /dev/loop0
[  158.531153][ T8130] device-mapper: table: 248:2: too large device
[  158.531169][ T8130] device-mapper: ioctl: error adding target to table
[  158.531203][ T8130] FAULT_INJECTION: forcing a failure.
[  158.531203][ T8130] name fail_futex, interval 1, probability 0, space 0, times 0
[  158.531228][ T8130] CPU: 0 UID: 0 PID: 8130 Comm: syz.2.924 Not tainted syzkaller #0 PREEMPT(full) 
[  158.531251][ T8130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  158.531264][ T8130] Call Trace:
[  158.531271][ T8130]  <TASK>
[  158.531280][ T8130]  dump_stack_lvl+0x100/0x190
[  158.531314][ T8130]  should_fail_ex.cold+0x5/0xa
[  158.531342][ T8130]  get_futex_key+0x1d0/0x14f0
[  158.531370][ T8130]  ? __pfx_get_futex_key+0x10/0x10
[  158.531394][ T8130]  ? list_devices+0x930/0x980
[  158.531419][ T8130]  ? free_params+0x6d/0x80
[  158.531447][ T8130]  ? kfree+0x22b/0x6d0
[  158.531479][ T8130]  futex_wake+0xf4/0x5e0
[  158.531509][ T8130]  ? ctl_ioctl+0x5f2/0xcc0
[  158.531537][ T8130]  ? __pfx_futex_wake+0x10/0x10
[  158.531564][ T8130]  ? __pfx_ctl_ioctl+0x10/0x10
[  158.531599][ T8130]  do_futex+0x2b2/0x440
[  158.531625][ T8130]  ? __pfx_do_futex+0x10/0x10
[  158.531655][ T8130]  __x64_sys_futex+0x34f/0x4d0
[  158.531681][ T8130]  ? __pfx___x64_sys_futex+0x10/0x10
[  158.531706][ T8130]  ? selinux_file_ioctl+0xb6/0x290
[  158.531735][ T8130]  do_syscall_64+0x123/0x790
[  158.531764][ T8130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.531784][ T8130] RIP: 0033:0x7f472e19e159
[  158.531801][ T8130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  158.531820][ T8130] RSP: 002b:00007f472f0820e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  158.531840][ T8130] RAX: ffffffffffffffda RBX: 00007f472e425fa8 RCX: 00007f472e19e159
[  158.531852][ T8130] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f472e425fac
[  158.531864][ T8130] RBP: 00007f472e425fa0 R08: 0000000000000001 R09: 0000000000000000
[  158.531876][ T8130] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  158.531887][ T8130] R13: 00007f472e426038 R14: 00007ffe760bffc0 R15: 00007ffe760c00a8
[  158.531913][ T8130]  </TASK>
[  158.566968][   T10] usb 1-1: USB disconnect, device number 21
[  158.701345][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.925'.
[  158.824550][ T8142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.011887][ T8152] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 14 (only 8 groups)
[  159.081336][ T8155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.934'.
[  159.637195][ T5598] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  159.693357][ T8190] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 14 (only 8 groups)
[  159.771605][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.951'.
[  159.793239][ T5598] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00
[  159.795737][ T5598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  159.795760][ T5598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.795807][ T5598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.839627][ T5598] usb 5-1: config 0 descriptor??
[  160.205512][ T8219] Bluetooth: hci0: invalid len left 7, exp >= 50
[  160.342510][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.967'.
[  160.496086][ T5598] usbhid 5-1:0.0: can't add hid device: -71
[  160.496199][ T5598] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  160.519837][ T5598] usb 5-1: USB disconnect, device number 31
[  160.555591][ T8236] device-mapper: table: 248:2: too large device
[  160.555610][ T8236] device-mapper: ioctl: error adding target to table
[  160.824803][ T8256] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  160.902243][   T31] audit: type=1400 audit(1789610844.559:385): avc:  denied  { create } for  pid=8258 comm="syz.2.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  160.905100][   T31] audit: type=1400 audit(1789610844.559:386): avc:  denied  { connect } for  pid=8258 comm="syz.2.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  160.905772][   T31] audit: type=1400 audit(1789610844.559:387): avc:  denied  { bind } for  pid=8258 comm="syz.2.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  160.969351][   T31] audit: type=1400 audit(1789610844.619:388): avc:  denied  { write } for  pid=8258 comm="syz.2.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  160.975654][ T8256] md: md0: raid1 would not accept array
[  161.006998][   T31] audit: type=1400 audit(1789610844.659:389): avc:  denied  { getopt } for  pid=8258 comm="syz.2.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  161.019213][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.981'.
[  161.344774][ T8285] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 14 (only 8 groups)
[  161.417331][ T5712] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  161.456328][ T8289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.990'.
[  161.460122][ T5764] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  161.588645][ T5764] usb 4-1: device descriptor read/64, error -71
[  161.589480][ T5712] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  161.590609][ T5712] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.590650][ T5712] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.590675][ T5712] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  161.592497][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  161.592517][ T5712] usb 3-1: Product: syz
[  161.592532][ T5712] usb 3-1: Manufacturer: syz
[  161.670613][ T5712] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected
[  161.671912][ T5712] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  161.672280][ T5712] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  161.817095][    C0] net_ratelimit: 74 callbacks suppressed
[  161.820175][ T3100] usb 3-1: USB disconnect, device number 24
[  161.828589][ T5764] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  161.833079][ T3100] garmin_gps 3-1:1.0: device disconnected
[  161.892798][ T8307] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  161.950858][ T8307] md: md0: raid1 would not accept array
[  161.957251][ T5764] usb 4-1: device descriptor read/64, error -71
[  162.068402][ T5764] usb usb4-port1: attempt power cycle
[  162.124246][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1001'.
[  162.407437][ T5764] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  162.428375][ T5764] usb 4-1: device descriptor read/8, error -71
[  162.465417][ T8332] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  162.481562][ T8330] device-mapper: table: 248:2: too large device
[  162.481577][ T8330] device-mapper: ioctl: error adding target to table
[  162.482579][ T8336] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  162.588595][ T8332] md: md0: raid1 would not accept array
[  162.664656][ T8336] md: md0: raid1 would not accept array
[  162.672808][ T5764] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  162.699835][ T5764] usb 4-1: device descriptor read/8, error -71
[  162.807858][ T5764] usb usb4-port1: unable to enumerate USB device
[  163.165411][ T8382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.346775][ T8391] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  163.381003][ T8394] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  163.444906][ T8391] md: md0: raid1 would not accept array
[  163.487263][ T8394] md: md0: raid1 would not accept array
[  163.783351][ T8407] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[  163.991797][ T8423] device-mapper: table: 248:2: too large device
[  163.991813][ T8423] device-mapper: ioctl: error adding target to table
[  164.206230][ T8433] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  164.232773][ T8437] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  164.462964][ T8433] md: md0: raid1 would not accept array
[  164.463209][ T8454] xt_hashlimit: max too large, truncated to 1048576
[  164.622895][ T8464] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 13 (only 8 groups)
[  164.674257][ T8437] md: md0: raid1 would not accept array
[  164.805743][ T8472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.106274][ T5608] Bluetooth: hci4: link tx timeout
[  165.106362][ T5608] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  165.312713][ T8506] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  165.519351][ T8517] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  165.591951][ T8506] md: md0: raid1 would not accept array
[  165.707487][ T8517] md: md0: raid1 would not accept array
[  166.274696][   T31] audit: type=1400 audit(1789610849.929:390): avc:  denied  { read } for  pid=8554 comm="syz.2.1080" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[  166.274738][   T31] audit: type=1400 audit(1789610849.929:391): avc:  denied  { open } for  pid=8554 comm="syz.2.1080" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[  166.392576][   T31] audit: type=1400 audit(1789610850.049:392): avc:  denied  { map } for  pid=8554 comm="syz.2.1080" path="socket:[20475]" dev="sockfs" ino=20475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  166.412535][ T8563] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  166.738748][   T31] audit: type=1400 audit(1789610850.399:393): avc:  denied  { create } for  pid=8579 comm="syz.3.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  166.747563][   T31] audit: type=1400 audit(1789610850.399:394): avc:  denied  { bind } for  pid=8579 comm="syz.3.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  166.747600][   T31] audit: type=1400 audit(1789610850.399:395): avc:  denied  { name_bind } for  pid=8579 comm="syz.3.1087" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  166.747630][   T31] audit: type=1400 audit(1789610850.399:396): avc:  denied  { node_bind } for  pid=8579 comm="syz.3.1087" saddr=fe80::28 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  166.766722][ T8563] md: md0: raid1 would not accept array
[  166.829122][ T8580] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  167.097102][    C1] net_ratelimit: 91 callbacks suppressed
[  167.177315][ T5603] Bluetooth: hci4: command 0x0406 tx timeout
[  167.498085][ T8580] md: md0: raid1 would not accept array
[  167.989291][ T8625] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 14 (only 8 groups)
[  168.422371][ T8633] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  168.596172][ T8642] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  168.659443][ T8633] md: md0: raid1 would not accept array
[  168.738665][   T10] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  168.799070][ T8642] md: md0: raid1 would not accept array
[  168.867156][   T10] usb 1-1: device descriptor read/64, error -71
[  168.999995][ T8668] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 14 (only 8 groups)
[  169.098295][ T8673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.127401][   T10] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  169.258329][   T10] usb 1-1: device descriptor read/64, error -71
[  169.362103][ T8687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1124'.
[  169.367907][   T10] usb usb1-port1: attempt power cycle
[  169.429983][ T8689] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  169.532693][ T8689] md: md0: raid1 would not accept array
[  169.707611][   T10] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  169.718909][ T8706] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 14 (only 8 groups)
[  169.736411][   T10] usb 1-1: device descriptor read/8, error -71
[  169.982825][   T10] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  169.997971][   T10] usb 1-1: device descriptor read/8, error -71
[  170.107529][   T10] usb usb1-port1: unable to enumerate USB device
[  170.252899][ T8727] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  170.393636][ T8727] md: md0: raid1 would not accept array
[  170.393796][ T8731] md: could not open device unknown-block(1,0).
[  170.584021][ T8744] xt_hashlimit: max too large, truncated to 1048576
[  170.867235][ T8754] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1148'.
[  171.090171][ T8767] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  171.095118][ T8771] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 14 (only 8 groups)
[  171.254332][ T8774] xt_hashlimit: max too large, truncated to 1048576
[  171.353386][ T8767] md: md0: raid1 would not accept array
[  171.353538][ T8775] md: could not open device unknown-block(1,0).
[  171.564417][ T8793] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[  171.844933][ T8813] FAULT_INJECTION: forcing a failure.
[  171.844933][ T8813] name failslab, interval 1, probability 0, space 0, times 0
[  171.844960][ T8813] CPU: 0 UID: 0 PID: 8813 Comm: syz.1.1172 Not tainted syzkaller #0 PREEMPT(full) 
[  171.844984][ T8813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  171.844995][ T8813] Call Trace:
[  171.845004][ T8813]  <TASK>
[  171.845013][ T8813]  dump_stack_lvl+0x100/0x190
[  171.845049][ T8813]  should_fail_ex.cold+0x5/0xa
[  171.845083][ T8813]  should_failslab+0xc2/0x120
[  171.845112][ T8813]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[  171.845139][ T8813]  ? debugfs_create_symlink+0x29/0x1f0
[  171.845177][ T8813]  kstrdup+0x51/0xe0
[  171.845208][ T8813]  debugfs_create_symlink+0x29/0x1f0
[  171.845240][ T8813]  ref_tracker_dir_symlink+0x257/0x3b0
[  171.845269][ T8813]  ? __pfx_ref_tracker_dir_symlink+0x10/0x10
[  171.845318][ T8813]  ? rcu_is_watching+0x13/0xc0
[  171.845341][ T8813]  ? ida_alloc_range+0x70d/0x830
[  171.845365][ T8813]  ? kfree+0x1e5/0x6d0
[  171.845393][ T8813]  ? xas_nomem+0x189/0x2c0
[  171.845422][ T8813]  ? __pfx_net_ns_net_init+0x10/0x10
[  171.845446][ T8813]  net_ns_net_init+0xd2/0x120
[  171.845471][ T8813]  ops_init+0x1e2/0x5f0
[  171.845493][ T8813]  setup_net+0x118/0x3a0
[  171.845516][ T8813]  ? __pfx_setup_net+0x10/0x10
[  171.845544][ T8813]  copy_net_ns+0x345/0x7a0
[  171.845570][ T8813]  create_new_namespaces+0x3ea/0xac0
[  171.845599][ T8813]  unshare_nsproxy_namespaces+0xf2/0x220
[  171.845631][ T8813]  ksys_unshare+0x4a2/0xa70
[  171.845655][ T8813]  ? __pfx_ksys_unshare+0x10/0x10
[  171.845689][ T8813]  __x64_sys_unshare+0x31/0x40
[  171.845713][ T8813]  do_syscall_64+0x123/0x790
[  171.845744][ T8813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.845764][ T8813] RIP: 0033:0x7f97be99e159
[  171.845782][ T8813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.845800][ T8813] RSP: 002b:00007f97bf93b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  171.845821][ T8813] RAX: ffffffffffffffda RBX: 00007f97bec25fa0 RCX: 00007f97be99e159
[  171.845834][ T8813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000600
[  171.845845][ T8813] RBP: 00007f97bea3506b R08: 0000000000000000 R09: 0000000000000000
[  171.845856][ T8813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.845868][ T8813] R13: 00007f97bec26038 R14: 00007f97bec25fa0 R15: 00007ffdc3783718
[  171.845894][ T8813]  </TASK>
[  172.120870][ T8813] net_ratelimit: 107 callbacks suppressed
[  172.414386][ T8836] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  172.457435][   T10] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  172.541295][ T8836] md: md0: raid1 would not accept array
[  172.545247][ T8840] FAULT_INJECTION: forcing a failure.
[  172.545247][ T8840] name failslab, interval 1, probability 0, space 0, times 0
[  172.545263][ T8840] CPU: 1 UID: 0 PID: 8840 Comm: syz.2.1182 Not tainted syzkaller #0 PREEMPT(full) 
[  172.545276][ T8840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  172.545283][ T8840] Call Trace:
[  172.545287][ T8840]  <TASK>
[  172.545292][ T8840]  dump_stack_lvl+0x100/0x190
[  172.545314][ T8840]  should_fail_ex.cold+0x5/0xa
[  172.545329][ T8840]  should_failslab+0xc2/0x120
[  172.545347][ T8840]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[  172.545363][ T8840]  ? x509_cert_parse+0x3bd/0x910
[  172.545377][ T8840]  kmemdup_noprof+0x29/0x60
[  172.545397][ T8840]  x509_cert_parse+0x3bd/0x910
[  172.545410][ T8840]  x509_key_preparse+0x65/0x9c0
[  172.545426][ T8840]  asymmetric_key_preparse+0xce/0x1d0
[  172.545448][ T8840]  ? __pfx_asymmetric_key_preparse+0x10/0x10
[  172.545473][ T8840]  __key_create_or_update+0x463/0xe30
[  172.545499][ T8840]  ? __pfx___key_create_or_update+0x10/0x10
[  172.545523][ T8840]  ? lookup_user_key+0x3f3/0x1300
[  172.545553][ T8840]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  172.545570][ T8840]  key_create_or_update+0x42/0x60
[  172.545584][ T8840]  __do_sys_add_key+0x2e8/0x460
[  172.545601][ T8840]  ? __pfx___do_sys_add_key+0x10/0x10
[  172.545627][ T8840]  do_syscall_64+0x123/0x790
[  172.545643][ T8840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.545655][ T8840] RIP: 0033:0x7f472e19e159
[  172.545665][ T8840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  172.545677][ T8840] RSP: 002b:00007f472f082028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  172.545690][ T8840] RAX: ffffffffffffffda RBX: 00007f472e425fa0 RCX: 00007f472e19e159
[  172.545699][ T8840] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[  172.545707][ T8840] RBP: 00007f472e23506b R08: ffffffffffffffff R09: 0000000000000000
[  172.545715][ T8840] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[  172.545722][ T8840] R13: 00007f472e426038 R14: 00007f472e425fa0 R15: 00007ffe760c00a8
[  172.545738][ T8840]  </TASK>
[  172.546071][ T8842] md: could not open device unknown-block(1,0).
[  172.699152][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  172.758175][   T10] usb 4-1: unable to read config index 0 descriptor/start: -61
[  172.758208][   T10] usb 4-1: can't read configurations, error -61
[  172.897170][   T10] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[  172.947344][ T5712] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  173.058457][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  173.062099][   T10] usb 4-1: unable to read config index 0 descriptor/start: -61
[  173.062126][   T10] usb 4-1: can't read configurations, error -61
[  173.062476][   T10] usb usb4-port1: attempt power cycle
[  173.129167][ T5712] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  173.130099][ T5712] usb 1-1: config 0 has no interfaces?
[  173.130145][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.146084][ T5712] usb 1-1: config 0 descriptor??
[  173.223047][   T31] audit: type=1400 audit(1789610856.879:397): avc:  denied  { mount } for  pid=8863 comm="syz.1.1189" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  173.251662][ T8864] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  173.270099][   T31] audit: type=1400 audit(1789610856.929:398): avc:  denied  { unmount } for  pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  173.385077][ T8839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.400108][   T10] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  173.412446][ T8839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.420116][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  173.422546][   T10] usb 4-1: unable to read config index 0 descriptor/start: -61
[  173.422572][   T10] usb 4-1: can't read configurations, error -61
[  173.548415][   T10] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  173.553501][ T8876] device-mapper: table: 248:2: zero-length target
[  173.553515][ T8876] device-mapper: ioctl: error adding target to table
[  173.583648][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  173.585178][   T10] usb 4-1: unable to read config index 0 descriptor/start: -61
[  173.585206][   T10] usb 4-1: can't read configurations, error -61
[  173.585710][   T10] usb usb4-port1: unable to enumerate USB device
[  173.621339][   T10] usb 1-1: USB disconnect, device number 26
[  173.672899][ T8884] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  173.808538][ T8884] md: md0: raid1 would not accept array
[  173.809490][ T8887] md: could not open device unknown-block(1,0).
[  174.079382][   T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  174.237646][   T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00
[  174.238634][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  174.238690][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  174.240177][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  174.240193][   T10] usb 1-1: Product: syz
[  174.240206][   T10] usb 1-1: Manufacturer: syz
[  174.250038][   T10] hso 1-1:1.0: Can't find BULK endpoints
[  174.356305][   T31] audit: type=1400 audit(1789610858.009:399): avc:  denied  { cmd } for  pid=8912 comm="syz.2.1207" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[  174.435541][ T8913] veth3: entered allmulticast mode
[  174.710042][ T8927] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  174.714721][   T31] audit: type=1400 audit(1789610858.369:400): avc:  denied  { getopt } for  pid=8928 comm="syz.4.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  174.803764][ T8927] md: md0: raid1 would not accept array
[  174.810748][ T8931] md: could not open device unknown-block(1,0).
[  175.288492][ T8962] device-mapper: table: 248:2: too large device
[  175.288507][ T8962] device-mapper: ioctl: error adding target to table
[  175.377564][ T5738] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  175.517921][ T8971] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 13 (only 8 groups)
[  175.528230][ T5738] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  175.529640][ T5738] usb 3-1: unable to read config index 0 descriptor/start: -61
[  175.529665][ T5738] usb 3-1: can't read configurations, error -61
[  175.657797][ T5738] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  175.813819][ T8990] xt_hashlimit: max too large, truncated to 1048576
[  175.818078][ T5738] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  175.819396][ T5738] usb 3-1: unable to read config index 0 descriptor/start: -61
[  175.819421][ T5738] usb 3-1: can't read configurations, error -61
[  175.819903][ T5738] usb usb3-port1: attempt power cycle
[  175.886134][   T10] usb 1-1: USB disconnect, device number 27
[  176.126174][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'.
[  176.164158][ T5738] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  176.195854][ T5738] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  176.211926][ T5738] usb 3-1: unable to read config index 0 descriptor/start: -61
[  176.211960][ T5738] usb 3-1: can't read configurations, error -61
[  176.293700][ T9014] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[  176.341664][ T5738] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  176.359982][ T5738] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  176.361468][ T5738] usb 3-1: unable to read config index 0 descriptor/start: -61
[  176.361498][ T5738] usb 3-1: can't read configurations, error -61
[  176.361924][ T5738] usb usb3-port1: unable to enumerate USB device
[  176.416380][   T31] audit: type=1400 audit(1789610860.069:401): avc:  denied  { node_bind } for  pid=9021 comm="syz.4.1252" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  176.625188][ T9027] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  176.625897][ T9027] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  176.626497][ T9027] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  176.658779][ T9027] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  176.659431][ T9027] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  176.661379][ T9027] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  176.661996][ T9027] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  176.662585][ T9027] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  176.663172][ T9027] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  176.663760][ T9027] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  176.817987][ T5738] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  176.947623][ T5738] usb 1-1: device descriptor read/64, error -71
[  176.976591][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1263'.
[  177.096772][   T13] IPVS: starting estimator thread 0...
[  177.188401][ T5738] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  177.195488][ T9060] IPVS: using max 50 ests per chain, 120000 per kthread
[  177.256269][ T9070] xt_hashlimit: max too large, truncated to 1048576
[  177.276213][ T3100] logitech-hidpp-device 0005:046D:B012.0022: unbalanced collection at end of report description
[  177.276721][ T3100] logitech-hidpp-device 0005:046D:B012.0022: hidpp_probe:parse failed
[  177.276778][ T3100] logitech-hidpp-device 0005:046D:B012.0022: probe with driver logitech-hidpp-device failed with error -22
[  177.327581][ T5738] usb 1-1: device descriptor read/64, error -71
[  177.337121][    C1] net_ratelimit: 119 callbacks suppressed
[  177.393060][ T9078] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1276'.
[  177.437601][ T5738] usb usb1-port1: attempt power cycle
[  177.461203][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'.
[  177.666366][ T9098] comedi comedi2: das16m1: I/O base address not correctly aligned
[  177.715654][ T9102] xt_hashlimit: max too large, truncated to 1048576
[  177.777511][ T5738] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  177.787151][ T1189] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  177.798877][ T5738] usb 1-1: device descriptor read/8, error -71
[  177.918503][ T1189] usb 2-1: device descriptor read/64, error -71
[  178.037204][ T5738] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  178.059254][ T5738] usb 1-1: device descriptor read/8, error -71
[  178.166817][ T1189] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  178.167524][ T5738] usb usb1-port1: unable to enumerate USB device
[  178.188068][ T9132] device-mapper: ioctl: name not supplied when creating device
[  178.294151][   T31] audit: type=1400 audit(1789610861.949:402): avc:  denied  { write } for  pid=9137 comm="syz.4.1303" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[  178.294941][   T31] audit: type=1400 audit(1789610861.949:403): avc:  denied  { ioctl } for  pid=9137 comm="syz.4.1303" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[  178.295333][ T9138] 0x000000000001-0x000000020000 : ""
[  178.327406][ T1189] usb 2-1: device descriptor read/64, error -71
[  178.380218][ T9138] ftl_cs: FTL header corrupt!
[  178.427768][ T1189] usb usb2-port1: attempt power cycle
[  178.672139][ T9155] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[  178.728967][ T9161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  178.767411][ T1189] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  178.787555][ T1189] usb 2-1: device descriptor read/8, error -71
[  178.867393][ T5738] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[  179.019972][ T5738] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  179.021340][ T5738] usb 3-1: unable to read config index 0 descriptor/start: -61
[  179.021387][ T5738] usb 3-1: can't read configurations, error -61
[  179.049309][ T1189] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  179.067713][ T1189] usb 2-1: device descriptor read/8, error -71
[  179.147448][ T5738] usb 3-1: new full-speed USB device number 30 using dummy_hcd
[  179.178428][ T1189] usb usb2-port1: unable to enumerate USB device
[  179.273345][ T9163] device-mapper: ioctl: name not supplied when creating device
[  179.307800][ T5738] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  179.311148][ T5738] usb 3-1: unable to read config index 0 descriptor/start: -61
[  179.311179][ T5738] usb 3-1: can't read configurations, error -61
[  179.311575][ T5738] usb usb3-port1: attempt power cycle
[  179.425610][ T9170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1316'.
[  179.543400][ T9174] device-mapper: dirty region log: region count exceeds limit of 4294967295
[  179.543448][ T9174] device-mapper: table: 248:0: mirror: Error creating mirror dirty log (-EINVAL)
[  179.543467][ T9174] device-mapper: ioctl: error adding target to table
[  179.650868][ T5738] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  179.672333][ T5738] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  179.674296][ T5738] usb 3-1: unable to read config index 0 descriptor/start: -61
[  179.674324][ T5738] usb 3-1: can't read configurations, error -61
[  179.797401][ T5738] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[  179.821141][ T5738] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  179.822584][ T5738] usb 3-1: unable to read config index 0 descriptor/start: -61
[  179.822614][ T5738] usb 3-1: can't read configurations, error -61
[  179.822966][ T5738] usb usb3-port1: unable to enumerate USB device
[  179.825431][ T9187] device-mapper: ioctl: name not supplied when creating device
[  179.829997][ T9186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.916028][  T237] IPVS: starting estimator thread 0...
[  180.007181][ T9193] IPVS: using max 39 ests per chain, 93600 per kthread
[  180.548982][ T9214] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  180.808911][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1336'.
[  180.932741][ T9214] md: md0: raid1 would not accept array
[  180.942457][ T9218] md: could not open device unknown-block(1,0).
[  181.156455][ T1189] logitech-hidpp-device 0005:046D:B012.0023: item fetching failed at offset 34/35
[  181.167780][ T1189] logitech-hidpp-device 0005:046D:B012.0023: hidpp_probe:parse failed
[  181.167842][ T1189] logitech-hidpp-device 0005:046D:B012.0023: probe with driver logitech-hidpp-device failed with error -22
[  181.648240][ T9248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1348'.
[  181.774653][   T10] logitech-hidpp-device 0005:046D:B012.0024: item fetching failed at offset 34/35
[  181.775167][   T10] logitech-hidpp-device 0005:046D:B012.0024: hidpp_probe:parse failed
[  181.775222][   T10] logitech-hidpp-device 0005:046D:B012.0024: probe with driver logitech-hidpp-device failed with error -22
[  182.240721][ T9285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.442920][   T10] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  182.457089][    C0] net_ratelimit: 72 callbacks suppressed
[  182.523921][ T9295] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[  182.607928][   T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  182.608927][   T10] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  182.608949][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.608967][   T10] usb 5-1: config 0 has no interface number 0
[  182.608991][   T10] usb 5-1: config 0 interface 255 has no altsetting 0
[  182.611399][   T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  182.611418][   T10] usb 5-1: Product: syz
[  182.611431][   T10] usb 5-1: Manufacturer: syz
[  182.611443][   T10] usb 5-1: SerialNumber: syz
[  182.616529][   T10] usb 5-1: config 0 descriptor??
[  182.893093][ T9312] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  182.903664][ T9310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1373'.
[  182.927754][ T1189] usb 5-1: USB disconnect, device number 32
[  182.944007][   T43] IPVS: starting estimator thread 0...
[  183.031023][ T9316] IPVS: using max 40 ests per chain, 96000 per kthread
[  183.206378][   T55] Bluetooth: hci5: Frame reassembly failed (-84)
[  183.214522][ T9312] md: md0: raid1 would not accept array
[  183.300132][ T9317] md: could not open device unknown-block(1,0).
[  183.390364][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1387'.
[  183.476972][   T12] IPVS: starting estimator thread 0...
[  183.547164][ T5738] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  183.565803][ T9351] IPVS: using max 46 ests per chain, 110400 per kthread
[  183.700496][ T5738] usb 2-1: Using ep0 maxpacket: 16
[  183.702455][ T5738] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  183.714225][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.714242][ T5738] usb 2-1: Product: syz
[  183.714255][ T5738] usb 2-1: Manufacturer: syz
[  183.714268][ T5738] usb 2-1: SerialNumber: syz
[  183.752214][ T5738] usb 2-1: config 0 descriptor??
[  183.758269][ T5738] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  183.776047][ T9367] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  183.872684][ T9374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1399'.
[  183.979271][ T9367] md: md0: raid1 would not accept array
[  183.983915][ T9372] md: could not open device unknown-block(1,0).
[  183.984605][ T5738] ssu100 2-1:0.0: probe with driver ssu100 failed with error -32
[  184.208200][ T9389] sctp_transport_update_pmtu: 47 callbacks suppressed
[  184.208211][ T9389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  184.212827][ T9389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  184.213522][ T9389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  184.216737][ T9389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  184.223145][ T9389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  184.223863][ T9389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  184.230504][ T9389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  184.231246][ T9389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  184.231878][ T9389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  184.236130][ T9389] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  184.238170][   T30] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  184.388529][   T30] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  184.389533][   T30] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  184.389557][   T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.389574][   T30] usb 3-1: config 0 has no interface number 0
[  184.389599][   T30] usb 3-1: config 0 interface 255 has no altsetting 0
[  184.391545][   T30] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  184.391564][   T30] usb 3-1: Product: syz
[  184.391576][   T30] usb 3-1: Manufacturer: syz
[  184.391589][   T30] usb 3-1: SerialNumber: syz
[  184.417899][   T30] usb 3-1: config 0 descriptor??
[  184.624745][   T30] usb 3-1: USB disconnect, device number 33
[  184.807136][ T5690] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  184.967560][ T5690] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  184.968389][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.968403][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.968433][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.970051][ T5690] usb 5-1: config 0 descriptor??
[  185.254977][ T9409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1411'.
[  185.257181][ T5608] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  185.257238][ T5597] Bluetooth: hci5: command 0x1003 tx timeout
[  185.386643][ T9415] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  185.410669][ T5690] hid_parser_main: 314 callbacks suppressed
[  185.410680][ T5690] playstation 0003:054C:0DF2.0025: unknown main item tag 0x0
[  185.410694][ T5690] playstation 0003:054C:0DF2.0025: unknown main item tag 0x0
[  185.410706][ T5690] playstation 0003:054C:0DF2.0025: unknown main item tag 0x0
[  185.410717][ T5690] playstation 0003:054C:0DF2.0025: unknown main item tag 0x0
[  185.410729][ T5690] playstation 0003:054C:0DF2.0025: unknown main item tag 0x0
[  185.421505][ T5690] playstation 0003:054C:0DF2.0025: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0
[  185.599089][ T5690] playstation 0003:054C:0DF2.0025: Invalid reportID received, expected 9 got 0
[  185.599112][ T5690] playstation 0003:054C:0DF2.0025: Failed to retrieve DualSense pairing info: -22
[  185.599149][ T5690] playstation 0003:054C:0DF2.0025: Failed to get MAC address from DualSense
[  185.599164][ T5690] playstation 0003:054C:0DF2.0025: Failed to create dualsense.
[  185.604332][ T5690] playstation 0003:054C:0DF2.0025: probe with driver playstation failed with error -22
[  185.639598][ T9415] md: md0: raid1 would not accept array
[  185.641079][ T9419] md: could not open device unknown-block(1,0).
[  185.679768][ T9431] Failure starting scanning (-16)
[  185.823740][ T5597] Bluetooth: hci1: command 0x0406 tx timeout
[  185.823779][ T5597] Bluetooth: hci3: command 0x0406 tx timeout
[  185.823850][ T5608] Bluetooth: hci2: command 0x0406 tx timeout
[  185.904233][ T9425] md: md0: raid1 would not accept array
[  185.904375][ T9428] md: could not open device unknown-block(1,0).
[  186.010480][   T30] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[  186.083620][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1424'.
[  186.161076][   T30] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  186.162047][   T30] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  186.162068][   T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  186.162085][   T30] usb 3-1: config 0 has no interface number 0
[  186.162109][   T30] usb 3-1: config 0 interface 255 has no altsetting 0
[  186.164083][   T30] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  186.164102][   T30] usb 3-1: Product: syz
[  186.164117][   T30] usb 3-1: Manufacturer: syz
[  186.164131][   T30] usb 3-1: SerialNumber: syz
[  186.168651][   T30] usb 3-1: config 0 descriptor??
[  186.209713][ T1189] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[  186.303495][ T5690] usb 2-1: USB disconnect, device number 26
[  186.381303][ T1189] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  186.384121][ T1189] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  186.384143][ T1189] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  186.384161][ T1189] usb 4-1: config 0 has no interface number 0
[  186.384185][ T1189] usb 4-1: config 0 interface 255 has no altsetting 0
[  186.396805][ T5764] usb 3-1: USB disconnect, device number 34
[  186.418719][ T1189] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  186.418737][ T1189] usb 4-1: Product: syz
[  186.418751][ T1189] usb 4-1: Manufacturer: syz
[  186.418765][ T1189] usb 4-1: SerialNumber: syz
[  186.463711][ T1189] usb 4-1: config 0 descriptor??
[  186.531171][ T9465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.533062][ T9465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.697229][ T5764] usb 4-1: USB disconnect, device number 30
[  186.830909][ T9470] md: md0: raid1 would not accept array
[  186.831898][ T9472] md: could not open device unknown-block(1,0).
[  187.130629][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1436'.
[  187.268266][ T4916] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  187.426266][ T9504] xt_hashlimit: max too large, truncated to 1048576
[  187.536311][ T9499] md: md0: raid1 would not accept array
[  187.536498][ T9511] md: could not open device unknown-block(1,0).
[  187.627237][   T30] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  187.634887][ T3100] usb 5-1: USB disconnect, device number 33
[  187.778082][   T30] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  187.779162][   T30] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.779200][   T30] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  187.779223][   T30] usb 1-1: config 0 interface 0 has no altsetting 0
[  187.784395][   T30] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  187.785262][   T30] usb 1-1: Product: syz
[  187.785278][   T30] usb 1-1: Manufacturer: syz
[  187.785293][   T30] usb 1-1: SerialNumber: syz
[  187.804311][   T30] usb 1-1: config 0 descriptor??
[  187.849833][ T5764] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  187.886708][ T4916] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  187.897163][    C1] net_ratelimit: 143 callbacks suppressed
[  187.987138][ T1189] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[  188.013464][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1457'.
[  188.023102][ T5764] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  188.023710][ T5764] usb 4-1: config 0 has no interfaces?
[  188.023769][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.031913][ T5764] usb 4-1: config 0 descriptor??
[  188.138315][ T1189] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  188.139439][ T1189] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  188.139460][ T1189] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  188.139478][ T1189] usb 2-1: config 0 has no interface number 0
[  188.139502][ T1189] usb 2-1: config 0 interface 255 has no altsetting 0
[  188.143024][ T1189] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  188.143043][ T1189] usb 2-1: Product: syz
[  188.143057][ T1189] usb 2-1: Manufacturer: syz
[  188.143070][ T1189] usb 2-1: SerialNumber: syz
[  188.214810][ T1189] usb 2-1: config 0 descriptor??
[  188.268317][ T9518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.268907][ T9518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.332533][   T30] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[  188.360502][   T30] usb 1-1: USB disconnect, device number 32
[  188.392746][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  188.447669][ T1189] usb 2-1: USB disconnect, device number 27
[  188.486268][ T5764] usb 4-1: USB disconnect, device number 31
[  188.518833][ T9545] md: md0: raid1 would not accept array
[  188.519662][ T9549] md: could not open device unknown-block(1,0).
[  188.640927][ T9556] veth5: entered allmulticast mode
[  188.684580][   T31] audit: type=1400 audit(1789610872.339:404): avc:  denied  { read } for  pid=9557 comm="syz.0.1465" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  188.684842][   T31] audit: type=1400 audit(1789610872.339:405): avc:  denied  { open } for  pid=9557 comm="syz.0.1465" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  188.715905][   T31] audit: type=1400 audit(1789610872.369:406): avc:  denied  { ioctl } for  pid=9557 comm="syz.0.1465" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64aa scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  188.762947][ T5690] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  188.818787][ T4916] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  188.859854][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  188.879127][ T4916] Bluetooth: hci1: unexpected event for opcode 0x1004
[  188.927746][ T5690] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  188.928902][ T5690] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  188.929875][ T5690] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  188.932038][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.932058][ T5690] usb 5-1: Product: syz
[  188.932072][ T5690] usb 5-1: Manufacturer: syz
[  188.932087][ T5690] usb 5-1: SerialNumber: syz
[  188.933847][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1470'.
[  188.947922][ T5764] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  189.033669][ T5690] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected
[  189.069693][ T5690] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  189.070086][ T1189] logitech-hidpp-device 0005:046D:B012.0026: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  189.100873][ T5764] usb 4-1: New USB device found, idVendor=0ccd, idProduct=6711, bcdDevice= 0.00
[  189.101886][ T5764] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  189.101944][ T5764] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  189.103440][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  189.103457][ T5764] usb 4-1: Product: syz
[  189.103472][ T5764] usb 4-1: Manufacturer: syz
[  189.103726][ T5690] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  189.193957][   T31] audit: type=1400 audit(1789610872.849:407): avc:  denied  { map } for  pid=9571 comm="syz.2.1471" path="/dev/ublkc2" dev="devtmpfs" ino=3253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  189.312915][ T9573] fido_id[9573]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  189.421164][ T9576] md: md0: raid1 would not accept array
[  189.424644][ T9581] md: could not open device unknown-block(1,0).
[  189.489258][ T9589] veth7: entered allmulticast mode
[  189.513817][ T9591] device-mapper: ioctl: Invalid geometry supplied.
[  189.627165][ T3100] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[  189.652693][ T4916] Bluetooth: hci3: unexpected event for opcode 0x1004
[  189.778202][ T3100] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  189.779316][ T3100] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.779350][ T3100] usb 2-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  189.779374][ T3100] usb 2-1: config 0 interface 0 has no altsetting 0
[  189.782504][ T3100] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  189.782523][ T3100] usb 2-1: Product: syz
[  189.782537][ T3100] usb 2-1: Manufacturer: syz
[  189.782551][ T3100] usb 2-1: SerialNumber: syz
[  189.790174][ T3100] usb 2-1: config 0 descriptor??
[  189.798830][ T1189] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  189.882338][ T5764] logitech-hidpp-device 0005:046D:B012.0027: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  189.952059][ T9608] fido_id[9608]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  189.992189][ T1189] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  189.993422][ T1189] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  189.994700][ T1189] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  189.996698][ T1189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.996721][ T1189] usb 1-1: Product: syz
[  189.996734][ T1189] usb 1-1: Manufacturer: syz
[  189.996747][ T1189] usb 1-1: SerialNumber: syz
[  190.068373][ T1189] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected
[  190.088204][ T1189] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2
[  190.091135][ T1189] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB3
[  190.200178][ T3100] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[  190.210686][ T3100] usb 2-1: USB disconnect, device number 28
[  190.254981][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  190.382892][ T9616] md: md0: raid1 would not accept array
[  190.383115][ T9619] md: could not open device unknown-block(1,0).
[  190.470932][ T9622] device-mapper: ioctl: Invalid geometry supplied.
[  190.568310][   T31] audit: type=1400 audit(1789610874.229:408): avc:  denied  { read } for  pid=9626 comm="syz.2.1490" name="frontend0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  190.568510][   T31] audit: type=1400 audit(1789610874.229:409): avc:  denied  { open } for  pid=9626 comm="syz.2.1490" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  190.571627][   T31] audit: type=1400 audit(1789610874.229:410): avc:  denied  { ioctl } for  pid=9626 comm="syz.2.1490" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=920 ioctlcmd=0x6f53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  190.709796][ T4916] Bluetooth: hci3: unexpected event for opcode 0x1004
[  190.771669][ T1189] usb 4-1: USB disconnect, device number 32
[  190.839580][ T5690] logitech-hidpp-device 0005:046D:B012.0028: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  190.900260][ T9639] fido_id[9639]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  191.021748][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'.
[  191.163967][ T9655] device-mapper: dirty region log: unrecognised sync argument to dirty region log: no
[  191.164000][ T9655] device-mapper: table: 248:0: mirror: Error creating mirror dirty log (-EINVAL)
[  191.164017][ T9655] device-mapper: ioctl: error adding target to table
[  191.228052][ T9644] md: md0: raid1 would not accept array
[  191.230763][ T9649] md: could not open device unknown-block(1,0).
** 8 printk messages dropped **
** 24 printk messages dropped **
[  191.514980][ T9652] udc dummy_udc.1: failed to start USB Gadget filesystem: -12
[  191.515004][ T9652] gadgetfs gadget.1: probe with driver gadgetfs failed with error -12
[  191.589357][ T9666] xt_hashlimit: max too large, truncated to 1048576
[  191.614907][ T9652] udc dummy_udc.2: failed to start USB Gadget filesystem: -12
[  191.614934][ 
** replaying previous printk message **
[  191.614934][ T9652] gadgetfs gadget.2: probe with driver gadgetfs failed with error -12
[  191.614959][ T9652] kernfs gadget.2: removing
[  191.615013][ T9652] kernfs driver: removing
[  191.615072][ T9652] gadget gadget.3: bus: 'gadget': __driver_probe_device: matched device with driver gadgetfs
[  191.615097][ T9652] gadget gadget.3: bus: 'gadget': really_probe: probing driver gadgetfs with device
[  191.615195][ T9652] udc dummy_udc.3: binding gadget driver [USB Gadget filesystem]
[  191.615212][ T9652] ==================================================================
[  191.615220][ T9652] BUG: KASAN: slab-use-after-free in gadgetfs_bind+0x82e/0x890
[  191.615254][ T9652] Write of size 8 at addr ffff8880563df0c0 by task syz.2.1500/9652
[  191.615269][ T9652] 
[  191.615279][ T9652] CPU: 0 UID: 0 PID: 9652 Comm: syz.2.1500 Not tainted syzkaller #0 PREEMPT(full) 
[  191.615300][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  191.615312][ T9652] Call Trace:
[  191.615319][ T9652]  <TASK>
[  191.615327][ T9652]  dump_stack_lvl+0x100/0x190
[  191.615355][ T9652]  print_report+0x13d/0x4b0
[  191.615383][ T9652]  ? __virt_addr_valid+0x239/0x430
[  191.615404][ T9652]  ? gadgetfs_bind+0x82e/0x890
[  191.615428][ T9652]  kasan_report+0xdf/0x1c0
[  191.615450][ T9652]  ? gadgetfs_bind+0x82e/0x890
[  191.615478][ T9652]  gadgetfs_bind+0x82e/0x890
[  191.615504][ T9652]  ? kernfs_create_link+0x1bd/0x240
[  191.615527][ T9652]  gadget_bind_driver+0x28c/0xbf0
[  191.615547][ T9652]  ? __pfx_dummy_udc_set_speed+0x10/0x10
[  191.615573][ T9652]  ? __pfx_gadget_bind_driver+0x10/0x10
[  191.615593][ T9652]  really_probe+0x241/0xa60
[  191.615616][ T9652]  __driver_probe_device+0x210/0x460
[  191.615636][ T9652]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  191.615661][ T9652]  driver_probe_device+0x4a/0x140
[  191.615684][ T9652]  __driver_attach+0x21f/0x5b0
[  191.615705][ T9652]  ? __pfx___driver_attach+0x10/0x10
[  191.615732][ T9652]  bus_for_each_dev+0x13e/0x1d0
[  191.615761][ T9652]  ? __pfx_bus_for_each_dev+0x10/0x10
[  191.615786][ T9652]  ? bus_add_driver+0x2b5/0x5b0
[  191.615806][ T9652]  bus_add_driver+0x305/0x5b0
[  191.615824][ T9652]  driver_register+0x1e2/0x360
[  191.615848][ T9652]  usb_gadget_register_driver_owner+0x132/0x210
[  191.615871][ T9652]  dev_config+0xdce/0x1610
[  191.615899][ T9652]  ? lock_acquire+0x50/0x380
[  191.615922][ T9652]  ? __pfx_dev_config+0x10/0x10
[  191.615952][ T9652]  vfs_write+0x2aa/0x1050
[  191.615971][ T9652]  ? __pfx_dev_config+0x10/0x10
[  191.615997][ T9652]  ? lock_acquire+0x1d1/0x380
[  191.616017][ T9652]  ? __fget_files+0x34/0x3d0
[  191.616041][ T9652]  ? __pfx_vfs_write+0x10/0x10
[  191.616059][ T9652]  ? find_held_lock+0x2b/0x80
[  191.616115][ T9652]  ? __fget_files+0x215/0x3d0
[  191.616139][ T9652]  ? __fget_files+0x21f/0x3d0
[  191.616165][ T9652]  ksys_write+0x12a/0x250
[  191.616184][ T9652]  ? __pfx_ksys_write+0x10/0x10
[  191.616207][ T9652]  do_syscall_64+0x123/0x790
[  191.616233][ T9652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.616251][ T9652] RIP: 0033:0x7f472e19e159
[  191.616268][ T9652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  191.616287][ T9652] RSP: 002b:00007f472f082028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  191.616306][ T9652] RAX: ffffffffffffffda RBX: 00007f472e425fa0 RCX: 00007f472e19e159
[  191.616320][ T9652] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000008
[  191.616332][ T9652] RBP: 00007f472e23506b R08: 0000000000000000 R09: 0000000000000000
[  191.616345][ T9652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  191.616357][ T9652] R13: 00007f472e426038 R14: 00007f472e425fa0 R15: 00007ffe760c00a8
[  191.616375][ T9652]  </TASK>
[  191.616383][ T9652] 
[  191.616387][ T9652] Allocated by task 5606:
[  191.616396][ T9652]  kasan_save_stack+0x30/0x50
[  191.616415][ T9652]  kasan_save_track+0x14/0x30
[  191.616434][ T9652]  __kasan_kmalloc+0xaa/0xb0
[  191.616452][ T9652]  __kmalloc_cache_noprof+0x2f8/0x6d0
[  191.616479][ T9652]  gadgetfs_fill_super+0x1da/0x430
[  191.616504][ T9652]  get_tree_single+0xe2/0x190
[  191.616522][ T9652]  vfs_get_tree+0x92/0x320
[  191.616545][ T9652]  path_mount+0x7d0/0x24c0
[  191.616570][ T9652]  __x64_sys_mount+0x293/0x310
[  191.616595][ T9652]  do_syscall_64+0x123/0x790
[  191.616617][ T9652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.616635][ T9652] 
[  191.616639][ T9652] Freed by task 9652:
[  191.616648][ T9652]  kasan_save_stack+0x30/0x50
[  191.616666][ T9652]  kasan_save_track+0x14/0x30
[  191.616684][ T9652]  kasan_save_free_info+0x3b/0x70
[  191.616710][ T9652]  __kasan_slab_free+0x5f/0x80
[  191.616737][ T9652]  kfree+0x22b/0x6d0
[  191.616760][ T9652]  put_dev+0xb4/0xd0
[  191.616782][ T9652]  gadgetfs_bind+0x6bc/0x890
[  191.616806][ T9652]  gadget_bind_driver+0x28c/0xbf0
[  191.616824][ T9652]  really_probe+0x241/0xa60
[  191.616842][ T9652]  __driver_probe_device+0x210/0x460
[  191.616862][ T9652]  driver_probe_device+0x4a/0x140
[  191.616881][ T9652]  __driver_attach+0x21f/0x5b0
[  191.616900][ T9652]  bus_for_each_dev+0x13e/0x1d0
[  191.616926][ T9652]  bus_add_driver+0x305/0x5b0
[  191.616941][ T9652]  driver_register+0x1e2/0x360
[  191.616962][ T9652]  usb_gadget_register_driver_owner+0x132/0x210
[  191.616981][ T9652]  dev_config+0xdce/0x1610
[  191.617006][ T9652]  vfs_write+0x2aa/0x1050
[  191.617021][ T9652]  ksys_write+0x12a/0x250
[  191.617035][ T9652]  do_syscall_64+0x123/0x790
[  191.617054][ T9652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.617069][ T9652] 
[  191.617073][ T9652] The buggy address belongs to the object at ffff8880563df000
[  191.617073][ T9652]  which belongs to the cache kmalloc-1k of size 1024
[  191.617087][ T9652] The buggy address is located 192 bytes inside of
[  191.617087][ T9652]  freed 1024-byte region [ffff8880563df000, ffff8880563df400)
[  191.617104][ T9652] 
[  191.617109][ T9652] The buggy address belongs to the physical page:
[  191.617118][ T9652] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x563d8
[  191.617134][ T9652] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  191.617149][ T9652] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  191.617165][ T9652] page_type: f5(slab)
[  191.617182][ T9652] raw: 00fff00000000040 ffff88801c02fdc0 dead000000000100 dead000000000122
[  191.617200][ T9652] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  191.617217][ T9652] head: 00fff00000000040 ffff88801c02fdc0 dead000000000100 dead000000000122
[  191.617233][ T9652] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  191.617250][ T9652] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  191.617267][ T9652] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  191.617278][ T9652] page dumped because: kasan: bad access detected
[  191.617288][ T9652] page_owner tracks the page as allocated
[  191.617294][ T9652] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5606, tgid 5606 (syz-executor), ts 67393098182
[  191.617323][ T9652]  post_alloc_hook+0xfd/0x120
[  191.617349][ T9652]  get_page_from_freelist+0x110d/0x35d0
[  191.617375][ T9652]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  191.617392][ T9652]  new_slab+0xa9/0x6e0
[  191.617418][ T9652]  refill_objects+0xe3/0x410
[  191.617433][ T9652]  __pcs_replace_empty_main+0x35e/0x650
[  191.617459][ T9652]  __kmalloc_noprof+0x67c/0x840
[  191.617476][ T9652]  tomoyo_init_log+0x1224/0x20c0
[  191.617496][ T9652]  tomoyo_supervisor+0x506/0x1340
[  191.617518][ T9652]  tomoyo_path_number_perm+0x445/0x580
[  191.617535][ T9652]  tomoyo_path_mkdir+0x9b/0xe0
[  191.617558][ T9652]  security_path_mkdir+0x154/0x2e0
[  191.617581][ T9652]  filename_mkdirat+0x168/0x5e0
[  191.617603][ T9652]  __x64_sys_mkdirat+0x89/0xc0
[  191.617625][ T9652]  do_syscall_64+0x123/0x790
[  191.617646][ T9652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.617663][ T9652] page last free pid 1 tgid 1 ts 17334922888 stack trace:
[  191.617675][ T9652]  free_pages_prepare+0x586/0xe00
[  191.617699][ T9652]  __free_contig_range_common+0x14f/0x250
[  191.617725][ T9652]  destroy_args+0xa8/0x7a0
[  191.617754][ T9652]  debug_vm_pgtable+0x1d69/0x3490
[  191.617778][ T9652]  do_one_initcall+0x11c/0x6f0
[  191.617795][ T9652]  kernel_init_freeable+0x6ea/0x7b0
[  191.617819][ T9652]  kernel_init+0x21/0x1e0
[  191.617836][ T9652]  ret_from_fork+0x730/0xd60
[  191.617855][ T9652]  ret_from_fork_asm+0x1a/0x30
[  191.617873][ T9652] 
[  191.617877][ T9652] Memory state around the buggy address:
[  191.617886][ T9652]  ffff8880563def80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  191.617900][ T9652]  ffff8880563df000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  191.617913][ T9652] >ffff8880563df080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  191.617922][ T9652]                                            ^
[  191.617932][ T9652]  ffff8880563df100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  191.617945][ T9652]  ffff8880563df180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  191.617955][ T9652] ==================================================================
[  191.623479][ T9658] kcov: kcov_task_exit: t = ffff88802b1b4b00, kcov->t = ffff88802b1b4b00
[  191.626956][ T9652] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  192.513001][ T9652] CPU: 0 UID: 0 PID: 9652 Comm: syz.2.1500 Not tainted syzkaller #0 PREEMPT(full) 
[  192.522275][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  192.532313][ T9652] Call Trace:
[  192.535587][ T9652]  <TASK>
[  192.538513][ T9652]  dump_stack_lvl+0x100/0x190
[  192.543197][ T9652]  vpanic+0x553/0x970
[  192.547165][ T9652]  ? __pfx_vpanic+0x10/0x10
[  192.551653][ T9652]  ? mark_held_locks+0x40/0x70
[  192.556410][ T9652]  ? gadgetfs_bind+0x82e/0x890
[  192.561179][ T9652]  panic+0xd1/0xe0
[  192.564890][ T9652]  ? __pfx_panic+0x10/0x10
[  192.569292][ T9652]  ? gadgetfs_bind+0x82e/0x890
[  192.574045][ T9652]  ? preempt_schedule_common+0x3c/0xb0
[  192.579492][ T9652]  check_panic_on_warn.cold+0x19/0x34
[  192.584864][ T9652]  end_report.part.0+0x3a/0x90
[  192.589638][ T9652]  kasan_report.cold+0xe/0x18
[  192.594310][ T9652]  ? gadgetfs_bind+0x82e/0x890
[  192.599068][ T9652]  gadgetfs_bind+0x82e/0x890
[  192.603649][ T9652]  ? kernfs_create_link+0x1bd/0x240
[  192.608858][ T9652]  gadget_bind_driver+0x28c/0xbf0
[  192.613871][ T9652]  ? __pfx_dummy_udc_set_speed+0x10/0x10
[  192.619507][ T9652]  ? __pfx_gadget_bind_driver+0x10/0x10
[  192.625052][ T9652]  really_probe+0x241/0xa60
[  192.629543][ T9652]  __driver_probe_device+0x210/0x460
[  192.634829][ T9652]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  192.640624][ T9652]  driver_probe_device+0x4a/0x140
[  192.645637][ T9652]  __driver_attach+0x21f/0x5b0
[  192.650387][ T9652]  ? __pfx___driver_attach+0x10/0x10
[  192.655660][ T9652]  bus_for_each_dev+0x13e/0x1d0
[  192.660513][ T9652]  ? __pfx_bus_for_each_dev+0x10/0x10
[  192.665889][ T9652]  ? bus_add_driver+0x2b5/0x5b0
[  192.670728][ T9652]  bus_add_driver+0x305/0x5b0
[  192.675392][ T9652]  driver_register+0x1e2/0x360
[  192.680150][ T9652]  usb_gadget_register_driver_owner+0x132/0x210
[  192.686381][ T9652]  dev_config+0xdce/0x1610
[  192.690791][ T9652]  ? lock_acquire+0x50/0x380
[  192.695454][ T9652]  ? __pfx_dev_config+0x10/0x10
[  192.700299][ T9652]  vfs_write+0x2aa/0x1050
[  192.704615][ T9652]  ? __pfx_dev_config+0x10/0x10
[  192.709457][ T9652]  ? lock_acquire+0x1d1/0x380
[  192.714117][ T9652]  ? __fget_files+0x34/0x3d0
[  192.718698][ T9652]  ? __pfx_vfs_write+0x10/0x10
[  192.723461][ T9652]  ? find_held_lock+0x2b/0x80
[  192.728127][ T9652]  ? __fget_files+0x215/0x3d0
[  192.732794][ T9652]  ? __fget_files+0x21f/0x3d0
[  192.737475][ T9652]  ksys_write+0x12a/0x250
[  192.741803][ T9652]  ? __pfx_ksys_write+0x10/0x10
[  192.746643][ T9652]  do_syscall_64+0x123/0x790
[  192.751227][ T9652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.757108][ T9652] RIP: 0033:0x7f472e19e159
[  192.761509][ T9652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  192.781108][ T9652] RSP: 002b:00007f472f082028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  192.789506][ T9652] RAX: ffffffffffffffda RBX: 00007f472e425fa0 RCX: 00007f472e19e159
[  192.797475][ T9652] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000008
[  192.805431][ T9652] RBP: 00007f472e23506b R08: 0000000000000000 R09: 0000000000000000
[  192.813384][ T9652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.821355][ T9652] R13: 00007f472e426038 R14: 00007f472e425fa0 R15: 00007ffe760c00a8
[  192.829317][ T9652]  </TASK>
[  192.832625][ T9652] Kernel Offset: disabled
[  192.836928][ T9652] Rebooting in 86400 seconds..