last executing test programs: 965.11936ms ago: executing program 0 (id=1): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_debug_messages', 0x1a1081, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000380)="30abf22bf21ddce373cff40941eb7b8a4c0dd289d9c9374986c39f4198ffa509becca923ef521393be5b6d4aa52a2473b866e8ad75ebf6945f6e0b5322ce34d0502d432e0ab25137646941a5ec4f7d815710fdd14df06202", 0x58}], 0x1, 0x9, 0x0) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) vmsplice(r1, &(0x7f0000001700)=[{&(0x7f0000000480)="8aceaf5f7eaa10fc3f4853474d7ef42e9221608aca7d12ee4324008b07cac7b2fc143acae60dbeb89d92e18b34d9ad480d53da5be485e58f4419383105affda1bdc214f1fdf01a0c0a9f1adcbc6115132874b76fa6ca3fd6d47bb556580176e87863fa0a844fcd4d5c06b660f0047e6fb779967f308d9d339849cc2bc15ea686565c351878f4caeeefa67e384d4bb8285c6ff55e29bbec797a219e7f1a69ebdc0b3bcbb3ad11bf1e573c2253189214924549f7b6c1d56994a056457077643cf444ad81cdd49a065920ef17c3ec12f8bd37e0412bcba6ad4b3f55d7429698aaeb3e2707ceea4896b600"/243, 0xf3}, {&(0x7f0000000580)="2d61659588edf113c022a06fccccb51731f40d63e3062b6f870c2e03fec697de", 0x20}, {&(0x7f00000005c0)="7bbf18596c776652c6fc656716f613175ffcf6219a87a43c3c8ecef6e7ca1731deacaaf8218879e36f9303d097ce4156af0aebb45556bd420d71cb6af7ca80590ea50f", 0x43}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="f055a55be303f2ababdf269ccd0c783a8b8677de4c78917baafc340d20614ef0e1d7f91b6435e41ca3c15e8457d926827f37a55276e9ab9f1fabf8552d39930cbd2e5c5d15810cd45a325545ab2ebb487374239a5b7d48cc3ff0bd442f0d35db7a33c06275707d64f1d9e4f6709c7d2d205846f2a1013d78f7747f36d9e812d626642ceeaa8039e712ca9717b1d06684c5f9641bc2cb88e39d752066831d3092869b90aec588b660ed9a420e", 0xac}], 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r5, &(0x7f00000000c0)='.\x02\x00', 0x2) syz_open_procfs(r2, &(0x7f00000002c0)='net/anycast6\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000300)) read$FUSE(r6, &(0x7f00000044c0)={0x2020, 0x0, 0x0}, 0x2020) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYRES16=r7, @ANYRESDEC=r2, @ANYRESDEC, @ANYRES32=r6], 0x0) 915.938911ms ago: executing program 1 (id=2): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) (async, rerun: 32) modify_ldt$write(0x2000, 0x0, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r0]) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) (async) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) (async) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async, rerun: 64) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async, rerun: 64) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000004c0)='./file1\x00', 0x5) (async, rerun: 32) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200000, 0x1) (rerun: 32) unlinkat(r2, &(0x7f00000011c0)='./file0\x00', 0x0) (async) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 893.299382ms ago: executing program 2 (id=3): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="0c0100002d0001000000000000000000140073000000000000000000000000000000000009000080976b640868000000db0001"], 0x10c}], 0x1}, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x10002, 0x0) (async) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="06000000000000000a004e2300000200fe800000000000000000000000000016050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000050000000a004e2200000009ff02000000000000000000000000000109000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000006fc0200000000000000000000000000010000a000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e230000000000000000000000000000000000000001ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300009569ff02000000000000000000000000000104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000746fc0100000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f31187e692015378301359c69128e2a92beed61e1a95876518"], 0x310) 884.188542ms ago: executing program 3 (id=4): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x40, 0x9, 0xff, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x66, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010101, @empty}}}}) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x2, 0x4) 832.954293ms ago: executing program 1 (id=5): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = dup(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) getsockopt$inet_tcp_buf(r2, 0x6, 0x21, 0x0, &(0x7f0000000580)) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f0000002100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0xa, 0x3, 0xfffffff9, 0x200800}) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000200)=0x1, 0x4) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x3f5, 0x800, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0xc881) unshare(0x10000000) 831.199874ms ago: executing program 3 (id=6): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2) syz_ublk_setup_queues(r10, r9, &(0x7f0000000180)={0x0, 0xc22f, 0x10, 0x1, 0x16f, 0x0, r2}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd35, 0x4, 0x0, 0x364, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xff73, 0x4, 0x2, 0x43, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9360, 0x2, 0x1, 0x42}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc264, 0x4, 0x1, 0x123, 0x0, r2}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x2, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r8, '\x00', {0x3, 0xb44, 0x0, &(0x7f0000000dc0)=@buf_512="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"}}, &(0x7f0000001e40)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r11 = userfaultfd(0x801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r11, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000fc5000/0x3000)=nil, 0x3000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r11, 0xc0c89425, &(0x7f0000000340)={"99409484d6ec33cee09f19d74476ff1c", 0x0, 0x0, {0x9, 0x8}, {0x800, 0x3}, 0x4, [0xc, 0xcb5, 0x4, 0x8, 0x7, 0x6, 0x5, 0x2, 0x3ff, 0x0, 0x8, 0x1ff, 0x6, 0x2, 0x100000000, 0x1]}) r13 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r13, 0x5522) ioctl$USBDEVFS_BULK(r13, 0x5523, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r13, 0x5522) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r10, 0xc400941d, &(0x7f0000002040)={0x0, 0x9, 0x6, 0x1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r11, 0x50009417, &(0x7f0000002440)={{r7}, r12, 0xe, @unused=[0xfffffffffffffff8, 0x2, 0x1, 0xc], @devid=r14}) syz_ublk_setup_queues(r10, r9, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) 827.547794ms ago: executing program 2 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000000000000000000009000000070000000c0100000300000002000000aa0b000003000000ff00000091bfffff070000000000000008000000060000000900000003000000051e0000030000000100000009000000000000800600000004000000cf00000004000000030000007e000000ff7f000054e3000001040000060000000080000008000000020000000d00000000000000010000000300000001000000feffffffd4ffffff0000000004000000ffffffff"]) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x80002a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002140)=[@text64={0x40, &(0x7f00000023c0)="460f01c940d9f53e430f01c9f3260f23222ef3450f1ee00f06f3440f09260f01bc58ffffffff663666410ffcfdc4217929e4", 0x32}], 0x1, 0x10, 0x0, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010020267020790fe93416b0205d"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 822.254864ms ago: executing program 1 (id=8): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xc4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) (async) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 808.820474ms ago: executing program 2 (id=9): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01022ebd7000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000002500000058000e00b75200001f20bffd09f49342914f45644d19c7478a14d9d2a80d3ec84d016bfb376d2afbf334794240d0df30be1d35341d7109e3b18ff4c3b578f2fc53abbabe671eef9214f3ea7825efa98ef89bc1e4ef7b1c41"], 0x80}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/custom1\x00', 0x402, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc0010015}]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r3, r2, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000000)={0xfffffffe}, 0x8) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e1f, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(r9) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000d4a000/0x1000)=nil, 0x1000, 0x1, 0x11, r10, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x100000c, 0x13, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000740)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/252, 0xfc, 0x2, 0xa}, @flat=@handle={0x73682a85, 0x1100, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 778.803286ms ago: executing program 2 (id=10): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x480a01, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r1], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000000)={0x1, 0xffffffff, 0xfbb}) ioctl$SIOCSIFHWADDR(r0, 0x8992, &(0x7f00000002c0)={'pimreg1\x00', @remote}) 712.973188ms ago: executing program 1 (id=11): syz_usb_connect$uac2(0x1, 0xb0, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x2d04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x3, 0x1, 0x5, 0x0, 0x1, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0xb, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x305, 0xa, 0x5, 0x7f, 0xf, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x0, 0x5, 0x1, 0x0, 0xfe, 0x3ff}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xd, 0x400, 0x2}, @as_header={0x10, 0x24, 0x1, 0x8, 0x29, 0x3, 0x1, 0x63, 0x1, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x4, 0x2, {0x8, 0x25, 0x1, 0x2, 0x30, 0x7, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x80, 0xb0, 0x5, {0x8, 0x25, 0x1, 0x0, 0x0, 0x7, 0xd}}}}}}}}]}}, 0x0) 0s ago: executing program 3 (id=12): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x6}, 0x1c) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0xfe, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000592000/0x9000)=nil, 0x9000, 0x66) pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{0x77359400}}) mount$cgroup(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x800006, &(0x7f0000000600)={[{@subsystem='net_prio'}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @local}, @local, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x800000, 0xa, 0x0, 0x0, 0x7ffffffe, 0x140192}) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000400000109021b000111000000090400000195"], 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000140)="0200ffff", 0x4, 0x0, 0x0, 0x2}]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0xcc) r6 = openat$incfs(r5, &(0x7f0000000280)='.log\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc058671e, &(0x7f00000000c0)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x3, 'bridge0\x00', {0x81}, 0x8000}) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000100)={'macvtap0\x00', {0x2, 0x0, @remote}}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000c9a40fadb15808c20000000000000000000d00000063bd93b054"], &(0x7f0000000080)=0x31) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000080)="240000001e005f02941d00fffffffff802000000dd00000000000000080008000d000000", 0x24) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) kernel console output (not intermixed with test programs): [ 16.151538][ T36] audit: type=1400 audit(1780832909.670:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.154090][ T36] audit: type=1400 audit(1780832909.670:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. [ 23.280625][ T36] audit: type=1400 audit(1780832916.810:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.282102][ T286] cgroup: Unknown subsys name 'net' [ 23.303254][ T36] audit: type=1400 audit(1780832916.810:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.330491][ T36] audit: type=1400 audit(1780832916.830:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.330647][ T286] cgroup: Unknown subsys name 'devices' [ 23.441846][ T286] cgroup: Unknown subsys name 'hugetlb' [ 23.447435][ T286] cgroup: Unknown subsys name 'rlimit' [ 23.550939][ T36] audit: type=1400 audit(1780832917.080:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.574096][ T36] audit: type=1400 audit(1780832917.080:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.598915][ T36] audit: type=1400 audit(1780832917.080:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.600869][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.630712][ T36] audit: type=1400 audit(1780832917.160:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.656088][ T36] audit: type=1400 audit(1780832917.160:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.722180][ T36] audit: type=1400 audit(1780832917.250:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.747717][ T36] audit: type=1400 audit(1780832917.250:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.747961][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.547387][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.554475][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.561580][ T295] bridge_slave_0: entered allmulticast mode [ 24.567733][ T295] bridge_slave_0: entered promiscuous mode [ 24.585836][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.592910][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.599952][ T295] bridge_slave_1: entered allmulticast mode [ 24.606156][ T295] bridge_slave_1: entered promiscuous mode [ 24.629000][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.636060][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.643208][ T296] bridge_slave_0: entered allmulticast mode [ 24.649304][ T296] bridge_slave_0: entered promiscuous mode [ 24.658142][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.665230][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.672281][ T296] bridge_slave_1: entered allmulticast mode [ 24.678399][ T296] bridge_slave_1: entered promiscuous mode [ 24.697270][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.704311][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.711495][ T294] bridge_slave_0: entered allmulticast mode [ 24.717656][ T294] bridge_slave_0: entered promiscuous mode [ 24.726815][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.733964][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.741028][ T294] bridge_slave_1: entered allmulticast mode [ 24.747155][ T294] bridge_slave_1: entered promiscuous mode [ 24.826705][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.833776][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.840880][ T293] bridge_slave_0: entered allmulticast mode [ 24.846996][ T293] bridge_slave_0: entered promiscuous mode [ 24.854863][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.861929][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.868952][ T293] bridge_slave_1: entered allmulticast mode [ 24.875183][ T293] bridge_slave_1: entered promiscuous mode [ 24.943981][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.951047][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.958313][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.965347][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.973605][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.980656][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.987907][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.994929][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.042493][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.049547][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.056818][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.063839][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.078064][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.085109][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.092410][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.099424][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.114665][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.121870][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.128987][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.136645][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.143897][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.151345][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.158576][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.166006][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.194006][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.201062][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.215168][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.222212][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.229604][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.236630][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.252223][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.259240][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.266806][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.273842][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.281496][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.288522][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.318149][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.325215][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.332853][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.339878][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.360878][ T293] veth0_vlan: entered promiscuous mode [ 25.375372][ T295] veth0_vlan: entered promiscuous mode [ 25.391914][ T293] veth1_macvtap: entered promiscuous mode [ 25.405122][ T296] veth0_vlan: entered promiscuous mode [ 25.426996][ T295] veth1_macvtap: entered promiscuous mode [ 25.439952][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.441506][ T296] veth1_macvtap: entered promiscuous mode [ 25.465969][ T294] veth0_vlan: entered promiscuous mode [ 25.482896][ T294] veth1_macvtap: entered promiscuous mode [ 25.541663][ T316] fuse: Bad value for 'fd' [ 25.579784][ T327] capability: warning: `syz.1.5' uses 32-bit capabilities (legacy support in use) [ 25.790423][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.910201][ T314] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.920456][ T31] usb 1-1: device descriptor read/64, error -71 [ 25.930198][ T9] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 26.070211][ T314] usb 3-1: Using ep0 maxpacket: 32 [ 26.076795][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.088028][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.097838][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 26.103241][ T314] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 26.112563][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.121138][ T314] usb 3-1: config 0 descriptor?? [ 26.160829][ T31] usb 1-1: device descriptor read/64, error -71 [ 26.250195][ T9] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 26.400582][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.402858][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 26.413636][ T9] usb usb2-port1: attempt power cycle [ 26.433106][ T60] ------------[ cut here ]------------ [ 26.438599][ T60] WARNING: CPU: 1 PID: 60 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 26.449071][ T60] Modules linked in: [ 26.453034][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u8:2 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770 [ 26.464603][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 26.474685][ T60] Workqueue: iou_exit io_ring_exit_work [ 26.480409][ T60] RIP: 0010:ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 26.486759][ T60] Code: 5d e9 85 1f 55 02 cc e8 8f 43 32 fe 0f 0b eb e3 e8 86 43 32 fe 0f 0b eb da e8 7d 43 32 fe 0f 0b e9 4d fe ff ff e8 71 43 32 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0c fd ff ff 4c 89 [ 26.506415][ T60] RSP: 0018:ffffc90000c87990 EFLAGS: 00010293 [ 26.512503][ T60] RAX: ffffffff835584bf RBX: 1ffff11021a65d6d RCX: ffff888101be0000 [ 26.520505][ T60] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 26.527694][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 26.528468][ T60] RBP: ffffc90000c879e0 R08: 0000000000000003 R09: 0000000000000004 [ 26.535864][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 26.543493][ T60] R10: 0000000000000000 R11: ffffffff835574a0 R12: ffff88810bb39300 [ 26.553725][ T314] usbhid 3-1:0.0: can't add hid device: -71 [ 26.558455][ T60] R13: ffff88810d32eb40 R14: ffff88810ff9e000 R15: ffff88810ff9e010 [ 26.558474][ T60] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 26.570777][ T314] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 26.572518][ T60] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.595740][ T60] CR2: 000000110c253bde CR3: 0000000124ab4000 CR4: 00000000003526b0 [ 26.596194][ T314] usb 3-1: USB disconnect, device number 2 [ 26.603740][ T60] Call Trace: [ 26.603749][ T60] [ 26.603756][ T60] ? _raw_spin_unlock+0x45/0x60 [ 26.620609][ T60] ublk_ch_uring_cmd+0x6f/0xa0 [ 26.625361][ T60] io_uring_try_cancel_uring_cmd+0x19e/0x280 [ 26.631354][ T60] io_uring_try_cancel_requests+0x4ce/0x5a5 [ 26.637245][ T60] ? __sched_text_start+0x10/0x10 [ 26.642331][ T60] ? io_uring_cancel_generic+0x6eb/0x6eb [ 26.647966][ T60] io_ring_exit_work+0x23c/0x83b [ 26.652922][ T60] ? __cfi_io_ring_exit_work+0x10/0x10 [ 26.658380][ T60] ? preempt_schedule_thunk+0x1a/0x40 [ 26.663764][ T60] process_scheduled_works+0x7d4/0x1020 [ 26.669310][ T60] worker_thread+0xc51/0x1370 [ 26.673995][ T60] ? __kasan_check_read+0x15/0x20 [ 26.679013][ T60] ? schedule+0xc5/0x240 [ 26.683263][ T60] kthread+0x2c9/0x370 [ 26.687330][ T60] ? __cfi_worker_thread+0x10/0x10 [ 26.692446][ T60] ? __cfi_kthread+0x10/0x10 [ 26.697038][ T60] ret_from_fork+0x67/0xa0 [ 26.701464][ T60] ? __cfi_kthread+0x10/0x10 [ 26.706059][ T60] ret_from_fork_asm+0x1a/0x30 [ 26.710829][ T60] [ 26.713841][ T60] ---[ end trace 0000000000000000 ]--- [ 26.740202][ T345] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 26.760480][ T9] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 26.780200][ T31] usb 1-1: device descriptor read/64, error -71 [ 26.810724][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 26.921395][ T345] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 26.940286][ T345] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 26.960235][ T9] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 26.980948][ T345] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 26.989966][ T345] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 27.010258][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 27.015631][ T9] usb usb2-port1: unable to enumerate USB device [ 27.020198][ T31] usb 1-1: device descriptor read/64, error -71 [ 27.022329][ T345] usb 4-1: Manufacturer: syz [ 27.051976][ T345] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 27.131262][ T31] usb usb1-port1: attempt power cycle [ 27.257993][ T45] usb 4-1: USB disconnect, device number 2 [ 27.480208][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 27.501249][ T31] usb 1-1: device descriptor read/8, error -71 [ 27.631242][ T31] usb 1-1: device descriptor read/8, error -71 [ 27.870225][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 27.891244][ T31] usb 1-1: device descriptor read/8, error -71 [ 28.021294][ T31] usb 1-1: device descriptor read/8, error -71 [ 28.130315][ T31] usb usb1-port1: unable to enumerate USB device