last executing test programs: 18.762662973s ago: executing program 2 (id=1054): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) (async, rerun: 64) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) (async, rerun: 64) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553780081e7465c883ac4dd9b3e59b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de00000000000000", 0x80) (async, rerun: 32) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (rerun: 32) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) 18.762088473s ago: executing program 2 (id=1056): r0 = memfd_secret(0x80000) r1 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, &(0x7f0000000040)=0xffffffffffffffa4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x153}) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000480)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00007d6000/0x3000)=nil, &(0x7f00007d5000/0x3000)=nil, 0x3000, 0x5}) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x8152, 0x0, 0x0, 0x20}, 0x30, 0x0) landlock_restrict_self(r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0x80111500, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x2) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x78, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@typed={0xff81, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x5c, 0x1b, 0x0, 0x1, [@typed={0x57, 0x0, 0x0, 0x0, @str='}\x00\xc6&\x17\xdd\xe4\xc8\x8f\xa6\x0f\x1aTu\xda\xc6\x13\xfc\xa9\xb5\xf01\x06O\x06-H\xb3\xfb\xd7\xd0\xe7\x10\xa6O\x92\xe3\xdd\xb6X\xcd\xc7\x91R\xe5\x00\xe3\x00\xa3jDJ\xbd)\xd8\xf0&c\xff\xff\xff\xff\xff\xff\xff\xf9\xde\x83\xd2%\xadY\x1e\xfa\xa6v\x87\xdb\xf9w\x01\x01\xe0'}]}]}, 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000000440)=0x5) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f00000004c0)={{0xffffffffffffffff, &(0x7f0000000040)=',\'&/$},&-R.,/-\x00', 0x100, &(0x7f0000000080)={@_ha_fsid={[0x7f, 0xffffffff]}, {0x23, 0xd, 0x0, 0x300}}, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0xe}, 0x3, &(0x7f0000001640)=[{0x2, 0x9, &(0x7f0000000180)='g?&\x00', &(0x7f00000001c0)="2c1c714ae38eef06f14f687d128f4714d2f9084f88babfeebf341f19c70be41e7dea577a7511dcc8b24eed5e3d36e59f7b0f4328ec3697a40ada2d0300000000000000c81e21ea03fd12c42b852b13b91d6a024ea9d565a0f6bfa3bf4f02e3b001f4", 0x62, 0x20}, {0x3, 0x9, &(0x7f0000000240)='\x00', &(0x7f0000000540)="4b67b42275db979e14435a45818767926264c8825f35f4f256ac486f4d68cb7d459ea232aacfeca60e7741ae000084b6a2270010cb39328b6d5e6532d766520c7a8d1353c70400000000000000c4ad6bd40640fe7c976a0ea3da8d50f1ab2a318a0561637f8c8d2fdcc071e628d0c76173d030fbe877b459e4734dd682d07fcc4a0669e5911f06655885733793972002dbfcc5c43e6ae168afea3b281c7b6a8048dea6b1d9866c9bab40e327b93c5e778ffdd6b98f74bfc2e0507d1920e587a58bbbd9bdf2b181a3db548f71", 0xcc, 0x70}, {0x1, 0x200, &(0x7f0000000280)='\x00', &(0x7f0000000640)="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", 0x1000}]}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) eventfd2(0x2, 0x801) 17.921008182s ago: executing program 2 (id=1068): io_setup(0x6, &(0x7f0000000200)=0x0) r1 = socket$inet6(0xa, 0x2, 0x0) flistxattr(r1, &(0x7f0000000000)=""/224, 0xe0) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8000, 0xffffffffffffffff, 0x0, 0x0, 0x80000004}]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffffffffffffff88a84f028100400086dd63acca10001000ff000000000000000000000000000000002001000000000000000000000000000167010103"], 0x4e) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f010203010902240001000000000904"], 0x0) 16.530438103s ago: executing program 2 (id=1075): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000440)}], 0x1, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xffff, 0xffff7ffffffffffe, 0x30, 0xa50, 0xffff, 0xffff, 0x7fffffffffffffff, 0x7, 0x6, 0x100, 0x6, 0x800005, 0x100, 0x40000000001, 0x4, 0xff], 0x1, 0x340200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf2, 0x5, 0x0, '\x00', 0x8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 7) 16.072717943s ago: executing program 2 (id=1076): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x10b902, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0x12) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KIOCSOUND(r4, 0x4b2f, 0x2) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000600)={0xffffffff, 0xf000, 0x2, 0x0, 0x100}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x10000) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) readv(r6, &(0x7f0000003440)=[{&(0x7f0000002200)=""/75, 0x4b}], 0x1) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x5, 0x1}, 0xe) 15.902403377s ago: executing program 2 (id=1080): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x70bd27, 0x3, {{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x800, 0x0, 0x80, 0x80}, {@in6=@dev={0xfe, 0x80, '\x00', 0x51}, 0x0, 0x33}, @in=@empty, {0xfffffffffffffe00, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed}, {0x0, 0xfffffffffffffffc, 0x2, 0xeffbfffffffffffd}, {0x0, 0x0, 0x796}, 0x0, 0x34fd, 0x2, 0x0, 0xd4, 0xe55286f1921f7465}, 0x0, 0x1a0b0}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc000000000000000000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 4.668942356s ago: executing program 0 (id=1167): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 4.598456618s ago: executing program 0 (id=1168): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x1b4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_MASK={0x7c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3dfd9355df86566b}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_MASK={0xec, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_MASTER={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40010}, 0x4048080) unshare(0x26020600) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x16) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x81000, @empty}, 0x1c) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) setresgid(r2, r1, 0x0) setresgid(0xffffffffffffffff, 0x0, r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0xb, &(0x7f0000000000)={0x4, 0xfffffffe, 0x4}) r5 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) read(r5, &(0x7f0000000280)=""/240, 0xf0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockname$packet(r6, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3.756844616s ago: executing program 0 (id=1182): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x405}) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000340)={0xd2b, 0xbfb1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f00002f7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x2}) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000034000)={0xc, {{0xa, 0x1, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10000000}}}, 0x88) getsockopt$inet6_buf(r2, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) connect$vsock_stream(r0, &(0x7f0000000240)={0x28, 0x0, 0x0, @host}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80000) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d000905090000000006f808050ae500"], 0x0) 1.79145175s ago: executing program 3 (id=1204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000000)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="afb6c0634e4e", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x54, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x1, {0xa, 0x6, "f9b3e7", 0x8, 0x2b, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, [@hopopts={0x6, 0x2, '\x00', [@hao={0xc9, 0x10, @empty}]}], "7dae0cc6"}}}}}}}}, 0x8e) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xfffffff9}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, 0x0, 0x40}, 0x20008024) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) r4 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='rootcontext', &(0x7f0000000300)='--^$-\x00', 0x0) capset(&(0x7f0000000100)={0x20071026, r3}, &(0x7f0000000140)={0xfffffffc, 0x8001, 0x8, 0x8, 0x10, 0x9}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) 1.79099946s ago: executing program 3 (id=1205): socket$inet6_icmp(0xa, 0x2, 0x11) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20014000000020"], 0x0}) syz_usb_connect$midi(0x1, 0x4e, &(0x7f00000000c0)=ANY=[@ANYRESHEX], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="20012900000005"], 0x0}) 1.158601204s ago: executing program 3 (id=1206): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe(0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x34b130198900281b, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = dup(r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001240)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x57}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 997.582438ms ago: executing program 0 (id=1207): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)={0x4000}) 960.521449ms ago: executing program 0 (id=1208): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 878.60261ms ago: executing program 0 (id=1209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x73f6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0xfe, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x81, 0xc3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x40, 0xf, 0x28, {0x28, 0x23, "b5743125cc6bad051a92108af7d5cb74010000009573718720ecabb4a919ff7f000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 867.08504ms ago: executing program 32 (id=1080): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x70bd27, 0x3, {{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x800, 0x0, 0x80, 0x80}, {@in6=@dev={0xfe, 0x80, '\x00', 0x51}, 0x0, 0x33}, @in=@empty, {0xfffffffffffffe00, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed}, {0x0, 0xfffffffffffffffc, 0x2, 0xeffbfffffffffffd}, {0x0, 0x0, 0x796}, 0x0, 0x34fd, 0x2, 0x0, 0xd4, 0xe55286f1921f7465}, 0x0, 0x1a0b0}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc000000000000000000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 761.266303ms ago: executing program 1 (id=1211): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)=@known='trusted.overlay.impure\x00', &(0x7f0000000340)='^_-!#:,(&\x00', 0xa, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x110) (async, rerun: 64) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x101000, 0x10c) lseek(r2, 0x9, 0x4) setxattr$incfs_size(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140)=0x2, 0x8, 0x3) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 652.078935ms ago: executing program 1 (id=1212): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x484, 0xec000000, 0xd0}]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) dup(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1a1301, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r5, r10, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x0, 0xd1, 0x0, r5}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b0, 0x10002, 0x1, 0x3ab, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bda, 0x0, 0x9, 0x1e8, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10, 0x3, 0x902c4, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2030, 0x5200, 0x5, 0x9e, 0x0, r5}}], 0x16, &(0x7f0000001540)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r9, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 226.357865ms ago: executing program 3 (id=1213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "1fe2508c0ab955e3", "6b6d2cfa62940d53d6bebd6251eac4fb7e407ec6b04c65cff1dfc3b92a4662ce", "8faef1fe", "420c50fc4a0b7e09"}, 0x38) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xca03, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x46, 0xa0, 0x9, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0xb1, 0x5, 0x1, {0x22, 0x4b5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x6}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x8, 0x68, 0x4, 0x20, 0x62}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x300a}}, {0x18, &(0x7f0000000140)=@string={0x18, 0x3, "d3187218e93771c61ead51738fc6a95f486b68d017da"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44a}}, {0x83, &(0x7f00000001c0)=@string={0x83, 0x3, "5263de2eb6e8932daee0a6b0b18cd1f37926f941d797d7e82d24c42ceb118dd6e50021048ec8d3ce2a1f5aa9e831f5e16fa435e552f33e54d45449f15608a5c6d3af7d377a9167d1071e621da0ea7a84fbe3f7af16032b4dd8f1bf45ae55472f9feee9ae6e71090cb9e638c4bed279d543a2dcb5553ca9134fcfa6d888d0d6f60a"}}, {0xd5, &(0x7f0000000280)=@string={0xd5, 0x3, "8382fd9b67482c52de667326e9faf4d3f44d1f634e4403b03c6381aa14f3e89455bd3557e1222ba1418680c7409d5dfa01af3f841130c7407fe2d6392693a04b0fec35a834367d9e4b176ac8ca4ff2df0aafc109e8500a93ab7c3ab3e2a6b083ef9d0cac27a954f8a86edcdd57e3bda488f57bafed5dad74cd4d23652e628819b51e5dc7e84167b455ee4a9268d0be5338202a87a5307e07c79c0e088c07c2c0b9609f1e6f41cf39d0ada8ef900748869ad8492cc6babf15efb9f559cfcb2e20e1bb1e8ba78bfdf7169b497c18c1c562338c99"}}, {0xc8, &(0x7f0000000380)=@string={0xc8, 0x3, "a8eabcfd6c83314f02c24d2abde06491a5d3395843cdf4280d757ae6e19b59cc254f9300042e9f1a372854cd965724ee9fc8d6cdb1008dcf418276742b15392b8bf451b6323af63fdf72564b7709cc1f9568f964297a4d9e43e7208e910dc3fe7675984661dc9d7629b6b34f946dbf8eddf7c40915363609365fbc45c47d0cfcf586779fabf2acf9c8c5499ef7df581d9bb264c143015fad4d212d93b04d62a5f8ebad4d2cfcb9b7c0e0ab5156869143013bdf67be3501fa0bde0dcb1333db936e2694df12a2"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3001}}]}) (async) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev2(r3, &(0x7f0000000780)=[{&(0x7f00000005c0)="e91fc1d8c7780ea4482abdbb", 0xc}, {&(0x7f0000000600)="5d5b21c571a909fd2b98730e78a0c24a3769fe27aacea9588fe26c3f6bdc", 0x1e}, {&(0x7f0000000640)="2210b63f431a083830e61257a8f2f2678ad45b5cd295c7f73894d58fc9cc4ead94f3c9e55622", 0x26}, {&(0x7f0000000680)="7d9dbfec5fcab4737753042c", 0xc}, {&(0x7f00000006c0)="48a0d991cb00b4af86d84966493d228cb8631590265e144e3457e31297ec57abfdce59534fe03dd3b91774fbb719478a78865a281c3e9684e7ef9a5081a9ba8c33fa238ef0d0ea6369ac6199a0c6a146e82997e3fa9094801d5d78b42c96b46a82790eb6dbefa42c78b3eeeb8af6bb660064bc821ec71126d87406fb5e8011e74186420290d227aad9ee5e2f05819805b3334c09184262fea7abbf40b8619f58", 0xa0}], 0x5, 0x8, 0x8, 0x1f) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000800)={0x20, 0x10, 0xe9, {0xe9, 0x22, "e9e36315352b9dbd0103d469d84f565327e1c3a00f7a6562a55830a040645a8f4edfbc08a3eec394147703998d972429bde47665fdef8f15ca8fc5813903cbe939fea89e6c8444cc979940e4dae220f6f5b704e8888d9bb007bffacc26e4aff4ad1c058c67b91ca29bd15170de461db14d0ade5e5ab5a19bdd51ea3d02a82539c81b5bdfb41fdf9b90dfa5139c33a0a1af1a26fd7a8186f301cbd99b8b110a1c79da6519c4bf14cb890020711a4ff82a41aca409eae18a3c3167b671a4874abf0e8dc7ad22789a51dcfe4a5d4e522b2b6135dd156269efc19f65afc1869baa6c7438a8e16737f3"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, &(0x7f0000000940)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x1, 0x9, 0xc}]}}, &(0x7f0000000980)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x1, 0x0, 0x8, "bfd0532d", "78cafd20"}}, &(0x7f00000009c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb, 0x2, 0x4, 0x0, 0xe2, 0x10}}}, &(0x7f0000000f00)={0x84, &(0x7f0000000a40)={0x0, 0xf, 0xe0, "1e8ebde4e96d46cfb73261fb7379c0fcc99a80319f73c479405ded7c060a1017bf51d5aebace2dd2f233dddc39f1397ccae2b7fd8628d8b26c5e77b2c3c6ffc4695b545e941ee05977d769e4655afcb7ae1e3139bacce4d08a99f874781568d7308cf985310be6ecf3ea6cc7153b90f9f0315983123b177d453287e53525bcf6b6fb72db1d1c5753d0323a9551865b1864209456227d6a19b42d456cf46d65bed2dbe152e4dc073adb10246b570561531e9d2c2b90138b1ec4c841287c90038869f807b210eadd0d15071c7e5220bd962cd7733675e999dcb81e70e21889e925"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0xb0}, &(0x7f0000000b80)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x0, 0x20}}, &(0x7f0000000c40)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000c80)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000cc0)={0x40, 0xb, 0x2, "7d04"}, &(0x7f0000000d00)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000d40)={0x40, 0x13, 0x6}, &(0x7f0000000d80)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000dc0)={0x40, 0x19, 0x2, "7cbd"}, &(0x7f0000000e00)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000e40)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000e80)={0x40, 0x1e, 0x1, 0x75}, &(0x7f0000000ec0)={0x40, 0x21, 0x1, 0x4}}) (async) write$binfmt_script(r3, &(0x7f0000000fc0)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\xff\xff\xff\xff\xff\xff'}, {0x20, '.$:.^'}, {0x20, '&&'}, {0x20, '-:#'}, {0x20, '&+*%'}], 0xa, "5b4344b1cb61c03229e0a921ab7e8a8bcf7d3e9635190ac7bdbc6c8f1544beab80976f2b669329014016c67c6c12d67c121b6c54dec6e19dcc62f673af508cce9ba3c7eac6586578940f67aad337c7bd6790bf81c436ec9225a75601ba4dfffb578172f71863de400bfee9d4a4c294ae784c88c10ec2dd45bb2b28c84e828ade68ec4d2fe1d4995947ff5c4f2343c3ef3af5b7a37f3095952fd6e7b164c68d65206904d791cb0966e0e3dac482a77c9b41a4a4514b2716adca592a84b0bd948962347a6190a09c9369d6d25d556b950d86992f91990f409cc44678c0a1cede932fe5e62036dcdf980b39fb694ee14f"}, 0x117) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000001100), 0x181000, 0x0) writev(r4, &(0x7f0000001780)=[{&(0x7f0000001140)="8f1117b0785e08593fa99eae820fdf63629a75067c08238343f653ff0c4a97c143ee78750238a91847acaabb5f845a5bc4280293ea570803f8509210d47ddc0fa87f13cb0320be09", 0x48}, {&(0x7f00000011c0)="46dfbc860cea31e514edecf503d3852ce78209c774788b3309f5290f20c2d877596b817b6c378efd60c2865defa0c919c4962cd64c6e3b13a55b9792fae73e6ded780071cc7e7446e9fffbe260", 0x4d}, {&(0x7f0000001240)="8da50a536caa6740e2c1f4b9638956f4f2940ba641ab00dd44234355ac418dfcdd34ef72a41639ef0f6cc640498474dc0b3c28ca9c8c1e6123ccdb8da44225f2ea", 0x41}, {&(0x7f00000012c0)="24090c2caa6ae2ac88418baa0ebe589dd971fd80c641347b3ab09841741c7559348c6cf52411eecf5ba13ce16c8a569b27379fadf68a9efcc47218bc15b1c625b8b03fef133cbe7104996abb744642d5d85c64fed5462b2e3caa488a02a73829ab94e4cc1d507c396e2b7f35d2f3c8ae5808779ffafcf37b024ee2c0ae0711e566b60cdd639f78bb73426aba46f14ac684e008a177c7a1a9a68fee3f0a826dc29133b3fb0f363f99785bf5a7df", 0xad}, {&(0x7f0000001380)="3843e2eb63322a3335c2d205c553f095803428487eb0bd63731f9ed278793730fbc3ab228de1bd4b3ad5806e58d0d417a42b80a49fd9d1bca135029bbebb79ab9dccdf88719a4a2f2c96b456b0a49570caf9db41a4e7bb16835ce6a4227fab43830cba70f237d002168d191d7618253980b3357f2742dc751fdf01e3688bca3fb25e111db2b89a5103d602cd81091dbf72f994f4198c972596f304b1cb554e8b6b3071e0bef1cfed57ebb9a09754df4e0fd4c5b2df244b3201092e83e42475c9cc82f6dc23a56b85cd971a06df7c32103e6a20271859054cbbaced9143bee67547012b125a6cc3fcff69966ac790880b0a73587da3af71b9", 0xf8}, {&(0x7f0000001480)="aa9e8edcc887ba3547e6663f4392c9ed057c5c8143a0b756adef84f133642a0f18e481d9fc7fb2193d366aa5c136f84c85548141aca886f6b517", 0x3a}, {&(0x7f00000014c0)="0e134cd9dad94c414e3328e1672637c05d6a4ec632ea91c619d9e085e3092d45176a03a1ceb11562ee3f40c440a0c91b33909d73492cd318edeb4c9c32e6f1338c6c820bb181be67e481917aa36b9789b7addbdf1757fd6e56ec4d218a79f8e3d578b20e0aa9d4ba4b905bb8c0f5193c68bbe5eec8df027294785c1b4ba19d582ee296c85ff0f1b8bf0d548bf3149f86e2994aa2a0597daa5639771aed1174c7260a79879135175947dd1717b2b655c9bed36802430ae39f2686f13f4e18dec79669240ab1096661676e722dc4cedead633add3c51d7b7875c6b875298", 0xdd}, {&(0x7f00000015c0)="6f12ffc0f9440bda4c185751aae2fff48147ebbe20f66640b28b8f7cdcae261803a1b292779e48c68cb0276d7cb85f976dfc52575c479cde74022f3818a7c0af1c52122e6b66e3c909fbc444b70d3c6207ea6fc8f4be4696971787be75fe033c3bd16316ed815ccedc990dda7def322b090cdadadc8698639264263154742739beb9489a9a91039a3b3574bfbbd5a9257a8ace63b3a01a9eb327d1ff9f7c0b9d984e5f086d7422867f4fe94f531b", 0xae}, {&(0x7f0000001680)="47ff0ce0842a726bf58d7ccdd08abf65e47db22e6a98300867572ad38862779e29d7fb90aff58952dcd231a34adbecbdc285335791954fcf9767af301e0535b2500abc5e905776362c2051521001dfb791bdc160c7a0840a5248aaf704e76e468a18de3c2b5449446d3f6faab02fbba06fd92e7c066bae42de9eeae99fab2581990c7a2300a9523ae52eca1ded7250eaa7a6f1e5380f2398aa49159e57ea52780a578e8bedaa848160a9b4c8a841a18d1703544acebbc648b054be291bbf39348757b7972f2d0554d24e25906ecd403f56e6b5b429c8e696bb468e578b3584a40c7f7b852c", 0xe5}], 0x9) read(r2, &(0x7f0000001840)=""/27, 0x1b) (async) write$uinput_user_dev(r3, &(0x7f0000001880)={'syz1\x00', {0x37, 0x9, 0x1, 0x3ff}, 0x28, [0x8, 0x2, 0x200, 0x6, 0xfff, 0xd3a, 0x3, 0xffff5302, 0x4, 0x5, 0x200, 0x0, 0x9, 0xf, 0x7fff, 0x3, 0x68f, 0x9, 0x3, 0x0, 0xe0, 0x5b1, 0x89, 0x80000000, 0x0, 0x7, 0xcb, 0x5, 0x8, 0x2, 0xfffffffb, 0x1, 0x6, 0x9, 0x6, 0xff, 0x0, 0xa23, 0x3, 0x1, 0xc0000000, 0x2, 0x80000000, 0x1, 0x2, 0x9, 0x1, 0x3, 0x0, 0xdee, 0xef, 0x5, 0x8, 0xf3, 0xfffffff7, 0x7, 0x0, 0x461, 0x7, 0x5, 0x8, 0xffffff80, 0x47e5, 0x5], [0xfffff5bc, 0x81, 0x0, 0x9, 0x800, 0xa, 0x4, 0x6, 0x23d6, 0x7, 0x0, 0xfffffff7, 0x1ff, 0xc46, 0xf1, 0xdd, 0xb, 0x8000, 0x7, 0x3, 0x6, 0x2, 0x1, 0x9, 0xbbd, 0x800, 0x2, 0x8, 0x60, 0xe, 0x5f, 0x10000, 0x0, 0x30, 0x3, 0x5, 0x9, 0x80000001, 0x9, 0x9, 0xffff, 0x9, 0x7, 0x5, 0x7, 0xb, 0x2, 0x77, 0x20, 0x3, 0x95, 0x7, 0xc249, 0x7fff, 0x5, 0x3, 0x3000, 0x4e20, 0x9, 0x2, 0x4ee, 0x8, 0x6, 0x6a], [0x1, 0x9dd, 0xc411, 0x101, 0x6, 0x9, 0x81, 0x10001, 0x0, 0x2, 0x3, 0xfffeffff, 0x4191, 0x7, 0x8, 0x0, 0x246, 0x200, 0x1, 0xfffffffe, 0xe, 0xc950, 0x7, 0x4, 0x6, 0xb, 0x8, 0x4921, 0x2, 0x9, 0x9, 0x800, 0x2, 0x6, 0x2, 0x4, 0x0, 0x3, 0x0, 0xffffffff, 0x3, 0x6, 0x2, 0x7, 0x80, 0xffffffff, 0x3ff, 0xffffffff, 0x6, 0x7, 0x7, 0x7, 0xe, 0x6, 0x6, 0xffff, 0x7, 0x5, 0x6, 0x1, 0x7, 0x2, 0xc, 0x7], [0x40, 0xff, 0x4f4, 0x8, 0x0, 0x8001, 0x2, 0x24a45747, 0x5, 0xfffffff2, 0x7, 0x8, 0x2, 0xb, 0x3, 0xff, 0xbc, 0x3, 0x2, 0x7, 0x9, 0x1, 0xd, 0x3, 0x5, 0x1, 0x1, 0x8, 0xd5a, 0x8001, 0xa40ddc1, 0x4, 0x4, 0x5, 0x1dac5ae4, 0x80000001, 0x10001, 0x2b42, 0x4, 0x5, 0x7bd, 0x7, 0xa0, 0x0, 0xfffffc00, 0xbae7, 0xe951, 0x1, 0xd, 0x0, 0x6, 0x6, 0xfffeffff, 0x6, 0xce8, 0x8, 0x8, 0x0, 0x200, 0x80, 0xfff, 0x32, 0x1, 0x1]}, 0x45c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000003200)={'syztnl0\x00', &(0x7f0000003180)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x1, 0x6c, 0x8, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x10, 0x100, 0x5}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003240)={'wg0\x00', 0x0}) (rerun: 64) sendmsg$inet(r3, &(0x7f0000003300)={&(0x7f0000001d00)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000003100)=[{&(0x7f0000001d40)="f73588b9a611211f32bec1093f8e91897ad668ad175a82df223f471219e4a8246419a24139737efa51b73be404f9cbe37186dc4b1e0249bd4555b070a5f75484c3aaaf81edfb44b93f0e91bd2a590419edf9cbdb101644f60d3a0276f9f7a8d17767012213a15c2558d030b8c0f37322bdd7e5d93526da4d2bb5267ba4cbeceeafb1e0aa89f6a2d321269ddcbcbd15f272b9faedbe8a95e1c7c41865d29dea790910a946735a47a8287317918e29903aaf8f781849ad54937417010634a0c57649c51b683895b569d4b4e117c0", 0xcd}, {&(0x7f0000001e40)="0a42d702272b415c7cd82a4fd2b4b281c9c91adeedf75fc2d440460ae43d76754c66adbcafbc847a100e6a3bf428d548ffee4680f038c8430200bfc27de3826973844acac344c874276b994be43b431092da23e9db129bbf8c0aa4dfe1322f1c19026a9aa534c72149221a7d747ba26d495f26fefe24a240c5", 0x79}, {&(0x7f0000001ec0)="4a1fc9bd53b7747471cfb400ba6438cc7df7590c5675910d004fb5faedad3f622f66ef3223a7d0d65e106ea1e2c22d9a58f3d2413d93bf485f1c5ae31e20999ca94b7cb05bd4372fa7e2f8b906b13917434b7fa5c2ee63fe6734b98d70ae6cbf2b2b1f98f97f16957f84932f921c7cfa136e6ce705e6bdc38029211de9f9eef6d765da14b8ec4e100171608235d030b82f27c324a0de15b0cbb43c3eb7fb7f189a4dabab99a1e1c0068c3e1ef4328bd3b4dd0a2c52dd2f378c40fb2a54f85eedd7ca93e137b183ea4e45c17c8fef458b04ee577df46e", 0xd6}, {&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000002fc0)="0c392304d8b65bc61890bc95b42bcf50d1a6737877f703ef801f17c57a70ac1f120dc3c8cdd2f605576937440de01feeb8d80ca75dcb3c29b5c27880026964fa", 0x40}, {&(0x7f0000003000)="b05f9cdb66c7b54092a417e2f6a3ca5e70a4e8360c57987d324f35bfed9f4612de1618b118c078cc3a8911674193388312983071efa44c41cf84b23c641a30d3bf1f10f180c41b57eff7c974619e2e87e56230ca45e8298395fc28aa989afaa02f986f02fc0f13827368abff52d2802abaa71f7037e48d3ef063e070d3a8c3fb50fa67222890bfe41988b56f2d67b1863e6223f36af84c546c85bbb22f92da7a037dc4cac9da93d2708bd5f0ae6346aa69c1d2242be34238901d99f6053b1b15bc6e792416b835bac6d951e6483a7bfc11b8d3d067f1904c89b510342f80491c", 0xe0}], 0x6, &(0x7f0000003280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010102, @multicast2}}}], 0x58}, 0x24000840) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003340)={0x0}, &(0x7f0000003380)=0xc) stat(&(0x7f00000033c0)='./file0\x00', &(0x7f0000003400)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003480)={r7, r8, r9}, 0xc) r10 = accept4(r0, &(0x7f00000034c0)=@ieee802154, &(0x7f0000003540)=0x80, 0x80000) (async, rerun: 64) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003580), 0x101000, 0x0) (rerun: 64) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x9) (async, rerun: 64) epoll_create1(0x80000) (rerun: 64) syz_create_resource$binfmt(&(0x7f00000035c0)='./file0\x00') (async, rerun: 32) pwrite64(r0, &(0x7f0000003600)="eaed91a81807224e1ea5802526f4c7e3", 0x10, 0x1) (async, rerun: 32) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r12, &(0x7f0000003640)={0x8000200a}) (async, rerun: 64) r13 = memfd_secret(0x80000) (rerun: 64) ioctl$F2FS_IOC_GET_FEATURES(r13, 0x8004f50c, &(0x7f0000003680)) ioctl$KVM_IRQ_LINE_STATUS(r10, 0xc008ae67, &(0x7f00000036c0)={0x3, 0x7}) (async) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000003700), 0x0, 0x0) write$ppp(r14, &(0x7f0000003740)="6bc843879707d5670dc9998497082a87759f73ba066b4934ad6a7f45fad49b3a4c7f43036cf8c04e69491f183c7d179b97b4d5dbfb18c19b1b10d2a2e82a9d3a55b941e7c1328df6849b825440e11f5224ee15", 0x53) 192.684715ms ago: executing program 3 (id=1214): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002540)={0x194, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x134, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x42}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}]}, @CTA_EXPECT_NAT={0x4c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) mkdir(&(0x7f0000000300)='./bus\x00', 0xde) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)={[{@mode={'mode', 0x3d, 0x3}}]}) syz_io_uring_setup(0x552d, &(0x7f0000000140)={0x0, 0x4c, 0x2000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) read$FUSE(r2, &(0x7f0000000500)={0x2020}, 0x2020) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000000)=0x233, 0x4) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000006c0)="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", 0xfc) 113.749967ms ago: executing program 3 (id=1215): socket$inet6_icmp(0xa, 0x2, 0x11) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20014000000020"], 0x0}) syz_usb_connect$midi(0x1, 0x4e, &(0x7f00000000c0)=ANY=[@ANYRESHEX], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="20012900000005"], 0x0}) 112.761867ms ago: executing program 1 (id=1216): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)={0x335, 0x0, [{0x40000, 0x0, &(0x7f0000000880)=""/252}, {0xe000, 0x0, &(0x7f0000000600)=""/97}, {0x0, 0x0, &(0x7f0000000780)=""/219}]}) 90.431028ms ago: executing program 1 (id=1217): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)={0x1, 0x0, [{0x40000, 0xfc, &(0x7f0000000880)=""/252}]}) 63.332468ms ago: executing program 4 (id=1210): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x143a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x11, r0, 0xfd867000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000000300)={0x206361100, &(0x7f0000000000), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) fadvise64(r1, 0x9, 0x362a, 0x0) 1.16921ms ago: executing program 1 (id=1218): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)={0x0, 0x4000}) 684.79µs ago: executing program 1 (id=1219): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x21, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0xa, 0x2d, {0x2d, 0xe, "e75bcf47a88a34d2dd23ee24020010da0300000069cf2fa3d3d4832d0e95ce301f08dd21aa6394c59aa602"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 380.28µs ago: executing program 4 (id=1220): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4c21, 0x3, @empty, 0xffffff0e}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) write(r1, 0x0, 0xffffff68) recvmmsg(r1, &(0x7f00000059c0)=[{{&(0x7f0000000440)=@un=@abs, 0x0, &(0x7f0000002740)=[{&(0x7f00000004c0)=""/209}, {&(0x7f00000005c0)=""/253}, {&(0x7f0000001600)=""/4096}, {&(0x7f0000002600)=""/69}, {&(0x7f0000002680)=""/20}, {&(0x7f00000026c0)=""/113}], 0x0, &(0x7f00000027c0)=""/26}, 0xffffffff}, {{&(0x7f0000002800)=@tipc=@id, 0x0, &(0x7f0000003b40)=[{&(0x7f0000002880)=""/74}, {&(0x7f0000002900)=""/4096}, {&(0x7f0000003900)=""/58}, {&(0x7f0000003940)=""/204}, {&(0x7f0000003a40)=""/18}, {&(0x7f0000003a80)=""/27}, {&(0x7f0000003ac0)=""/71}], 0x0, &(0x7f0000000240)=""/63}, 0x4}, {{&(0x7f0000003c00)=@x25, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003c80)=""/52}, {&(0x7f0000003cc0)=""/104}], 0x0, &(0x7f00000006c0)=""/235}, 0x7ef1f0a7}, {{&(0x7f0000003e80)=@l2, 0x0, &(0x7f0000004280)=[{&(0x7f0000003f00)=""/186}, {&(0x7f0000003fc0)=""/197}, {&(0x7f00000040c0)=""/179}, {&(0x7f0000004180)=""/93}, {&(0x7f0000004200)=""/111}]}, 0x9}, {{&(0x7f0000004300)=@nfc_llcp, 0x0, &(0x7f0000005740)=[{&(0x7f0000004380)=""/9}, {&(0x7f00000043c0)=""/38}, {&(0x7f0000004400)=""/217}, {&(0x7f0000004500)=""/238}, {&(0x7f0000004600)=""/86}, {&(0x7f0000004680)=""/179}, {&(0x7f0000004740)=""/4096}]}, 0x5}, {{&(0x7f00000057c0)=@nfc_llcp, 0x0, &(0x7f0000005940)=[{&(0x7f0000005840)=""/227}], 0x0, &(0x7f0000005980)=""/14}, 0x7d8}], 0x1, 0x2040, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)='<', 0x1}], 0x1}}], 0x1, 0x20000080) r4 = accept4$unix(r3, 0x0, 0x0, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000080)='FROZEN\x00', 0x7) recvfrom$unix(r4, &(0x7f0000000140)=""/248, 0x1ffd4, 0x12, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)={0x4, 0x0, [{0x2000, 0xfffffffffffffe8d, &(0x7f0000000040)=""/42}, {0x4000, 0xb4, &(0x7f0000000100)=""/180}, {0xffffffff, 0x6f, &(0x7f0000000380)=""/111}, {0x60000, 0x1f, &(0x7f0000000280)=""/31}]}) 0s ago: executing program 4 (id=1221): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x2, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r0 = syz_ublk_setup_io_uring(0x13fe, &(0x7f0000000040)={0x0, 0xfffffffe, 0x1000, 0x4, 0xfffffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x7d2, 0x0, 0x0, 0x1000, 0xfffffbff, 0x0, 0x0, 0x2}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1460, 0x8, 0xffffffff, 0x2ca}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x200f0b2, 0x4000, 0x0, 0x298, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ef, 0x8, 0x9, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x800, 0x2, 0x2af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x100, 0x2, 0x3a3, 0x0, r0}}], 0x4, &(0x7f0000000ac0)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x803, 0x48b, 0x0, 0x0}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000040)={0x7ff, [0x0, 0x200], 0x1}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x100000000000) kernel console output (not intermixed with test programs): re: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.810968][ T3280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.919526][ T320] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 162.069532][ T320] usb 1-1: Using ep0 maxpacket: 16 [ 162.075948][ T320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.087397][ T320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.097270][ T320] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.110450][ T320] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 162.118275][ T9] hid (null): global environment stack underflow [ 162.119599][ T320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.128454][ T9] itetech 0003:06CB:73F6.0020: global environment stack underflow [ 162.135392][ T320] usb 1-1: config 0 descriptor?? [ 162.147656][ T9] itetech 0003:06CB:73F6.0020: item 0 1 1 11 parsing failed [ 162.155595][ T9] itetech 0003:06CB:73F6.0020: probe with driver itetech failed with error -22 [ 162.360036][ T3290] netlink: 'syz.0.888': attribute type 5 has an invalid length. [ 162.379481][ T320] usbhid 1-1:0.0: can't add hid device: -71 [ 162.385591][ T320] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 162.398161][ T320] usb 1-1: USB disconnect, device number 77 [ 162.421493][ T9] usb 3-1: USB disconnect, device number 85 [ 162.714372][ T3296] netlink: 'syz.1.894': attribute type 9 has an invalid length. [ 162.767242][ T3299] FAT-fs (rnullb0): bogus number of reserved sectors [ 162.775099][ T3299] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 162.784892][ T459] Bluetooth: hci0: Frame reassembly failed (-84) [ 162.791552][ T3299] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 162.966844][ T3305] netlink: 188 bytes leftover after parsing attributes in process `syz.2.897'. [ 163.199560][ T9] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 163.279563][ T11] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 163.351028][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 163.359747][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.370559][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.380857][ T9] usb 1-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 163.390648][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.398830][ T9] usb 1-1: Product: syz [ 163.403413][ T9] usb 1-1: Manufacturer: syz [ 163.408190][ T9] usb 1-1: SerialNumber: syz [ 163.429502][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 163.437181][ T11] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 163.446436][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.454676][ T11] usb 3-1: Product: syz [ 163.459096][ T11] usb 3-1: Manufacturer: syz [ 163.463809][ T11] usb 3-1: SerialNumber: syz [ 163.671663][ T11] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 163.682437][ T9] usb 1-1: unit 3 not found! [ 163.689480][ T11] usb 3-1: USB disconnect, device number 86 [ 163.695710][ T3322] netlink: 'syz.0.903': attribute type 9 has an invalid length. [ 163.699679][ T9] usb 1-1: USB disconnect, device number 78 [ 163.725083][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 164.237420][ T3328] bpf: Bad value for 'mode' [ 164.519545][ T565] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 164.670697][ T565] usb 1-1: config 255 has an invalid interface number: 111 but max is 2 [ 164.679344][ T565] usb 1-1: config 255 has an invalid interface number: 208 but max is 2 [ 164.687825][ T565] usb 1-1: config 255 has an invalid interface number: 166 but max is 2 [ 164.696509][ T565] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 164.707091][ T565] usb 1-1: config 255 has no interface number 0 [ 164.713639][ T565] usb 1-1: config 255 has no interface number 1 [ 164.719995][ T565] usb 1-1: config 255 has no interface number 2 [ 164.726431][ T565] usb 1-1: config 255 interface 208 altsetting 6 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 164.738205][ T565] usb 1-1: config 255 interface 166 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 164.752338][ T565] usb 1-1: config 255 interface 111 has no altsetting 0 [ 164.759384][ T565] usb 1-1: config 255 interface 208 has no altsetting 0 [ 164.766641][ T565] usb 1-1: config 255 interface 166 has no altsetting 0 [ 164.777919][ T565] usb 1-1: New USB device found, idVendor=12d1, idProduct=1433, bcdDevice= 0.00 [ 164.788434][ T565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.796791][ T565] usb 1-1: Product: syz [ 164.801394][ T565] usb 1-1: Manufacturer: syz [ 164.806364][ T565] usb 1-1: SerialNumber: syz [ 164.849566][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 164.856859][ T2464] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 164.897381][ T36] audit: type=1326 audit(1782911919.674:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3339 comm="syz.1.910" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f627779de59 code=0x0 [ 164.926963][ T3344] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=3344 comm=syz.3.911 [ 164.930308][ T3346] netlink: 'syz.2.912': attribute type 9 has an invalid length. [ 165.026334][ T565] usb-storage 1-1:255.111: USB Mass Storage device detected [ 165.081710][ T565] usb-storage 1-1:255.208: USB Mass Storage device detected [ 165.140824][ T565] usbhid 1-1:255.208: couldn't find an input interrupt endpoint [ 165.148965][ T565] usb-storage 1-1:255.166: USB Mass Storage device detected [ 165.190440][ T565] usb 1-1: Found UVC 0.00 device syz (12d1:1433) [ 165.197326][ T565] usb 1-1: No valid video chain found. [ 165.204085][ T565] usb 1-1: USB disconnect, device number 79 [ 165.249529][ T31] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 165.399491][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 165.405777][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.416915][ T31] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 165.426297][ T31] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 165.438214][ T31] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 165.451964][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 165.461723][ T31] usb 3-1: config 1 interface 1 has no altsetting 0 [ 165.469572][ T31] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 165.478738][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.486855][ T31] usb 3-1: Product: syz [ 165.491125][ T31] usb 3-1: Manufacturer: syz [ 165.495986][ T31] usb 3-1: SerialNumber: syz [ 165.703911][ T31] usb 3-1: selecting invalid altsetting 0 [ 165.779502][ T320] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 165.903556][ T31] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 165.910355][ T320] usb 1-1: device descriptor read/64, error -71 [ 165.989569][ T11] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 166.010644][ T31] usb 3-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 166.023281][ T31] usb 3-1: USB disconnect, device number 87 [ 166.032723][ T1065] udevd[1065]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 166.119626][ T11] usb 2-1: device descriptor read/64, error -71 [ 166.159508][ T320] usb 1-1: device descriptor read/64, error -71 [ 166.359526][ T11] usb 2-1: device descriptor read/64, error -71 [ 166.399533][ T320] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 166.530036][ T320] usb 1-1: device descriptor read/64, error -71 [ 166.599509][ T11] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 166.739528][ T11] usb 2-1: device descriptor read/64, error -71 [ 166.769591][ T320] usb 1-1: device descriptor read/64, error -71 [ 166.839522][ T31] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 166.879634][ T320] usb usb1-port1: attempt power cycle [ 166.979537][ T11] usb 2-1: device descriptor read/64, error -71 [ 166.989621][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 166.996381][ T31] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 167.004879][ T31] usb 3-1: can't read configurations, error -22 [ 167.089657][ T11] usb usb2-port1: attempt power cycle [ 167.139553][ T31] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 167.229526][ T320] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 167.250558][ T320] usb 1-1: device descriptor read/8, error -71 [ 167.289520][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 167.296321][ T31] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 167.304597][ T31] usb 3-1: can't read configurations, error -22 [ 167.311234][ T31] usb usb3-port1: attempt power cycle [ 167.380546][ T320] usb 1-1: device descriptor read/8, error -71 [ 167.439574][ T11] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 167.460572][ T11] usb 2-1: device descriptor read/8, error -71 [ 167.600694][ T11] usb 2-1: device descriptor read/8, error -71 [ 167.619575][ T320] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 167.640713][ T320] usb 1-1: device descriptor read/8, error -71 [ 167.649781][ T31] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 167.669953][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 167.676768][ T31] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 167.685039][ T31] usb 3-1: can't read configurations, error -22 [ 167.770512][ T320] usb 1-1: device descriptor read/8, error -71 [ 167.819560][ T31] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 167.840019][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 167.847171][ T31] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 167.855852][ T31] usb 3-1: can't read configurations, error -22 [ 167.863090][ T31] usb usb3-port1: unable to enumerate USB device [ 167.869509][ T11] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 167.879667][ T320] usb usb1-port1: unable to enumerate USB device [ 167.891242][ T11] usb 2-1: device descriptor read/8, error -71 [ 167.906690][ T3374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.916541][ T3374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.020652][ T11] usb 2-1: device descriptor read/8, error -71 [ 168.129679][ T11] usb usb2-port1: unable to enumerate USB device [ 168.438398][ T3376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.447219][ T3376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.456173][ T3376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.464987][ T3376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.769803][ T3380] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.939571][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 169.089727][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 169.096663][ T9] usb 1-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.110083][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 169.119504][ T9] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 169.120997][ T3390] syzkaller1: entered promiscuous mode [ 169.128803][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.133381][ T9] usb 1-1: config 0 descriptor?? [ 169.137048][ T3390] syzkaller1: entered allmulticast mode [ 169.174164][ T3392] FAULT_INJECTION: forcing a failure. [ 169.174164][ T3392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.188130][ T3392] CPU: 1 UID: 0 PID: 3392 Comm: syz.3.928 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 169.188159][ T3392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 169.188171][ T3392] Call Trace: [ 169.188177][ T3392] [ 169.188184][ T3392] __dump_stack+0x21/0x30 [ 169.188212][ T3392] dump_stack_lvl+0x140/0x1c0 [ 169.188233][ T3392] ? __cfi_dump_stack_lvl+0x10/0x10 [ 169.188256][ T3392] ? check_stack_object+0x138/0x150 [ 169.188275][ T3392] dump_stack+0x19/0x20 [ 169.188296][ T3392] should_fail_ex+0x3c2/0x510 [ 169.188315][ T3392] should_fail+0xf/0x20 [ 169.188332][ T3392] should_fail_usercopy+0x1e/0x30 [ 169.188350][ T3392] _copy_to_user+0x24/0xa0 [ 169.188373][ T3392] simple_read_from_buffer+0xed/0x160 [ 169.188396][ T3392] proc_fail_nth_read+0x1aa/0x220 [ 169.188419][ T3392] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 169.188448][ T3392] ? bpf_lsm_file_permission+0xd/0x20 [ 169.188468][ T3392] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 169.188481][ T3392] vfs_read+0x28b/0xc70 [ 169.188497][ T3392] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 169.188512][ T3392] ? __cfi_vfs_read+0x10/0x10 [ 169.188522][ T3392] ? __kasan_check_write+0x18/0x20 [ 169.188538][ T3392] ? mutex_lock+0x97/0x1d0 [ 169.188561][ T3392] ? __cfi_mutex_lock+0x10/0x10 [ 169.188584][ T3392] ksys_read+0x145/0x260 [ 169.188601][ T3392] ? __cfi_ksys_read+0x10/0x10 [ 169.188613][ T3392] ? __kasan_check_read+0x15/0x20 [ 169.188622][ T3392] __x64_sys_read+0x7f/0x90 [ 169.188632][ T3392] x64_sys_call+0x2638/0x2ee0 [ 169.188642][ T3392] do_syscall_64+0x57/0xf0 [ 169.188652][ T3392] ? clear_bhb_loop+0x50/0xa0 [ 169.188665][ T3392] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 169.188684][ T3392] RIP: 0033:0x7f8ba0d5e68e [ 169.188701][ T3392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 169.188716][ T3392] RSP: 002b:00007f8ba1ce1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.188737][ T3392] RAX: ffffffffffffffda RBX: 00007f8ba1ce26c0 RCX: 00007f8ba0d5e68e [ 169.188748][ T3392] RDX: 000000000000000f RSI: 00007f8ba1ce20a0 RDI: 0000000000000004 [ 169.188755][ T3392] RBP: 00007f8ba1ce2090 R08: 0000000000000000 R09: 0000000000000000 [ 169.188761][ T3392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.188767][ T3392] R13: 00007f8ba1026038 R14: 00007f8ba1025fa0 R15: 00007ffe1f42ab98 [ 169.188776][ T3392] [ 169.189505][ T11] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 169.261760][ T3399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.931'. [ 169.331343][ T3400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.462626][ T3400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.479556][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 169.485928][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.497023][ T11] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 169.506617][ T11] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 169.517996][ T11] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 169.531459][ T11] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 169.541408][ T11] usb 2-1: config 1 interface 1 has no altsetting 0 [ 169.549676][ T11] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 169.559137][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.567571][ T11] usb 2-1: Product: syz [ 169.572007][ T11] usb 2-1: Manufacturer: syz [ 169.576830][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 169.583196][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 169.591929][ T9] usb 1-1: USB disconnect, device number 84 [ 169.599099][ T11] usb 2-1: SerialNumber: syz [ 169.636963][ T3404] netlink: 'syz.2.933': attribute type 4 has an invalid length. [ 169.810050][ T11] usb 2-1: selecting invalid altsetting 0 [ 169.989481][ T3406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.998337][ T3406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.007450][ T3406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.016322][ T654] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 170.019277][ T3406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.024343][ T11] usb 2-1: 1:1: cannot get freq (v2/v3): err -32 [ 170.110616][ T11] usb 2-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 170.121876][ T11] usb 2-1: USB disconnect, device number 101 [ 170.132909][ T1065] udevd[1065]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 170.199498][ T654] usb 3-1: Using ep0 maxpacket: 8 [ 170.205877][ T654] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.216684][ T654] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.227001][ T654] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 170.236303][ T654] usb 3-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 170.244798][ T654] usb 3-1: Product: syz [ 170.249064][ T654] usb 3-1: Manufacturer: syz [ 170.253783][ T654] usb 3-1: SerialNumber: syz [ 170.504486][ T654] usb 3-1: USB disconnect, device number 92 [ 170.510163][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 170.560954][ T36] audit: type=1326 audit(1782911925.344:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3413 comm="syz.3.937" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ba0d9de59 code=0x0 [ 170.636930][ T3419] FAULT_INJECTION: forcing a failure. [ 170.636930][ T3419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.650288][ T3419] CPU: 1 UID: 0 PID: 3419 Comm: syz.1.939 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 170.650310][ T3419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 170.650317][ T3419] Call Trace: [ 170.650322][ T3419] [ 170.650328][ T3419] __dump_stack+0x21/0x30 [ 170.650346][ T3419] dump_stack_lvl+0x140/0x1c0 [ 170.650360][ T3419] ? __cfi_dump_stack_lvl+0x10/0x10 [ 170.650373][ T3419] ? check_stack_object+0x10f/0x150 [ 170.650384][ T3419] dump_stack+0x19/0x20 [ 170.650397][ T3419] should_fail_ex+0x3c2/0x510 [ 170.650408][ T3419] should_fail+0xf/0x20 [ 170.650418][ T3419] should_fail_usercopy+0x1e/0x30 [ 170.650429][ T3419] _copy_from_user+0x20/0xa0 [ 170.650442][ T3419] __sys_bind+0x1f4/0x430 [ 170.650455][ T3419] ? __cfi___sys_bind+0x10/0x10 [ 170.650469][ T3419] ? __kasan_check_read+0x15/0x20 [ 170.650479][ T3419] __x64_sys_bind+0x7e/0x90 [ 170.650491][ T3419] x64_sys_call+0x1ffd/0x2ee0 [ 170.650500][ T3419] do_syscall_64+0x57/0xf0 [ 170.650511][ T3419] ? clear_bhb_loop+0x50/0xa0 [ 170.650524][ T3419] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 170.650535][ T3419] RIP: 0033:0x7f627779de59 [ 170.650546][ T3419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.650554][ T3419] RSP: 002b:00007f62785f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 170.650566][ T3419] RAX: ffffffffffffffda RBX: 00007f6277a25fa0 RCX: 00007f627779de59 [ 170.650574][ T3419] RDX: 000000000000000e RSI: 0000200000000000 RDI: 0000000000000004 [ 170.650581][ T3419] RBP: 00007f62785f5090 R08: 0000000000000000 R09: 0000000000000000 [ 170.650588][ T3419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.650594][ T3419] R13: 00007f6277a26038 R14: 00007f6277a25fa0 R15: 00007ffeb13385e8 [ 170.650602][ T3419] [ 171.160333][ T320] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 171.299534][ T320] usb 2-1: device descriptor read/64, error -71 [ 171.399523][ T11] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 171.439896][ T3432] netlink: 36 bytes leftover after parsing attributes in process `syz.3.945'. [ 171.502326][ T3433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.510924][ T3433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.550711][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.559515][ T320] usb 2-1: device descriptor read/64, error -71 [ 171.561989][ T11] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 171.578316][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.587306][ T11] usb 3-1: config 0 descriptor?? [ 171.794661][ T11] usbhid 3-1:0.0: can't add hid device: -71 [ 171.799646][ T320] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 171.800683][ T11] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 171.818009][ T11] usb 3-1: USB disconnect, device number 93 [ 171.939511][ T320] usb 2-1: device descriptor read/64, error -71 [ 172.179524][ T320] usb 2-1: device descriptor read/64, error -71 [ 172.229502][ T565] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 172.289607][ T320] usb usb2-port1: attempt power cycle [ 172.380781][ T565] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.391809][ T565] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 172.401271][ T565] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.410268][ T565] usb 3-1: config 0 descriptor?? [ 172.629533][ T320] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 172.650562][ T320] usb 2-1: device descriptor read/8, error -71 [ 172.780545][ T320] usb 2-1: device descriptor read/8, error -71 [ 173.019530][ T320] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 173.040505][ T320] usb 2-1: device descriptor read/8, error -71 [ 173.170528][ T320] usb 2-1: device descriptor read/8, error -71 [ 173.210794][ T3452] FAULT_INJECTION: forcing a failure. [ 173.210794][ T3452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.224161][ T3452] CPU: 1 UID: 0 PID: 3452 Comm: syz.0.949 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 173.224191][ T3452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 173.224202][ T3452] Call Trace: [ 173.224209][ T3452] [ 173.224217][ T3452] __dump_stack+0x21/0x30 [ 173.224245][ T3452] dump_stack_lvl+0x140/0x1c0 [ 173.224269][ T3452] ? __cfi_dump_stack_lvl+0x10/0x10 [ 173.224291][ T3452] ? check_stack_object+0x138/0x150 [ 173.224310][ T3452] dump_stack+0x19/0x20 [ 173.224330][ T3452] should_fail_ex+0x3c2/0x510 [ 173.224349][ T3452] should_fail+0xf/0x20 [ 173.224366][ T3452] should_fail_usercopy+0x1e/0x30 [ 173.224385][ T3452] _copy_to_user+0x24/0xa0 [ 173.224407][ T3452] simple_read_from_buffer+0xed/0x160 [ 173.224429][ T3452] proc_fail_nth_read+0x1aa/0x220 [ 173.224452][ T3452] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 173.224474][ T3452] ? bpf_lsm_file_permission+0xd/0x20 [ 173.224496][ T3452] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 173.224517][ T3452] vfs_read+0x28b/0xc70 [ 173.224532][ T3452] ? l2cap_sock_bind+0x321/0x8d0 [ 173.224551][ T3452] ? __cfi_vfs_read+0x10/0x10 [ 173.224566][ T3452] ? __kasan_check_write+0x18/0x20 [ 173.224583][ T3452] ? mutex_lock+0x97/0x1d0 [ 173.224611][ T3452] ? __cfi_mutex_lock+0x10/0x10 [ 173.224630][ T3452] ksys_read+0x145/0x260 [ 173.224646][ T3452] ? __cfi_ksys_read+0x10/0x10 [ 173.224661][ T3452] ? __kasan_check_read+0x15/0x20 [ 173.224678][ T3452] __x64_sys_read+0x7f/0x90 [ 173.224694][ T3452] x64_sys_call+0x2638/0x2ee0 [ 173.224710][ T3452] do_syscall_64+0x57/0xf0 [ 173.224727][ T3452] ? clear_bhb_loop+0x50/0xa0 [ 173.224747][ T3452] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 173.224766][ T3452] RIP: 0033:0x7f3d0bd5e68e [ 173.224781][ T3452] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 173.224795][ T3452] RSP: 002b:00007f3d0ccbffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 173.224807][ T3452] RAX: ffffffffffffffda RBX: 00007f3d0ccc06c0 RCX: 00007f3d0bd5e68e [ 173.224815][ T3452] RDX: 000000000000000f RSI: 00007f3d0ccc00a0 RDI: 0000000000000003 [ 173.224822][ T3452] RBP: 00007f3d0ccc0090 R08: 0000000000000000 R09: 0000000000000000 [ 173.224829][ T3452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.224836][ T3452] R13: 00007f3d0c026038 R14: 00007f3d0c025fa0 R15: 00007ffd955350a8 [ 173.224844][ T3452] [ 173.225155][ T565] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 173.479001][ T320] usb usb2-port1: unable to enumerate USB device [ 173.487550][ T3462] FAULT_INJECTION: forcing a failure. [ 173.487550][ T3462] name failslab, interval 1, probability 0, space 0, times 0 [ 173.487828][ T565] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input54 [ 173.505498][ T3462] CPU: 0 UID: 0 PID: 3462 Comm: syz.0.952 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 173.505525][ T3462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 173.505535][ T3462] Call Trace: [ 173.505541][ T3462] [ 173.505549][ T3462] __dump_stack+0x21/0x30 [ 173.505577][ T3462] dump_stack_lvl+0x140/0x1c0 [ 173.505598][ T3462] ? __cfi_dump_stack_lvl+0x10/0x10 [ 173.505627][ T3462] ? do_syscall_64+0x57/0xf0 [ 173.505646][ T3462] dump_stack+0x19/0x20 [ 173.505667][ T3462] should_fail_ex+0x3c2/0x510 [ 173.505686][ T3462] should_failslab+0xac/0x100 [ 173.505706][ T3462] kmem_cache_alloc_node_noprof+0x45/0x420 [ 173.505725][ T3462] ? __alloc_skb+0x10c/0x360 [ 173.505745][ T3462] ? avc_has_perm+0x155/0x240 [ 173.505765][ T3462] __alloc_skb+0x10c/0x360 [ 173.505786][ T3462] __ip_append_data+0x2965/0x3b60 [ 173.505814][ T3462] ? __cfi_raw_getfrag+0x10/0x10 [ 173.505834][ T3462] ? __kasan_check_write+0x18/0x20 [ 173.505851][ T3462] ? _raw_spin_lock_bh+0x96/0x130 [ 173.505869][ T3462] ? ip_setup_cork+0x9f0/0x9f0 [ 173.505892][ T3462] ? __kasan_check_read+0x15/0x20 [ 173.505907][ T3462] ? ip_setup_cork+0x583/0x9f0 [ 173.505929][ T3462] ip_append_data+0x109/0x1a0 [ 173.505951][ T3462] ? __cfi_raw_getfrag+0x10/0x10 [ 173.505972][ T3462] raw_sendmsg+0xf25/0x14f0 [ 173.505995][ T3462] ? __cfi_raw_sendmsg+0x10/0x10 [ 173.506018][ T3462] ? check_stack_object+0x10f/0x150 [ 173.506035][ T3462] ? __check_object_size+0xdc/0x870 [ 173.506052][ T3462] ? inet_send_prepare+0x64/0x4e0 [ 173.506070][ T3462] ? __cfi_raw_sendmsg+0x10/0x10 [ 173.506090][ T3462] inet_sendmsg+0x113/0x120 [ 173.506106][ T3462] ? __cfi_inet_sendmsg+0x10/0x10 [ 173.506121][ T3462] __sys_sendto+0x5ea/0x700 [ 173.506139][ T3462] ? __cfi___sys_sendto+0x10/0x10 [ 173.506157][ T3462] ? __kasan_check_write+0x18/0x20 [ 173.506170][ T3462] ? __cfi_ksys_write+0x10/0x10 [ 173.506192][ T3462] __x64_sys_sendto+0xe9/0x100 [ 173.506214][ T3462] x64_sys_call+0x2c2c/0x2ee0 [ 173.506230][ T3462] do_syscall_64+0x57/0xf0 [ 173.506247][ T3462] ? clear_bhb_loop+0x50/0xa0 [ 173.506272][ T3462] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 173.506291][ T3462] RIP: 0033:0x7f3d0bd9de59 [ 173.506307][ T3462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.506321][ T3462] RSP: 002b:00007f3d0ccc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 173.506341][ T3462] RAX: ffffffffffffffda RBX: 00007f3d0c025fa0 RCX: 00007f3d0bd9de59 [ 173.506359][ T3462] RDX: 0000000000000002 RSI: 0000200000003fc0 RDI: 0000000000000003 [ 173.506370][ T3462] RBP: 00007f3d0ccc0090 R08: 0000200000004fc0 R09: 0000000000000010 [ 173.506383][ T3462] R10: 0000000004008002 R11: 0000000000000246 R12: 0000000000000001 [ 173.506394][ T3462] R13: 00007f3d0c026038 R14: 00007f3d0c025fa0 R15: 00007ffd955350a8 [ 173.506408][ T3462] [ 173.562924][ T36] audit: type=1326 audit(1782911928.304:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3463 comm="syz.0.953" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d0bd9de59 code=0x0 [ 173.859548][ T11] usb 3-1: USB disconnect, device number 94 [ 173.859673][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 174.100238][ T3471] FAULT_INJECTION: forcing a failure. [ 174.100238][ T3471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.113607][ T3471] CPU: 1 UID: 0 PID: 3471 Comm: syz.3.956 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 174.113628][ T3471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 174.113635][ T3471] Call Trace: [ 174.113640][ T3471] [ 174.113646][ T3471] __dump_stack+0x21/0x30 [ 174.113664][ T3471] dump_stack_lvl+0x140/0x1c0 [ 174.113678][ T3471] ? __cfi_dump_stack_lvl+0x10/0x10 [ 174.113692][ T3471] ? check_stack_object+0x81/0x150 [ 174.113702][ T3471] ? __virt_addr_valid+0x2a1/0x370 [ 174.113715][ T3471] dump_stack+0x19/0x20 [ 174.113727][ T3471] should_fail_ex+0x3c2/0x510 [ 174.113739][ T3471] should_fail+0xf/0x20 [ 174.113749][ T3471] should_fail_usercopy+0x1e/0x30 [ 174.113760][ T3471] _copy_from_user+0x20/0xa0 [ 174.113773][ T3471] memdup_user+0x81/0x170 [ 174.113787][ T3471] ? kvm_arch_vcpu_ioctl+0x1361/0x3120 [ 174.113798][ T3471] kvm_arch_vcpu_ioctl+0x19bc/0x3120 [ 174.113807][ T3471] ? avc_has_perm+0x155/0x240 [ 174.113819][ T3471] ? __cfi_avc_has_perm+0x10/0x10 [ 174.113830][ T3471] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 174.113840][ T3471] ? selinux_file_open+0x46c/0x630 [ 174.113850][ T3471] ? __cfi_selinux_file_open+0x10/0x10 [ 174.113863][ T3471] ? is_bpf_text_address+0x17b/0x1a0 [ 174.113880][ T3471] ? kernel_text_address+0xa9/0xe0 [ 174.113893][ T3471] ? __kernel_text_address+0x11/0x40 [ 174.113906][ T3471] ? __asan_set_shadow_00+0x12/0x20 [ 174.113920][ T3471] ? do_vfs_ioctl+0x182d/0x2010 [ 174.113931][ T3471] ? arch_stack_walk+0x10a/0x170 [ 174.113941][ T3471] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 174.113953][ T3471] ? _parse_integer_limit+0x195/0x1e0 [ 174.113974][ T3471] ? _parse_integer+0x2e/0x40 [ 174.113984][ T3471] ? kstrtoull+0x13b/0x1e0 [ 174.113993][ T3471] ? kstrtouint+0x78/0xf0 [ 174.114003][ T3471] ? ioctl_has_perm+0x1bc/0x500 [ 174.114015][ T3471] ? __asan_memcpy+0x5a/0x80 [ 174.114024][ T3471] ? ioctl_has_perm+0x408/0x500 [ 174.114033][ T3471] ? has_cap_mac_admin+0xd0/0xd0 [ 174.114042][ T3471] ? __kasan_check_write+0x18/0x20 [ 174.114051][ T3471] ? mutex_lock_killable+0x97/0x1d0 [ 174.114065][ T3471] ? __cfi_mutex_lock_killable+0x10/0x10 [ 174.114084][ T3471] ? proc_fail_nth_write+0x184/0x220 [ 174.114098][ T3471] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 174.114112][ T3471] kvm_vcpu_ioctl+0x7da/0x1000 [ 174.114122][ T3471] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 174.114135][ T3471] ? __cfi_vfs_write+0x10/0x10 [ 174.114146][ T3471] ? __kasan_check_write+0x18/0x20 [ 174.114155][ T3471] ? mutex_unlock+0x90/0x240 [ 174.114167][ T3471] ? __cfi_mutex_unlock+0x10/0x10 [ 174.114180][ T3471] ? bpf_lsm_file_ioctl+0xd/0x20 [ 174.114193][ T3471] ? security_file_ioctl+0x3e/0x110 [ 174.114207][ T3471] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 174.114217][ T3471] __se_sys_ioctl+0x132/0x1b0 [ 174.114228][ T3471] __x64_sys_ioctl+0x7f/0xa0 [ 174.114239][ T3471] x64_sys_call+0x1878/0x2ee0 [ 174.114248][ T3471] do_syscall_64+0x57/0xf0 [ 174.114258][ T3471] ? clear_bhb_loop+0x50/0xa0 [ 174.114271][ T3471] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 174.114282][ T3471] RIP: 0033:0x7f8ba0d9de59 [ 174.114293][ T3471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.114302][ T3471] RSP: 002b:00007f8ba1ce2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.114314][ T3471] RAX: ffffffffffffffda RBX: 00007f8ba1025fa0 RCX: 00007f8ba0d9de59 [ 174.114322][ T3471] RDX: 0000200000000000 RSI: 000000004008ae89 RDI: 0000000000000005 [ 174.114329][ T3471] RBP: 00007f8ba1ce2090 R08: 0000000000000000 R09: 0000000000000000 [ 174.114336][ T3471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.114343][ T3471] R13: 00007f8ba1026038 R14: 00007f8ba1025fa0 R15: 00007ffe1f42ab98 [ 174.114351][ T3471] [ 174.329512][ T356] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 174.546883][ T3486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.555596][ T3486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.649506][ T356] usb 2-1: Using ep0 maxpacket: 32 [ 174.656220][ T356] usb 2-1: unable to get BOS descriptor or descriptor too short [ 174.666476][ T356] usb 2-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.679939][ T356] usb 2-1: config 1 interface 0 has no altsetting 0 [ 174.689976][ T356] usb 2-1: string descriptor 0 read error: -22 [ 174.696644][ T356] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 174.706460][ T356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.717449][ T356] usblp0: Disabling reads from problematic bidirectional printer [ 174.759524][ T565] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 174.910773][ T565] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 174.922835][ T565] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 174.934576][ T565] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 174.949138][ T66] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 174.956881][ T36] audit: type=1400 audit(1782911929.734:431): avc: denied { mount } for pid=3466 comm="syz.1.954" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 174.979406][ T565] usb 3-1: config 0 interface 0 has no altsetting 0 [ 174.986139][ T565] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 174.995959][ T565] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.005452][ T565] usb 3-1: config 0 descriptor?? [ 175.011476][ T3482] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 175.149511][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 175.155885][ T66] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 175.164506][ T66] usb 1-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 175.174945][ T66] usb 1-1: config 0 has no interface number 0 [ 175.185297][ T66] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 175.194771][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.202816][ T66] usb 1-1: Product: syz [ 175.207131][ T66] usb 1-1: Manufacturer: syz [ 175.211933][ T66] usb 1-1: SerialNumber: syz [ 175.217338][ T66] usb 1-1: config 0 descriptor?? [ 175.224221][ T66] usb 1-1: Found UVC 0.00 device syz (046d:08d3) [ 175.230942][ T66] usb 1-1: No valid video chain found. [ 175.241967][ T3500] overlayfs: invalid origin (0000007900ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 175.455989][ T66] usb 1-1: USB disconnect, device number 86 [ 175.476403][ T356] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 106 if 0 alt 10 proto 1 vid 0x03F0 pid 0x0004 [ 175.495711][ T356] usb 2-1: USB disconnect, device number 106 [ 175.507749][ T356] usblp0: removed [ 175.631556][ T36] audit: type=1326 audit(1782911930.414:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3509 comm="syz.1.971" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f627779de59 code=0x0 [ 175.640481][ T565] usbhid 3-1:0.0: can't add hid device: -71 [ 175.663682][ T565] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 175.673344][ T565] usb 3-1: USB disconnect, device number 95 [ 175.849520][ T66] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 175.979511][ T66] usb 1-1: device descriptor read/64, error -71 [ 176.051910][ T3513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.061192][ T3513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.219533][ T66] usb 1-1: device descriptor read/64, error -71 [ 176.389513][ T565] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 176.459535][ T66] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 176.539527][ T565] usb 3-1: Using ep0 maxpacket: 16 [ 176.545964][ T565] usb 3-1: config 32 has an invalid interface number: 64 but max is 0 [ 176.554729][ T565] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 176.565071][ T565] usb 3-1: config 32 has no interface number 0 [ 176.571387][ T565] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 176.580933][ T565] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.599610][ T66] usb 1-1: device descriptor read/64, error -71 [ 176.792649][ T565] usb 3-1: USB disconnect, device number 96 [ 176.840017][ T66] usb 1-1: device descriptor read/64, error -71 [ 176.959602][ T66] usb usb1-port1: attempt power cycle [ 176.992449][ T36] audit: type=1400 audit(1782911931.774:433): avc: denied { map } for pid=3541 comm="syz.3.985" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.319501][ T66] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 177.340661][ T66] usb 1-1: device descriptor read/8, error -71 [ 177.363159][ T3548] fuse: Bad value for 'fd' [ 177.369995][ T3548] 9pnet_fd: p9_fd_create_tcp (3548): problem connecting socket to 127.0.0.1 [ 177.470511][ T66] usb 1-1: device descriptor read/8, error -71 [ 177.709525][ T66] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 177.719536][ T565] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 177.730715][ T66] usb 1-1: device descriptor read/8, error -71 [ 177.739543][ T654] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 177.871765][ T565] usb 3-1: Using ep0 maxpacket: 8 [ 177.877365][ T3564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.928640][ T66] usb 1-1: device descriptor read/8, error -71 [ 177.948025][ T654] usb 2-1: unable to get BOS descriptor set [ 177.959792][ T3564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.960254][ T565] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 177.967995][ T654] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 177.977493][ T565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.996357][ T565] usb 3-1: Product: syz [ 177.998021][ T654] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 178.000672][ T565] usb 3-1: Manufacturer: syz [ 178.000692][ T565] usb 3-1: SerialNumber: syz [ 178.012331][ T654] usb 2-1: string descriptor 0 read error: -22 [ 178.025777][ T654] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.035039][ T654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.049683][ T66] usb usb1-port1: unable to enumerate USB device [ 178.371938][ T3570] netlink: 252 bytes leftover after parsing attributes in process `syz.1.990'. [ 178.530032][ T3575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.539391][ T3575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.969539][ T654] usb 1-1: new low-speed USB device number 91 using dummy_hcd [ 179.099519][ T654] usb 1-1: device descriptor read/64, error -71 [ 179.343902][ T654] usb 1-1: device descriptor read/64, error -71 [ 179.469562][ T3597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.479013][ T3597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.589504][ T654] usb 1-1: new low-speed USB device number 92 using dummy_hcd [ 179.719513][ T654] usb 1-1: device descriptor read/64, error -71 [ 179.959504][ T654] usb 1-1: device descriptor read/64, error -71 [ 179.998524][ T3599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1003'. [ 180.013202][ T3600] SELinux: failed to load policy [ 180.028515][ T3603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.037293][ T3603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.069627][ T654] usb usb1-port1: attempt power cycle [ 180.409496][ T654] usb 1-1: new low-speed USB device number 93 using dummy_hcd [ 180.430734][ T654] usb 1-1: device descriptor read/8, error -71 [ 180.442043][ T565] usb 3-1: unit 0 not found! [ 180.450417][ T565] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 180.468612][ T565] usb 3-1: USB disconnect, device number 97 [ 180.478546][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 180.529392][ T66] usb 2-1: USB disconnect, device number 107 [ 180.566557][ T654] usb 1-1: device descriptor read/8, error -71 [ 180.819521][ T654] usb 1-1: new low-speed USB device number 94 using dummy_hcd [ 180.841628][ T654] usb 1-1: device descriptor read/8, error -71 [ 180.849519][ T565] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 180.969577][ T66] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 180.980548][ T654] usb 1-1: device descriptor read/8, error -71 [ 181.010534][ T565] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 181.021637][ T565] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 181.032767][ T565] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 181.046751][ T565] usb 3-1: config 0 interface 0 has no altsetting 0 [ 181.053663][ T565] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 181.063831][ T565] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.072832][ T565] usb 3-1: config 0 descriptor?? [ 181.078112][ T3607] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 181.090408][ T654] usb usb1-port1: unable to enumerate USB device [ 181.120470][ T66] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.132183][ T66] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.143585][ T66] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 181.155026][ T66] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 181.164091][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.172960][ T3614] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 181.660551][ T3624] FAULT_INJECTION: forcing a failure. [ 181.660551][ T3624] name failslab, interval 1, probability 0, space 0, times 0 [ 181.673369][ T3624] CPU: 1 UID: 0 PID: 3624 Comm: syz.0.1011 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 181.673393][ T3624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 181.673401][ T3624] Call Trace: [ 181.673405][ T3624] [ 181.673411][ T3624] __dump_stack+0x21/0x30 [ 181.673429][ T3624] dump_stack_lvl+0x140/0x1c0 [ 181.673443][ T3624] ? __cfi_dump_stack_lvl+0x10/0x10 [ 181.673461][ T3624] dump_stack+0x19/0x20 [ 181.673474][ T3624] should_fail_ex+0x3c2/0x510 [ 181.673486][ T3624] should_failslab+0xac/0x100 [ 181.673499][ T3624] kmem_cache_alloc_node_noprof+0x45/0x420 [ 181.673510][ T3624] ? dup_task_struct+0xc1/0xd80 [ 181.673522][ T3624] ? kasan_save_alloc_info+0x3a/0x50 [ 181.673536][ T3624] ? __kasan_kmalloc+0x96/0xb0 [ 181.673547][ T3624] ? __kmalloc_cache_noprof+0x23c/0x470 [ 181.673558][ T3624] dup_task_struct+0xc1/0xd80 [ 181.673570][ T3624] ? copy_process+0x3350/0x3350 [ 181.673582][ T3624] ? __kasan_check_write+0x18/0x20 [ 181.673592][ T3624] copy_process+0x57c/0x3350 [ 181.673606][ T3624] ? kasan_save_alloc_info+0x3a/0x50 [ 181.673619][ T3624] ? __cfi_copy_process+0x10/0x10 [ 181.673631][ T3624] ? __kmalloc_cache_noprof+0x23c/0x470 [ 181.673641][ T3624] ? __kasan_check_write+0x18/0x20 [ 181.673650][ T3624] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 181.673663][ T3624] vhost_task_create+0x1f7/0x3f0 [ 181.673673][ T3624] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 181.673685][ T3624] ? __cfi_vhost_task_create+0x10/0x10 [ 181.673698][ T3624] ? __cfi_vhost_task_fn+0x10/0x10 [ 181.673708][ T3624] ? __kasan_check_write+0x18/0x20 [ 181.673717][ T3624] ? mutex_lock+0x97/0x1d0 [ 181.673730][ T3624] ? __cfi_mutex_lock+0x10/0x10 [ 181.673741][ T3624] ? kernel_text_address+0xa9/0xe0 [ 181.673755][ T3624] kvm_mmu_post_init_vm+0x161/0x300 [ 181.673769][ T3624] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 181.673784][ T3624] ? _parse_integer_limit+0x195/0x1e0 [ 181.673795][ T3624] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 181.673808][ T3624] ? kstrtoull+0x13b/0x1e0 [ 181.673817][ T3624] ? kstrtouint+0x78/0xf0 [ 181.673827][ T3624] ? ioctl_has_perm+0x1bc/0x500 [ 181.673836][ T3624] ? __asan_memcpy+0x5a/0x80 [ 181.673846][ T3624] ? ioctl_has_perm+0x408/0x500 [ 181.673855][ T3624] ? has_cap_mac_admin+0xd0/0xd0 [ 181.673864][ T3624] ? __kasan_check_write+0x18/0x20 [ 181.673873][ T3624] ? mutex_lock_killable+0x97/0x1d0 [ 181.673886][ T3624] ? __cfi_mutex_lock_killable+0x10/0x10 [ 181.673898][ T3624] ? proc_fail_nth_write+0x184/0x220 [ 181.673913][ T3624] kvm_vcpu_ioctl+0xa43/0x1000 [ 181.673923][ T3624] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 181.673932][ T3624] ? __cfi_vfs_write+0x10/0x10 [ 181.673943][ T3624] ? __kasan_check_write+0x18/0x20 [ 181.673952][ T3624] ? mutex_unlock+0x90/0x240 [ 181.673964][ T3624] ? __cfi_mutex_unlock+0x10/0x10 [ 181.673977][ T3624] ? bpf_lsm_file_ioctl+0xd/0x20 [ 181.673989][ T3624] ? security_file_ioctl+0x3e/0x110 [ 181.674004][ T3624] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 181.674013][ T3624] __se_sys_ioctl+0x132/0x1b0 [ 181.674024][ T3624] __x64_sys_ioctl+0x7f/0xa0 [ 181.674035][ T3624] x64_sys_call+0x1878/0x2ee0 [ 181.674044][ T3624] do_syscall_64+0x57/0xf0 [ 181.674054][ T3624] ? clear_bhb_loop+0x50/0xa0 [ 181.674067][ T3624] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 181.674079][ T3624] RIP: 0033:0x7f3d0bd9de59 [ 181.674089][ T3624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.674098][ T3624] RSP: 002b:00007f3d0ccc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.674110][ T3624] RAX: ffffffffffffffda RBX: 00007f3d0c025fa0 RCX: 00007f3d0bd9de59 [ 181.674118][ T3624] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 181.674125][ T3624] RBP: 00007f3d0ccc0090 R08: 0000000000000000 R09: 0000000000000000 [ 181.674132][ T3624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.674138][ T3624] R13: 00007f3d0c026038 R14: 00007f3d0c025fa0 R15: 00007ffd955350a8 [ 181.674146][ T3624] [ 182.079836][ T565] usbhid 3-1:0.0: can't add hid device: -71 [ 182.085929][ T565] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 182.098171][ T565] usb 3-1: USB disconnect, device number 98 [ 182.161238][ T3630] syzkaller1: left promiscuous mode [ 182.166567][ T3630] syzkaller1: left allmulticast mode [ 182.187781][ T3632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.196561][ T3632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.773770][ T3653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.782652][ T3653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.790657][ T11] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 182.796052][ T3653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.807265][ T3653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.816216][ T3653] 9pnet_fd: Insufficient options for proto=fd [ 182.859531][ T356] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 182.950706][ T11] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 182.961052][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.970689][ T11] usb 1-1: config 0 descriptor?? [ 183.020570][ T356] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 183.037722][ T356] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 183.047484][ T356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.055779][ T356] usb 3-1: Product: syz [ 183.060504][ T356] usb 3-1: Manufacturer: syz [ 183.065236][ T356] usb 3-1: SerialNumber: syz [ 183.536239][ T3656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.545107][ T3656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.981469][ T11] usb 1-1: Cannot set autoneg [ 183.986261][ T11] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 183.999719][ T11] usb 1-1: USB disconnect, device number 95 [ 184.090646][ T66] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 184.092478][ T3658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.100957][ T66] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input55 [ 184.108138][ T3658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.126528][ T66] usb 2-1: USB disconnect, device number 108 [ 184.126619][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 184.759607][ T36] audit: type=1400 audit(1782911939.534:434): avc: denied { open } for pid=3681 comm="syz.3.1031" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=28092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 184.829315][ T3686] netlink: 316 bytes leftover after parsing attributes in process `syz.3.1032'. [ 184.844718][ T3686] netlink: 'syz.3.1032': attribute type 4 has an invalid length. [ 184.923961][ T3688] FAULT_INJECTION: forcing a failure. [ 184.923961][ T3688] name failslab, interval 1, probability 0, space 0, times 0 [ 184.936765][ T3688] CPU: 1 UID: 0 PID: 3688 Comm: syz.3.1033 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 184.936790][ T3688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 184.936800][ T3688] Call Trace: [ 184.936805][ T3688] [ 184.936812][ T3688] __dump_stack+0x21/0x30 [ 184.936837][ T3688] dump_stack_lvl+0x140/0x1c0 [ 184.936855][ T3688] ? __cfi_dump_stack_lvl+0x10/0x10 [ 184.936874][ T3688] ? avc_has_perm+0x155/0x240 [ 184.936891][ T3688] ? __cfi_avc_has_perm+0x10/0x10 [ 184.936908][ T3688] dump_stack+0x19/0x20 [ 184.936924][ T3688] should_fail_ex+0x3c2/0x510 [ 184.936936][ T3688] should_failslab+0xac/0x100 [ 184.936949][ T3688] __kmalloc_cache_noprof+0x41/0x470 [ 184.936960][ T3688] ? vhost_task_create+0x12c/0x3f0 [ 184.936971][ T3688] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 184.936983][ T3688] vhost_task_create+0x12c/0x3f0 [ 184.936993][ T3688] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 184.937005][ T3688] ? __cfi_vhost_task_create+0x10/0x10 [ 184.937016][ T3688] ? __cfi_vhost_task_fn+0x10/0x10 [ 184.937026][ T3688] ? __kasan_check_write+0x18/0x20 [ 184.937036][ T3688] ? mutex_lock+0x97/0x1d0 [ 184.937049][ T3688] ? __cfi_mutex_lock+0x10/0x10 [ 184.937060][ T3688] ? kernel_text_address+0xa9/0xe0 [ 184.937074][ T3688] kvm_mmu_post_init_vm+0x161/0x300 [ 184.937088][ T3688] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 184.937101][ T3688] ? _parse_integer_limit+0x195/0x1e0 [ 184.937112][ T3688] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 184.937125][ T3688] ? kstrtoull+0x13b/0x1e0 [ 184.937134][ T3688] ? kstrtouint+0x78/0xf0 [ 184.937144][ T3688] ? ioctl_has_perm+0x1bc/0x500 [ 184.937153][ T3688] ? __asan_memcpy+0x5a/0x80 [ 184.937163][ T3688] ? ioctl_has_perm+0x408/0x500 [ 184.937172][ T3688] ? has_cap_mac_admin+0xd0/0xd0 [ 184.937181][ T3688] ? __kasan_check_write+0x18/0x20 [ 184.937190][ T3688] ? mutex_lock_killable+0x97/0x1d0 [ 184.937203][ T3688] ? __cfi_mutex_lock_killable+0x10/0x10 [ 184.937215][ T3688] ? proc_fail_nth_write+0x184/0x220 [ 184.937230][ T3688] kvm_vcpu_ioctl+0xa43/0x1000 [ 184.937243][ T3688] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 184.937253][ T3688] ? __cfi_vfs_write+0x10/0x10 [ 184.937263][ T3688] ? __kasan_check_write+0x18/0x20 [ 184.937272][ T3688] ? mutex_unlock+0x90/0x240 [ 184.937353][ T3688] ? __cfi_mutex_unlock+0x10/0x10 [ 184.937367][ T3688] ? bpf_lsm_file_ioctl+0xd/0x20 [ 184.937380][ T3688] ? security_file_ioctl+0x3e/0x110 [ 184.937394][ T3688] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 184.937403][ T3688] __se_sys_ioctl+0x132/0x1b0 [ 184.937430][ T3688] __x64_sys_ioctl+0x7f/0xa0 [ 184.937441][ T3688] x64_sys_call+0x1878/0x2ee0 [ 184.937451][ T3688] do_syscall_64+0x57/0xf0 [ 184.937461][ T3688] ? clear_bhb_loop+0x50/0xa0 [ 184.937473][ T3688] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 184.937485][ T3688] RIP: 0033:0x7f8ba0d9de59 [ 184.937496][ T3688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.937505][ T3688] RSP: 002b:00007f8ba1ce2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.937517][ T3688] RAX: ffffffffffffffda RBX: 00007f8ba1025fa0 RCX: 00007f8ba0d9de59 [ 184.937525][ T3688] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 184.937531][ T3688] RBP: 00007f8ba1ce2090 R08: 0000000000000000 R09: 0000000000000000 [ 184.937538][ T3688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.937545][ T3688] R13: 00007f8ba1026038 R14: 00007f8ba1025fa0 R15: 00007ffe1f42ab98 [ 184.937553][ T3688] [ 185.421504][ T3696] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1036'. [ 185.503148][ T3701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.512744][ T3701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.609840][ T432] bridge_slave_1: left allmulticast mode [ 185.615555][ T432] bridge_slave_1: left promiscuous mode [ 185.621730][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.630045][ T432] bridge_slave_0: left allmulticast mode [ 185.635862][ T432] bridge_slave_0: left promiscuous mode [ 185.642011][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.654392][ T66] usb 3-1: USB disconnect, device number 99 [ 185.700655][ T3704] FAULT_INJECTION: forcing a failure. [ 185.700655][ T3704] name failslab, interval 1, probability 0, space 0, times 0 [ 185.713679][ T11] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 185.723465][ T3704] CPU: 0 UID: 0 PID: 3704 Comm: syz.2.1040 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 185.723496][ T3704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 185.723508][ T3704] Call Trace: [ 185.723515][ T3704] [ 185.723522][ T3704] __dump_stack+0x21/0x30 [ 185.723550][ T3704] dump_stack_lvl+0x140/0x1c0 [ 185.723571][ T3704] ? __cfi_dump_stack_lvl+0x10/0x10 [ 185.723594][ T3704] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 185.723614][ T3704] dump_stack+0x19/0x20 [ 185.723635][ T3704] should_fail_ex+0x3c2/0x510 [ 185.723654][ T3704] should_failslab+0xac/0x100 [ 185.723675][ T3704] __kmalloc_node_noprof+0x69/0x500 [ 185.723692][ T3704] ? __kvmalloc_node_noprof+0x128/0x300 [ 185.723716][ T3704] ? __kasan_check_write+0x18/0x20 [ 185.723733][ T3704] __kvmalloc_node_noprof+0x128/0x300 [ 185.723756][ T3704] ? get_user_pages_fast_only+0x76/0xc0 [ 185.723778][ T3704] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 185.723802][ T3704] ? hva_to_pfn+0x226/0xab0 [ 185.723819][ T3704] __kvm_mmu_topup_memory_cache+0x58e/0x7e0 [ 185.723843][ T3704] ? folio_mark_accessed+0x34b/0x620 [ 185.723865][ T3704] kvm_mmu_topup_memory_cache+0x24/0x30 [ 185.723889][ T3704] kvm_mmu_load+0xa1/0x2900 [ 185.723908][ T3704] ? __cfi__raw_spin_lock+0x10/0x10 [ 185.723925][ T3704] ? kvm_hv_setup_tsc_page+0x5f6/0xa80 [ 185.723948][ T3704] ? __kasan_check_write+0x18/0x20 [ 185.723963][ T3704] ? kvm_apic_has_interrupt+0x4e2/0x790 [ 185.723986][ T3704] vcpu_run+0x4d72/0x7830 [ 185.724009][ T3704] ? kvm_sched_clock_read+0x15/0x30 [ 185.724039][ T3704] ? signal_pending+0xc0/0xc0 [ 185.724059][ T3704] ? __kasan_check_write+0x18/0x20 [ 185.724075][ T3704] ? xfd_validate_state+0x68/0x140 [ 185.724096][ T3704] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 185.724115][ T3704] ? __kasan_check_write+0x18/0x20 [ 185.724131][ T3704] ? fpregs_mark_activate+0x68/0x160 [ 185.724150][ T3704] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 185.724169][ T3704] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 185.724189][ T3704] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 185.724211][ T3704] ? _parse_integer_limit+0x195/0x1e0 [ 185.724230][ T3704] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 185.724252][ T3704] ? kstrtoull+0x13b/0x1e0 [ 185.724269][ T3704] ? kstrtouint+0x78/0xf0 [ 185.724285][ T3704] ? ioctl_has_perm+0x1bc/0x500 [ 185.724302][ T3704] ? __asan_memcpy+0x5a/0x80 [ 185.724318][ T3704] ? ioctl_has_perm+0x408/0x500 [ 185.724334][ T3704] ? has_cap_mac_admin+0xd0/0xd0 [ 185.724349][ T3704] ? __kasan_check_write+0x18/0x20 [ 185.724366][ T3704] ? mutex_lock_killable+0x97/0x1d0 [ 185.724386][ T3704] ? __cfi_mutex_lock_killable+0x10/0x10 [ 185.724412][ T3704] ? proc_fail_nth_write+0x184/0x220 [ 185.724436][ T3704] kvm_vcpu_ioctl+0xa43/0x1000 [ 185.724453][ T3704] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 185.724469][ T3704] ? __cfi_vfs_write+0x10/0x10 [ 185.724486][ T3704] ? __kasan_check_write+0x18/0x20 [ 185.724503][ T3704] ? mutex_unlock+0x90/0x240 [ 185.724521][ T3704] ? __cfi_mutex_unlock+0x10/0x10 [ 185.724543][ T3704] ? bpf_lsm_file_ioctl+0xd/0x20 [ 185.724564][ T3704] ? security_file_ioctl+0x3e/0x110 [ 185.724587][ T3704] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 185.724603][ T3704] __se_sys_ioctl+0x132/0x1b0 [ 185.724624][ T3704] __x64_sys_ioctl+0x7f/0xa0 [ 185.724643][ T3704] x64_sys_call+0x1878/0x2ee0 [ 185.724660][ T3704] do_syscall_64+0x57/0xf0 [ 185.724677][ T3704] ? clear_bhb_loop+0x50/0xa0 [ 185.724699][ T3704] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 185.724719][ T3704] RIP: 0033:0x7f045499de59 [ 185.724735][ T3704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.724771][ T3704] RSP: 002b:00007f04533e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.724790][ T3704] RAX: ffffffffffffffda RBX: 00007f0454c25fa0 RCX: 00007f045499de59 [ 185.724800][ T3704] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 185.724811][ T3704] RBP: 00007f04533e3090 R08: 0000000000000000 R09: 0000000000000000 [ 185.724819][ T3704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.724828][ T3704] R13: 00007f0454c26038 R14: 00007f0454c25fa0 R15: 00007fffddaa2d38 [ 185.724840][ T3704] [ 185.768982][ T3706] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.929525][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 185.931616][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.937730][ T11] usb 1-1: unable to get BOS descriptor or descriptor too short [ 185.942439][ T3706] bridge_slave_0: entered allmulticast mode [ 185.948002][ T11] usb 1-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 185.951691][ T3706] bridge_slave_0: entered promiscuous mode [ 185.956357][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 185.961755][ T3706] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.966447][ T11] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.971183][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.978057][ T11] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.981819][ T3706] bridge_slave_1: entered allmulticast mode [ 185.992806][ T11] usb 1-1: New USB device strings: Mfr=1, Product=232, SerialNumber=3 [ 185.998112][ T3706] bridge_slave_1: entered promiscuous mode [ 186.003655][ T11] usb 1-1: Product: syz [ 186.058877][ T3706] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.069549][ T11] usb 1-1: Manufacturer: syz [ 186.073641][ T3706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.094764][ T11] usb 1-1: SerialNumber: syz [ 186.103544][ T3706] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.299673][ T3706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.308883][ T432] veth1_macvtap: left promiscuous mode [ 186.314869][ T432] veth0_vlan: left promiscuous mode [ 186.318227][ T3696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=3696 comm=syz.0.1036 [ 186.388079][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.413065][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.424360][ T3696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.460381][ T3696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.460429][ T3721] FAULT_INJECTION: forcing a failure. [ 186.460429][ T3721] name failslab, interval 1, probability 0, space 0, times 0 [ 186.485773][ T3721] CPU: 1 UID: 0 PID: 3721 Comm: syz.3.1044 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 186.485806][ T3721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 186.485818][ T3721] Call Trace: [ 186.485824][ T3721] [ 186.485833][ T3721] __dump_stack+0x21/0x30 [ 186.485859][ T3721] dump_stack_lvl+0x140/0x1c0 [ 186.485882][ T3721] ? __cfi_dump_stack_lvl+0x10/0x10 [ 186.485906][ T3721] dump_stack+0x19/0x20 [ 186.485926][ T3721] should_fail_ex+0x3c2/0x510 [ 186.485946][ T3721] should_failslab+0xac/0x100 [ 186.485966][ T3721] kmem_cache_alloc_node_noprof+0x45/0x420 [ 186.485985][ T3721] ? dup_task_struct+0xc1/0xd80 [ 186.486005][ T3721] ? kasan_save_alloc_info+0x3a/0x50 [ 186.486028][ T3721] ? __kasan_kmalloc+0x96/0xb0 [ 186.486045][ T3721] ? __kmalloc_cache_noprof+0x23c/0x470 [ 186.486063][ T3721] dup_task_struct+0xc1/0xd80 [ 186.486084][ T3721] ? copy_process+0x3350/0x3350 [ 186.486102][ T3721] ? __kasan_check_write+0x18/0x20 [ 186.486119][ T3721] copy_process+0x57c/0x3350 [ 186.486142][ T3721] ? kasan_save_alloc_info+0x3a/0x50 [ 186.486165][ T3721] ? __cfi_copy_process+0x10/0x10 [ 186.486185][ T3721] ? __kmalloc_cache_noprof+0x23c/0x470 [ 186.486203][ T3721] ? __kasan_check_write+0x18/0x20 [ 186.486220][ T3721] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 186.486238][ T3721] vhost_task_create+0x1f7/0x3f0 [ 186.486254][ T3721] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 186.486270][ T3721] ? __cfi_vhost_task_create+0x10/0x10 [ 186.486285][ T3721] ? __cfi_vhost_task_fn+0x10/0x10 [ 186.486302][ T3721] ? __kasan_check_write+0x18/0x20 [ 186.486316][ T3721] ? mutex_lock+0x97/0x1d0 [ 186.486336][ T3721] ? __cfi_mutex_lock+0x10/0x10 [ 186.486365][ T3721] ? kernel_text_address+0xa9/0xe0 [ 186.486387][ T3721] kvm_mmu_post_init_vm+0x161/0x300 [ 186.486410][ T3721] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 186.486431][ T3721] ? _parse_integer_limit+0x195/0x1e0 [ 186.486448][ T3721] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 186.486468][ T3721] ? kstrtoull+0x13b/0x1e0 [ 186.486484][ T3721] ? kstrtouint+0x78/0xf0 [ 186.486498][ T3721] ? ioctl_has_perm+0x1bc/0x500 [ 186.486514][ T3721] ? __asan_memcpy+0x5a/0x80 [ 186.486529][ T3721] ? ioctl_has_perm+0x408/0x500 [ 186.486545][ T3721] ? has_cap_mac_admin+0xd0/0xd0 [ 186.486559][ T3721] ? __kasan_check_write+0x18/0x20 [ 186.486575][ T3721] ? mutex_lock_killable+0x97/0x1d0 [ 186.486597][ T3721] ? __cfi_mutex_lock_killable+0x10/0x10 [ 186.486617][ T3721] ? proc_fail_nth_write+0x184/0x220 [ 186.486642][ T3721] kvm_vcpu_ioctl+0xa43/0x1000 [ 186.486661][ T3721] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 186.486679][ T3721] ? __cfi_vfs_write+0x10/0x10 [ 186.486696][ T3721] ? __kasan_check_write+0x18/0x20 [ 186.486713][ T3721] ? mutex_unlock+0x90/0x240 [ 186.486733][ T3721] ? __cfi_mutex_unlock+0x10/0x10 [ 186.486755][ T3721] ? bpf_lsm_file_ioctl+0xd/0x20 [ 186.486777][ T3721] ? security_file_ioctl+0x3e/0x110 [ 186.486800][ T3721] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 186.486817][ T3721] __se_sys_ioctl+0x132/0x1b0 [ 186.486837][ T3721] __x64_sys_ioctl+0x7f/0xa0 [ 186.486855][ T3721] x64_sys_call+0x1878/0x2ee0 [ 186.486870][ T3721] do_syscall_64+0x57/0xf0 [ 186.486887][ T3721] ? clear_bhb_loop+0x50/0xa0 [ 186.486908][ T3721] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 186.486928][ T3721] RIP: 0033:0x7f8ba0d9de59 [ 186.486945][ T3721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.486961][ T3721] RSP: 002b:00007f8ba1ce2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.486981][ T3721] RAX: ffffffffffffffda RBX: 00007f8ba1025fa0 RCX: 00007f8ba0d9de59 [ 186.486996][ T3721] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 186.487007][ T3721] RBP: 00007f8ba1ce2090 R08: 0000000000000000 R09: 0000000000000000 [ 186.487019][ T3721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.487029][ T3721] R13: 00007f8ba1026038 R14: 00007f8ba1025fa0 R15: 00007ffe1f42ab98 [ 186.487042][ T3721] [ 186.487627][ T421] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.894803][ T421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.904006][ T421] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.904506][ T11] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 186.911174][ T421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.925485][ T3706] veth0_vlan: entered promiscuous mode [ 186.927539][ T11] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 186.937919][ T11] cdc_ncm 1-1:1.0: bind() failure [ 186.945718][ T3706] veth1_macvtap: entered promiscuous mode [ 186.950227][ T11] usb 1-1: USB disconnect, device number 96 [ 186.991123][ T3725] syzkaller1: entered promiscuous mode [ 186.996801][ T3725] syzkaller1: entered allmulticast mode [ 187.007277][ T3725] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 187.016643][ T3725] netlink: 'syz.1.1039': attribute type 16 has an invalid length. [ 187.025187][ T3725] netlink: 'syz.1.1039': attribute type 3 has an invalid length. [ 187.030968][ T3727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.034084][ T3725] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.1039'. [ 187.043377][ T3727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.116164][ T3732] binder: Unknown parameter 'fscontext?}' [ 187.122174][ T36] audit: type=1400 audit(1782911941.894:435): avc: denied { mounton } for pid=3731 comm="syz.2.1047" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.179363][ T3738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'. [ 187.240937][ T3743] rust_binder: Write failure EFAULT in pid:632 [ 187.271720][ T3746] FAULT_INJECTION: forcing a failure. [ 187.271720][ T3746] name failslab, interval 1, probability 0, space 0, times 0 [ 187.291594][ T3746] CPU: 1 UID: 0 PID: 3746 Comm: syz.2.1052 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 187.291626][ T3746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 187.291634][ T3746] Call Trace: [ 187.291638][ T3746] [ 187.291642][ T3746] __dump_stack+0x21/0x30 [ 187.291660][ T3746] dump_stack_lvl+0x140/0x1c0 [ 187.291674][ T3746] ? __cfi_dump_stack_lvl+0x10/0x10 [ 187.291688][ T3746] ? __kasan_kmalloc+0x96/0xb0 [ 187.291700][ T3746] dump_stack+0x19/0x20 [ 187.291712][ T3746] should_fail_ex+0x3c2/0x510 [ 187.291724][ T3746] should_failslab+0xac/0x100 [ 187.291736][ T3746] kmem_cache_alloc_noprof+0x42/0x410 [ 187.291746][ T3746] ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0 [ 187.291762][ T3746] __kvm_mmu_topup_memory_cache+0x1dd/0x7e0 [ 187.291776][ T3746] ? folio_mark_accessed+0x34b/0x620 [ 187.291789][ T3746] kvm_mmu_topup_memory_cache+0x24/0x30 [ 187.291802][ T3746] kvm_mmu_load+0xa1/0x2900 [ 187.291815][ T3746] ? __cfi__raw_spin_lock+0x10/0x10 [ 187.291826][ T3746] ? kvm_hv_setup_tsc_page+0x5f6/0xa80 [ 187.291840][ T3746] ? __kasan_check_write+0x18/0x20 [ 187.291856][ T3746] ? kvm_apic_has_interrupt+0x4e2/0x790 [ 187.291870][ T3746] vcpu_run+0x4d72/0x7830 [ 187.291884][ T3746] ? kvm_sched_clock_read+0x15/0x30 [ 187.291903][ T3746] ? signal_pending+0xc0/0xc0 [ 187.291919][ T3746] ? __kasan_check_write+0x18/0x20 [ 187.291928][ T3746] ? xfd_validate_state+0x68/0x140 [ 187.291942][ T3746] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 187.291953][ T3746] ? __kasan_check_write+0x18/0x20 [ 187.291962][ T3746] ? fpregs_mark_activate+0x68/0x160 [ 187.291973][ T3746] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 187.291984][ T3746] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 187.291996][ T3746] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 187.292009][ T3746] ? _parse_integer_limit+0x195/0x1e0 [ 187.292019][ T3746] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 187.292032][ T3746] ? kstrtoull+0x13b/0x1e0 [ 187.292042][ T3746] ? kstrtouint+0x78/0xf0 [ 187.292051][ T3746] ? ioctl_has_perm+0x1bc/0x500 [ 187.292061][ T3746] ? __asan_memcpy+0x5a/0x80 [ 187.292070][ T3746] ? ioctl_has_perm+0x408/0x500 [ 187.292079][ T3746] ? has_cap_mac_admin+0xd0/0xd0 [ 187.292088][ T3746] ? __kasan_check_write+0x18/0x20 [ 187.292097][ T3746] ? mutex_lock_killable+0x97/0x1d0 [ 187.292110][ T3746] ? __cfi_mutex_lock_killable+0x10/0x10 [ 187.292122][ T3746] ? proc_fail_nth_write+0x184/0x220 [ 187.292137][ T3746] kvm_vcpu_ioctl+0xa43/0x1000 [ 187.292148][ T3746] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 187.292161][ T3746] ? __cfi_vfs_write+0x10/0x10 [ 187.292171][ T3746] ? __kasan_check_write+0x18/0x20 [ 187.292180][ T3746] ? mutex_unlock+0x90/0x240 [ 187.292191][ T3746] ? __cfi_mutex_unlock+0x10/0x10 [ 187.292204][ T3746] ? bpf_lsm_file_ioctl+0xd/0x20 [ 187.292217][ T3746] ? security_file_ioctl+0x3e/0x110 [ 187.292231][ T3746] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 187.292240][ T3746] __se_sys_ioctl+0x132/0x1b0 [ 187.292252][ T3746] __x64_sys_ioctl+0x7f/0xa0 [ 187.292263][ T3746] x64_sys_call+0x1878/0x2ee0 [ 187.292272][ T3746] do_syscall_64+0x57/0xf0 [ 187.292282][ T3746] ? clear_bhb_loop+0x50/0xa0 [ 187.292295][ T3746] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 187.292306][ T3746] RIP: 0033:0x7f045499de59 [ 187.292317][ T3746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.292326][ T3746] RSP: 002b:00007f04533e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.292339][ T3746] RAX: ffffffffffffffda RBX: 00007f0454c25fa0 RCX: 00007f045499de59 [ 187.292350][ T3746] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 187.292357][ T3746] RBP: 00007f04533e3090 R08: 0000000000000000 R09: 0000000000000000 [ 187.292363][ T3746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.292370][ T3746] R13: 00007f0454c26038 R14: 00007f0454c25fa0 R15: 00007fffddaa2d38 [ 187.292378][ T3746] [ 187.489534][ T11] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 187.704662][ T3750] overlayfs: missing 'lowerdir' [ 187.764208][ T3758] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1056'. [ 187.773279][ T3758] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1056'. [ 187.782380][ T3758] netlink: 'syz.2.1056': attribute type 5 has an invalid length. [ 187.790449][ T3758] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1056'. [ 187.840551][ T11] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 187.851543][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1668, setting to 1024 [ 187.864284][ T11] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.878092][ T3768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1059'. [ 187.887341][ T11] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.908898][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.927316][ T11] usb 2-1: config 0 descriptor?? [ 187.938580][ T3747] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.101196][ T3778] FAULT_INJECTION: forcing a failure. [ 188.101196][ T3778] name failslab, interval 1, probability 0, space 0, times 0 [ 188.114098][ T3778] CPU: 1 UID: 0 PID: 3778 Comm: syz.3.1063 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 188.114128][ T3778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 188.114140][ T3778] Call Trace: [ 188.114146][ T3778] [ 188.114154][ T3778] __dump_stack+0x21/0x30 [ 188.114181][ T3778] dump_stack_lvl+0x140/0x1c0 [ 188.114203][ T3778] ? __cfi_dump_stack_lvl+0x10/0x10 [ 188.114225][ T3778] ? __kasan_kmalloc+0x96/0xb0 [ 188.114246][ T3778] dump_stack+0x19/0x20 [ 188.114267][ T3778] should_fail_ex+0x3c2/0x510 [ 188.114287][ T3778] should_failslab+0xac/0x100 [ 188.114308][ T3778] kmem_cache_alloc_noprof+0x42/0x410 [ 188.114325][ T3778] ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0 [ 188.114351][ T3778] __kvm_mmu_topup_memory_cache+0x1dd/0x7e0 [ 188.114374][ T3778] ? folio_mark_accessed+0x34b/0x620 [ 188.114397][ T3778] kvm_mmu_topup_memory_cache+0x24/0x30 [ 188.114420][ T3778] kvm_mmu_load+0xa1/0x2900 [ 188.114441][ T3778] ? __cfi__raw_spin_lock+0x10/0x10 [ 188.114459][ T3778] ? kvm_hv_setup_tsc_page+0x5f6/0xa80 [ 188.114482][ T3778] ? __kasan_check_write+0x18/0x20 [ 188.114500][ T3778] ? kvm_apic_has_interrupt+0x4e2/0x790 [ 188.114524][ T3778] vcpu_run+0x4d72/0x7830 [ 188.114547][ T3778] ? kvm_sched_clock_read+0x15/0x30 [ 188.114575][ T3778] ? signal_pending+0xc0/0xc0 [ 188.114595][ T3778] ? __kasan_check_write+0x18/0x20 [ 188.114611][ T3778] ? xfd_validate_state+0x68/0x140 [ 188.114634][ T3778] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 188.114655][ T3778] ? __kasan_check_write+0x18/0x20 [ 188.114671][ T3778] ? fpregs_mark_activate+0x68/0x160 [ 188.114697][ T3778] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 188.114708][ T3778] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 188.114720][ T3778] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 188.114733][ T3778] ? _parse_integer_limit+0x195/0x1e0 [ 188.114744][ T3778] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 188.114762][ T3778] ? kstrtoull+0x13b/0x1e0 [ 188.114780][ T3778] ? kstrtouint+0x78/0xf0 [ 188.114797][ T3778] ? ioctl_has_perm+0x1bc/0x500 [ 188.114814][ T3778] ? __asan_memcpy+0x5a/0x80 [ 188.114831][ T3778] ? ioctl_has_perm+0x408/0x500 [ 188.114841][ T3778] ? has_cap_mac_admin+0xd0/0xd0 [ 188.114850][ T3778] ? __kasan_check_write+0x18/0x20 [ 188.114860][ T3778] ? mutex_lock_killable+0x97/0x1d0 [ 188.114873][ T3778] ? __cfi_mutex_lock_killable+0x10/0x10 [ 188.114885][ T3778] ? proc_fail_nth_write+0x184/0x220 [ 188.114907][ T3778] kvm_vcpu_ioctl+0xa43/0x1000 [ 188.114925][ T3778] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 188.114942][ T3778] ? __cfi_vfs_write+0x10/0x10 [ 188.114961][ T3778] ? __kasan_check_write+0x18/0x20 [ 188.114974][ T3778] ? mutex_unlock+0x90/0x240 [ 188.114986][ T3778] ? __cfi_mutex_unlock+0x10/0x10 [ 188.114998][ T3778] ? bpf_lsm_file_ioctl+0xd/0x20 [ 188.115011][ T3778] ? security_file_ioctl+0x3e/0x110 [ 188.115025][ T3778] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 188.115037][ T3778] __se_sys_ioctl+0x132/0x1b0 [ 188.115058][ T3778] __x64_sys_ioctl+0x7f/0xa0 [ 188.115079][ T3778] x64_sys_call+0x1878/0x2ee0 [ 188.115095][ T3778] do_syscall_64+0x57/0xf0 [ 188.115111][ T3778] ? clear_bhb_loop+0x50/0xa0 [ 188.115123][ T3778] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 188.115135][ T3778] RIP: 0033:0x7f8ba0d9de59 [ 188.115145][ T3778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.115154][ T3778] RSP: 002b:00007f8ba1ce2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.115166][ T3778] RAX: ffffffffffffffda RBX: 00007f8ba1025fa0 RCX: 00007f8ba0d9de59 [ 188.115178][ T3778] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 188.115190][ T3778] RBP: 00007f8ba1ce2090 R08: 0000000000000000 R09: 0000000000000000 [ 188.115203][ T3778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.115214][ T3778] R13: 00007f8ba1026038 R14: 00007f8ba1025fa0 R15: 00007ffe1f42ab98 [ 188.115231][ T3778] [ 188.669842][ T3793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.678480][ T3793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.726269][ T11] plantronics 0003:047F:FFFF.0021: unknown main item tag 0xd [ 188.734480][ T11] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 188.743401][ T11] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 188.849746][ T66] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 188.857537][ T45] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 189.029569][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 189.035810][ T66] usb 1-1: unable to get BOS descriptor or descriptor too short [ 189.044353][ T66] usb 1-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 189.054824][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.065076][ T66] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 189.075979][ T45] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 189.085479][ T66] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 189.094945][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.103307][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.111412][ T45] usb 3-1: Product: syz [ 189.115567][ T45] usb 3-1: Manufacturer: syz [ 189.120358][ T66] usb 1-1: Product: ࠖ [ 189.124684][ T66] usb 1-1: Manufacturer: ခ [ 189.129329][ T66] usb 1-1: SerialNumber: ﬜⨚磎㌉駃撳糈ฏ寭⚶槂鴡縣⡞衾䏳᛿܂樥쉒恿đ픖쟑惋栘祉쁕大䏔䤏쒿⨭瘑㍁栱␌갿靖왲륨៥퇛े釾օ뙇᪮⍞嗖ምᚬ忄崅줙垅Ȅ밫㿫랲컈傐叠ᆣ쥠썼䀇䀺쩥퓕쵋棎棠䡘Ꝡ楇ᚂ猨⿼த俸籡䀻丅㚟춧镖픸縊緘푲⮱䴤꤯쾢 [ 189.160971][ T45] usb 3-1: SerialNumber: syz [ 189.166164][ T45] usb 3-1: config 0 descriptor?? [ 189.172002][ T45] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22 [ 189.207691][ T3798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.216365][ T3798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.225738][ T3798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.234482][ T3798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.373385][ T45] usb 3-1: USB disconnect, device number 100 [ 189.387757][ T3788] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 189.399805][ T66] usb 1-1: USB disconnect, device number 97 [ 190.002515][ T3811] FAULT_INJECTION: forcing a failure. [ 190.002515][ T3811] name failslab, interval 1, probability 0, space 0, times 0 [ 190.015777][ T3811] CPU: 0 UID: 0 PID: 3811 Comm: syz.2.1075 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 190.015797][ T3811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 190.015804][ T3811] Call Trace: [ 190.015810][ T3811] [ 190.015815][ T3811] __dump_stack+0x21/0x30 [ 190.015834][ T3811] dump_stack_lvl+0x140/0x1c0 [ 190.015847][ T3811] ? __cfi_dump_stack_lvl+0x10/0x10 [ 190.015861][ T3811] dump_stack+0x19/0x20 [ 190.015873][ T3811] should_fail_ex+0x3c2/0x510 [ 190.015885][ T3811] should_failslab+0xac/0x100 [ 190.015900][ T3811] kmem_cache_alloc_noprof+0x42/0x410 [ 190.015911][ T3811] ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0 [ 190.016015][ T3811] __kvm_mmu_topup_memory_cache+0x1dd/0x7e0 [ 190.016030][ T3811] ? folio_mark_accessed+0x34b/0x620 [ 190.016043][ T3811] kvm_mmu_topup_memory_cache+0x24/0x30 [ 190.016056][ T3811] kvm_mmu_load+0xa1/0x2900 [ 190.016069][ T3811] ? __cfi__raw_spin_lock+0x10/0x10 [ 190.016080][ T3811] ? kvm_hv_setup_tsc_page+0x5f6/0xa80 [ 190.016093][ T3811] ? __kasan_check_write+0x18/0x20 [ 190.016103][ T3811] ? kvm_apic_has_interrupt+0x4e2/0x790 [ 190.016116][ T3811] vcpu_run+0x4d72/0x7830 [ 190.016130][ T3811] ? kvm_sched_clock_read+0x15/0x30 [ 190.016148][ T3811] ? signal_pending+0xc0/0xc0 [ 190.016162][ T3811] ? __kasan_check_write+0x18/0x20 [ 190.016172][ T3811] ? xfd_validate_state+0x68/0x140 [ 190.016184][ T3811] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 190.016195][ T3811] ? __kasan_check_write+0x18/0x20 [ 190.016205][ T3811] ? fpregs_mark_activate+0x68/0x160 [ 190.016215][ T3811] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 190.016226][ T3811] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 190.016237][ T3811] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 190.016250][ T3811] ? _parse_integer_limit+0x195/0x1e0 [ 190.016260][ T3811] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 190.016273][ T3811] ? kstrtoull+0x13b/0x1e0 [ 190.016282][ T3811] ? kstrtouint+0x78/0xf0 [ 190.016291][ T3811] ? ioctl_has_perm+0x1bc/0x500 [ 190.016300][ T3811] ? __asan_memcpy+0x5a/0x80 [ 190.016310][ T3811] ? ioctl_has_perm+0x408/0x500 [ 190.016319][ T3811] ? has_cap_mac_admin+0xd0/0xd0 [ 190.016327][ T3811] ? __kasan_check_write+0x18/0x20 [ 190.016337][ T3811] ? mutex_lock_killable+0x97/0x1d0 [ 190.016349][ T3811] ? __cfi_mutex_lock_killable+0x10/0x10 [ 190.016361][ T3811] ? proc_fail_nth_write+0x184/0x220 [ 190.016376][ T3811] kvm_vcpu_ioctl+0xa43/0x1000 [ 190.016386][ T3811] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 190.016395][ T3811] ? __cfi_vfs_write+0x10/0x10 [ 190.016405][ T3811] ? __kasan_check_write+0x18/0x20 [ 190.016414][ T3811] ? mutex_unlock+0x90/0x240 [ 190.016428][ T3811] ? __cfi_mutex_unlock+0x10/0x10 [ 190.016442][ T3811] ? bpf_lsm_file_ioctl+0xd/0x20 [ 190.016461][ T3811] ? security_file_ioctl+0x3e/0x110 [ 190.016482][ T3811] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 190.016496][ T3811] __se_sys_ioctl+0x132/0x1b0 [ 190.016515][ T3811] __x64_sys_ioctl+0x7f/0xa0 [ 190.016526][ T3811] x64_sys_call+0x1878/0x2ee0 [ 190.016535][ T3811] do_syscall_64+0x57/0xf0 [ 190.016545][ T3811] ? clear_bhb_loop+0x50/0xa0 [ 190.016558][ T3811] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 190.016569][ T3811] RIP: 0033:0x7f045499de59 [ 190.016580][ T3811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.016588][ T3811] RSP: 002b:00007f04533e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.016600][ T3811] RAX: ffffffffffffffda RBX: 00007f0454c25fa0 RCX: 00007f045499de59 [ 190.016608][ T3811] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 190.016615][ T3811] RBP: 00007f04533e3090 R08: 0000000000000000 R09: 0000000000000000 [ 190.016621][ T3811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.016628][ T3811] R13: 00007f0454c26038 R14: 00007f0454c25fa0 R15: 00007fffddaa2d38 [ 190.016636][ T3811] [ 190.289507][ T66] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 190.440439][ T11] usb 2-1: USB disconnect, device number 109 [ 190.511439][ T36] audit: type=1400 audit(1782911945.294:436): avc: denied { map } for pid=3813 comm="syz.2.1076" path="/234" dev="tmpfs" ino=1247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 190.547925][ T3818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1078'. [ 190.560815][ T66] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.591331][ T66] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 190.603743][ T66] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 190.618857][ T36] audit: type=1400 audit(1782911945.394:437): avc: denied { setattr } for pid=295 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.623632][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 190.661793][ T66] usb 1-1: SerialNumber: syz [ 190.672015][ T66] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 190.680551][ T66] usb-storage 1-1:1.0: USB Mass Storage device detected [ 190.689985][ T66] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 190.871971][ T11] usb 1-1: USB disconnect, device number 98 [ 190.889528][ T356] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 191.040614][ T356] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 191.051878][ T356] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 191.078147][ T356] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 191.080002][ T3826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.092448][ T356] usb 2-1: config 0 interface 0 has no altsetting 0 [ 191.106949][ T356] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 191.116466][ T356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.128477][ T356] usb 2-1: config 0 descriptor?? [ 191.129702][ T3826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.134638][ T3822] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 191.757040][ T356] usbhid 2-1:0.0: can't add hid device: -71 [ 191.766576][ T356] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 191.780511][ T356] usb 2-1: USB disconnect, device number 110 [ 191.840519][ T3837] FAULT_INJECTION: forcing a failure. [ 191.840519][ T3837] name failslab, interval 1, probability 0, space 0, times 0 [ 191.859580][ T3837] CPU: 0 UID: 0 PID: 3837 Comm: syz.3.1087 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 191.859614][ T3837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 191.859637][ T3837] Call Trace: [ 191.859644][ T3837] [ 191.859652][ T3837] __dump_stack+0x21/0x30 [ 191.859680][ T3837] dump_stack_lvl+0x140/0x1c0 [ 191.859703][ T3837] ? __cfi_dump_stack_lvl+0x10/0x10 [ 191.859727][ T3837] dump_stack+0x19/0x20 [ 191.859747][ T3837] should_fail_ex+0x3c2/0x510 [ 191.859767][ T3837] should_failslab+0xac/0x100 [ 191.859787][ T3837] kmem_cache_alloc_noprof+0x42/0x410 [ 191.859805][ T3837] ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0 [ 191.859832][ T3837] __kvm_mmu_topup_memory_cache+0x1dd/0x7e0 [ 191.859856][ T3837] ? folio_mark_accessed+0x34b/0x620 [ 191.859879][ T3837] kvm_mmu_topup_memory_cache+0x24/0x30 [ 191.859903][ T3837] kvm_mmu_load+0xa1/0x2900 [ 191.859923][ T3837] ? __cfi__raw_spin_lock+0x10/0x10 [ 191.859941][ T3837] ? kvm_hv_setup_tsc_page+0x5f6/0xa80 [ 191.859972][ T3837] ? __kasan_check_write+0x18/0x20 [ 191.859988][ T3837] ? kvm_apic_has_interrupt+0x4e2/0x790 [ 191.860011][ T3837] vcpu_run+0x4d72/0x7830 [ 191.860035][ T3837] ? kvm_sched_clock_read+0x15/0x30 [ 191.860074][ T3837] ? signal_pending+0xc0/0xc0 [ 191.860095][ T3837] ? __kasan_check_write+0x18/0x20 [ 191.860112][ T3837] ? xfd_validate_state+0x68/0x140 [ 191.860135][ T3837] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 191.860154][ T3837] ? __kasan_check_write+0x18/0x20 [ 191.860170][ T3837] ? fpregs_mark_activate+0x68/0x160 [ 191.860189][ T3837] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 191.860210][ T3837] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 191.860230][ T3837] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 191.860252][ T3837] ? _parse_integer_limit+0x195/0x1e0 [ 191.860271][ T3837] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 191.860293][ T3837] ? kstrtoull+0x13b/0x1e0 [ 191.860311][ T3837] ? kstrtouint+0x78/0xf0 [ 191.860328][ T3837] ? ioctl_has_perm+0x1bc/0x500 [ 191.860345][ T3837] ? __asan_memcpy+0x5a/0x80 [ 191.860362][ T3837] ? ioctl_has_perm+0x408/0x500 [ 191.860378][ T3837] ? has_cap_mac_admin+0xd0/0xd0 [ 191.860395][ T3837] ? __kasan_check_write+0x18/0x20 [ 191.860412][ T3837] ? mutex_lock_killable+0x97/0x1d0 [ 191.860434][ T3837] ? __cfi_mutex_lock_killable+0x10/0x10 [ 191.860455][ T3837] ? proc_fail_nth_write+0x184/0x220 [ 191.860481][ T3837] kvm_vcpu_ioctl+0xa43/0x1000 [ 191.860499][ T3837] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 191.860517][ T3837] ? __cfi_vfs_write+0x10/0x10 [ 191.860535][ T3837] ? __kasan_check_write+0x18/0x20 [ 191.860551][ T3837] ? mutex_unlock+0x90/0x240 [ 191.860572][ T3837] ? __cfi_mutex_unlock+0x10/0x10 [ 191.860595][ T3837] ? bpf_lsm_file_ioctl+0xd/0x20 [ 191.860615][ T3837] ? security_file_ioctl+0x3e/0x110 [ 191.860640][ T3837] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 191.860657][ T3837] __se_sys_ioctl+0x132/0x1b0 [ 191.860678][ T3837] __x64_sys_ioctl+0x7f/0xa0 [ 191.860698][ T3837] x64_sys_call+0x1878/0x2ee0 [ 191.860714][ T3837] do_syscall_64+0x57/0xf0 [ 191.860732][ T3837] ? clear_bhb_loop+0x50/0xa0 [ 191.860753][ T3837] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 191.860773][ T3837] RIP: 0033:0x7f8ba0d9de59 [ 191.860789][ T3837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.860802][ T3837] RSP: 002b:00007f8ba1ce2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.860822][ T3837] RAX: ffffffffffffffda RBX: 00007f8ba1025fa0 RCX: 00007f8ba0d9de59 [ 191.860836][ T3837] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 191.860848][ T3837] RBP: 00007f8ba1ce2090 R08: 0000000000000000 R09: 0000000000000000 [ 191.860861][ T3837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.860872][ T3837] R13: 00007f8ba1026038 R14: 00007f8ba1025fa0 R15: 00007ffe1f42ab98 [ 191.860888][ T3837] [ 192.619506][ T66] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 192.720258][ T3869] syz.1.1100: vmalloc error: size 12288, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 192.736729][ T3869] CPU: 0 UID: 0 PID: 3869 Comm: syz.1.1100 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 192.736757][ T3869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 192.736769][ T3869] Call Trace: [ 192.736775][ T3869] [ 192.736783][ T3869] __dump_stack+0x21/0x30 [ 192.736812][ T3869] dump_stack_lvl+0x140/0x1c0 [ 192.736833][ T3869] ? __cfi_dump_stack_lvl+0x10/0x10 [ 192.736856][ T3869] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 192.736877][ T3869] dump_stack+0x19/0x20 [ 192.736898][ T3869] warn_alloc+0x1e7/0x2c0 [ 192.736921][ T3869] ? __cfi_warn_alloc+0x10/0x10 [ 192.736943][ T3869] ? __kmalloc_node_noprof+0x252/0x500 [ 192.736960][ T3869] ? __vmalloc_node_range_noprof+0x529/0x1300 [ 192.736987][ T3869] __vmalloc_node_range_noprof+0x100b/0x1300 [ 192.737014][ T3869] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 192.737038][ T3869] ? kasan_save_alloc_info+0x3a/0x50 [ 192.737062][ T3869] ? __kasan_slab_alloc+0x73/0x90 [ 192.737081][ T3869] ? arch_dup_task_struct+0x5b/0xe0 [ 192.737105][ T3869] ? __asan_memcpy+0x5a/0x80 [ 192.737123][ T3869] dup_task_struct+0x5d6/0xd80 [ 192.737143][ T3869] ? copy_process+0x57c/0x3350 [ 192.737163][ T3869] ? copy_process+0x3350/0x3350 [ 192.737227][ T3869] ? __kasan_check_write+0x18/0x20 [ 192.737245][ T3869] copy_process+0x57c/0x3350 [ 192.737266][ T3869] ? kasan_save_alloc_info+0x3a/0x50 [ 192.737290][ T3869] ? __cfi_copy_process+0x10/0x10 [ 192.737310][ T3869] ? __kmalloc_cache_noprof+0x23c/0x470 [ 192.737329][ T3869] ? __kasan_check_write+0x18/0x20 [ 192.737345][ T3869] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 192.737365][ T3869] vhost_task_create+0x1f7/0x3f0 [ 192.737384][ T3869] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 192.737405][ T3869] ? __cfi_vhost_task_create+0x10/0x10 [ 192.737424][ T3869] ? __cfi_vhost_task_fn+0x10/0x10 [ 192.737450][ T3869] ? __kasan_check_write+0x18/0x20 [ 192.737467][ T3869] ? mutex_lock+0x97/0x1d0 [ 192.737486][ T3869] ? __cfi_mutex_lock+0x10/0x10 [ 192.737506][ T3869] ? kernel_text_address+0xa9/0xe0 [ 192.737529][ T3869] kvm_mmu_post_init_vm+0x161/0x300 [ 192.737553][ T3869] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 192.737576][ T3869] ? _parse_integer_limit+0x195/0x1e0 [ 192.737596][ T3869] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 192.737617][ T3869] ? kstrtoull+0x13b/0x1e0 [ 192.737632][ T3869] ? kstrtouint+0x78/0xf0 [ 192.737649][ T3869] ? ioctl_has_perm+0x1bc/0x500 [ 192.737666][ T3869] ? __asan_memcpy+0x5a/0x80 [ 192.737683][ T3869] ? ioctl_has_perm+0x408/0x500 [ 192.737698][ T3869] ? has_cap_mac_admin+0xd0/0xd0 [ 192.737714][ T3869] ? __kasan_check_write+0x18/0x20 [ 192.737731][ T3869] ? mutex_lock_killable+0x97/0x1d0 [ 192.737752][ T3869] ? __cfi_mutex_lock_killable+0x10/0x10 [ 192.737772][ T3869] ? proc_fail_nth_write+0x184/0x220 [ 192.737797][ T3869] kvm_vcpu_ioctl+0xa43/0x1000 [ 192.737815][ T3869] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 192.737833][ T3869] ? __cfi_vfs_write+0x10/0x10 [ 192.737850][ T3869] ? __kasan_check_write+0x18/0x20 [ 192.737867][ T3869] ? mutex_unlock+0x90/0x240 [ 192.737887][ T3869] ? __cfi_mutex_unlock+0x10/0x10 [ 192.737910][ T3869] ? bpf_lsm_file_ioctl+0xd/0x20 [ 192.737930][ T3869] ? security_file_ioctl+0x3e/0x110 [ 192.737953][ T3869] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 192.737970][ T3869] __se_sys_ioctl+0x132/0x1b0 [ 192.737990][ T3869] __x64_sys_ioctl+0x7f/0xa0 [ 192.738010][ T3869] x64_sys_call+0x1878/0x2ee0 [ 192.738027][ T3869] do_syscall_64+0x57/0xf0 [ 192.738044][ T3869] ? clear_bhb_loop+0x50/0xa0 [ 192.738065][ T3869] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 192.738086][ T3869] RIP: 0033:0x7fedc979de59 [ 192.738103][ T3869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.738118][ T3869] RSP: 002b:00007fedca620028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.738135][ T3869] RAX: ffffffffffffffda RBX: 00007fedc9a25fa0 RCX: 00007fedc979de59 [ 192.738149][ T3869] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 192.738160][ T3869] RBP: 00007fedca620090 R08: 0000000000000000 R09: 0000000000000000 [ 192.738172][ T3869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.738184][ T3869] R13: 00007fedc9a26038 R14: 00007fedc9a25fa0 R15: 00007ffcf7034f08 [ 192.738200][ T3869] [ 192.738224][ T3869] Mem-Info: [ 192.779474][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 192.784687][ T3869] active_anon:53240 inactive_anon:17 isolated_anon:0 [ 192.784687][ T3869] active_file:9853 inactive_file:14673 isolated_file:0 [ 192.784687][ T3869] unevictable:0 dirty:50 writeback:0 [ 192.784687][ T3869] slab_reclaimable:5907 slab_unreclaimable:79980 [ 192.784687][ T3869] mapped:25884 shmem:16975 pagetables:1431 [ 192.784687][ T3869] sec_pagetables:0 bounce:0 [ 192.784687][ T3869] kernel_misc_reclaimable:0 [ 192.784687][ T3869] free:1465069 free_pcp:1873 free_cma:0 [ 192.811412][ T66] usb 1-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 192.812656][ T3869] Node 0 active_anon:206360kB inactive_anon:68kB active_file:39412kB inactive_file:58692kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103536kB dirty:200kB writeback:0kB shmem:67900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:49152kB writeback_tmp:0kB kernel_stack:7264kB pagetables:5724kB sec_pagetables:0kB all_unreclaimable? no [ 192.818117][ T66] usb 1-1: config 0 interface 0 has no altsetting 0 [ 192.824902][ T3869] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963396kB mlocked:0kB bounce:0kB free_pcp:5232kB local_pcp:5232kB free_cma:0kB [ 192.849720][ T66] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 192.861823][ T3869] lowmem_reserve[]: [ 192.879543][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.880538][ T3869] 0 [ 192.939890][ T66] usb 1-1: config 0 descriptor?? [ 192.941422][ T3869] 3921 3921 [ 193.337330][ T3869] Normal free:2909520kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:201520kB inactive_anon:68kB active_file:39412kB inactive_file:58692kB unevictable:0kB writepending:204kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:1948kB local_pcp:1496kB free_cma:0kB [ 193.370508][ T3869] lowmem_reserve[]: 0 0 0 [ 193.374961][ T3869] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 193.390980][ T3869] Normal: 933*4kB (UME) 1174*8kB (UME) 740*16kB (UME) 107*32kB (UME) 61*64kB (UME) 50*128kB (ME) 27*256kB (ME) 33*512kB (UME) 16*1024kB (UM) 14*2048kB (ME) 684*4096kB (M) = 2909220kB [ 193.420184][ T3869] 41539 total pagecache pages [ 193.437332][ T3869] 40 pages in swap cache [ 193.441664][ T3869] Free swap = 124184kB [ 193.445882][ T3869] Total swap = 124996kB [ 193.450248][ T3869] 2097051 pages RAM [ 193.454056][ T3869] 0 pages HighMem/MovableOnly [ 193.458785][ T3869] 352236 pages reserved [ 193.462975][ T3869] 0 pages cma reserved [ 193.468782][ T3869] Memory allocations: [ 193.473570][ T3869] 0 B 0 init/main.c:1477 func:do_initcalls [ 193.480981][ T3869] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 193.490641][ T3869] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 193.498835][ T3869] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 193.507126][ T3869] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 193.515330][ T3869] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 193.524757][ T3869] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 193.533455][ T3869] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 193.541965][ T3869] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 193.550140][ T3869] 0 B 0 init/initramfs.c:101 func:find_link [ 193.558014][ T66] usbhid 1-1:0.0: can't add hid device: -71 [ 193.565283][ T66] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 193.579186][ T66] usb 1-1: USB disconnect, device number 99 [ 193.929510][ T320] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 194.079476][ T320] usb 2-1: Using ep0 maxpacket: 16 [ 194.095145][ T320] usb 2-1: config 0 has no interfaces? [ 194.103419][ T320] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 194.117138][ T320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.126862][ T320] usb 2-1: Product: syz [ 194.132009][ T320] usb 2-1: Manufacturer: syz [ 194.138662][ T320] usb 2-1: SerialNumber: syz [ 194.147091][ T320] usb 2-1: config 0 descriptor?? [ 194.549492][ T654] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 194.699500][ T654] usb 1-1: Using ep0 maxpacket: 16 [ 194.706102][ T654] usb 1-1: config 32 has an invalid interface number: 64 but max is 0 [ 194.714967][ T654] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 194.725890][ T654] usb 1-1: config 32 has no interface number 0 [ 194.732534][ T654] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 194.742415][ T654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.954478][ T654] usb 1-1: USB disconnect, device number 100 [ 195.709518][ T654] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 195.860631][ T654] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 195.871791][ T654] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 195.883584][ T654] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 195.897517][ T654] usb 1-1: config 0 interface 0 has no altsetting 0 [ 195.904757][ T654] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 195.914156][ T654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.924212][ T654] usb 1-1: config 0 descriptor?? [ 195.932168][ T3907] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 196.542553][ T654] usbhid 1-1:0.0: can't add hid device: -71 [ 196.549618][ T654] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 196.563443][ T654] usb 1-1: USB disconnect, device number 101 [ 196.655681][ T356] usb 2-1: USB disconnect, device number 111 [ 197.039484][ T356] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 197.201132][ T356] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 197.219531][ T356] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 197.240866][ T356] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.259480][ T356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.267541][ T356] usb 2-1: Product: syz [ 197.279675][ T356] usb 2-1: Manufacturer: syz [ 197.289485][ T356] usb 2-1: SerialNumber: syz [ 197.409488][ T654] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 197.569530][ T654] usb 1-1: Using ep0 maxpacket: 32 [ 197.575029][ T36] audit: type=1400 audit(1782911952.354:438): avc: granted { setsecparam } for pid=3935 comm="syz.3.1124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 197.597463][ T654] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 197.606775][ T654] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.614841][ T654] usb 1-1: Product: syz [ 197.619299][ T654] usb 1-1: Manufacturer: syz [ 197.624574][ T654] usb 1-1: SerialNumber: syz [ 197.674610][ T356] cdc_ncm 2-1:1.0: bind() failure [ 197.682361][ T356] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 197.689415][ T356] cdc_ncm 2-1:1.1: bind() failure [ 197.702593][ T356] usb 2-1: USB disconnect, device number 112 [ 198.041764][ T654] usb 1-1: selecting invalid altsetting 1 [ 198.060129][ T654] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 198.070938][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 198.104318][ T3939] syzkaller1: entered promiscuous mode [ 198.110034][ T3939] syzkaller1: entered allmulticast mode [ 198.140610][ T3939] kvm: vcpu 260: requested lapic timer restore with starting count register 0x390=8394754 (67158032 ns) > initial count (640 ns). Using initial count to start timer. [ 198.226969][ T3941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'. [ 198.258019][ T356] usb 1-1: USB disconnect, device number 102 [ 198.363309][ T3954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.372062][ T3954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.469526][ T654] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 198.641495][ T654] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 198.654072][ T654] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 198.666891][ T654] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.677363][ T654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.685821][ T654] usb 2-1: Product: syz [ 198.690790][ T654] usb 2-1: Manufacturer: syz [ 198.695411][ T654] usb 2-1: SerialNumber: syz [ 198.779572][ T66] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 198.904472][ T3968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.914001][ T3968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.914548][ T654] cdc_ncm 2-1:1.0: bind() failure [ 198.935820][ T66] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 198.942579][ T654] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 198.959503][ T66] usb 1-1: config 0 has no interface number 0 [ 198.959743][ T654] cdc_ncm 2-1:1.1: bind() failure [ 198.966565][ T66] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 198.990491][ T66] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 198.999760][ T654] usb 2-1: USB disconnect, device number 113 [ 199.001824][ T66] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 199.020844][ T66] usb 1-1: config 0 interface 2 has no altsetting 0 [ 199.029389][ T66] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 199.038744][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.055169][ T66] usb 1-1: Product: syz [ 199.059631][ T66] usb 1-1: Manufacturer: syz [ 199.064437][ T66] usb 1-1: SerialNumber: syz [ 199.070348][ T66] usb 1-1: config 0 descriptor?? [ 199.076085][ T3965] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 199.083522][ T3965] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 199.296062][ T66] usb 1-1: USB disconnect, device number 103 [ 199.311291][ T1065] udevd[1065]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 199.669296][ T36] audit: type=1400 audit(1782911954.444:439): avc: denied { ioctl } for pid=3982 comm="syz.3.1143" path="socket:[31551]" dev="sockfs" ino=31551 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 199.939475][ T315] usb 2-1: new low-speed USB device number 114 using dummy_hcd [ 200.089552][ T315] usb 2-1: device descriptor read/64, error -71 [ 200.183083][ T4005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.198790][ T4005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.209478][ T66] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 200.339056][ T315] usb 2-1: device descriptor read/64, error -71 [ 200.379512][ T66] usb 1-1: Using ep0 maxpacket: 32 [ 200.390187][ T66] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 200.398554][ T66] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 200.407473][ T66] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 200.416565][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 200.426794][ T66] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 200.437339][ T66] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 200.450953][ T66] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 200.460286][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.469255][ T66] usb 1-1: config 0 descriptor?? [ 200.579497][ T315] usb 2-1: new low-speed USB device number 115 using dummy_hcd [ 200.678670][ T66] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 104 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 200.720607][ T315] usb 2-1: device descriptor read/64, error -71 [ 200.876124][ T4000] SELinux: Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped). [ 200.889475][ T36] audit: type=1400 audit(1782911955.664:440): avc: denied { relabelto } for pid=3999 comm="syz.0.1149" name="lp0" dev="devtmpfs" ino=1262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:scanner_device_t:s0" [ 200.923281][ T356] usb 1-1: USB disconnect, device number 104 [ 200.933419][ T356] usblp0: removed [ 200.945064][ T36] audit: type=1400 audit(1782911955.664:441): avc: denied { associate } for pid=3999 comm="syz.0.1149" name="lp0" dev="devtmpfs" ino=1262 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:scanner_device_t:s0" [ 200.975202][ T36] audit: type=1400 audit(1782911955.754:442): avc: denied { bind } for pid=4013 comm="syz.0.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.995940][ T315] usb 2-1: device descriptor read/64, error -71 [ 201.029523][ T36] audit: type=1400 audit(1782911955.784:443): avc: denied { getopt } for pid=4013 comm="syz.0.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 201.109578][ T315] usb usb2-port1: attempt power cycle [ 201.237573][ T4030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.246932][ T4030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.449520][ T315] usb 2-1: new low-speed USB device number 116 using dummy_hcd [ 201.490576][ T315] usb 2-1: device descriptor read/8, error -71 [ 201.630497][ T315] usb 2-1: device descriptor read/8, error -71 [ 201.869479][ T315] usb 2-1: new low-speed USB device number 117 using dummy_hcd [ 201.902659][ T315] usb 2-1: device descriptor read/8, error -71 [ 202.040464][ T315] usb 2-1: device descriptor read/8, error -71 [ 202.160406][ T315] usb usb2-port1: unable to enumerate USB device [ 202.726546][ T4091] FAULT_INJECTION: forcing a failure. [ 202.726546][ T4091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.762243][ T4091] CPU: 1 UID: 0 PID: 4091 Comm: syz.1.1181 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 202.762276][ T4091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 202.762288][ T4091] Call Trace: [ 202.762295][ T4091] [ 202.762303][ T4091] __dump_stack+0x21/0x30 [ 202.762333][ T4091] dump_stack_lvl+0x140/0x1c0 [ 202.762355][ T4091] ? __cfi_dump_stack_lvl+0x10/0x10 [ 202.762378][ T4091] ? ioctl_has_perm+0x39a/0x500 [ 202.762395][ T4091] dump_stack+0x19/0x20 [ 202.762416][ T4091] should_fail_ex+0x3c2/0x510 [ 202.762435][ T4091] should_fail+0xf/0x20 [ 202.762452][ T4091] should_fail_usercopy+0x1e/0x30 [ 202.762472][ T4091] _copy_from_user+0x20/0xa0 [ 202.762494][ T4091] vhost_dev_ioctl+0x314/0x11b0 [ 202.762520][ T4091] ? selinux_file_ioctl+0x732/0x1480 [ 202.762545][ T4091] ? __cfi_vhost_dev_ioctl+0x10/0x10 [ 202.762568][ T4091] ? mutex_lock+0x97/0x1d0 [ 202.762598][ T4091] ? __cfi_mutex_lock+0x10/0x10 [ 202.762618][ T4091] ? __cfi_vfs_write+0x10/0x10 [ 202.762636][ T4091] vhost_vsock_dev_ioctl+0x239/0xdc0 [ 202.762659][ T4091] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 202.762682][ T4091] ? bpf_lsm_file_ioctl+0xd/0x20 [ 202.762704][ T4091] ? security_file_ioctl+0x3e/0x110 [ 202.762728][ T4091] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 202.762749][ T4091] __se_sys_ioctl+0x132/0x1b0 [ 202.762770][ T4091] __x64_sys_ioctl+0x7f/0xa0 [ 202.762790][ T4091] x64_sys_call+0x1878/0x2ee0 [ 202.762804][ T4091] do_syscall_64+0x57/0xf0 [ 202.762821][ T4091] ? clear_bhb_loop+0x50/0xa0 [ 202.762842][ T4091] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 202.762863][ T4091] RIP: 0033:0x7fedc979de59 [ 202.762880][ T4091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.762895][ T4091] RSP: 002b:00007fedca620028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.762917][ T4091] RAX: ffffffffffffffda RBX: 00007fedc9a25fa0 RCX: 00007fedc979de59 [ 202.762931][ T4091] RDX: 00002000000001c0 RSI: 000000004008af03 RDI: 0000000000000003 [ 202.762943][ T4091] RBP: 00007fedca620090 R08: 0000000000000000 R09: 0000000000000000 [ 202.762955][ T4091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.762967][ T4091] R13: 00007fedc9a26038 R14: 00007fedc9a25fa0 R15: 00007ffcf7034f08 [ 202.762982][ T4091] [ 203.041319][ T4102] syzkaller1: entered promiscuous mode [ 203.046831][ T4102] syzkaller1: entered allmulticast mode [ 203.054052][ T4102] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 203.233039][ T4121] FAULT_INJECTION: forcing a failure. [ 203.233039][ T4121] name failslab, interval 1, probability 0, space 0, times 0 [ 203.246021][ T4121] CPU: 0 UID: 0 PID: 4121 Comm: syz.1.1191 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 203.246053][ T4121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 203.246064][ T4121] Call Trace: [ 203.246072][ T4121] [ 203.246080][ T4121] __dump_stack+0x21/0x30 [ 203.246109][ T4121] dump_stack_lvl+0x140/0x1c0 [ 203.246131][ T4121] ? __cfi_dump_stack_lvl+0x10/0x10 [ 203.246155][ T4121] dump_stack+0x19/0x20 [ 203.246176][ T4121] should_fail_ex+0x3c2/0x510 [ 203.246195][ T4121] should_failslab+0xac/0x100 [ 203.246217][ T4121] __kmalloc_node_noprof+0x69/0x500 [ 203.246235][ T4121] ? __kvmalloc_node_noprof+0x128/0x300 [ 203.246261][ T4121] __kvmalloc_node_noprof+0x128/0x300 [ 203.246285][ T4121] ? has_cap_mac_admin+0xd0/0xd0 [ 203.246302][ T4121] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 203.246327][ T4121] ? __kasan_check_write+0x18/0x20 [ 203.246344][ T4121] vhost_dev_ioctl+0xc31/0x11b0 [ 203.246370][ T4121] ? selinux_file_ioctl+0x732/0x1480 [ 203.246395][ T4121] ? __cfi_vhost_dev_ioctl+0x10/0x10 [ 203.246419][ T4121] ? mutex_lock+0x97/0x1d0 [ 203.246440][ T4121] ? __cfi_mutex_lock+0x10/0x10 [ 203.246460][ T4121] ? __cfi_vfs_write+0x10/0x10 [ 203.246479][ T4121] vhost_vsock_dev_ioctl+0x239/0xdc0 [ 203.246501][ T4121] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 203.246522][ T4121] ? bpf_lsm_file_ioctl+0xd/0x20 [ 203.246560][ T4121] ? security_file_ioctl+0x3e/0x110 [ 203.246584][ T4121] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 203.246605][ T4121] __se_sys_ioctl+0x132/0x1b0 [ 203.246627][ T4121] __x64_sys_ioctl+0x7f/0xa0 [ 203.246645][ T4121] x64_sys_call+0x1878/0x2ee0 [ 203.246668][ T4121] do_syscall_64+0x57/0xf0 [ 203.246686][ T4121] ? clear_bhb_loop+0x50/0xa0 [ 203.246707][ T4121] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 203.246727][ T4121] RIP: 0033:0x7fedc979de59 [ 203.246744][ T4121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.246759][ T4121] RSP: 002b:00007fedca620028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.246780][ T4121] RAX: ffffffffffffffda RBX: 00007fedc9a25fa0 RCX: 00007fedc979de59 [ 203.246794][ T4121] RDX: 00002000000001c0 RSI: 000000004008af03 RDI: 0000000000000003 [ 203.246807][ T4121] RBP: 00007fedca620090 R08: 0000000000000000 R09: 0000000000000000 [ 203.246819][ T4121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.246830][ T4121] R13: 00007fedc9a26038 R14: 00007fedc9a25fa0 R15: 00007ffcf7034f08 [ 203.246846][ T4121] [ 203.249101][ T4118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.515471][ T4118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.787544][ T4134] syzkaller1: entered promiscuous mode [ 203.795489][ T4134] syzkaller1: entered allmulticast mode [ 203.809866][ T4134] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 204.065092][ T4138] overlayfs: missing 'lowerdir' [ 204.119561][ T45] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 204.294059][ T4150] FAULT_INJECTION: forcing a failure. [ 204.294059][ T4150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.299501][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 204.307986][ T4150] CPU: 0 UID: 0 PID: 4150 Comm: syz.3.1201 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 204.308017][ T4150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 204.308029][ T4150] Call Trace: [ 204.308035][ T4150] [ 204.308043][ T4150] __dump_stack+0x21/0x30 [ 204.308069][ T4150] dump_stack_lvl+0x140/0x1c0 [ 204.308091][ T4150] ? __cfi_dump_stack_lvl+0x10/0x10 [ 204.308112][ T4150] ? __kmalloc_node_noprof+0x252/0x500 [ 204.308131][ T4150] ? __kvmalloc_node_noprof+0x128/0x300 [ 204.308154][ T4150] dump_stack+0x19/0x20 [ 204.308175][ T4150] should_fail_ex+0x3c2/0x510 [ 204.308195][ T4150] should_fail+0xf/0x20 [ 204.308210][ T4150] should_fail_usercopy+0x1e/0x30 [ 204.308229][ T4150] _copy_from_user+0x20/0xa0 [ 204.308249][ T4150] vhost_dev_ioctl+0xc94/0x11b0 [ 204.308273][ T4150] ? selinux_file_ioctl+0x732/0x1480 [ 204.308297][ T4150] ? __cfi_vhost_dev_ioctl+0x10/0x10 [ 204.308319][ T4150] ? mutex_lock+0x97/0x1d0 [ 204.308339][ T4150] ? __cfi_mutex_lock+0x10/0x10 [ 204.308362][ T4150] ? __cfi_vfs_write+0x10/0x10 [ 204.308379][ T4150] vhost_vsock_dev_ioctl+0x239/0xdc0 [ 204.308401][ T4150] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 204.308423][ T4150] ? bpf_lsm_file_ioctl+0xd/0x20 [ 204.308443][ T4150] ? security_file_ioctl+0x3e/0x110 [ 204.308470][ T4150] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 204.308491][ T4150] __se_sys_ioctl+0x132/0x1b0 [ 204.308511][ T4150] __x64_sys_ioctl+0x7f/0xa0 [ 204.308529][ T4150] x64_sys_call+0x1878/0x2ee0 [ 204.308544][ T4150] do_syscall_64+0x57/0xf0 [ 204.308561][ T4150] ? clear_bhb_loop+0x50/0xa0 [ 204.308581][ T4150] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 204.308601][ T4150] RIP: 0033:0x7f8ba0d9de59 [ 204.308617][ T4150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.308631][ T4150] RSP: 002b:00007f8ba1ce2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.308651][ T4150] RAX: ffffffffffffffda RBX: 00007f8ba1025fa0 RCX: 00007f8ba0d9de59 [ 204.308665][ T4150] RDX: 00002000000001c0 RSI: 000000004008af03 RDI: 0000000000000003 [ 204.308676][ T4150] RBP: 00007f8ba1ce2090 R08: 0000000000000000 R09: 0000000000000000 [ 204.308687][ T4150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.308698][ T4150] R13: 00007f8ba1026038 R14: 00007f8ba1025fa0 R15: 00007ffe1f42ab98 [ 204.308826][ T4150] [ 204.570192][ T45] usb 2-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 204.589467][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 204.596197][ T45] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 204.609495][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.627015][ T45] usb 2-1: config 0 descriptor?? [ 204.716274][ T4159] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 204.750858][ T4161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.779612][ T4161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.791257][ T4161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.800702][ T4161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.035794][ T45] petalynx 0003:18B1:0037.0022: unknown main item tag 0xd [ 205.043189][ T45] petalynx 0003:18B1:0037.0022: unknown main item tag 0x0 [ 205.050583][ T45] petalynx 0003:18B1:0037.0022: unknown main item tag 0x1 [ 205.058047][ T45] petalynx 0003:18B1:0037.0022: unknown main item tag 0x0 [ 205.065683][ T45] petalynx 0003:18B1:0037.0022: unknown main item tag 0x0 [ 205.073107][ T45] petalynx 0003:18B1:0037.0022: unknown main item tag 0x3 [ 205.080709][ T45] petalynx 0003:18B1:0037.0022: unknown main item tag 0x6 [ 205.089768][ T45] petalynx 0003:18B1:0037.0022: hidraw0: USB HID v0.09 Device [HID 18b1:0037] on usb-dummy_hcd.1-1/input0 [ 205.241930][ T11] usb 2-1: USB disconnect, device number 118 [ 205.340701][ T36] audit: type=1400 audit(1782911960.124:444): avc: denied { setopt } for pid=4163 comm="syz.3.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 205.796796][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.811219][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.818604][ T4175] bridge_slave_0: entered allmulticast mode [ 205.825758][ T4175] bridge_slave_0: entered promiscuous mode [ 205.832861][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.840306][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.847477][ T4175] bridge_slave_1: entered allmulticast mode [ 205.849491][ T45] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 205.854367][ T4175] bridge_slave_1: entered promiscuous mode [ 205.913596][ T332] bridge_slave_1: left allmulticast mode [ 205.921051][ T332] bridge_slave_1: left promiscuous mode [ 205.930740][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.950267][ T332] bridge_slave_0: left allmulticast mode [ 205.956123][ T332] bridge_slave_0: left promiscuous mode [ 205.969578][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.030531][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 206.049559][ T45] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 206.075895][ T45] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 206.102620][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 206.117990][ T332] veth1_macvtap: left promiscuous mode [ 206.123704][ T45] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 206.133308][ T332] veth0_vlan: left promiscuous mode [ 206.138984][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.166025][ T45] usb 1-1: config 0 descriptor?? [ 206.177365][ T4173] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 206.213802][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.221068][ T4175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.228704][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.236144][ T4175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.271754][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.285016][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.288403][ T4187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.301665][ T4187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.312844][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.319973][ T412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.342245][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.349630][ T410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.368289][ T4175] veth0_vlan: entered promiscuous mode [ 206.385694][ T4175] veth1_macvtap: entered promiscuous mode [ 206.419194][ T4199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.433715][ T4199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.473924][ T4199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.495143][ T4199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.548916][ T332] ------------[ cut here ]------------ [ 206.554499][ T332] WARNING: CPU: 1 PID: 332 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 206.564979][ T332] Modules linked in: [ 206.568909][ T332] CPU: 1 UID: 0 PID: 332 Comm: kworker/u8:5 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 206.580627][ T332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 206.590940][ T332] Workqueue: netns cleanup_net [ 206.595922][ T332] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 206.602218][ T332] Code: e8 71 06 d7 fc 4b 83 3c 3e 00 75 19 e8 05 53 7e fc 49 81 ff f8 07 00 00 74 1b e8 f7 52 7e fc 49 83 c7 08 eb c9 e8 ec 52 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 206.604299][ T432] Bluetooth: hci0: Frame reassembly failed (-84) [ 206.622141][ T332] RSP: 0018:ffffc9000c0dfb90 EFLAGS: 00010293 [ 206.634767][ T332] RAX: ffffffff85091ce4 RBX: ffff888130392380 RCX: ffff888107360000 [ 206.643232][ T332] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888100e80000 [ 206.651359][ T332] RBP: ffffc9000c0dfbb0 R08: ffffffff87d419e7 R09: 1ffffffff0fa833c [ 206.659346][ T332] R10: dffffc0000000000 R11: fffffbfff0fa833d R12: dffffc0000000000 [ 206.667361][ T332] R13: dffffc0000000000 R14: ffff888100e80000 R15: 0000000000000000 [ 206.675544][ T332] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 206.684814][ T332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.691419][ T332] CR2: 000000110c31858d CR3: 0000000113802000 CR4: 00000000003526b0 [ 206.699400][ T332] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 206.707720][ T332] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 206.715971][ T332] Call Trace: [ 206.719751][ T332] [ 206.722684][ T332] cleanup_net+0x6bd/0xc90 [ 206.727211][ T332] ? __cfi_cleanup_net+0x10/0x10 [ 206.732312][ T332] ? kick_pool+0xb9/0x540 [ 206.736975][ T332] process_scheduled_works+0x7f7/0x1060 [ 206.742867][ T332] worker_thread+0xc99/0x13f0 [ 206.747823][ T332] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 206.753678][ T332] ? __kasan_check_read+0x15/0x20 [ 206.758705][ T332] kthread+0x2c7/0x360 [ 206.762789][ T332] ? __cfi_worker_thread+0x10/0x10 [ 206.768009][ T332] ? __cfi_kthread+0x10/0x10 [ 206.772621][ T332] ret_from_fork+0x67/0xa0 [ 206.777105][ T332] ? __cfi_kthread+0x10/0x10 [ 206.781735][ T332] ret_from_fork_asm+0x1a/0x30 [ 206.786501][ T332] [ 206.789581][ T332] ---[ end trace 0000000000000000 ]--- [ 206.795317][ T332] ------------[ cut here ]------------ [ 206.797903][ T45] itetech 0003:06CB:73F6.0023: unknown main item tag 0x2 [ 206.800887][ T332] WARNING: CPU: 0 PID: 332 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 206.800932][ T332] Modules linked in: [ 206.800946][ T332] CPU: 0 UID: 0 PID: 332 Comm: kworker/u8:5 Tainted: G W syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 206.800971][ T332] Tainted: [W]=WARN [ 206.800978][ T332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 206.808141][ T45] itetech 0003:06CB:73F6.0023: unknown main item tag 0x1 [ 206.818266][ T332] Workqueue: netns cleanup_net [ 206.822153][ T45] itetech 0003:06CB:73F6.0023: unknown main item tag 0x0 [ 206.835433][ T332] [ 206.835446][ T332] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 206.839263][ T45] itetech 0003:06CB:73F6.0023: unknown main item tag 0x7 [ 206.849567][ T332] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 b0 52 7e fc 49 81 ff f8 07 00 00 74 1b e8 a2 52 7e fc 49 83 c7 08 eb c5 e8 97 52 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 87 52 7e fc 5b 41 5c 41 5e 41 [ 206.849583][ T332] RSP: 0018:ffffc9000c0dfb90 EFLAGS: 00010293 [ 206.849599][ T332] RAX: ffffffff85091d39 RBX: ffff888100e80800 RCX: ffff888107360000 [ 206.849611][ T332] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888100e80808 [ 206.849622][ T332] RBP: ffffc9000c0dfbb0 R08: ffffffff87d419e7 R09: 1ffffffff0fa833c [ 206.849634][ T332] R10: dffffc0000000000 R11: fffffbfff0fa833d R12: dffffc0000000000 [ 206.849648][ T332] R13: dffffc0000000000 R14: ffff888100e80000 R15: 0000000000000008 [ 206.849661][ T332] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 206.859665][ T45] itetech 0003:06CB:73F6.0023: unknown main item tag 0x2 [ 206.861537][ T332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.868628][ T45] itetech 0003:06CB:73F6.0023: unknown main item tag 0x0 [ 206.870896][ T332] CR2: 0000000000000000 CR3: 0000000101eb2000 CR4: 00000000003526b0 [ 206.870915][ T332] DR0: 000000000000002a DR1: 0000000000000003 DR2: 0000000000000003 [ 206.870927][ T332] DR3: ffffffffffff0000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 206.870939][ T332] Call Trace: [ 206.870945][ T332] [ 206.870954][ T332] cleanup_net+0x6bd/0xc90 [ 206.877590][ T45] itetech 0003:06CB:73F6.0023: unknown main item tag 0x0 [ 206.884135][ T332] ? __cfi_cleanup_net+0x10/0x10 [ 206.911917][ T45] itetech 0003:06CB:73F6.0023: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.0-1/input0 [ 206.918027][ T332] ? kick_pool+0xb9/0x540 [ 206.918055][ T332] process_scheduled_works+0x7f7/0x1060 [ 206.918077][ T332] worker_thread+0xc99/0x13f0 [ 206.929598][ T45] usb 1-1: USB disconnect, device number 105 [ 206.934733][ T332] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 206.942989][ T565] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 206.951101][ T332] ? __kasan_check_read+0x15/0x20 [ 206.977152][ T4219] fido_id[4219]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 206.981538][ T332] kthread+0x2c7/0x360 [ 206.981567][ T332] ? __cfi_worker_thread+0x10/0x10 [ 207.104126][ T332] ? __cfi_kthread+0x10/0x10 [ 207.108722][ T332] ret_from_fork+0x67/0xa0 [ 207.113196][ T332] ? __cfi_kthread+0x10/0x10 [ 207.117796][ T332] ret_from_fork_asm+0x1a/0x30 [ 207.122621][ T332] [ 207.125814][ T332] ---[ end trace 0000000000000000 ]--- [ 207.129475][ T565] usb 2-1: Using ep0 maxpacket: 16 [ 207.142450][ T565] usb 2-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 207.157362][ T332] ------------[ cut here ]------------ [ 207.162945][ T332] WARNING: CPU: 1 PID: 332 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 207.172570][ T332] Modules linked in: [ 207.176469][ T332] CPU: 1 UID: 0 PID: 332 Comm: kworker/u8:5 Tainted: G W syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 207.190120][ T332] Tainted: [W]=WARN [ 207.194032][ T332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 207.204198][ T332] Workqueue: netns cleanup_net [ 207.209007][ T332] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 207.214794][ T332] Code: 3c 20 00 74 08 48 89 df e8 5f c6 f1 fc 48 8b 3b e8 77 b7 dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 e2 12 99 fc <0f> 0b e9 b0 fd ff ff e8 d6 12 99 fc 0f 0b e9 18 fe ff ff e8 ca 12 [ 207.234509][ T332] RSP: 0018:ffffc9000c0dfb70 EFLAGS: 00010293 [ 207.240678][ T332] RAX: ffffffff84ee5cee RBX: ffff888130392380 RCX: ffff888107360000 [ 207.248655][ T332] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888107360000 [ 207.256930][ T332] RBP: ffffc9000c0dfb98 R08: ffffffff87d419e7 R09: 1ffffffff0fa833c [ 207.265144][ T332] R10: dffffc0000000000 R11: fffffbfff0fa833d R12: 1ffffffff0fa8090 [ 207.273422][ T332] R13: dffffc0000000000 R14: ffff888130392f80 R15: dffffc0000000000 [ 207.281522][ T332] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 207.290481][ T332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.297246][ T332] CR2: 000055ff05bf1eb8 CR3: 0000000101eb2000 CR4: 00000000003526b0 [ 207.305248][ T332] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 207.313252][ T332] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 207.321256][ T332] Call Trace: [ 207.324539][ T332] [ 207.327463][ T332] xfrm_net_exit+0x31/0x80 [ 207.332066][ T332] cleanup_net+0x6bd/0xc90 [ 207.336543][ T332] ? __cfi_cleanup_net+0x10/0x10 [ 207.341518][ T332] ? kick_pool+0xb9/0x540 [ 207.345945][ T332] process_scheduled_works+0x7f7/0x1060 [ 207.351538][ T332] worker_thread+0xc99/0x13f0 [ 207.356220][ T332] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 207.361998][ T332] ? __kasan_check_read+0x15/0x20 [ 207.367030][ T332] kthread+0x2c7/0x360 [ 207.371126][ T332] ? __cfi_worker_thread+0x10/0x10 [ 207.376245][ T332] ? __cfi_kthread+0x10/0x10 [ 207.380875][ T332] ret_from_fork+0x67/0xa0 [ 207.385315][ T332] ? __cfi_kthread+0x10/0x10 [ 207.390052][ T332] ret_from_fork_asm+0x1a/0x30 [ 207.394991][ T332] [ 207.397998][ T332] ---[ end trace 0000000000000000 ]--- [ 207.404179][ T565] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.410923][ T565] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 207.414996][ T332] ------------[ cut here ]------------ [ 207.420044][ T565] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.425654][ T332] WARNING: CPU: 0 PID: 332 at net/xfrm/xfrm_state.c:3224 xfrm_state_fini+0x2e2/0x310 [ 207.437791][ T565] usb 2-1: config 0 descriptor?? [ 207.443276][ T332] Modules linked in: [ 207.443295][ T332] CPU: 0 UID: 0 PID: 332 Comm: kworker/u8:5 Tainted: G W syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 207.465676][ T332] Tainted: [W]=WARN [ 207.469498][ T332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 207.479696][ T332] Workqueue: netns cleanup_net [ 207.484823][ T332] RIP: 0010:xfrm_state_fini+0x2e2/0x310 [ 207.490624][ T332] Code: cc e8 e2 12 99 fc 0f 0b e9 b0 fd ff ff e8 d6 12 99 fc 0f 0b e9 18 fe ff ff e8 ca 12 99 fc 0f 0b e9 8c fe ff ff e8 be 12 99 fc <0f> 0b e9 f9 fe ff ff e8 b2 12 99 fc 0f 0b e9 66 ff ff ff 89 f9 80 [ 207.510468][ T332] RSP: 0018:ffffc9000c0dfb70 EFLAGS: 00010293 [ 207.516544][ T332] RAX: ffffffff84ee5d12 RBX: ffff888130392380 RCX: ffff888107360000 [ 207.524553][ T332] RDX: 0000000000000000 RSI: ffff88810de97280 RDI: ffff8881000418c0 [ 207.532552][ T332] RBP: ffffc9000c0dfb98 R08: 00000000468f7e18 R09: 00000000e5ffff83 [ 207.540571][ T332] R10: 000000000000000d R11: ffffffff81759b00 R12: ffff88810de97c00 [ 207.548906][ T332] R13: 1ffff110260725f3 R14: 0000000000000040 R15: ffff888130392f98 [ 207.557172][ T332] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 207.566329][ T332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.573000][ T332] CR2: 00005555667634e8 CR3: 0000000106e8c000 CR4: 00000000003526b0 [ 207.581095][ T332] DR0: 000000000000002a DR1: 0000000000000003 DR2: 0000000000000003 [ 207.589077][ T332] DR3: ffffffffffff0000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 207.597079][ T332] Call Trace: [ 207.600481][ T332] [ 207.603436][ T332] xfrm_net_exit+0x31/0x80 [ 207.607873][ T332] cleanup_net+0x6bd/0xc90 [ 207.612774][ T332] ? __cfi_cleanup_net+0x10/0x10 [ 207.617724][ T332] ? kick_pool+0xb9/0x540 [ 207.622104][ T332] process_scheduled_works+0x7f7/0x1060 [ 207.627751][ T332] worker_thread+0xc99/0x13f0 [ 207.632643][ T332] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 207.638374][ T332] ? __kasan_check_read+0x15/0x20 [ 207.643531][ T332] kthread+0x2c7/0x360 [ 207.647770][ T332] ? __cfi_worker_thread+0x10/0x10 [ 207.653050][ T332] ? __cfi_kthread+0x10/0x10 [ 207.657758][ T332] ret_from_fork+0x67/0xa0 [ 207.662320][ T332] ? __cfi_kthread+0x10/0x10 [ 207.666926][ T332] ret_from_fork_asm+0x1a/0x30 [ 207.671840][ T332] [ 207.674866][ T332] ---[ end trace 0000000000000000 ]--- [ 207.680648][ T332] ------------[ cut here ]------------ [ 207.686174][ T332] WARNING: CPU: 1 PID: 332 at net/xfrm/xfrm_state.c:3226 xfrm_state_fini+0x2ee/0x310 [ 207.695794][ T332] Modules linked in: [ 207.699820][ T332] CPU: 1 UID: 0 PID: 332 Comm: kworker/u8:5 Tainted: G W syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 207.712981][ T332] Tainted: [W]=WARN [ 207.716883][ T332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 207.727254][ T332] Workqueue: netns cleanup_net [ 207.732161][ T332] RIP: 0010:xfrm_state_fini+0x2ee/0x310 [ 207.737823][ T332] Code: ff e8 d6 12 99 fc 0f 0b e9 18 fe ff ff e8 ca 12 99 fc 0f 0b e9 8c fe ff ff e8 be 12 99 fc 0f 0b e9 f9 fe ff ff e8 b2 12 99 fc <0f> 0b e9 66 ff ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 8e fd ff [ 207.757920][ T332] RSP: 0018:ffffc9000c0dfb70 EFLAGS: 00010293 [ 207.764139][ T332] RAX: ffffffff84ee5d1e RBX: ffff888130392380 RCX: ffff888107360000 [ 207.772256][ T332] RDX: 0000000000000000 RSI: ffff88810de97c00 RDI: ffff8881000418c0 [ 207.780374][ T332] RBP: ffffc9000c0dfb98 R08: 00000000480c48e7 R09: 0000000061ef61ee [ 207.788365][ T332] R10: 000000000000000d R11: ffffffff81759b00 R12: ffff88810de97900 [ 207.796459][ T332] R13: 1ffff110260725f2 R14: 0000000000000040 R15: ffff888130392f90 [ 207.804560][ T332] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 207.813796][ T332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.820408][ T332] CR2: 0000001b34623ffc CR3: 000000010c756000 CR4: 00000000003526b0 [ 207.828411][ T332] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 207.836894][ T332] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 207.845001][ T332] Call Trace: [ 207.848459][ T332] [ 207.851514][ T332] xfrm_net_exit+0x31/0x80 [ 207.856050][ T332] cleanup_net+0x6bd/0xc90 [ 207.860847][ T332] ? __cfi_cleanup_net+0x10/0x10 [ 207.866150][ T332] ? kick_pool+0xb9/0x540 [ 207.870663][ T332] process_scheduled_works+0x7f7/0x1060 [ 207.876219][ T332] worker_thread+0xc99/0x13f0 [ 207.880918][ T332] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 207.886704][ T332] ? __kasan_check_read+0x15/0x20 [ 207.891911][ T332] kthread+0x2c7/0x360 [ 207.896033][ T332] ? __cfi_worker_thread+0x10/0x10 [ 207.901177][ T332] ? __cfi_kthread+0x10/0x10 [ 207.905778][ T332] ret_from_fork+0x67/0xa0 [ 207.910745][ T332] ? __cfi_kthread+0x10/0x10 [ 207.915459][ T332] ret_from_fork_asm+0x1a/0x30 [ 207.920406][ T332] [ 207.923631][ T332] ---[ end trace 0000000000000000 ]--- [ 207.930772][ T565] petalynx 0003:18B1:0037.0024: unknown global tag 0xe [ 207.937972][ T565] petalynx 0003:18B1:0037.0024: item 0 4 1 14 parsing failed [ 207.945935][ T565] petalynx 0003:18B1:0037.0024: parse failed [ 207.952077][ T565] petalynx 0003:18B1:0037.0024: probe with driver petalynx failed with error -22 [ 208.066775][ T565] usb 2-1: USB disconnect, device number 119 [ 208.689544][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 208.689566][ T2464] Bluetooth: hci0: Opcode 0x1003 failed: -110