last executing test programs:

51.977443667s ago: executing program 2 (id=1004):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
r0 = socket(0xb, 0x3, 0x2cc)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x20000002})
epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x737, 0x0, 0x0)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0)=0xaf, 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000000)={0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)

50.624413281s ago: executing program 1 (id=1014):
syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x80, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0})
r0 = socket(0x10, 0x3, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000640)="0f16df660f3880b00b000ffb2726d043030f080fdcc4ba4100b8a4a7ef36d31b2664676566def3e200", 0x29}], 0x1, 0x14, &(0x7f00000006c0)=[@dstype0={0x6, 0xa}, @efer={0x2, 0x4801}], 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x34bc467884ce18e, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffd, 0x100, @mcast1}}}, 0x88)
ioctl$KVM_CAP_HYPERV_SEND_IPI(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180))
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, 0x0, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190)
write(r0, &(0x7f0000000100)="110000005a001f001007f4110800040002", 0x11)
syz_usb_connect$uac1(0x2, 0xcc, &(0x7f0000000480)=ANY=[@ANYBLOB="120110030000002044062180400001f9c6fa12a92834eb6f0f93ad0203010902ba00030108807f090400002fffe8e3000a2401070033000201020c240801a709057b712afc3c09240606015a0100030b24070106000659917f7c0924030102038100000000000000010200000904010101010200000a240202090006000105006384ffda29689c280501094800020009072501080481000904020000010200000904020101010200000fe504e0ff030a407563f5efa36a110a24020200003800030309058209000463083c07331520b89211bee6f64607000000f4cdba98b4994ed2d2160804b336"], &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xa, 0x4, 0x8, 0x40, 0xd}, 0x36, &(0x7f0000000040)={0x5, 0xf, 0x36, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x1ba9856, 0xf00, 0x800, [0xc0c0, 0xff3fff, 0xff3f00, 0xcf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x95, 0x4, 0xa9, 0x4, 0x70}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1b, 0x8, 0x9}]}, 0x6, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1801}}, {0x49, &(0x7f0000000580)=ANY=[@ANYBLOB="490345cf6c8cd15db694756547d520864e397cda707651a0a66188ca41aa15398c69ed94edb4faf4457c9738db8104f5b8cc23df347f4a929578a1f8dea15777b1f8a957fea7705b4ccb8419352c820bdb97e8820c69c7685570cf45fec8399075d0513ad0663950842b0488dae226f714fa2b20b8d163ca418f04d2a4f6dc14f2132bd6c2522cb6b2ce255f6123ddc7e066a04d6ace984ab53f83f3c7807b6c4b9562c990447bd8e77f6a6457e8aac6926b8012e5ffe8"]}, {0x1d, &(0x7f0000000300)=@string={0x1d, 0x3, "a801c6460f00296ce64ce1539821720fa035f3fd5e5736c766f5e1"}}, {0x17, &(0x7f0000000340)=@string={0x17, 0x3, "745c43cb88df805206f621b5d11e58a428bf136c04"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42b}}]})
syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x80, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000640)="0f16df660f3880b00b000ffb2726d043030f080fdcc4ba4100b8a4a7ef36d31b2664676566def3e200", 0x29}], 0x1, 0x14, &(0x7f00000006c0)=[@dstype0={0x6, 0xa}, @efer={0x2, 0x4801}], 0x2) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x34bc467884ce18e, 0x0) (async)
socket$inet6(0xa, 0x80001, 0x0) (async)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffd, 0x100, @mcast1}}}, 0x88) (async)
ioctl$KVM_CAP_HYPERV_SEND_IPI(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) (async)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, 0x0, 0x0) (async)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) (async)
write(r0, &(0x7f0000000100)="110000005a001f001007f4110800040002", 0x11) (async)
syz_usb_connect$uac1(0x2, 0xcc, &(0x7f0000000480)=ANY=[@ANYBLOB="120110030000002044062180400001f9c6fa12a92834eb6f0f93ad0203010902ba00030108807f090400002fffe8e3000a2401070033000201020c240801a709057b712afc3c09240606015a0100030b24070106000659917f7c0924030102038100000000000000010200000904010101010200000a240202090006000105006384ffda29689c280501094800020009072501080481000904020000010200000904020101010200000fe504e0ff030a407563f5efa36a110a24020200003800030309058209000463083c07331520b89211bee6f64607000000f4cdba98b4994ed2d2160804b336"], &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xa, 0x4, 0x8, 0x40, 0xd}, 0x36, &(0x7f0000000040)={0x5, 0xf, 0x36, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x1ba9856, 0xf00, 0x800, [0xc0c0, 0xff3fff, 0xff3f00, 0xcf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x95, 0x4, 0xa9, 0x4, 0x70}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1b, 0x8, 0x9}]}, 0x6, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1801}}, {0x49, &(0x7f0000000580)=ANY=[@ANYBLOB="490345cf6c8cd15db694756547d520864e397cda707651a0a66188ca41aa15398c69ed94edb4faf4457c9738db8104f5b8cc23df347f4a929578a1f8dea15777b1f8a957fea7705b4ccb8419352c820bdb97e8820c69c7685570cf45fec8399075d0513ad0663950842b0488dae226f714fa2b20b8d163ca418f04d2a4f6dc14f2132bd6c2522cb6b2ce255f6123ddc7e066a04d6ace984ab53f83f3c7807b6c4b9562c990447bd8e77f6a6457e8aac6926b8012e5ffe8"]}, {0x1d, &(0x7f0000000300)=@string={0x1d, 0x3, "a801c6460f00296ce64ce1539821720fa035f3fd5e5736c766f5e1"}}, {0x17, &(0x7f0000000340)=@string={0x17, 0x3, "745c43cb88df805206f621b5d11e58a428bf136c04"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42b}}]}) (async)

50.481458696s ago: executing program 3 (id=1015):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = dup(r0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)="e9eb6c006f416cbf97bf510937dc979be15c74670b548a768ce7", 0x1a}], 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, 0x1c, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0x2}]}, 0x34}}, 0x0)
syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

50.409022299s ago: executing program 3 (id=1016):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_adj\x00')
read$FUSE(r0, 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_adj\x00')
exit(0x3)
read$FUSE(r2, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x7, 0x1, 0x701, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40811}, 0x80)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000003010101"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8880)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="330b0000001000000738000000010c01ff0301000000000000000f000000000000000300000000000000000000000000000003000000000000000700000000000000c910ff0200000000000000000000000000000502860a0000000000"], 0x68)
close(r1)

49.875221076s ago: executing program 1 (id=1018):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5}, 0xe)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x7fb, 0x1}, 0xe)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
sendmmsg(r1, 0x0, 0x0, 0x8000)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x50, r0, 0x2d5a4000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4074, 0xfea, 0x1, 0x0}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0, 0xfffffffffffffecc}, &(0x7f00000000c0)=0x40)
socket$igmp(0x2, 0x3, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)={0x24, 0x12, 0x1, 0x70bd23, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4, 0x1e}]}, 0x24}], 0x1}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00')
lseek(r4, 0x38, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585"], 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5}, 0xe) (async)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x7fb, 0x1}, 0xe) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async)
sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async)
sendmmsg(r1, 0x0, 0x0, 0x8000) (async)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x50, r0, 0x2d5a4000) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4074, 0xfea, 0x1, 0x0}, &(0x7f0000000000)=0x40) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0, 0xfffffffffffffecc}, &(0x7f00000000c0)=0x40) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)={0x24, 0x12, 0x1, 0x70bd23, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4, 0x1e}]}, 0x24}], 0x1}, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') (async)
lseek(r4, 0x38, 0x0) (async)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585"], 0x0) (async)

49.501702448s ago: executing program 3 (id=1019):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1)
write$binfmt_misc(r2, &(0x7f00000002c0), 0x15)
splice(r1, 0x0, r3, 0x0, 0x19404, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}, {@nfs_export_off}], [], 0x2c})
write$binfmt_misc(r0, &(0x7f0000000180)="33d045f761f74d1a2bbcc5e3dc7f5fb93d16b5c1a5deab0c02926f6c88e5c0bdcd11103f8d989a3f0b830ef4df55c728f4430d3d11068c4c", 0x38)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60)

49.496964629s ago: executing program 3 (id=1020):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',chead,cache=mmap,cache=loose,'])
openat$cgroup_procs(r4, &(0x7f0000000180)='tasks\x00', 0x2, 0x0)
r5 = dup(r1)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0002a23c060c00ff0f3fa6437be1aaaaaaaa5b21910b6d27b1a0e11bc584c78c12cc7a413f30becf69a37a04e7154fbbe511f978b25319e3f8bd032f3a54259cc7698fd7bf27e36263426e06573fed45b29047daa120aaf3bda6"], 0x2b)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r7 = socket(0x11, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r9=>0x0})
bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9}, 0x14)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000002b00)=ANY=[], 0x10}], 0x2}, 0x20040051)
r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2000000000000000)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$ASHMEM_GET_NAME(r5, 0x81007702, &(0x7f0000000300)=""/3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000340)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f538420f005704b83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x48}], 0x1, 0x15, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000500)={0x3, 'vlan0\x00', {0x56}, 0x5})
r12 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x31)
ioctl$KVM_IRQ_LINE(r12, 0x4008ae61, &(0x7f0000000280)={0xa, 0x8})
unshare(0x22020400)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001000000000000000000020000000400000014000900ff01000600000000000000000000000115000280bf"], 0x44}}, 0x0)
truncate(&(0x7f00000003c0)='./file0\x00', 0x5)

49.389884892s ago: executing program 3 (id=1021):
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000002c0)={0x0, 0x4, 0xc1, {0xc1, 0xc, "240ecf1afc3c255f01ad6740faf3bafa5230786230a74f4079a30ad5eb575177e6df0eaf3dc65eb4bffcc0d1e7bdbf24c893fa32732f1f1de7cce91bc1b9ae24eae0d4529af4fbc8471600214645f05312c0c7dcfc419040f7c78d18136c096ed6411661e2ab88f363171256fbd5f7b8703005ed54314e4a82ea685e0c342d766cfcffe19887c2d635d60d937f1b401acbb3c9b9b167dea3034265dbe72e9050b93ab49663874693b79a79f54a179be02e699d6686acb411bdddafdb0292ae"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f00000008c0)=ANY=[@ANYBLOB="000fdafefff7050f1800020710f600e33cf3ffffffffffffff0000000000e23504eea01bd788aab4a6081433b612005992cb29a13378a6463b6f3794e74bf0efc92e1d16c017e4e7a85a580c6621688984701669a62dd9ff9f88e1f91104efdb3fc9441008ad689823b7fba556fe48e84dbb67b24022c704bcb36edd9fd9dd735bf41a5d0c9205cbaaee6a51"], &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x1, 0x2b, "0f64f025", "125e8cf8"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x0, 0x3, 0x0, 0x7, 0x0, 0xe2}}}, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)={0x40, 0xf, 0x88, "65857b64e5e6194badd86de67fb443d033a46ab941865692725dbd22cad129d3b3cc4898d7b149dee2417506bb13529da22c70d9e3c7c83a7744f7527487db9a1e03cc59d6e634948573933b53560bf8283c15e7a9b7a80ea591f97560de2e047272191a93ae7569cf999b8cc7c3b96cf0d66b38dcdb37fb9c23d6621e942813113f27e797ff07fb"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x45}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x0, 0x60, [0xff00]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000580)={0x40, 0xb, 0x2}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x1, "dac3"}, &(0x7f00000004c0)={0x40, 0x1a, 0x2, 0x5abc}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0xe5}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x3}})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f200fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x36)
ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000040)={0xd, 0x5, 0x9})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)

48.101338394s ago: executing program 2 (id=1022):
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f00000000c0)="f20f597f000f01df66b9760100000f3266b9e20a00000f32f0f79e59312e0f78312636f20f1f0d3e0f01380f789750712e66f2a5", 0x34}], 0x1, 0x1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000f1f000000050f1f0003031dc5eac00407ad0e475afcf392818f68c2ef4b7feda5"], 0x0, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
syz_usb_connect$uac1(0x6, 0x71, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000086b1d010140000102030109025f00030106b8050904000000010100000a24"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400650f01c4b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x63}], 0x1, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

45.995345474s ago: executing program 0 (id=1023):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

45.018871826s ago: executing program 1 (id=1024):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = dup(r0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)="e9eb6c006f416cbf97bf510937dc979be15c74670b548a768ce7", 0x1a}], 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, 0x1c, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0x2}]}, 0x34}}, 0x0)
syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

43.890100783s ago: executing program 3 (id=1025):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32)
r1 = dup(0xffffffffffffffff) (rerun: 32)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
write$tun(r0, &(0x7f0000000180)={@val={0x70}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @multicast1}, {0x3a00, 0x88be, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xc5, 0x0, @val=0x70}}}}}}}}, 0x36)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c5) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

42.632407554s ago: executing program 0 (id=1026):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
clock_gettime(0xa, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x27)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583", @ANYRES16], 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583", @ANYRES16], 0x0)

41.839664211s ago: executing program 2 (id=1027):
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) (async)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="400f0400000009f99087"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x3, 0x300) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r3 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f0000000140)="280320000a00140000007ef506be00", 0xf, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r4, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r5, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffd, {0x0, 0x200000000, 0xffffffffffffffff, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r6, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="740000001400000427b97000fedbdf25ffffffff000000000000000000000000e00000010000000000000000000000004e2300004e2400800a00003016000000", @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="ba6b6e0001000000240009000200000000000000400000000000000007000000000000000200000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x400c804}, 0x1) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="740000001400000427b97000fedbdf25ffffffff000000000000000000000000e00000010000000000000000000000004e2300004e2400800a00003016000000", @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="ba6b6e0001000000240009000200000000000000400000000000000007000000000000000200000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x400c804}, 0x1)

40.65325678s ago: executing program 1 (id=1028):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, 0x0, 0x0, 0x30, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xc}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40050)

37.60900663s ago: executing program 0 (id=1029):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0xc0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000200)=0x9, 0x4)
syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000000))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
pwritev2(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)="c897", 0x2}], 0x1, 0x2e, 0x4, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x2}, {0x6}]})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xffffe000, 0x0, 0x4031, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000680)={0x0, 0x0, 0x2, 0x62, 0x3})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x241, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x8000})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7)
syz_open_dev$usbfs(&(0x7f00000001c0), 0x9, 0x4000)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000140)={0x82, 0x6, 0x4, 0xff82, 0x0, 0x8, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28402, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x6a, 0x0, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x2})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000300)=""/275, 0x113}], 0x1, 0xa3, 0xf9f)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000c08000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000240)="360f01c236660f3881b5000000000fc7aaae1869caea2b5c0000e4003e3ef30f810500000066b8a0008ee00f01c9660ffa7954c744240000000000c744240200000000c7442406000000000f01142466baf80cb8c499ae8aef66bafc0c66ed", 0x5f}], 0x1, 0x34, &(0x7f00000004c0)=[@cstype3={0x5, 0x7}, @efer={0x2, 0x1}], 0x2)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
mkdir(&(0x7f0000000980)='./file0\x00', 0x0)

36.795580347s ago: executing program 1 (id=1030):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='T \x00\x00', @ANYRES16=0x0, @ANYBLOB="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"/8270], 0x2054}}, 0x0)

33.478785586s ago: executing program 2 (id=1031):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x23, &(0x7f0000000380)=@string={0x23, 0x3, "63c8fe74209449dcced47479002976f608e03e34b55d6a00f83372da7f4414f0aa"}}]})
futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000200), 0x14fffffd)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="4fbcb0eaba53b6603ca724a043e57bf51937346046f21b", 0x17}], 0x1}, 0x40040)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

32.854716347s ago: executing program 1 (id=1032):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]})
r0 = getpgid(0xffffffffffffffff)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x1)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000840), 0x1004002, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x8000)
ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, 0x0)
r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8)
read(r2, &(0x7f0000000740)=""/384, 0x200008c0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000540)={'\x00', 0x5, 0x1, 0x1, 0x7, 0x4, r0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
preadv(r5, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x9, 0x6a76)
syz_clone3(&(0x7f0000000340)={0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x3c}, &(0x7f0000000180)=""/195, 0xc3, &(0x7f0000000440)=""/219, &(0x7f0000000280)=[r0], 0x1}, 0x58)

31.411644265s ago: executing program 0 (id=1033):
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000002c0)={0x0, 0x4, 0xc1, {0xc1, 0xc, "240ecf1afc3c255f01ad6740faf3bafa5230786230a74f4079a30ad5eb575177e6df0eaf3dc65eb4bffcc0d1e7bdbf24c893fa32732f1f1de7cce91bc1b9ae24eae0d4529af4fbc8471600214645f05312c0c7dcfc419040f7c78d18136c096ed6411661e2ab88f363171256fbd5f7b8703005ed54314e4a82ea685e0c342d766cfcffe19887c2d635d60d937f1b401acbb3c9b9b167dea3034265dbe72e9050b93ab49663874693b79a79f54a179be02e699d6686acb411bdddafdb0292ae"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f00000008c0)=ANY=[@ANYBLOB="000fdafefff7050f1800020710f600e33cf3ffffffffffffff0000000000e23504eea01bd788aab4a6081433b612005992cb29a13378a6463b6f3794e74bf0efc92e1d16c017e4e7a85a580c6621688984701669a62dd9ff9f88e1f91104efdb3fc9441008ad689823b7fba556fe48e84dbb67b24022c704bcb36edd9fd9dd735bf41a5d0c9205cbaaee6a51"], &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x1, 0x2b, "0f64f025", "125e8cf8"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x0, 0x3, 0x0, 0x7, 0x0, 0xe2}}}, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)={0x40, 0xf, 0x88, "65857b64e5e6194badd86de67fb443d033a46ab941865692725dbd22cad129d3b3cc4898d7b149dee2417506bb13529da22c70d9e3c7c83a7744f7527487db9a1e03cc59d6e634948573933b53560bf8283c15e7a9b7a80ea591f97560de2e047272191a93ae7569cf999b8cc7c3b96cf0d66b38dcdb37fb9c23d6621e942813113f27e797ff07fb"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x45}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x0, 0x60, [0xff00]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000580)={0x40, 0xb, 0x2}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x1, "dac3"}, &(0x7f00000004c0)={0x40, 0x1a, 0x2, 0x5abc}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0xe5}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x3}})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f200fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x36)
ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000040)={0xd, 0x5, 0x9})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)

28.182925301s ago: executing program 32 (id=1025):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32)
r1 = dup(0xffffffffffffffff) (rerun: 32)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
write$tun(r0, &(0x7f0000000180)={@val={0x70}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @multicast1}, {0x3a00, 0x88be, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xc5, 0x0, @val=0x70}}}}}}}}, 0x36)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c5) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

23.575647332s ago: executing program 2 (id=1035):
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f00000000c0)="f20f597f000f01df66b9760100000f3266b9e20a00000f32f0f79e59312e0f78312636f20f1f0d3e0f01380f789750712e66f2a5", 0x34}], 0x1, 0x1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000f1f000000050f1f0003031dc5eac00407ad0e475afcf392818f68c2ef4b7feda5"], 0x0, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
syz_usb_connect$uac1(0x6, 0x71, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000086b1d010140000102030109025f00030106b8050904000000010100000a24"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400650f01c4b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x63}], 0x1, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

22.164736089s ago: executing program 0 (id=1036):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = dup(r0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)="e9eb6c006f416cbf97bf510937dc979be15c74670b548a768ce7", 0x1a}], 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, 0x1c, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0x2}]}, 0x34}}, 0x0)
syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17.618274589s ago: executing program 33 (id=1032):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]})
r0 = getpgid(0xffffffffffffffff)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x1)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000840), 0x1004002, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x8000)
ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, 0x0)
r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8)
read(r2, &(0x7f0000000740)=""/384, 0x200008c0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000540)={'\x00', 0x5, 0x1, 0x1, 0x7, 0x4, r0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
preadv(r5, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x9, 0x6a76)
syz_clone3(&(0x7f0000000340)={0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x3c}, &(0x7f0000000180)=""/195, 0xc3, &(0x7f0000000440)=""/219, &(0x7f0000000280)=[r0], 0x1}, 0x58)

15.790110339s ago: executing program 0 (id=1038):
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = socket(0x80000000000000a, 0x2, 0x0)
ioctl$SIOCGIFMTU(r0, 0x8942, &(0x7f00000001c0)={'veth0\x00'})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)={0x40, 0x0, 0x1}, 0x18)
r2 = socket(0x11, 0x3, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0xa6426000)

14.714910294s ago: executing program 2 (id=1039):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x4, 0x0, [{0x400000b0, 0x0, 0x3}, {0x235, 0x0, 0xfffffffffffffff9}, {0x9dc, 0x0, 0x1ff}, {0x9a2, 0x0, 0x2}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

0s ago: executing program 34 (id=1038):
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = socket(0x80000000000000a, 0x2, 0x0)
ioctl$SIOCGIFMTU(r0, 0x8942, &(0x7f00000001c0)={'veth0\x00'})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)={0x40, 0x0, 0x1}, 0x18)
r2 = socket(0x11, 0x3, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0xa6426000)

kernel console output (not intermixed with test programs):

686144
[  138.341817][ T2885] total_active_anon 146882560
[  138.346567][ T2885] total_inactive_file 0
[  138.350742][ T2885] total_active_file 4096
[  138.354991][ T2885] total_unevictable 0
[  138.359012][ T2885] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.824,pid=2900,uid=0
[  138.373981][ T2885] Memory cgroup out of memory: Killed process 2900 (syz.2.824) total-vm:90504kB, anon-rss:1232kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000
[  138.376896][  T483] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  138.411292][ T2893] syz.2.824 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  138.426255][ T2893] CPU: 0 UID: 0 PID: 2893 Comm: syz.2.824 Not tainted syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c
[  138.426289][ T2893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  138.426303][ T2893] Call Trace:
[  138.426310][ T2893]  <TASK>
[  138.426318][ T2893]  __dump_stack+0x21/0x30
[  138.426347][ T2893]  dump_stack_lvl+0x140/0x1c0
[  138.426371][ T2893]  ? __cfi_dump_stack_lvl+0x10/0x10
[  138.426394][ T2893]  ? ___ratelimit+0x40e/0x5b0
[  138.426423][ T2893]  dump_stack+0x19/0x20
[  138.426461][ T2893]  dump_header+0xd6/0x490
[  138.426484][ T2893]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  138.426508][ T2893]  oom_kill_process+0x35d/0x640
[  138.426540][ T2893]  out_of_memory+0x624/0xa30
[  138.426570][ T2893]  ? __cfi_out_of_memory+0x10/0x10
[  138.426599][ T2893]  ? mutex_lock_killable+0x115/0x1d0
[  138.426622][ T2893]  ? __cfi_mutex_lock_killable+0x10/0x10
[  138.426645][ T2893]  mem_cgroup_out_of_memory+0x2c8/0x390
[  138.426673][ T2893]  ? css_next_descendant_pre+0x202/0x230
[  138.426696][ T2893]  ? drain_obj_stock+0xed0/0xed0
[  138.426725][ T2893]  ? memcg1_oom_prepare+0x2c5/0x3a0
[  138.426753][ T2893]  try_charge_memcg+0x91c/0xe10
[  138.426787][ T2893]  ? __cfi_try_charge_memcg+0x10/0x10
[  138.426809][ T2893]  ? __alloc_pages_noprof+0x35f/0x7e0
[  138.426833][ T2893]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  138.426858][ T2893]  __mem_cgroup_charge+0xfc/0x420
[  138.426884][ T2893]  ? folio_add_lru+0x116/0x400
[  138.426905][ T2893]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  138.426933][ T2893]  shmem_alloc_and_add_folio+0x8e6/0x10b0
[  138.426957][ T2893]  ? put_swap_device+0x130/0x130
[  138.426978][ T2893]  ? shmem_huge_global_enabled+0x2da/0x360
[  138.427009][ T2893]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  138.427039][ T2893]  ? __kasan_check_write+0x18/0x20
[  138.427066][ T2893]  ? _raw_spin_lock+0x92/0x120
[  138.427091][ T2893]  shmem_get_folio_gfp+0x607/0x1390
[  138.427123][ T2893]  ? shmem_get_folio+0xc0/0xc0
[  138.427151][ T2893]  ? follow_page_pte+0x90f/0xbc0
[  138.427176][ T2893]  ? inode_to_bdi+0x6d/0x100
[  138.427201][ T2893]  shmem_write_begin+0xf4/0x270
[  138.427222][ T2893]  generic_perform_write+0x328/0x970
[  138.427247][ T2893]  ? __cfi_generic_perform_write+0x10/0x10
[  138.427271][ T2893]  ? down_write+0xee/0x2b0
[  138.427293][ T2893]  ? file_update_time+0xa3/0x210
[  138.427319][ T2893]  shmem_file_write_iter+0x105/0x130
[  138.427344][ T2893]  __kernel_write_iter+0x42c/0x8a0
[  138.427372][ T2893]  ? __cfi___kernel_write_iter+0x10/0x10
[  138.427399][ T2893]  ? get_dump_page+0x165/0x220
[  138.427422][ T2893]  ? __asan_memset+0x39/0x50
[  138.427457][ T2893]  ? iov_iter_bvec+0xc0/0x180
[  138.427489][ T2893]  dump_user_range+0xb8b/0xe60
[  138.427520][ T2893]  ? __cfi_dump_user_range+0x10/0x10
[  138.427548][ T2893]  ? elf_coredump_extra_notes_write+0x442/0x4d0
[  138.427590][ T2893]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  138.427620][ T2893]  ? elf_core_dump+0x24c0/0x3960
[  138.427642][ T2893]  elf_core_dump+0x2e7e/0x3960
[  138.427665][ T2893]  ? __cfi_elf_core_dump+0x10/0x10
[  138.427690][ T2893]  ? dump_interrupted+0xf0/0xf0
[  138.427715][ T2893]  ? filp_open+0x199/0x1f0
[  138.427737][ T2893]  ? 0xffffffffff600000
[  138.427754][ T2893]  do_coredump+0x208a/0x2fe0
[  138.427781][ T2893]  ? __cfi_do_coredump+0x10/0x10
[  138.427806][ T2893]  ? asm_exc_page_fault+0x2b/0x30
[  138.427841][ T2893]  ? __kasan_slab_free+0x6a/0x80
[  138.427861][ T2893]  ? kmem_cache_free+0x1bd/0x4f0
[  138.427890][ T2893]  ? get_signal+0xa74/0x14e0
[  138.427916][ T2893]  get_signal+0x11f8/0x14e0
[  138.427941][ T2893]  arch_do_signal_or_restart+0xbc/0x760
[  138.427970][ T2893]  ? fixup_vdso_exception+0x20d/0x310
[  138.428001][ T2893]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  138.428035][ T2893]  irqentry_exit_to_user_mode+0x4d/0xb0
[  138.428060][ T2893]  irqentry_exit+0x16/0x60
[  138.428081][ T2893]  exc_page_fault+0x65/0xc0
[  138.428102][ T2893]  asm_exc_page_fault+0x2b/0x30
[  138.428126][ T2893] RIP: 0033:0x7f0bb62527e7
[  138.428164][ T2893] Code: e8 8e fa ff ff 89 f2 48 8d 3d 9d 40 1b 00 48 8d 35 7c fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  138.428182][ T2893] RSP: 002b:00007f0bb71ed120 EFLAGS: 00010202
[  138.428202][ T2893] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f0bb639c819
[  138.428217][ T2893] RDX: 00007f0bb71ed140 RSI: 00007f0bb71ed270 RDI: 000000000000000b
[  138.428233][ T2893] RBP: 00007f0bb6432c91 R08: 0000000000000000 R09: 0000000000000000
[  138.428247][ T2893] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  138.428260][ T2893] R13: 00007f0bb6616218 R14: 00007f0bb6616180 R15: 00007ffccc314398
[  138.428278][ T2893]  </TASK>
[  138.432772][  T483] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  138.463083][ T2893] memory: usage 307200kB, limit 307200kB, failcnt 24711
[  138.476272][  T483] usbhid 2-1:0.0: can't add hid device: -71
[  138.479374][ T2893] memory+swap: usage 432012kB, limit 9007199254740988kB, failcnt 0
[  138.494247][  T483] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  138.498769][ T2893] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  138.528232][  T483] usb 2-1: USB disconnect, device number 78
[  138.531235][ T2893] Memory cgroup stats for /syz2:
[  138.931276][ T2893] cache 314257408
[  138.948000][ T2893] rss 270336
[  138.951432][ T2893] rss_huge 0
[  138.954707][ T2893] shmem 314253312
[  138.958663][ T2893] mapped_file 0
[  138.962151][ T2893] dirty 0
[  138.965216][ T2893] writeback 0
[  138.968672][ T2893] workingset_refault_anon 1321
[  138.973823][ T2893] workingset_refault_file 370
[  138.978918][ T3028] netlink: 340 bytes leftover after parsing attributes in process `syz.1.869'.
[  138.979996][ T2893] swap 127807488
[  138.991451][ T2893] swapcached 45056
[  138.995192][ T2893] pgpgin 221143
[  138.997920][ T3028] netlink: 80 bytes leftover after parsing attributes in process `syz.1.869'.
[  138.999069][ T2893] pgpgout 144854
[  139.011811][ T2893] pgfault 49113
[  139.015286][ T2893] pgmajfault 251
[  139.019069][ T2893] inactive_anon 167686144
[  139.026373][ T2893] active_anon 146882560
[  139.026910][ T3033] overlayfs: failed to clone upperpath
[  139.030764][ T2893] inactive_file 0
[  139.039684][ T2893] active_file 4096
[  139.043417][ T2893] unevictable 0
[  139.046890][ T2893] hierarchical_memory_limit 314572800
[  139.052261][ T2893] hierarchical_memsw_limit 9223372036854771712
[  139.058435][ T2893] total_cache 314257408
[  139.062589][ T2893] total_rss 270336
[  139.066294][ T2893] total_rss_huge 0
[  139.070048][ T2893] total_shmem 314253312
[  139.074291][ T2893] total_mapped_file 0
[  139.078378][ T2893] total_dirty 0
[  139.081862][ T2893] total_writeback 0
[  139.085652][ T2893] total_workingset_refault_anon 1321
[  139.090944][ T2893] total_workingset_refault_file 370
[  139.096234][ T2893] total_swap 127807488
[  139.100313][ T2893] total_swapcached 45056
[  139.104554][ T2893] total_pgpgin 221143
[  139.108549][ T2893] total_pgpgout 144854
[  139.112707][ T2893] total_pgfault 49113
[  139.116718][ T2893] total_pgmajfault 251
[  139.120794][ T2893] total_inactive_anon 167686144
[  139.125630][ T2893] total_active_anon 146882560
[  139.130326][ T2893] total_inactive_file 0
[  139.134483][ T2893] total_active_file 4096
[  139.138768][ T2893] total_unevictable 0
[  139.142758][ T2893] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.824,pid=2887,uid=0
[  139.157618][ T2893] Memory cgroup out of memory: Killed process 2887 (syz.2.824) total-vm:90504kB, anon-rss:1232kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000
[  139.266503][  T392] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  139.302616][ T2898] syz.2.824 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  139.386563][ T2898] CPU: 1 UID: 0 PID: 2898 Comm: syz.2.824 Not tainted syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c
[  139.386603][ T2898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  139.386618][ T2898] Call Trace:
[  139.386626][ T2898]  <TASK>
[  139.386634][ T2898]  __dump_stack+0x21/0x30
[  139.386675][ T2898]  dump_stack_lvl+0x140/0x1c0
[  139.386703][ T2898]  ? __cfi_dump_stack_lvl+0x10/0x10
[  139.386730][ T2898]  ? ___ratelimit+0x40e/0x5b0
[  139.386763][ T2898]  dump_stack+0x19/0x20
[  139.386789][ T2898]  dump_header+0xd6/0x490
[  139.386814][ T2898]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  139.386839][ T2898]  oom_kill_process+0x35d/0x640
[  139.386870][ T2898]  out_of_memory+0x624/0xa30
[  139.386899][ T2898]  ? __cfi_out_of_memory+0x10/0x10
[  139.386926][ T2898]  ? mutex_lock_killable+0x97/0x1d0
[  139.386947][ T2898]  ? __cfi_mutex_lock_killable+0x10/0x10
[  139.386970][ T2898]  mem_cgroup_out_of_memory+0x2c8/0x390
[  139.386999][ T2898]  ? css_next_descendant_pre+0x202/0x230
[  139.387024][ T2898]  ? drain_obj_stock+0xed0/0xed0
[  139.387054][ T2898]  ? memcg1_oom_prepare+0x2c5/0x3a0
[  139.387085][ T2898]  try_charge_memcg+0x91c/0xe10
[  139.387111][ T2898]  ? __cfi_try_charge_memcg+0x10/0x10
[  139.387136][ T2898]  ? __alloc_pages_noprof+0x35f/0x7e0
[  139.387162][ T2898]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  139.387188][ T2898]  __mem_cgroup_charge+0xfc/0x420
[  139.387215][ T2898]  ? folio_add_lru+0x116/0x400
[  139.387236][ T2898]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  139.387264][ T2898]  shmem_alloc_and_add_folio+0x8e6/0x10b0
[  139.387287][ T2898]  ? put_swap_device+0x130/0x130
[  139.387308][ T2898]  ? shmem_huge_global_enabled+0x2da/0x360
[  139.387341][ T2898]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  139.387372][ T2898]  ? __kasan_check_write+0x18/0x20
[  139.387400][ T2898]  ? _raw_spin_lock+0x92/0x120
[  139.387427][ T2898]  shmem_get_folio_gfp+0x607/0x1390
[  139.387460][ T2898]  ? shmem_get_folio+0xc0/0xc0
[  139.387488][ T2898]  ? follow_page_pte+0x90f/0xbc0
[  139.387512][ T2898]  ? inode_to_bdi+0x6d/0x100
[  139.387536][ T2898]  shmem_write_begin+0xf4/0x270
[  139.387557][ T2898]  generic_perform_write+0x328/0x970
[  139.387584][ T2898]  ? __cfi_generic_perform_write+0x10/0x10
[  139.387609][ T2898]  ? down_write+0xee/0x2b0
[  139.387633][ T2898]  ? file_update_time+0xa3/0x210
[  139.387659][ T2898]  shmem_file_write_iter+0x105/0x130
[  139.387693][ T2898]  __kernel_write_iter+0x42c/0x8a0
[  139.387722][ T2898]  ? __cfi___kernel_write_iter+0x10/0x10
[  139.387749][ T2898]  ? get_dump_page+0x165/0x220
[  139.387780][ T2898]  ? __asan_memset+0x39/0x50
[  139.387807][ T2898]  ? iov_iter_bvec+0xc0/0x180
[  139.387837][ T2898]  dump_user_range+0xb8b/0xe60
[  139.387868][ T2898]  ? __cfi_dump_user_range+0x10/0x10
[  139.387898][ T2898]  ? elf_coredump_extra_notes_write+0x442/0x4d0
[  139.387930][ T2898]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  139.387960][ T2898]  ? elf_core_dump+0x24c0/0x3960
[  139.387982][ T2898]  elf_core_dump+0x2e7e/0x3960
[  139.388006][ T2898]  ? __cfi_elf_core_dump+0x10/0x10
[  139.388034][ T2898]  ? dump_interrupted+0xf0/0xf0
[  139.388061][ T2898]  ? filp_open+0x199/0x1f0
[  139.388084][ T2898]  ? 0xffffffffff600000
[  139.388103][ T2898]  do_coredump+0x208a/0x2fe0
[  139.388134][ T2898]  ? __cfi_do_coredump+0x10/0x10
[  139.388161][ T2898]  ? asm_exc_page_fault+0x2b/0x30
[  139.388198][ T2898]  ? __kasan_slab_free+0x6a/0x80
[  139.388218][ T2898]  ? kmem_cache_free+0x1bd/0x4f0
[  139.388247][ T2898]  ? get_signal+0xa74/0x14e0
[  139.388273][ T2898]  get_signal+0x11f8/0x14e0
[  139.388301][ T2898]  arch_do_signal_or_restart+0xbc/0x760
[  139.388331][ T2898]  ? fixup_vdso_exception+0x20d/0x310
[  139.388363][ T2898]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  139.388396][ T2898]  irqentry_exit_to_user_mode+0x4d/0xb0
[  139.388420][ T2898]  irqentry_exit+0x16/0x60
[  139.388442][ T2898]  exc_page_fault+0x65/0xc0
[  139.388465][ T2898]  asm_exc_page_fault+0x2b/0x30
[  139.388492][ T2898] RIP: 0033:0x7f0bb62527e7
[  139.388511][ T2898] Code: e8 8e fa ff ff 89 f2 48 8d 3d 9d 40 1b 00 48 8d 35 7c fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  139.388530][ T2898] RSP: 002b:00007f0bb71ed120 EFLAGS: 00010202
[  139.388551][ T2898] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f0bb639c819
[  139.388567][ T2898] RDX: 00007f0bb71ed140 RSI: 00007f0bb71ed270 RDI: 000000000000000b
[  139.388582][ T2898] RBP: 00007f0bb6432c91 R08: 0000000000000000 R09: 0000000000000000
[  139.388596][ T2898] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  139.388611][ T2898] R13: 00007f0bb6616218 R14: 00007f0bb6616180 R15: 00007ffccc314398
[  139.388630][ T2898]  </TASK>
[  139.388640][ T2898] memory: usage 305204kB, limit 307200kB, failcnt 26790
[  139.447866][  T392] usb 2-1: unable to get BOS descriptor or descriptor too short
[  139.639099][ T3036] netlink: 'syz.0.874': attribute type 4 has an invalid length.
[  139.687226][  T392] usb 2-1: config 2 has an invalid interface number: 223 but max is 0
[  139.688342][   T36] audit: type=1400 audit(2000000010.900:1088): avc:  denied  { remount } for  pid=3035 comm="syz.0.874" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  139.692210][  T392] usb 2-1: config 2 has no interface number 0
[  139.692251][  T392] usb 2-1: config 2 interface 223 has no altsetting 0
[  139.693670][  T392] usb 2-1: New USB device found, idVendor=32a7, idProduct=0000, bcdDevice=86.90
[  139.789392][ T2898] memory+swap: usage 427404kB, limit 9007199254740988kB, failcnt 0
[  139.853449][  T392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.904463][ T2898] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  139.956478][  T392] usb 2-1: Product: syz
[  139.960742][  T392] usb 2-1: Manufacturer: syz
[  139.965367][  T392] usb 2-1: SerialNumber: syz
[  139.999582][ T2898] Memory cgroup stats for /syz2:
[  139.999736][ T2898] cache 314449920
[  140.008810][ T2898] rss 122880
[  140.012026][ T2898] rss_huge 0
[  140.015232][ T2898] shmem 314449920
[  140.020703][ T2898] mapped_file 0
[  140.024187][ T2898] dirty 0
[  140.027955][ T2898] writeback 0
[  140.031327][ T2898] workingset_refault_anon 1321
[  140.036183][ T2898] workingset_refault_file 1636
[  140.041029][ T2898] swap 127995904
[  140.044613][ T2898] swapcached 0
[  140.048049][ T2898] pgpgin 230762
[  140.051531][ T2898] pgpgout 154473
[  140.055105][ T2898] pgfault 49667
[  140.058785][ T2898] pgmajfault 269
[  140.062500][ T2898] inactive_anon 33804288
[  140.066881][ T2898] active_anon 280506368
[  140.071069][ T2898] inactive_file 0
[  140.074711][ T2898] active_file 0
[  140.078280][ T2898] unevictable 0
[  140.081758][ T2898] hierarchical_memory_limit 314572800
[  140.087168][ T2898] hierarchical_memsw_limit 9223372036854771712
[  140.093333][ T2898] total_cache 314449920
[  140.097521][ T2898] total_rss 122880
[  140.101269][ T2898] total_rss_huge 0
[  140.105012][ T2898] total_shmem 314449920
[  140.109200][ T2898] total_mapped_file 0
[  140.113196][ T2898] total_dirty 0
[  140.116701][ T2898] total_writeback 0
[  140.120627][ T2898] total_workingset_refault_anon 1321
[  140.125908][ T2898] total_workingset_refault_file 1636
[  140.131388][ T2898] total_swap 127995904
[  140.135550][ T2898] total_swapcached 0
[  140.139570][ T2898] total_pgpgin 230762
[  140.143553][ T2898] total_pgpgout 154473
[  140.147742][ T2898] total_pgfault 49667
[  140.151782][ T2898] total_pgmajfault 269
[  140.155853][ T2898] total_inactive_anon 33804288
[  140.160729][ T2898] total_active_anon 280506368
[  140.165600][ T2898] total_inactive_file 0
[  140.169791][ T2898] total_active_file 0
[  140.173786][ T2898] total_unevictable 0
[  140.177791][ T2898] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.824,pid=2896,uid=0
[  140.184435][   T36] audit: type=1400 audit(2000000011.440:1089): avc:  denied  { relabelfrom } for  pid=3027 comm="syz.1.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  140.192610][  T412] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  140.212499][ T2898] Memory cgroup out of memory: Killed process 2896 (syz.2.824) total-vm:90504kB, anon-rss:1332kB, file-rss:53592kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000
[  140.237225][   T36] audit: type=1400 audit(2000000011.480:1090): avc:  denied  { relabelto } for  pid=3027 comm="syz.1.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  140.288989][ T2899] syz.2.824 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  140.305895][ T2899] CPU: 1 UID: 0 PID: 2899 Comm: syz.2.824 Not tainted syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c
[  140.305932][ T2899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  140.305946][ T2899] Call Trace:
[  140.305954][ T2899]  <TASK>
[  140.305963][ T2899]  __dump_stack+0x21/0x30
[  140.305997][ T2899]  dump_stack_lvl+0x140/0x1c0
[  140.306023][ T2899]  ? __cfi_dump_stack_lvl+0x10/0x10
[  140.306050][ T2899]  ? ___ratelimit+0x40e/0x5b0
[  140.306083][ T2899]  dump_stack+0x19/0x20
[  140.306109][ T2899]  dump_header+0xd6/0x490
[  140.306133][ T2899]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  140.306158][ T2899]  oom_kill_process+0x35d/0x640
[  140.306191][ T2899]  out_of_memory+0x624/0xa30
[  140.306223][ T2899]  ? __cfi_out_of_memory+0x10/0x10
[  140.306253][ T2899]  ? mutex_lock_killable+0x97/0x1d0
[  140.306275][ T2899]  ? __cfi_mutex_lock_killable+0x10/0x10
[  140.306299][ T2899]  mem_cgroup_out_of_memory+0x2c8/0x390
[  140.306330][ T2899]  ? css_next_descendant_pre+0x202/0x230
[  140.306355][ T2899]  ? drain_obj_stock+0xed0/0xed0
[  140.306385][ T2899]  ? memcg1_oom_prepare+0x2c5/0x3a0
[  140.306414][ T2899]  try_charge_memcg+0x91c/0xe10
[  140.306446][ T2899]  ? __cfi_try_charge_memcg+0x10/0x10
[  140.306472][ T2899]  ? __alloc_pages_noprof+0x35f/0x7e0
[  140.306514][ T2899]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  140.306541][ T2899]  __mem_cgroup_charge+0xfc/0x420
[  140.306567][ T2899]  ? folio_add_lru+0x116/0x400
[  140.306588][ T2899]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  140.306618][ T2899]  shmem_alloc_and_add_folio+0x8e6/0x10b0
[  140.306643][ T2899]  ? put_swap_device+0x130/0x130
[  140.306664][ T2899]  ? shmem_huge_global_enabled+0x2da/0x360
[  140.306696][ T2899]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  140.306727][ T2899]  ? __kasan_check_write+0x18/0x20
[  140.306756][ T2899]  ? _raw_spin_lock+0x92/0x120
[  140.306784][ T2899]  shmem_get_folio_gfp+0x607/0x1390
[  140.306817][ T2899]  ? shmem_get_folio+0xc0/0xc0
[  140.306845][ T2899]  ? follow_page_pte+0x90f/0xbc0
[  140.306870][ T2899]  ? inode_to_bdi+0x6d/0x100
[  140.306896][ T2899]  shmem_write_begin+0xf4/0x270
[  140.306918][ T2899]  generic_perform_write+0x328/0x970
[  140.306945][ T2899]  ? __cfi_generic_perform_write+0x10/0x10
[  140.306969][ T2899]  ? down_write+0xee/0x2b0
[  140.306992][ T2899]  ? file_update_time+0xa3/0x210
[  140.307018][ T2899]  shmem_file_write_iter+0x105/0x130
[  140.307044][ T2899]  __kernel_write_iter+0x42c/0x8a0
[  140.307074][ T2899]  ? __cfi___kernel_write_iter+0x10/0x10
[  140.307104][ T2899]  ? get_dump_page+0x165/0x220
[  140.307126][ T2899]  ? __asan_memset+0x39/0x50
[  140.307154][ T2899]  ? iov_iter_bvec+0xc0/0x180
[  140.307186][ T2899]  dump_user_range+0xb8b/0xe60
[  140.307218][ T2899]  ? __cfi_dump_user_range+0x10/0x10
[  140.307248][ T2899]  ? elf_coredump_extra_notes_write+0x442/0x4d0
[  140.307278][ T2899]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  140.307309][ T2899]  ? elf_core_dump+0x24c0/0x3960
[  140.307333][ T2899]  elf_core_dump+0x2e7e/0x3960
[  140.307358][ T2899]  ? __cfi_elf_core_dump+0x10/0x10
[  140.307387][ T2899]  ? dump_interrupted+0xf0/0xf0
[  140.307413][ T2899]  ? filp_open+0x199/0x1f0
[  140.307437][ T2899]  ? 0xffffffffff600000
[  140.307457][ T2899]  do_coredump+0x208a/0x2fe0
[  140.307496][ T2899]  ? __cfi_do_coredump+0x10/0x10
[  140.307523][ T2899]  ? asm_exc_page_fault+0x2b/0x30
[  140.307556][ T2899]  ? __kasan_slab_free+0x6a/0x80
[  140.307578][ T2899]  ? kmem_cache_free+0x1bd/0x4f0
[  140.307607][ T2899]  ? get_signal+0xa74/0x14e0
[  140.307634][ T2899]  get_signal+0x11f8/0x14e0
[  140.307663][ T2899]  arch_do_signal_or_restart+0xbc/0x760
[  140.307692][ T2899]  ? fixup_vdso_exception+0x20d/0x310
[  140.307719][ T2899]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  140.307748][ T2899]  irqentry_exit_to_user_mode+0x4d/0xb0
[  140.307768][ T2899]  irqentry_exit+0x16/0x60
[  140.307786][ T2899]  exc_page_fault+0x65/0xc0
[  140.307804][ T2899]  asm_exc_page_fault+0x2b/0x30
[  140.307828][ T2899] RIP: 0033:0x7f0bb62527e7
[  140.307845][ T2899] Code: e8 8e fa ff ff 89 f2 48 8d 3d 9d 40 1b 00 48 8d 35 7c fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  140.307861][ T2899] RSP: 002b:00007f0bb71ed120 EFLAGS: 00010202
[  140.307879][ T2899] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f0bb639c819
[  140.307892][ T2899] RDX: 00007f0bb71ed140 RSI: 00007f0bb71ed270 RDI: 000000000000000b
[  140.307905][ T2899] RBP: 00007f0bb6432c91 R08: 0000000000000000 R09: 0000000000000000
[  140.307917][ T2899] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  140.307929][ T2899] R13: 00007f0bb6616218 R14: 00007f0bb6616180 R15: 00007ffccc314398
[  140.307945][ T2899]  </TASK>
[  140.366480][  T412] usb 4-1: Using ep0 maxpacket: 32
[  140.374124][ T2899] memory: usage 287680kB, limit 307200kB, failcnt 28482
[  140.387571][  T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.390365][ T2899] memory+swap: usage 406768kB, limit 9007199254740988kB, failcnt 0
[  140.396685][  T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.405959][ T2899] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  140.410899][  T412] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  140.416164][ T2899] Memory cgroup stats for 
[  140.426493][  T412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.431830][ T2899] /syz2
[  140.451222][  T412] usb 4-1: config 0 descriptor??
[  140.453438][ T2899] :
[  140.467560][  T412] hub 4-1:0.0: USB hub found
[  140.475361][ T2899] cache 284594176
[  140.679946][  T412] hub 4-1:0.0: 3 ports detected
[  140.684257][ T2899] rss 122880
[  140.855611][ T2899] rss_huge 0
[  140.859013][ T2899] shmem 284594176
[  140.862683][ T2899] mapped_file 0
[  140.866169][ T2899] dirty 0
[  140.869248][ T2899] writeback 0
[  140.872573][ T2899] workingset_refault_anon 1321
[  140.877574][ T2899] workingset_refault_file 1636
[  140.882358][ T2899] swap 122953728
[  140.885938][ T2899] swapcached 0
[  140.889370][ T2899] pgpgin 230762
[  140.892848][ T2899] pgpgout 161762
[  140.896414][ T2899] pgfault 49668
[  140.900960][ T2899] pgmajfault 269
[  140.904580][ T2899] inactive_anon 277991424
[  140.908982][ T2899] active_anon 6725632
[  140.912974][ T2899] inactive_file 0
[  140.916849][ T2899] active_file 0
[  140.920346][ T2899] unevictable 0
[  140.923856][ T2899] hierarchical_memory_limit 314572800
[  140.930069][ T2899] hierarchical_memsw_limit 9223372036854771712
[  140.933886][  T392] usb 2-1: USB disconnect, device number 79
[  140.936336][ T2899] total_cache 284594176
[  140.936350][ T2899] total_rss 122880
[  140.936359][ T2899] total_rss_huge 0
[  140.936375][ T2899] total_shmem 284594176
[  140.959065][ T2899] total_mapped_file 0
[  140.963158][ T2899] total_dirty 0
[  140.966856][ T2899] total_writeback 0
[  140.970855][ T2899] total_workingset_refault_anon 1321
[  140.976237][ T2899] total_workingset_refault_file 1636
[  140.981923][ T2899] total_swap 122953728
[  140.986012][ T2899] total_swapcached 0
[  140.989964][ T2899] total_pgpgin 230762
[  140.993958][ T2899] total_pgpgout 161762
[  140.998192][ T2899] total_pgfault 49668
[  141.002211][ T2899] total_pgmajfault 269
[  141.006276][ T2899] total_inactive_anon 277991424
[  141.011217][ T2899] total_active_anon 6725632
[  141.015784][ T2899] total_inactive_file 0
[  141.020087][ T2899] total_active_file 0
[  141.024075][ T2899] total_unevictable 0
[  141.028143][ T2899] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.824,pid=2895,uid=0
[  141.043131][ T2899] Memory cgroup out of memory: Killed process 2895 (syz.2.824) total-vm:90504kB, anon-rss:1360kB, file-rss:53680kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000
[  141.088488][  T412] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  141.105149][  T412] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  141.114359][  T412] usbhid 4-1:0.0: can't add hid device: -71
[  141.120736][  T412] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  141.148700][  T412] usb 4-1: USB disconnect, device number 76
[  141.217528][ T2886] syz.2.824 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  141.236025][ T2886] CPU: 0 UID: 0 PID: 2886 Comm: syz.2.824 Not tainted syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c
[  141.236064][ T2886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  141.236078][ T2886] Call Trace:
[  141.236085][ T2886]  <TASK>
[  141.236093][ T2886]  __dump_stack+0x21/0x30
[  141.236123][ T2886]  dump_stack_lvl+0x140/0x1c0
[  141.236150][ T2886]  ? __cfi_dump_stack_lvl+0x10/0x10
[  141.236177][ T2886]  ? ___ratelimit+0x40e/0x5b0
[  141.236210][ T2886]  dump_stack+0x19/0x20
[  141.236235][ T2886]  dump_header+0xd6/0x490
[  141.236260][ T2886]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  141.236286][ T2886]  oom_kill_process+0x35d/0x640
[  141.236319][ T2886]  out_of_memory+0x624/0xa30
[  141.236348][ T2886]  ? __cfi_out_of_memory+0x10/0x10
[  141.236380][ T2886]  ? mutex_lock_killable+0x115/0x1d0
[  141.236403][ T2886]  ? __cfi_mutex_lock_killable+0x10/0x10
[  141.236426][ T2886]  mem_cgroup_out_of_memory+0x2c8/0x390
[  141.236459][ T2886]  ? css_next_descendant_pre+0x202/0x230
[  141.236482][ T2886]  ? drain_obj_stock+0xed0/0xed0
[  141.236511][ T2886]  ? memcg1_oom_prepare+0x2c5/0x3a0
[  141.236541][ T2886]  try_charge_memcg+0x91c/0xe10
[  141.236568][ T2886]  ? __cfi_try_charge_memcg+0x10/0x10
[  141.236594][ T2886]  ? __alloc_pages_noprof+0x35f/0x7e0
[  141.236617][ T2886]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  141.236641][ T2886]  __mem_cgroup_charge+0xfc/0x420
[  141.236678][ T2886]  ? folio_add_lru+0x116/0x400
[  141.236700][ T2886]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  141.236728][ T2886]  shmem_alloc_and_add_folio+0x8e6/0x10b0
[  141.236751][ T2886]  ? put_swap_device+0x130/0x130
[  141.236771][ T2886]  ? shmem_huge_global_enabled+0x2da/0x360
[  141.236803][ T2886]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  141.236833][ T2886]  ? __kasan_check_write+0x18/0x20
[  141.236860][ T2886]  ? _raw_spin_lock+0x92/0x120
[  141.236888][ T2886]  shmem_get_folio_gfp+0x607/0x1390
[  141.236922][ T2886]  ? shmem_get_folio+0xc0/0xc0
[  141.236950][ T2886]  ? follow_page_pte+0x90f/0xbc0
[  141.236974][ T2886]  ? inode_to_bdi+0x6d/0x100
[  141.237000][ T2886]  shmem_write_begin+0xf4/0x270
[  141.237022][ T2886]  generic_perform_write+0x328/0x970
[  141.237049][ T2886]  ? __cfi_generic_perform_write+0x10/0x10
[  141.237074][ T2886]  ? down_write+0xee/0x2b0
[  141.237098][ T2886]  ? file_update_time+0xa3/0x210
[  141.237124][ T2886]  shmem_file_write_iter+0x105/0x130
[  141.237149][ T2886]  __kernel_write_iter+0x42c/0x8a0
[  141.237179][ T2886]  ? __cfi___kernel_write_iter+0x10/0x10
[  141.237207][ T2886]  ? get_dump_page+0x165/0x220
[  141.237231][ T2886]  ? __asan_memset+0x39/0x50
[  141.237259][ T2886]  ? iov_iter_bvec+0xc0/0x180
[  141.237290][ T2886]  dump_user_range+0xb8b/0xe60
[  141.237322][ T2886]  ? __cfi_preempt_schedule_irq+0x10/0x10
[  141.237355][ T2886]  ? __cfi_dump_user_range+0x10/0x10
[  141.237384][ T2886]  ? elf_coredump_extra_notes_write+0x442/0x4d0
[  141.237415][ T2886]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  141.237445][ T2886]  elf_core_dump+0x2e7e/0x3960
[  141.237469][ T2886]  ? __cfi_elf_core_dump+0x10/0x10
[  141.237496][ T2886]  ? dump_interrupted+0xf0/0xf0
[  141.237523][ T2886]  ? filp_open+0x199/0x1f0
[  141.237545][ T2886]  ? 0xffffffffff600000
[  141.237564][ T2886]  do_coredump+0x208a/0x2fe0
[  141.237592][ T2886]  ? __cfi_do_coredump+0x10/0x10
[  141.237617][ T2886]  ? asm_exc_page_fault+0x2b/0x30
[  141.237652][ T2886]  ? __kasan_slab_free+0x6a/0x80
[  141.237682][ T2886]  ? kmem_cache_free+0x1bd/0x4f0
[  141.237713][ T2886]  ? get_signal+0xa74/0x14e0
[  141.237740][ T2886]  get_signal+0x11f8/0x14e0
[  141.237769][ T2886]  arch_do_signal_or_restart+0xbc/0x760
[  141.237800][ T2886]  ? fixup_vdso_exception+0x20d/0x310
[  141.237833][ T2886]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  141.237867][ T2886]  irqentry_exit_to_user_mode+0x4d/0xb0
[  141.237893][ T2886]  irqentry_exit+0x16/0x60
[  141.237917][ T2886]  exc_page_fault+0x65/0xc0
[  141.237940][ T2886]  asm_exc_page_fault+0x2b/0x30
[  141.237967][ T2886] RIP: 0033:0x7f0bb62527e7
[  141.237988][ T2886] Code: e8 8e fa ff ff 89 f2 48 8d 3d 9d 40 1b 00 48 8d 35 7c fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  141.238008][ T2886] RSP: 002b:00007f0bb71ed120 EFLAGS: 00010202
[  141.238030][ T2886] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f0bb639c819
[  141.238046][ T2886] RDX: 00007f0bb71ed140 RSI: 00007f0bb71ed270 RDI: 000000000000000b
[  141.238062][ T2886] RBP: 00007f0bb6432c91 R08: 0000000000000000 R09: 0000000000000000
[  141.238077][ T2886] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  141.238091][ T2886] R13: 00007f0bb6616218 R14: 00007f0bb6616180 R15: 00007ffccc314398
[  141.238111][ T2886]  </TASK>
[  141.527608][ T3055] random: crng reseeded on system resumption
[  141.584323][ T2886] memory: usage 307200kB, limit 307200kB, failcnt 31889
[  141.639659][ T3058] overlayfs: failed to clone upperpath
[  141.640816][ T2886] memory+swap: usage 432104kB, limit 9007199254740988kB, failcnt 0
[  141.715455][ T2886] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  141.722387][ T2886] Memory cgroup stats for /syz2:
[  141.722536][ T2886] cache 314343424
[  141.731144][ T2886] rss 192512
[  141.735841][ T2886] rss_huge 0
[  141.739312][ T2886] shmem 314343424
[  141.743753][ T2886] mapped_file 0
[  141.747508][ T2886] dirty 0
[  141.760230][ T2886] writeback 0
[  141.773176][ T2886] workingset_refault_anon 1329
[  141.778279][ T2886] workingset_refault_file 2724
[  141.783064][ T2886] swap 127934464
[  141.786660][ T2886] swapcached 61440
[  141.790406][ T2886] pgpgin 249151
[  141.793874][ T2886] pgpgout 172862
[  141.797458][ T2886] pgfault 50818
[  141.800930][ T2886] pgmajfault 280
[  141.804491][ T2886] inactive_anon 77205504
[  141.808786][ T2886] active_anon 237367296
[  141.812955][ T2886] inactive_file 0
[  141.816632][ T2886] active_file 0
[  141.820103][ T2886] unevictable 0
[  141.823576][ T2886] hierarchical_memory_limit 314572800
[  141.829093][ T2886] hierarchical_memsw_limit 9223372036854771712
[  141.835254][ T2886] total_cache 314343424
[  141.839462][ T2886] total_rss 192512
[  141.843268][ T2886] total_rss_huge 0
[  141.853685][ T2886] total_shmem 314343424
[  141.861881][ T3066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'.
[  141.863161][ T2886] total_mapped_file 0
[  141.874841][ T2886] total_dirty 0
[  141.878807][ T2886] total_writeback 0
[  141.881410][ T3066] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3066 comm=syz.3.883
[  141.882689][ T2886] total_workingset_refault_anon 1329
[  141.895070][   T36] audit: type=1400 audit(2000000013.140:1091): avc:  denied  { listen } for  pid=3065 comm="syz.3.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  141.900777][ T2886] total_workingset_refault_file 2724
[  141.921820][ T3066] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3066 comm=syz.3.883
[  141.926515][ T2886] total_swap 127934464
[  141.940898][   T36] audit: type=1400 audit(2000000013.200:1092): avc:  denied  { audit_write } for  pid=3065 comm="syz.3.883" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  141.942545][ T2886] total_swapcached 61440
[  141.968100][ T2886] total_pgpgin 249151
[  141.987448][ T2886] total_pgpgout 172862
[  141.998889][ T3077] netlink: 'syz.3.887': attribute type 11 has an invalid length.
[  142.006617][ T2886] total_pgfault 50818
[  142.007460][ T3077] binder: Unknown parameter 'ç*ˆ€fVãŠåŒ„ÝmÑ�œ.íR™6_÷|mfy­]WIòÄà:|a{B>¼û>wÕƒLÈ`0ã‰#p}zæ?SAðUÒ] n4$Äfp£�ZiŸ÷C'©6î+ÅëœÆXè‹'
[  142.022562][ T2886] total_pgmajfault 280
[  142.025388][   T36] audit: type=1400 audit(2000000013.270:1093): avc:  denied  { remount } for  pid=3076 comm="syz.3.887" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  142.028357][  T392] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  142.032380][ T2886] total_inactive_anon 77205504
[  142.061627][ T2886] total_active_anon 237367296
[  142.066343][ T2886] total_inactive_file 0
[  142.070766][ T2886] total_active_file 0
[  142.074780][ T2886] total_unevictable 0
[  142.078960][ T2886] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.824,pid=2890,uid=0
[  142.093997][ T2886] Memory cgroup out of memory: Killed process 2890 (syz.2.824) total-vm:90504kB, anon-rss:1232kB, file-rss:53552kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000
[  142.160878][ T2897] syz.2.824 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  142.173381][ T2897] CPU: 1 UID: 0 PID: 2897 Comm: syz.2.824 Not tainted syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c
[  142.173417][ T2897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  142.173431][ T2897] Call Trace:
[  142.173438][ T2897]  <TASK>
[  142.173447][ T2897]  __dump_stack+0x21/0x30
[  142.173480][ T2897]  dump_stack_lvl+0x140/0x1c0
[  142.173508][ T2897]  ? __cfi_dump_stack_lvl+0x10/0x10
[  142.173535][ T2897]  ? ___ratelimit+0x40e/0x5b0
[  142.173568][ T2897]  dump_stack+0x19/0x20
[  142.173595][ T2897]  dump_header+0xd6/0x490
[  142.173621][ T2897]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  142.173647][ T2897]  oom_kill_process+0x35d/0x640
[  142.173680][ T2897]  out_of_memory+0x624/0xa30
[  142.173720][ T2897]  ? __cfi_out_of_memory+0x10/0x10
[  142.173752][ T2897]  ? mutex_lock_killable+0x115/0x1d0
[  142.173775][ T2897]  ? __cfi_mutex_lock_killable+0x10/0x10
[  142.173800][ T2897]  mem_cgroup_out_of_memory+0x2c8/0x390
[  142.173830][ T2897]  ? css_next_descendant_pre+0x202/0x230
[  142.173854][ T2897]  ? drain_obj_stock+0xed0/0xed0
[  142.173884][ T2897]  ? memcg1_oom_prepare+0x2c5/0x3a0
[  142.173914][ T2897]  try_charge_memcg+0x91c/0xe10
[  142.173941][ T2897]  ? __cfi_try_charge_memcg+0x10/0x10
[  142.173967][ T2897]  ? __alloc_pages_noprof+0x35f/0x7e0
[  142.173994][ T2897]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  142.174021][ T2897]  __mem_cgroup_charge+0xfc/0x420
[  142.174049][ T2897]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  142.174076][ T2897]  ? do_pte_missing+0x1937/0x44f0
[  142.174102][ T2897]  shmem_alloc_and_add_folio+0x8e6/0x10b0
[  142.174127][ T2897]  ? put_swap_device+0x130/0x130
[  142.174148][ T2897]  ? shmem_huge_global_enabled+0x2da/0x360
[  142.174181][ T2897]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  142.174212][ T2897]  ? __kasan_check_write+0x18/0x20
[  142.174242][ T2897]  ? _raw_spin_lock+0x92/0x120
[  142.174270][ T2897]  shmem_get_folio_gfp+0x607/0x1390
[  142.174303][ T2897]  ? shmem_get_folio+0xc0/0xc0
[  142.174333][ T2897]  ? __kasan_check_write+0x18/0x20
[  142.174361][ T2897]  ? inode_to_bdi+0x6d/0x100
[  142.174387][ T2897]  shmem_write_begin+0xf4/0x270
[  142.174409][ T2897]  generic_perform_write+0x328/0x970
[  142.174434][ T2897]  ? inode_update_timestamps+0x4f0/0x700
[  142.174461][ T2897]  ? __cfi_generic_perform_write+0x10/0x10
[  142.174485][ T2897]  ? down_write+0xee/0x2b0
[  142.174508][ T2897]  ? mnt_get_write_access_file+0x1af/0x3b0
[  142.174534][ T2897]  ? mnt_put_write_access_file+0xc2/0x100
[  142.174559][ T2897]  ? file_update_time+0x1de/0x210
[  142.174585][ T2897]  shmem_file_write_iter+0x105/0x130
[  142.174610][ T2897]  __kernel_write_iter+0x42c/0x8a0
[  142.174642][ T2897]  ? __cfi___kernel_write_iter+0x10/0x10
[  142.174671][ T2897]  ? get_dump_page+0x165/0x220
[  142.174695][ T2897]  ? __asan_memset+0x39/0x50
[  142.174731][ T2897]  ? iov_iter_bvec+0xc0/0x180
[  142.174762][ T2897]  dump_user_range+0xb8b/0xe60
[  142.174794][ T2897]  ? __cfi_dump_user_range+0x10/0x10
[  142.174823][ T2897]  ? elf_coredump_extra_notes_write+0x442/0x4d0
[  142.174855][ T2897]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  142.174886][ T2897]  ? elf_core_dump+0x24c0/0x3960
[  142.174909][ T2897]  elf_core_dump+0x2e7e/0x3960
[  142.174935][ T2897]  ? __cfi_elf_core_dump+0x10/0x10
[  142.174964][ T2897]  ? dump_interrupted+0xf0/0xf0
[  142.174991][ T2897]  ? filp_open+0x199/0x1f0
[  142.175015][ T2897]  ? 0xffffffffff600000
[  142.175034][ T2897]  do_coredump+0x208a/0x2fe0
[  142.175065][ T2897]  ? __cfi_do_coredump+0x10/0x10
[  142.175092][ T2897]  ? asm_exc_page_fault+0x2b/0x30
[  142.175128][ T2897]  ? __kasan_slab_free+0x6a/0x80
[  142.175148][ T2897]  ? kmem_cache_free+0x1bd/0x4f0
[  142.175178][ T2897]  ? get_signal+0xa74/0x14e0
[  142.175206][ T2897]  get_signal+0x11f8/0x14e0
[  142.175235][ T2897]  arch_do_signal_or_restart+0xbc/0x760
[  142.175265][ T2897]  ? fixup_vdso_exception+0x20d/0x310
[  142.175297][ T2897]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  142.175331][ T2897]  irqentry_exit_to_user_mode+0x4d/0xb0
[  142.175357][ T2897]  irqentry_exit+0x16/0x60
[  142.175380][ T2897]  exc_page_fault+0x65/0xc0
[  142.175403][ T2897]  asm_exc_page_fault+0x2b/0x30
[  142.175431][ T2897] RIP: 0033:0x7f0bb62527e7
[  142.175451][ T2897] Code: e8 8e fa ff ff 89 f2 48 8d 3d 9d 40 1b 00 48 8d 35 7c fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  142.175470][ T2897] RSP: 002b:00007f0bb71ed120 EFLAGS: 00010202
[  142.175492][ T2897] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f0bb639c819
[  142.175509][ T2897] RDX: 00007f0bb71ed140 RSI: 00007f0bb71ed270 RDI: 000000000000000b
[  142.175526][ T2897] RBP: 00007f0bb6432c91 R08: 0000000000000000 R09: 0000000000000000
[  142.175542][ T2897] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  142.175557][ T2897] R13: 00007f0bb6616218 R14: 00007f0bb6616180 R15: 00007ffccc314398
[  142.175577][ T2897]  </TASK>
[  142.175585][ T2897] memory: usage 307200kB, limit 307200kB, failcnt 32833
[  142.176748][  T392] usb 2-1: Using ep0 maxpacket: 16
[  142.192496][ T2897] memory+swap: usage 432004kB, limit 9007199254740988kB, failcnt 0
[  142.207564][  T392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.209427][ T2897] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  142.212587][  T392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.217994][ T2897] Memory cgroup stats for 
[  142.225908][  T392] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  142.228121][ T2897] /syz2
[  142.231029][  T392] usb 2-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00
[  142.236763][ T2897] :
[  142.241823][  T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.246302][ T2897] cache 314343424
[  142.260240][  T392] usb 2-1: config 0 descriptor??
[  142.262694][ T2897] rss 192512
[  142.306511][   T10] usb 4-1: new low-speed USB device number 77 using dummy_hcd
[  142.310782][ T2897] rss_huge 0
[  142.486477][   T10] usb 4-1: Invalid ep0 maxpacket: 32
[  142.489533][ T2897] shmem 314343424
[  142.626500][   T10] usb 4-1: new low-speed USB device number 78 using dummy_hcd
[  142.630830][ T2897] mapped_file 0
[  142.684327][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.689401][ T2897] dirty 0
[  142.689419][ T2897] writeback 0
[  142.689428][ T2897] workingset_refault_anon 1329
[  142.689437][ T2897] workingset_refault_file 2724
[  142.689447][ T2897] swap 127934464
[  142.689456][ T2897] swapcached 61440
[  142.693984][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.706663][ T2897] pgpgin 249151
[  142.706677][ T2897] pgpgout 172862
[  142.709929][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.718476][ T2897] pgfault 50818
[  142.721448][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.728871][ T2897] pgmajfault 280
[  142.732749][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.737458][ T2897] inactive_anon 77205504
[  142.740814][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.748214][ T2897] active_anon 237367296
[  142.748226][ T2897] inactive_file 0
[  142.748233][ T2897] active_file 0
[  142.748241][ T2897] unevictable 0
[  142.751805][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.756743][ T2897] hierarchical_memory_limit 314572800
[  142.760552][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.768004][ T2897] hierarchical_memsw_limit 9223372036854771712
[  142.771688][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.778320][ T2897] total_cache 314343424
[  142.781417][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.784504][ T2897] total_rss 192512
[  142.784515][ T2897] total_rss_huge 0
[  142.784523][ T2897] total_shmem 314343424
[  142.784532][ T2897] total_mapped_file 0
[  142.789633][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.794226][ T2897] total_dirty 0
[  142.798767][   T10] usb 4-1: Invalid ep0 maxpacket: 32
[  142.798908][   T10] usb usb4-port1: attempt power cycle
[  142.799540][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.803838][ T2897] total_writeback 0
[  142.810022][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.813263][ T2897] total_workingset_refault_anon 1329
[  142.816904][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.823664][ T2897] total_workingset_refault_file 2724
[  142.827226][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.833966][ T2897] total_swap 127934464
[  142.837651][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.845280][ T2897] total_swapcached 61440
[  142.850033][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.855564][ T2897] total_pgpgin 249151
[  142.859806][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.863288][ T2897] total_pgpgout 172862
[  142.866933][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.870367][ T2897] total_pgfault 50818
[  142.877675][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.882643][ T2897] total_pgmajfault 280
[  142.890116][ T3063] netlink: 104 bytes leftover after parsing attributes in process `syz.1.882'.
[  142.895853][ T2897] total_inactive_anon 77205504
[  142.908281][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.916494][ T2897] total_active_anon 237367296
[  142.917738][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.921186][ T2897] total_inactive_file 0
[  142.925346][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.925374][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.946487][ T2897] total_active_file 0
[  142.950993][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.966496][ T2897] total_unevictable 0
[  142.968353][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.973474][ T2897] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null)
[  142.980408][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  142.995783][ T2897] ,cpuset=
[  142.996886][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  143.003463][ T2897] syz2,mems_allowed=0,oom_memcg=/syz2
[  143.008123][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  143.025029][ T2897] ,task_memcg=
[  143.026035][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  143.035154][ T2897] /syz2
[  143.036974][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  143.045259][ T2897] ,task=syz.2.824,pid=2893,uid=0
[  143.047976][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  143.051901][ T2897] Memory cgroup out of memory: Killed process 2893 (syz.2.824) total-vm:90504kB, anon-rss:1332kB, file-rss:53676kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000
[  143.060898][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  143.256557][ T3089] IPv6: Can't replace route, no match found
[  143.262677][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  143.269762][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  143.277157][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  143.284245][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  143.291300][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  143.298380][   T10] usb 4-1: new low-speed USB device number 79 using dummy_hcd
[  143.309957][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  143.316994][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  143.324065][  T392] wacom 0003:056A:003F.001C: unknown main item tag 0x0
[  143.331110][   T10] usb 4-1: Invalid ep0 maxpacket: 32
[  143.343283][  T392] wacom 0003:056A:003F.001C: hidraw0: USB HID vff.fe Device [HID 056a:003f] on usb-dummy_hcd.1-1/input0
[  143.361204][ T3092] netlink: 'syz.0.893': attribute type 1 has an invalid length.
[  143.466502][   T10] usb 4-1: new low-speed USB device number 80 using dummy_hcd
[  143.486929][   T10] usb 4-1: Invalid ep0 maxpacket: 32
[  143.492438][   T10] usb usb4-port1: unable to enumerate USB device
[  143.566937][ T3097] fuse: Bad value for 'fd'
[  143.629651][ T3100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.643788][ T3100] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.749870][  T584] usb 2-1: USB disconnect, device number 80
[  144.019506][ T2879] syz.2.824 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  144.126491][  T584] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  144.143472][ T2879] CPU: 0 UID: 0 PID: 2879 Comm: syz.2.824 Not tainted syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c
[  144.143510][ T2879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  144.143525][ T2879] Call Trace:
[  144.143532][ T2879]  <TASK>
[  144.143541][ T2879]  __dump_stack+0x21/0x30
[  144.143574][ T2879]  dump_stack_lvl+0x140/0x1c0
[  144.143600][ T2879]  ? __cfi_dump_stack_lvl+0x10/0x10
[  144.143628][ T2879]  ? ___ratelimit+0x40e/0x5b0
[  144.143669][ T2879]  dump_stack+0x19/0x20
[  144.143695][ T2879]  dump_header+0xd6/0x490
[  144.143720][ T2879]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  144.143745][ T2879]  oom_kill_process+0x35d/0x640
[  144.143777][ T2879]  out_of_memory+0x624/0xa30
[  144.143807][ T2879]  ? __cfi_out_of_memory+0x10/0x10
[  144.143837][ T2879]  ? mutex_lock_killable+0x97/0x1d0
[  144.143859][ T2879]  ? __cfi_mutex_lock_killable+0x10/0x10
[  144.143882][ T2879]  mem_cgroup_out_of_memory+0x2c8/0x390
[  144.143912][ T2879]  ? css_next_descendant_pre+0x202/0x230
[  144.143937][ T2879]  ? drain_obj_stock+0xed0/0xed0
[  144.143968][ T2879]  ? memcg1_oom_prepare+0x2c5/0x3a0
[  144.143997][ T2879]  try_charge_memcg+0x91c/0xe10
[  144.144023][ T2879]  ? __cfi_try_charge_memcg+0x10/0x10
[  144.144047][ T2879]  ? __alloc_pages_noprof+0x35f/0x7e0
[  144.144073][ T2879]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  144.144098][ T2879]  __mem_cgroup_charge+0xfc/0x420
[  144.144125][ T2879]  ? folio_add_lru+0x116/0x400
[  144.144146][ T2879]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  144.144175][ T2879]  shmem_alloc_and_add_folio+0x8e6/0x10b0
[  144.144200][ T2879]  ? put_swap_device+0x130/0x130
[  144.144221][ T2879]  ? shmem_huge_global_enabled+0x2da/0x360
[  144.144253][ T2879]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  144.144284][ T2879]  ? __kasan_check_write+0x18/0x20
[  144.144312][ T2879]  ? _raw_spin_lock+0x92/0x120
[  144.144339][ T2879]  shmem_get_folio_gfp+0x607/0x1390
[  144.144372][ T2879]  ? shmem_get_folio+0xc0/0xc0
[  144.144399][ T2879]  ? follow_page_pte+0x90f/0xbc0
[  144.144423][ T2879]  ? inode_to_bdi+0x6d/0x100
[  144.144449][ T2879]  shmem_write_begin+0xf4/0x270
[  144.144470][ T2879]  generic_perform_write+0x328/0x970
[  144.144497][ T2879]  ? __cfi_generic_perform_write+0x10/0x10
[  144.144527][ T2879]  ? down_write+0xee/0x2b0
[  144.144552][ T2879]  ? file_update_time+0xa3/0x210
[  144.144577][ T2879]  shmem_file_write_iter+0x105/0x130
[  144.144601][ T2879]  __kernel_write_iter+0x42c/0x8a0
[  144.144630][ T2879]  ? __cfi___kernel_write_iter+0x10/0x10
[  144.144665][ T2879]  ? get_dump_page+0x165/0x220
[  144.144688][ T2879]  ? __asan_memset+0x39/0x50
[  144.144716][ T2879]  ? iov_iter_bvec+0xc0/0x180
[  144.144748][ T2879]  dump_user_range+0xb8b/0xe60
[  144.144780][ T2879]  ? __cfi_dump_user_range+0x10/0x10
[  144.144809][ T2879]  ? elf_coredump_extra_notes_write+0x442/0x4d0
[  144.144839][ T2879]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  144.144869][ T2879]  ? elf_core_dump+0x24c0/0x3960
[  144.144891][ T2879]  elf_core_dump+0x2e7e/0x3960
[  144.144913][ T2879]  ? __cfi_elf_core_dump+0x10/0x10
[  144.144938][ T2879]  ? dump_interrupted+0xf0/0xf0
[  144.144962][ T2879]  ? filp_open+0x199/0x1f0
[  144.144983][ T2879]  ? 0xffffffffff600000
[  144.144998][ T2879]  do_coredump+0x208a/0x2fe0
[  144.145026][ T2879]  ? __cfi_do_coredump+0x10/0x10
[  144.145053][ T2879]  ? asm_exc_page_fault+0x2b/0x30
[  144.145089][ T2879]  ? __kasan_slab_free+0x6a/0x80
[  144.145111][ T2879]  ? kmem_cache_free+0x1bd/0x4f0
[  144.145140][ T2879]  ? get_signal+0xa74/0x14e0
[  144.145167][ T2879]  get_signal+0x11f8/0x14e0
[  144.145195][ T2879]  arch_do_signal_or_restart+0xbc/0x760
[  144.145225][ T2879]  ? fixup_vdso_exception+0x20d/0x310
[  144.145257][ T2879]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  144.145290][ T2879]  irqentry_exit_to_user_mode+0x4d/0xb0
[  144.145315][ T2879]  irqentry_exit+0x16/0x60
[  144.145338][ T2879]  exc_page_fault+0x65/0xc0
[  144.145361][ T2879]  asm_exc_page_fault+0x2b/0x30
[  144.145387][ T2879] RIP: 0033:0x7f0bb62527e7
[  144.145406][ T2879] Code: e8 8e fa ff ff 89 f2 48 8d 3d 9d 40 1b 00 48 8d 35 7c fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  144.145425][ T2879] RSP: 002b:00007f0bb71ed120 EFLAGS: 00010202
[  144.145447][ T2879] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f0bb639c819
[  144.145463][ T2879] RDX: 00007f0bb71ed140 RSI: 00007f0bb71ed270 RDI: 000000000000000b
[  144.145479][ T2879] RBP: 00007f0bb6432c91 R08: 0000000000000000 R09: 0000000000000000
[  144.145494][ T2879] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  144.145509][ T2879] R13: 00007f0bb6616218 R14: 00007f0bb6616180 R15: 00007ffccc314398
[  144.145528][ T2879]  </TASK>
[  144.592962][  T584] usb 2-1: Using ep0 maxpacket: 16
[  144.599909][  T584] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32
[  144.609824][  T584] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 64
[  144.619978][  T584] usb 2-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  144.646507][  T584] usb 2-1: config 1 interface 0 has no altsetting 0
[  144.656088][  T584] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  144.665255][  T584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.673601][  T584] usb 2-1: Product: ⯄鼧꒯扣ྺ競
[  144.682187][  T584] usb 2-1: Manufacturer: �覮ῆ뗥妓〹��㘇铰⢣蔕讫煱ꌼ�蔲쵸⧃೿�㛋㩬὾ꋰ짷鉚ꭜ佖햗ᘴ툊ѧ鵟�㸢㶨콺橧ꡋ㼗�꘷軟懓€䃾�勽涢莊㭒ﭻⅢレᖉ�ჩ뾎䡛ૡ�᧴⟤鮮蛅䱹n䠓榘셎崙ଞꞰ�霼꠬⺚閵죓걕럛瘻﬋�鲥얜뢧䂷熂죷ި縨�葤㻡ⴒ未슻�ᘖ缵த�
[  144.726414][ T3105] netlink: 165 bytes leftover after parsing attributes in process `syz.0.898'.
[  144.735771][ T2879] memory: usage 307200kB, limit 307200kB, failcnt 36447
[  144.767548][ T2879] memory+swap: usage 432140kB, limit 9007199254740988kB, failcnt 0
[  144.797927][ T2879] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  144.801910][ T3100] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  144.805059][ T2879] Memory cgroup stats for /syz2:
[  144.812211][ T2879] cache 314281984
[  144.812580][ T3100] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  144.817365][ T2879] rss 200704
[  144.831447][ T2879] rss_huge 0
[  144.834661][ T2879] shmem 314167296
[  144.838336][ T2879] mapped_file 0
[  144.841813][ T2879] dirty 0
[  144.844763][ T2879] writeback 8192
[  144.848352][ T2879] workingset_refault_anon 1337
[  144.853138][ T2879] workingset_refault_file 5244
[  144.857959][ T2879] swap 127938560
[  144.861602][ T2879] swapcached 53248
[  144.865329][ T2879] pgpgin 270905
[  144.868864][ T2879] pgpgout 194629
[  144.872475][ T2879] pgfault 52327
[  144.875948][ T2879] pgmajfault 336
[  144.879539][ T2879] inactive_anon 19877888
[  144.883794][ T2879] active_anon 294264832
[  144.887992][ T2879] inactive_file 0
[  144.891636][ T2879] active_file 0
[  144.895107][ T2879] unevictable 0
[  144.898606][ T2879] hierarchical_memory_limit 314572800
[  144.903987][ T2879] hierarchical_memsw_limit 9223372036854771712
[  144.910179][ T2879] total_cache 314281984
[  144.914347][ T2879] total_rss 200704
[  144.918202][ T2879] total_rss_huge 0
[  144.921929][ T2879] total_shmem 314167296
[  144.926155][ T2879] total_mapped_file 0
[  144.930835][ T2879] total_dirty 0
[  144.934318][ T2879] total_writeback 8192
[  144.938534][ T2879] total_workingset_refault_anon 1337
[  144.943923][ T2879] total_workingset_refault_file 5244
[  144.949255][ T2879] total_swap 127938560
[  144.953342][ T2879] total_swapcached 53248
[  144.957793][ T2879] total_pgpgin 270905
[  144.961792][ T2879] total_pgpgout 194629
[  144.965877][ T2879] total_pgfault 52327
[  144.969902][ T2879] total_pgmajfault 336
[  144.974071][ T2879] total_inactive_anon 19877888
[  144.978896][ T2879] total_active_anon 294264832
[  144.983582][ T2879] total_inactive_file 0
[  144.987788][ T2879] total_active_file 0
[  144.991783][ T2879] total_unevictable 0
[  144.995827][ T2879] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.824,pid=2898,uid=0
[  145.010807][ T2879] Memory cgroup out of memory: Killed process 2898 (syz.2.824) total-vm:90504kB, anon-rss:1232kB, file-rss:53584kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000
[  145.034412][  T584] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[  145.049539][  T584] usb 2-1: USB disconnect, device number 81
[  145.081497][ T3108] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  145.081623][ T3108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:481
[  145.413143][ T2886] syz.2.824 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  145.476362][ T2886] CPU: 1 UID: 0 PID: 2886 Comm: syz.2.824 Not tainted syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c
[  145.476404][ T2886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  145.476419][ T2886] Call Trace:
[  145.476428][ T2886]  <TASK>
[  145.476442][ T2886]  __dump_stack+0x21/0x30
[  145.476475][ T2886]  dump_stack_lvl+0x140/0x1c0
[  145.476504][ T2886]  ? __cfi_dump_stack_lvl+0x10/0x10
[  145.476531][ T2886]  ? ___ratelimit+0x40e/0x5b0
[  145.476565][ T2886]  dump_stack+0x19/0x20
[  145.476589][ T2886]  dump_header+0xd6/0x490
[  145.476617][ T2886]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  145.476653][ T2886]  oom_kill_process+0x35d/0x640
[  145.476688][ T2886]  out_of_memory+0x624/0xa30
[  145.476719][ T2886]  ? __cfi_out_of_memory+0x10/0x10
[  145.476752][ T2886]  ? mutex_lock_killable+0x97/0x1d0
[  145.476775][ T2886]  ? __cfi_mutex_lock_killable+0x10/0x10
[  145.476801][ T2886]  mem_cgroup_out_of_memory+0x2c8/0x390
[  145.476833][ T2886]  ? css_next_descendant_pre+0x202/0x230
[  145.476858][ T2886]  ? drain_obj_stock+0xed0/0xed0
[  145.476889][ T2886]  ? memcg1_oom_prepare+0x2c5/0x3a0
[  145.476922][ T2886]  try_charge_memcg+0x91c/0xe10
[  145.476949][ T2886]  ? __cfi_try_charge_memcg+0x10/0x10
[  145.476974][ T2886]  ? __alloc_pages_noprof+0x35f/0x7e0
[  145.477003][ T2886]  ? folio_unlock+0x137/0x1b0
[  145.477022][ T2886]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  145.477051][ T2886]  __mem_cgroup_charge+0xfc/0x420
[  145.477080][ T2886]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  145.477107][ T2886]  ? do_pte_missing+0x1937/0x44f0
[  145.477133][ T2886]  shmem_alloc_and_add_folio+0x8e6/0x10b0
[  145.477157][ T2886]  ? put_swap_device+0x130/0x130
[  145.477180][ T2886]  ? shmem_huge_global_enabled+0x2da/0x360
[  145.477213][ T2886]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  145.477246][ T2886]  ? __kasan_check_write+0x18/0x20
[  145.477274][ T2886]  ? _raw_spin_lock+0x92/0x120
[  145.477305][ T2886]  shmem_get_folio_gfp+0x607/0x1390
[  145.477339][ T2886]  ? shmem_get_folio+0xc0/0xc0
[  145.477368][ T2886]  ? __kasan_check_write+0x18/0x20
[  145.477398][ T2886]  ? inode_to_bdi+0x6d/0x100
[  145.477421][ T2886]  shmem_write_begin+0xf4/0x270
[  145.477441][ T2886]  generic_perform_write+0x328/0x970
[  145.477465][ T2886]  ? inode_update_timestamps+0x4f0/0x700
[  145.477489][ T2886]  ? __cfi_generic_perform_write+0x10/0x10
[  145.477516][ T2886]  ? down_write+0xee/0x2b0
[  145.477540][ T2886]  ? mnt_get_write_access_file+0x1af/0x3b0
[  145.477565][ T2886]  ? mnt_put_write_access_file+0xc2/0x100
[  145.477591][ T2886]  ? file_update_time+0x1de/0x210
[  145.477616][ T2886]  shmem_file_write_iter+0x105/0x130
[  145.477652][ T2886]  __kernel_write_iter+0x42c/0x8a0
[  145.477685][ T2886]  ? __cfi___kernel_write_iter+0x10/0x10
[  145.477715][ T2886]  ? get_dump_page+0x165/0x220
[  145.477738][ T2886]  ? __asan_memset+0x39/0x50
[  145.477768][ T2886]  ? iov_iter_bvec+0xc0/0x180
[  145.477800][ T2886]  dump_user_range+0xb8b/0xe60
[  145.477831][ T2886]  ? __cfi_preempt_schedule_irq+0x10/0x10
[  145.477865][ T2886]  ? __cfi_dump_user_range+0x10/0x10
[  145.477897][ T2886]  ? elf_coredump_extra_notes_write+0x442/0x4d0
[  145.477929][ T2886]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  145.477959][ T2886]  elf_core_dump+0x2e7e/0x3960
[  145.477988][ T2886]  ? __cfi_elf_core_dump+0x10/0x10
[  145.478015][ T2886]  ? dump_interrupted+0xf0/0xf0
[  145.478043][ T2886]  ? filp_open+0x199/0x1f0
[  145.478069][ T2886]  ? 0xffffffffff600000
[  145.478086][ T2886]  do_coredump+0x208a/0x2fe0
[  145.478119][ T2886]  ? __cfi_do_coredump+0x10/0x10
[  145.478147][ T2886]  ? asm_exc_page_fault+0x2b/0x30
[  145.478183][ T2886]  ? __kasan_slab_free+0x6a/0x80
[  145.478205][ T2886]  ? kmem_cache_free+0x1bd/0x4f0
[  145.478237][ T2886]  ? get_signal+0xa74/0x14e0
[  145.478265][ T2886]  get_signal+0x11f8/0x14e0
[  145.478294][ T2886]  arch_do_signal_or_restart+0xbc/0x760
[  145.478328][ T2886]  ? fixup_vdso_exception+0x20d/0x310
[  145.478361][ T2886]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  145.478393][ T2886]  irqentry_exit_to_user_mode+0x4d/0xb0
[  145.478422][ T2886]  irqentry_exit+0x16/0x60
[  145.478446][ T2886]  exc_page_fault+0x65/0xc0
[  145.478469][ T2886]  asm_exc_page_fault+0x2b/0x30
[  145.478497][ T2886] RIP: 0033:0x7f0bb62527e7
[  145.478517][ T2886] Code: e8 8e fa ff ff 89 f2 48 8d 3d 9d 40 1b 00 48 8d 35 7c fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  145.478535][ T2886] RSP: 002b:00007f0bb71ed120 EFLAGS: 00010202
[  145.478556][ T2886] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f0bb639c819
[  145.478572][ T2886] RDX: 00007f0bb71ed140 RSI: 00007f0bb71ed270 RDI: 000000000000000b
[  145.478586][ T2886] RBP: 00007f0bb6432c91 R08: 0000000000000000 R09: 0000000000000000
[  145.478602][ T2886] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  145.478617][ T2886] R13: 00007f0bb6616218 R14: 00007f0bb6616180 R15: 00007ffccc314398
[  145.478645][ T2886]  </TASK>
[  145.965162][ T2886] memory: usage 307200kB, limit 307200kB, failcnt 38341
[  145.975139][ T2886] memory+swap: usage 432008kB, limit 9007199254740988kB, failcnt 0
[  145.987938][ T2886] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  146.031924][ T2886] Memory cgroup stats for /syz2:
[  146.032086][ T2886] cache 305250304
[  146.046502][ T2886] rss 196608
[  146.049742][ T2886] rss_huge 0
[  146.066483][ T2886] shmem 304709632
[  146.070157][ T2886] mapped_file 258048
[  146.079948][ T2886] dirty 0
[  146.083025][ T2886] writeback 4096
[  146.089371][ T2886] workingset_refault_anon 1337
[  146.094235][ T2886] workingset_refault_file 5526
[  146.099308][ T2886] swap 124690432
[  146.102872][ T2886] swapcached 32768
[  146.107382][ T2886] pgpgin 271276
[  146.111021][ T2886] pgpgout 197211
[  146.114654][ T2886] pgfault 52356
[  146.118518][ T2886] pgmajfault 356
[  146.122192][ T2886] inactive_anon 32727040
[  146.126725][ T2886] active_anon 272130048
[  146.130914][ T2886] inactive_file 0
[  146.134648][ T2886] active_file 487424
[  146.139431][ T2886] unevictable 0
[  146.142934][ T2886] hierarchical_memory_limit 314572800
[  146.148597][ T2886] hierarchical_memsw_limit 9223372036854771712
[  146.154858][ T2886] total_cache 305250304
[  146.159475][ T2886] total_rss 196608
[  146.163223][ T2886] total_rss_huge 0
[  146.167495][ T2886] total_shmem 304709632
[  146.171727][ T2886] total_mapped_file 258048
[  146.176256][ T2886] total_dirty 0
[  146.180055][ T2886] total_writeback 4096
[  146.184203][ T2886] total_workingset_refault_anon 1337
[  146.189806][ T2886] total_workingset_refault_file 5526
[  146.195186][ T2886] total_swap 124690432
[  146.199645][ T2886] total_swapcached 32768
[  146.203905][ T2886] total_pgpgin 271276
[  146.208159][ T2886] total_pgpgout 197211
[  146.212247][ T2886] total_pgfault 52356
[  146.216245][ T2886] total_pgmajfault 356
[  146.220727][ T2886] total_inactive_anon 32727040
[  146.225512][ T2886] total_active_anon 272130048
[  146.230713][ T2886] total_inactive_file 0
[  146.234889][ T2886] total_active_file 487424
[  146.239865][ T2886] total_unevictable 0
[  146.244186][ T2886] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.824,pid=2899,uid=0
[  146.259320][ T2886] Memory cgroup out of memory: Killed process 2899 (syz.2.824) total-vm:90504kB, anon-rss:1232kB, file-rss:53688kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000
[  146.266485][   T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  146.447283][   T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  146.455647][   T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  146.485037][   T10] usb 2-1: config 220 has an invalid descriptor of length 80, skipping remainder of the config
[  146.505701][   T10] usb 2-1: config 220 has no interface number 2
[  146.516517][   T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  146.559457][   T10] usb 2-1: config 220 interface 0 has no altsetting 0
[  146.566318][   T10] usb 2-1: config 220 interface 76 has no altsetting 0
[  146.579713][   T10] usb 2-1: config 220 interface 1 has no altsetting 0
[  146.591370][ T3127] batadv_slave_0: entered promiscuous mode
[  146.592756][   T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  146.606519][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.614707][   T10] usb 2-1: Product: syz
[  146.619436][   T10] usb 2-1: Manufacturer: syz
[  146.624088][   T10] usb 2-1: SerialNumber: syz
[  146.630777][ T3127] futex_wake_op: syz.3.906 tries to shift op by -1; fix this program
[  146.659117][  T292] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  146.691699][  T292] CPU: 0 UID: 0 PID: 292 Comm: syz-executor Not tainted syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c
[  146.691746][  T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  146.691761][  T292] Call Trace:
[  146.691768][  T292]  <TASK>
[  146.691778][  T292]  __dump_stack+0x21/0x30
[  146.691811][  T292]  dump_stack_lvl+0x140/0x1c0
[  146.691839][  T292]  ? __cfi_dump_stack_lvl+0x10/0x10
[  146.691866][  T292]  ? ___ratelimit+0x40e/0x5b0
[  146.691899][  T292]  dump_stack+0x19/0x20
[  146.691925][  T292]  dump_header+0xd6/0x490
[  146.691950][  T292]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  146.691976][  T292]  oom_kill_process+0x35d/0x640
[  146.692009][  T292]  out_of_memory+0x624/0xa30
[  146.692041][  T292]  ? __cfi_out_of_memory+0x10/0x10
[  146.692072][  T292]  ? mutex_lock_killable+0x97/0x1d0
[  146.692095][  T292]  ? __cfi_mutex_lock_killable+0x10/0x10
[  146.692120][  T292]  mem_cgroup_out_of_memory+0x2c8/0x390
[  146.692151][  T292]  ? css_next_descendant_pre+0x202/0x230
[  146.692177][  T292]  ? drain_obj_stock+0xed0/0xed0
[  146.692207][  T292]  ? memcg1_oom_prepare+0x2c5/0x3a0
[  146.692238][  T292]  try_charge_memcg+0x91c/0xe10
[  146.692263][  T292]  ? gfp_to_alloc_flags_cma+0x96/0x1c0
[  146.692293][  T292]  ? __cfi_try_charge_memcg+0x10/0x10
[  146.692319][  T292]  ? __alloc_pages_noprof+0x35f/0x7e0
[  146.692346][  T292]  __mem_cgroup_charge+0xfc/0x420
[  146.692375][  T292]  ? filemap_get_entry+0x41b/0x490
[  146.692396][  T292]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  146.692425][  T292]  filemap_add_folio+0x57/0x2d0
[  146.692466][  T292]  __filemap_get_folio+0x5f0/0xba0
[  146.692489][  T292]  ? __cfi___filemap_get_folio+0x10/0x10
[  146.692511][  T292]  ? filemap_map_pages+0x1666/0x1a10
[  146.692535][  T292]  ? filemap_fault_recheck_pte_none+0x78/0x250
[  146.692560][  T292]  filemap_fault+0xbcb/0x1b40
[  146.692584][  T292]  ? __cfi_filemap_fault+0x10/0x10
[  146.692606][  T292]  ? psi_task_switch+0x59e/0xa10
[  146.692632][  T292]  ? __cfi_filemap_map_pages+0x10/0x10
[  146.692657][  T292]  ? __schedule+0x13a1/0x1fa0
[  146.692688][  T292]  do_pte_missing+0x9b3/0x44f0
[  146.692712][  T292]  ? enqueue_hrtimer+0x12f/0x2e0
[  146.692741][  T292]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  146.692772][  T292]  ? pte_marker_clear+0x1b0/0x1b0
[  146.692795][  T292]  ? __kasan_check_write+0x18/0x20
[  146.692822][  T292]  ? _raw_spin_lock_irqsave+0xc1/0x160
[  146.692851][  T292]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  146.692881][  T292]  ? __pte_offset_map+0x1b0/0x230
[  146.692909][  T292]  ? pte_offset_map_rw_nolock+0xba/0x110
[  146.692937][  T292]  handle_mm_fault+0x11b8/0x1bf0
[  146.692962][  T292]  ? __cfi_handle_mm_fault+0x10/0x10
[  146.692982][  T292]  ? lock_vma_under_rcu+0x4d1/0x590
[  146.693005][  T292]  ? __cfi___x64_sys_wait4+0x10/0x10
[  146.693035][  T292]  do_user_addr_fault+0x963/0x11e0
[  146.693067][  T292]  exc_page_fault+0x58/0xc0
[  146.693090][  T292]  asm_exc_page_fault+0x2b/0x30
[  146.693118][  T292] RIP: 0033:0x7f0bb626a834
[  146.693138][  T292] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 80 af ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 79 ae ed 00 48 01 d1
[  146.693158][  T292] RSP: 002b:00007ffccc314700 EFLAGS: 00010206
[  146.693181][  T292] RAX: 0000001b2ec24000 RBX: 00000000000001dc RCX: 0000000000023a50
[  146.693198][  T292] RDX: 0000000001a5c306 RSI: 00007ffccc314790 RDI: 0000000000000001
[  146.693215][  T292] RBP: 00007ffccc31473c R08: 000000000648e4c8 R09: 7fffffffffffffff
[  146.693231][  T292] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  146.693247][  T292] R13: 00000000000927c0 R14: 0000000000023a7c R15: 00007ffccc314790
[  146.693266][  T292]  </TASK>
[  146.693292][  T292] memory: usage 307200kB, limit 307200kB, failcnt 39854
[  147.056113][  T292] memory+swap: usage 431772kB, limit 9007199254740988kB, failcnt 0
[  147.064433][  T292] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  147.071897][  T292] Memory cgroup stats for /syz2:
[  147.072027][  T292] cache 313962496
[  147.072906][   T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  147.077365][  T292] rss 208896
[  147.080735][   T10] usb 2-1: No valid video chain found.
[  147.080783][   T10] usb 2-1: selecting invalid altsetting 0
[  147.087657][  T292] rss_huge 0
[  147.105363][  T292] shmem 313962496
[  147.109117][   T10] usb 2-1: USB disconnect, device number 82
[  147.115958][  T292] mapped_file 4096
[  147.120462][  T292] dirty 0
[  147.124636][ T3126] batadv_slave_0: left promiscuous mode
[  147.129796][  T292] writeback 0
[  147.133836][  T292] workingset_refault_anon 1345
[  147.141079][  T292] workingset_refault_file 6940
[  147.145895][  T292] swap 127561728
[  147.149603][  T292] swapcached 425984
[  147.153500][  T292] pgpgin 289937
[  147.157063][  T292] pgpgout 213648
[  147.160623][  T292] pgfault 52719
[  147.164065][  T292] pgmajfault 366
[  147.167658][  T292] inactive_anon 298729472
[  147.171995][  T292] active_anon 15843328
[  147.176047][  T292] inactive_file 0
[  147.179808][  T292] active_file 0
[  147.183303][  T292] unevictable 0
[  147.186840][  T292] hierarchical_memory_limit 314572800
[  147.192385][  T292] hierarchical_memsw_limit 9223372036854771712
[  147.198641][  T292] total_cache 313962496
[  147.202803][  T292] total_rss 208896
[  147.206607][  T292] total_rss_huge 0
[  147.210384][  T292] total_shmem 313962496
[  147.214557][  T292] total_mapped_file 4096
[  147.219008][  T292] total_dirty 0
[  147.222487][  T292] total_writeback 0
[  147.226284][  T292] total_workingset_refault_anon 1345
[  147.231798][  T292] total_workingset_refault_file 6940
[  147.237179][  T292] total_swap 127561728
[  147.241246][  T292] total_swapcached 425984
[  147.245560][  T292] total_pgpgin 289937
[  147.249608][  T292] total_pgpgout 213648
[  147.253686][  T292] total_pgfault 52719
[  147.257711][  T292] total_pgmajfault 366
[  147.264299][  T292] total_inactive_anon 298729472
[  147.268052][ T3133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:493
[  147.269225][  T292] total_active_anon 15843328
[  147.284795][  T292] total_inactive_file 0
[  147.289096][  T292] total_active_file 0
[  147.293099][  T292] total_unevictable 0
[  147.297173][  T292] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.824,pid=2879,uid=0
[  147.312010][  T292] Memory cgroup out of memory: Killed process 2879 (syz.2.824) total-vm:90504kB, anon-rss:1232kB, file-rss:54400kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000
[  147.420023][ T2897] syz.2.824 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  147.440095][ T2897] CPU: 1 UID: 0 PID: 2897 Comm: syz.2.824 Not tainted syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c
[  147.440135][ T2897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  147.440149][ T2897] Call Trace:
[  147.440156][ T2897]  <TASK>
[  147.440165][ T2897]  __dump_stack+0x21/0x30
[  147.440196][ T2897]  dump_stack_lvl+0x140/0x1c0
[  147.440223][ T2897]  ? __cfi_dump_stack_lvl+0x10/0x10
[  147.440249][ T2897]  ? ___ratelimit+0x40e/0x5b0
[  147.440286][ T2897]  dump_stack+0x19/0x20
[  147.440312][ T2897]  dump_header+0xd6/0x490
[  147.440337][ T2897]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  147.440380][ T2897]  oom_kill_process+0x35d/0x640
[  147.440413][ T2897]  out_of_memory+0x624/0xa30
[  147.440444][ T2897]  ? __cfi_out_of_memory+0x10/0x10
[  147.440476][ T2897]  ? mutex_lock_killable+0x97/0x1d0
[  147.440499][ T2897]  ? __cfi_mutex_lock_killable+0x10/0x10
[  147.440524][ T2897]  mem_cgroup_out_of_memory+0x2c8/0x390
[  147.440555][ T2897]  ? css_next_descendant_pre+0x202/0x230
[  147.440579][ T2897]  ? drain_obj_stock+0xed0/0xed0
[  147.440608][ T2897]  ? memcg1_oom_prepare+0x2c5/0x3a0
[  147.440637][ T2897]  try_charge_memcg+0x91c/0xe10
[  147.440671][ T2897]  ? __cfi_try_charge_memcg+0x10/0x10
[  147.440696][ T2897]  ? __alloc_pages_noprof+0x35f/0x7e0
[  147.440728][ T2897]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  147.440753][ T2897]  __mem_cgroup_charge+0xfc/0x420
[  147.440780][ T2897]  ? folio_add_lru+0x116/0x400
[  147.440800][ T2897]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  147.440829][ T2897]  shmem_alloc_and_add_folio+0x8e6/0x10b0
[  147.440853][ T2897]  ? put_swap_device+0x130/0x130
[  147.440873][ T2897]  ? shmem_huge_global_enabled+0x2da/0x360
[  147.440905][ T2897]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  147.440936][ T2897]  ? __kasan_check_write+0x18/0x20
[  147.440963][ T2897]  ? _raw_spin_lock+0x92/0x120
[  147.440990][ T2897]  shmem_get_folio_gfp+0x607/0x1390
[  147.441022][ T2897]  ? shmem_get_folio+0xc0/0xc0
[  147.441050][ T2897]  ? follow_page_pte+0x90f/0xbc0
[  147.441075][ T2897]  ? inode_to_bdi+0x6d/0x100
[  147.441099][ T2897]  shmem_write_begin+0xf4/0x270
[  147.441120][ T2897]  generic_perform_write+0x328/0x970
[  147.441146][ T2897]  ? __cfi_generic_perform_write+0x10/0x10
[  147.441169][ T2897]  ? down_write+0xee/0x2b0
[  147.441192][ T2897]  ? file_update_time+0xa3/0x210
[  147.441216][ T2897]  shmem_file_write_iter+0x105/0x130
[  147.441239][ T2897]  __kernel_write_iter+0x42c/0x8a0
[  147.441268][ T2897]  ? __cfi___kernel_write_iter+0x10/0x10
[  147.441295][ T2897]  ? get_dump_page+0x165/0x220
[  147.441317][ T2897]  ? __asan_memset+0x39/0x50
[  147.441344][ T2897]  ? iov_iter_bvec+0xc0/0x180
[  147.441375][ T2897]  dump_user_range+0xb8b/0xe60
[  147.441406][ T2897]  ? __cfi_dump_user_range+0x10/0x10
[  147.441435][ T2897]  ? elf_coredump_extra_notes_write+0x442/0x4d0
[  147.441474][ T2897]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  147.441503][ T2897]  ? elf_core_dump+0x24c0/0x3960
[  147.441525][ T2897]  elf_core_dump+0x2e7e/0x3960
[  147.441548][ T2897]  ? __cfi_elf_core_dump+0x10/0x10
[  147.441576][ T2897]  ? dump_interrupted+0xf0/0xf0
[  147.441603][ T2897]  ? filp_open+0x199/0x1f0
[  147.441627][ T2897]  ? 0xffffffffff600000
[  147.441653][ T2897]  do_coredump+0x208a/0x2fe0
[  147.441684][ T2897]  ? __cfi_do_coredump+0x10/0x10
[  147.441716][ T2897]  ? asm_exc_page_fault+0x2b/0x30
[  147.441749][ T2897]  ? __kasan_slab_free+0x6a/0x80
[  147.441767][ T2897]  ? kmem_cache_free+0x1bd/0x4f0
[  147.441793][ T2897]  ? get_signal+0xa74/0x14e0
[  147.441818][ T2897]  get_signal+0x11f8/0x14e0
[  147.441846][ T2897]  arch_do_signal_or_restart+0xbc/0x760
[  147.441877][ T2897]  ? fixup_vdso_exception+0x20d/0x310
[  147.441916][ T2897]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  147.441951][ T2897]  irqentry_exit_to_user_mode+0x4d/0xb0
[  147.441977][ T2897]  irqentry_exit+0x16/0x60
[  147.441999][ T2897]  exc_page_fault+0x65/0xc0
[  147.442022][ T2897]  asm_exc_page_fault+0x2b/0x30
[  147.442049][ T2897] RIP: 0033:0x7f0bb62527e7
[  147.442069][ T2897] Code: e8 8e fa ff ff 89 f2 48 8d 3d 9d 40 1b 00 48 8d 35 7c fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  147.442097][ T2897] RSP: 002b:00007f0bb71ed120 EFLAGS: 00010202
[  147.442118][ T2897] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f0bb639c819
[  147.442134][ T2897] RDX: 00007f0bb71ed140 RSI: 00007f0bb71ed270 RDI: 000000000000000b
[  147.442150][ T2897] RBP: 00007f0bb6432c91 R08: 0000000000000000 R09: 0000000000000000
[  147.442166][ T2897] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  147.442181][ T2897] R13: 00007f0bb6616218 R14: 00007f0bb6616180 R15: 00007ffccc314398
[  147.442200][ T2897]  </TASK>
[  147.626526][ T2897] memory: usage 306096kB, limit 307200kB, failcnt 40280
[  147.912051][ T3145] loop7: detected capacity change from 0 to 16384
[  147.927851][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  147.940020][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  147.952063][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  147.964086][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  147.976112][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  147.988128][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  148.000141][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  148.012169][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  148.024187][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  148.036199][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  148.082885][ T2897] memory+swap: usage 429856kB, limit 9007199254740988kB, failcnt 0
[  148.109446][ T2897] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  148.130995][ T2897] Memory cgroup stats for /syz2:
[  148.131159][ T2897] cache 312135680
[  148.150151][ T3145] loop7: detected capacity change from 16384 to 0
[  148.317940][   T36] audit: type=1400 audit(2000000019.570:1094): avc:  denied  { ioctl } for  pid=3147 comm="syz.1.914" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  148.397493][ T2897] rss 53248
[  148.429826][   T36] audit: type=1400 audit(2000000019.690:1095): avc:  denied  { ioctl } for  pid=3150 comm="syz.0.913" path="socket:[22867]" dev="sockfs" ino=22867 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  148.456544][ T2897] rss_huge 0
[  148.464851][ T2897] shmem 312135680
[  148.476506][ T2897] mapped_file 0
[  148.508942][ T2897] dirty 0
[  148.525428][ T2897] writeback 540672
[  148.545655][ T2897] workingset_refault_anon 1345
[  148.568001][ T2897] workingset_refault_file 6941
[  148.617847][   T36] audit: type=1400 audit(2000000019.870:1096): avc:  denied  { mount } for  pid=3161 comm="syz.3.917" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  148.639948][  T392] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  148.648146][ T2897] swap 126779392
[  148.651728][ T2897] swapcached 1216512
[  148.655645][ T2897] pgpgin 291929
[  148.676485][   T36] audit: type=1400 audit(2000000019.880:1097): avc:  denied  { mounton } for  pid=3161 comm="syz.3.917" path="/167/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  148.706694][ T2897] pgpgout 215928
[  148.710276][ T2897] pgfault 52726
[  148.713760][ T2897] pgmajfault 366
[  148.744953][ T2897] inactive_anon 72171520
[  148.761807][   T36] audit: type=1400 audit(2000000020.020:1098): avc:  denied  { unmount } for  pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  148.796497][  T392] usb 2-1: device descriptor read/64, error -71
[  148.806521][ T2897] active_anon 240697344
[  148.810714][ T2897] inactive_file 0
[  148.839798][ T2897] active_file 0
[  148.843787][ T2897] unevictable 0
[  148.865145][ T2897] hierarchical_memory_limit 314572800
[  148.876519][ T2897] hierarchical_memsw_limit 9223372036854771712
[  148.896495][ T2897] total_cache 312135680
[  148.928010][ T2897] total_rss 53248
[  148.944503][ T2897] total_rss_huge 0
[  148.961335][ T2897] total_shmem 312135680
[  148.965531][ T2897] total_mapped_file 0
[  148.981530][ T2897] total_dirty 0
[  148.985028][ T2897] total_writeback 540672
[  149.015636][ T2897] total_workingset_refault_anon 1345
[  149.026692][ T2897] total_workingset_refault_file 6941
[  149.036629][ T2897] total_swap 126779392
[  149.044143][ T2897] total_swapcached 1216512
[  149.048655][  T392] usb 2-1: device descriptor read/64, error -71
[  149.060399][ T2897] total_pgpgin 291929
[  149.064945][ T2897] total_pgpgout 215928
[  149.069514][ T2897] total_pgfault 52726
[  149.079207][ T2897] total_pgmajfault 366
[  149.083387][ T2897] total_inactive_anon 72171520
[  149.093055][ T2897] total_active_anon 240697344
[  149.098420][ T2897] total_inactive_file 0
[  149.102899][ T2897] total_active_file 0
[  149.107464][ T2897] total_unevictable 0
[  149.111751][ T2897] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.824,pid=2888,uid=0
[  149.127574][ T2897] Memory cgroup out of memory: Killed process 2888 (syz.2.824) total-vm:90504kB, anon-rss:1360kB, file-rss:56164kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000
[  149.186521][   T10] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  149.289173][  T392] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  149.318326][ T3177] overlayfs: failed to clone upperpath
[  149.345137][   T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  149.375343][   T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  149.395684][   T10] usb 4-1: config 220 has an invalid descriptor of length 80, skipping remainder of the config
[  149.418197][   T10] usb 4-1: config 220 has no interface number 2
[  149.436513][  T392] usb 2-1: device descriptor read/64, error -71
[  149.448591][   T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  149.494995][   T10] usb 4-1: config 220 interface 0 has no altsetting 0
[  149.506493][  T412] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  149.534456][   T10] usb 4-1: config 220 interface 76 has no altsetting 0
[  149.541467][   T10] usb 4-1: config 220 interface 1 has no altsetting 0
[  149.550417][   T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  149.559637][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.567871][   T10] usb 4-1: Product: syz
[  149.572131][   T10] usb 4-1: Manufacturer: syz
[  149.582234][   T10] usb 4-1: SerialNumber: syz
[  149.666491][  T412] usb 3-1: Using ep0 maxpacket: 32
[  149.676509][  T392] usb 2-1: device descriptor read/64, error -71
[  149.686616][  T412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.706520][  T412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.727255][  T412] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  149.736708][  T412] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.757504][  T412] usb 3-1: config 0 descriptor??
[  149.767735][  T412] hub 3-1:0.0: USB hub found
[  149.787543][  T392] usb usb2-port1: attempt power cycle
[  149.798647][   T10] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  149.805131][   T10] usb 4-1: No valid video chain found.
[  149.815707][   T10] usb 4-1: selecting invalid altsetting 0
[  149.829222][   T10] usb 4-1: USB disconnect, device number 81
[  149.977560][  T412] hub 3-1:0.0: 3 ports detected
[  150.146591][  T392] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  150.177546][  T392] usb 2-1: device descriptor read/8, error -71
[  150.308087][  T392] usb 2-1: device descriptor read/8, error -71
[  150.549634][  T392] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  150.587626][  T392] usb 2-1: device descriptor read/8, error -71
[  150.727242][  T392] usb 2-1: device descriptor read/8, error -71
[  150.844880][  T392] usb usb2-port1: unable to enumerate USB device
[  151.001844][  T412] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  151.026692][  T412] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  151.049786][  T412] usbhid 3-1:0.0: can't add hid device: -71
[  151.065994][  T412] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  151.097957][   T36] audit: type=1400 audit(2000000022.360:1099): avc:  denied  { accept } for  pid=3213 comm="syz.0.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  151.117706][  T392] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  151.136571][  T412] usb 3-1: USB disconnect, device number 90
[  151.258089][   T36] audit: type=1400 audit(2000000022.510:1100): avc:  denied  { create } for  pid=3218 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  151.307272][  T392] usb 4-1: Using ep0 maxpacket: 32
[  151.336618][  T392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.362117][   T36] audit: type=1400 audit(2000000022.550:1101): avc:  denied  { setopt } for  pid=3218 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  151.382448][  T392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.431741][  T392] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  151.484999][  T392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.517543][  T392] usb 4-1: config 0 descriptor??
[  151.527853][   T36] audit: type=1400 audit(2000000022.780:1102): avc:  denied  { execmem } for  pid=3222 comm="syz.1.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  151.602817][ T3225] 9pnet_fd: Insufficient options for proto=fd
[  151.610356][  T392] hub 4-1:0.0: USB hub found
[  151.823855][  T392] hub 4-1:0.0: 1 port detected
[  151.946513][ T3231] netlink: 96 bytes leftover after parsing attributes in process `syz.0.939'.
[  152.116321][  T392] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  152.138689][  T392] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  152.183432][  T392] usbhid 4-1:0.0: can't add hid device: -71
[  152.226540][  T392] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  152.418917][  T392] usb 4-1: USB disconnect, device number 82
[  152.809876][ T3251] overlay: filesystem on ./file0 not supported as upperdir
[  152.896489][  T392] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  152.936473][    C1] net_ratelimit: 82999 callbacks suppressed
[  152.936495][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  152.954447][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  152.966574][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  152.978647][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  152.990768][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  153.003076][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  153.015103][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  153.027142][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  153.039146][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  153.051174][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  153.099353][  T392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.126507][  T392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.156742][  T392] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  153.165818][  T392] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  153.204355][  T392] usb 3-1: Manufacturer: syz
[  153.224170][  T392] usb 3-1: config 0 descriptor??
[  153.262880][   T36] audit: type=1400 audit(2000000024.520:1103): avc:  denied  { read write } for  pid=3265 comm="syz.1.951" name="file0" dev="tmpfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  153.328064][   T36] audit: type=1400 audit(2000000024.520:1104): avc:  denied  { open } for  pid=3265 comm="syz.1.951" path="/192/file0" dev="tmpfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  153.867015][  T237] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  154.037705][  T237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.048841][  T237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.066747][  T392] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001D/input/input24
[  154.080086][  T237] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  154.090913][  T392] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001D/input/input25
[  154.103302][  T237] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  154.118045][  T237] usb 2-1: Manufacturer: syz
[  154.129745][  T392] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001D/input/input26
[  154.141796][  T237] usb 2-1: config 0 descriptor??
[  154.158074][  T392] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001D/input/input27
[  154.171535][  T392] uclogic 0003:256C:006D.001D: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0
[  154.197240][   T10] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  154.271177][ T3245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.281921][ T3245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.294929][  T392] usb 3-1: USB disconnect, device number 91
[  154.356505][   T10] usb 4-1: device descriptor read/64, error -71
[  154.567120][   T36] audit: type=1400 audit(2000000025.830:1105): avc:  denied  { write } for  pid=3281 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  154.587486][ T3282] netlink: 32 bytes leftover after parsing attributes in process `syz.1.956'.
[  154.597164][   T10] usb 4-1: device descriptor read/64, error -71
[  154.606707][   T36] audit: type=1400 audit(2000000025.850:1106): avc:  denied  { nlmsg_write } for  pid=3281 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  154.846534][   T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  154.986494][   T10] usb 4-1: device descriptor read/64, error -71
[  155.056575][  T392] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  155.200058][  T237] uclogic 0003:256C:006D.001E: v1 frame probing failed: -71
[  155.210645][  T392] usb 3-1: Using ep0 maxpacket: 32
[  155.216191][  T237] uclogic 0003:256C:006D.001E: failed probing parameters: -71
[  155.224521][  T237] uclogic 0003:256C:006D.001E: probe with driver uclogic failed with error -71
[  155.233700][  T392] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  155.242269][   T10] usb 4-1: device descriptor read/64, error -71
[  155.254172][  T392] usb 3-1: config 0 has no interface number 0
[  155.260680][  T237] usb 2-1: USB disconnect, device number 87
[  155.268314][  T392] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  155.279971][  T392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.288379][  T392] usb 3-1: Product: syz
[  155.292572][  T392] usb 3-1: Manufacturer: syz
[  155.297422][  T392] usb 3-1: SerialNumber: syz
[  155.302992][  T392] usb 3-1: config 0 descriptor??
[  155.311111][  T392] smsc95xx v2.0.0
[  155.377176][   T10] usb usb4-port1: attempt power cycle
[  155.513902][ T3299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.523499][ T3299] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.559642][   T36] audit: type=1326 audit(2000000026.820:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9570d9c819 code=0x7ffc0000
[  155.584308][   T36] audit: type=1326 audit(2000000026.820:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9570d9c819 code=0x7ffc0000
[  155.609803][   T36] audit: type=1326 audit(2000000026.840:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9570d5d04e code=0x7ffc0000
[  155.633687][   T36] audit: type=1326 audit(2000000026.840:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9570d9c819 code=0x7ffc0000
[  155.658275][   T36] audit: type=1326 audit(2000000026.840:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9570d9c4ab code=0x7ffc0000
[  155.682346][   T36] audit: type=1326 audit(2000000026.840:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9570d9c819 code=0x7ffc0000
[  155.706646][   T36] audit: type=1326 audit(2000000026.840:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3304 comm="syz.0.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9570d9c819 code=0x7ffc0000
[  155.730121][   T10] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  155.767581][   T10] usb 4-1: device descriptor read/8, error -71
[  155.902426][   T10] usb 4-1: device descriptor read/8, error -71
[  156.146522][   T10] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  156.177518][   T10] usb 4-1: device descriptor read/8, error -71
[  156.188605][  T412] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  156.328044][   T10] usb 4-1: device descriptor read/8, error -71
[  156.346485][  T412] usb 2-1: Using ep0 maxpacket: 32
[  156.353462][  T412] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.365721][  T412] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.375812][  T412] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  156.385071][  T412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.396614][  T412] usb 2-1: config 0 descriptor??
[  156.407103][  T412] hub 2-1:0.0: USB hub found
[  156.414050][  T392] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  156.446668][   T10] usb usb4-port1: unable to enumerate USB device
[  156.607451][  T412] hub 2-1:0.0: 3 ports detected
[  156.930082][  T412] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  156.937307][  T412] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  156.947842][  T412] usbhid 2-1:0.0: can't add hid device: -71
[  156.953882][  T412] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  156.987024][  T412] usb 2-1: USB disconnect, device number 88
[  157.037241][ T3335] overlay: ./file0 is not a directory
[  157.044115][ T3335] syzkaller0: entered allmulticast mode
[  157.062165][ T3335] syzkaller0 (unregistering): left allmulticast mode
[  157.462586][ T3341] tc_dump_action: action bad kind
[  157.567994][ T3345] bridge0: port 3(syz_tun) entered blocking state
[  157.574684][ T3345] bridge0: port 3(syz_tun) entered disabled state
[  157.582474][ T3345] syz_tun: entered allmulticast mode
[  157.588678][ T3345] syz_tun: entered promiscuous mode
[  157.594232][ T3345] bridge0: port 3(syz_tun) entered blocking state
[  157.601022][ T3345] bridge0: port 3(syz_tun) entered forwarding state
[  157.785286][  T412] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  157.842296][  T392] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  157.873261][  T392] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  157.904790][  T392] usb 3-1: USB disconnect, device number 92
[  157.940701][    C1] net_ratelimit: 89850 callbacks suppressed
[  157.940724][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  157.958903][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  157.971187][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  157.983332][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  157.985836][  T412] usb 2-1: config index 0 descriptor too short (expected 45, got 36)
[  157.995545][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  158.004289][  T412] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.015780][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  158.026948][  T412] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.038656][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  158.048679][  T412] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  158.060613][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  158.074530][  T412] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  158.085620][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  158.094930][  T412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.106631][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  158.117251][  T412] usb 2-1: config 0 descriptor??
[  158.356035][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  158.356057][   T36] audit: type=1400 audit(2000000029.623:1116): avc:  denied  { validate_trans } for  pid=3364 comm="syz.2.988" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  158.389150][  T412] plantronics 0003:047F:FFFF.001F: unknown main item tag 0xd
[  158.417107][  T412] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving
[  158.453990][  T412] plantronics 0003:047F:FFFF.001F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  158.659065][    T9] usb 2-1: USB disconnect, device number 89
[  158.697133][  T392] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  158.891188][  T392] usb 3-1: Using ep0 maxpacket: 32
[  158.909338][  T392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.934924][  T392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.964731][  T392] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  158.991511][  T392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.016742][  T392] usb 3-1: config 0 descriptor??
[  159.032007][  T392] hub 3-1:0.0: USB hub found
[  159.224444][  T392] hub 3-1:0.0: 3 ports detected
[  159.269958][  T412] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  159.333253][   T36] audit: type=1400 audit(2000000030.633:1117): avc:  denied  { accept } for  pid=3395 comm="syz.1.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  159.458388][  T412] usb 4-1: Using ep0 maxpacket: 16
[  159.465465][  T412] usb 4-1: config index 0 descriptor too short (expected 51443, got 18)
[  159.485133][  T412] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  159.501759][  T412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.528897][  T412] usb 4-1: Product: syz
[  159.542286][  T412] usb 4-1: Manufacturer: syz
[  159.547051][  T412] usb 4-1: SerialNumber: syz
[  159.562289][  T412] r8152-cfgselector 4-1: Unknown version 0x0000
[  159.571793][  T412] r8152-cfgselector 4-1: config 0 descriptor??
[  159.782007][  T392] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  159.788974][ T3384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.805700][ T3384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.823814][  T392] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  159.826470][  T584] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  159.834778][ T3384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.863125][  T392] usbhid 3-1:0.0: can't add hid device: -71
[  159.869192][  T392] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  159.874744][ T3384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.887328][ T3384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.912044][  T392] usb 3-1: USB disconnect, device number 93
[  159.912719][ T3384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.952144][   T36] audit: type=1400 audit(2000000031.271:1118): avc:  denied  { execute_no_trans } for  pid=3402 comm="syz.0.1000" path="/451/file0" dev="tmpfs" ino=2430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  159.980239][ T3384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.000218][ T3384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.008463][ T3384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.025140][ T3402] process '/newroot/451/file0' started with executable stack
[  160.043988][ T3384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.074637][  T412] r8152-cfgselector 4-1: Unknown version 0x0000
[  160.093112][  T412] r8152-cfgselector 4-1: bad CDC descriptors
[  160.223254][ T3411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.248920][  T392] r8152-cfgselector 4-1: USB disconnect, device number 87
[  160.262523][ T3410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.282347][ T3411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.301912][ T3410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.597813][  T584] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  160.612944][  T584] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  160.632249][  T584] usb 2-1: config 220 has an invalid descriptor of length 80, skipping remainder of the config
[  160.681059][  T584] usb 2-1: config 220 has no interface number 2
[  160.688355][  T584] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  160.759180][  T584] usb 2-1: config 220 interface 0 has no altsetting 0
[  160.766342][  T584] usb 2-1: config 220 interface 76 has no altsetting 0
[  160.778055][  T392] usb 3-1: new full-speed USB device number 94 using dummy_hcd
[  160.788363][  T584] usb 2-1: config 220 interface 1 has no altsetting 0
[  160.868319][  T584] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  160.895889][  T584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.903952][  T584] usb 2-1: Product: syz
[  160.914735][  T392] usb 3-1: device descriptor read/64, error -71
[  160.934891][  T584] usb 2-1: Manufacturer: syz
[  160.939517][  T584] usb 2-1: SerialNumber: syz
[  161.168130][  T392] usb 3-1: device descriptor read/64, error -71
[  161.217834][  T584] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  161.224396][  T584] usb 2-1: No valid video chain found.
[  161.246677][  T584] usb 2-1: selecting invalid altsetting 0
[  161.276463][  T584] usb 2-1: USB disconnect, device number 90
[  161.431200][  T392] usb 3-1: new full-speed USB device number 95 using dummy_hcd
[  161.577454][  T392] usb 3-1: device descriptor read/64, error -71
[  161.840977][  T392] usb 3-1: device descriptor read/64, error -71
[  161.970315][  T392] usb usb3-port1: attempt power cycle
[  162.007400][ T3446] futex_wake_op: syz.3.1016 tries to shift op by 144; fix this program
[  162.066258][ T3447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'.
[  162.085090][  T412] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  162.262904][  T412] usb 2-1: unable to get BOS descriptor or descriptor too short
[  162.271653][  T412] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  162.283013][  T412] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  162.296042][  T412] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  162.305806][  T412] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.314097][  T412] usb 2-1: Product: syz
[  162.318546][  T412] usb 2-1: Manufacturer: syz
[  162.324464][  T412] usb 2-1: SerialNumber: syz
[  162.338969][  T392] usb 3-1: new full-speed USB device number 96 using dummy_hcd
[  162.369330][  T392] usb 3-1: device descriptor read/8, error -71
[  162.507701][  T392] usb 3-1: device descriptor read/8, error -71
[  162.532286][ T3442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.542850][ T3442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.564290][  T412] usb 2-1: Can't get UAC3 power state for id 10
[  162.578280][  T412] usb 2-1: 2:0: failed to get current value for ch 0 (-71)
[  162.598278][  T412] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  162.607440][ T3455] netlink: 'syz.1.1018': attribute type 30 has an invalid length.
[  162.621965][  T412] usb 2-1: USB disconnect, device number 91
[  162.656703][  T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  162.759022][  T392] usb 3-1: new full-speed USB device number 97 using dummy_hcd
[  162.791180][  T392] usb 3-1: device descriptor read/8, error -71
[  162.817881][    C1] net_ratelimit: 108715 callbacks suppressed
[  162.817899][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  162.836030][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  162.848088][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  162.860241][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  162.872376][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  162.884622][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  162.896847][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  162.909165][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  162.921675][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  162.933800][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  162.936159][  T392] usb 3-1: device descriptor read/8, error -71
[  162.977492][ T3459] netlink: 'syz.3.1020': attribute type 9 has an invalid length.
[  162.985586][  T412] usb 2-1: new full-speed USB device number 92 using dummy_hcd
[  162.993596][ T3459] netlink: 'syz.3.1020': attribute type 2 has an invalid length.
[  163.063092][  T392] usb usb3-port1: unable to enumerate USB device
[  163.264464][  T412] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  163.505936][  T392] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  163.946499][  T412] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  164.305536][  T412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.591462][  T392] usb 4-1: Using ep0 maxpacket: 32
[  165.171533][  T392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.817388][  T412] usb 2-1: string descriptor 0 read error: -71
[  165.828471][  T392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.938074][  T412] hub 2-1:32.0: bad descriptor, ignoring hub
[  166.179120][  T412] hub 2-1:32.0: probe with driver hub failed with error -5
[  166.534934][  T392] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  167.359765][  T307] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  167.520827][  T412] usb 2-1: USB disconnect, device number 92
[  167.731034][    C1] net_ratelimit: 166414 callbacks suppressed
[  167.731061][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  167.731095][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.737142][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  167.749044][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.760955][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  167.772931][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.784994][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  167.796882][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.808774][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  167.820825][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.987755][  T392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.500391][  T392] usb 4-1: config 0 descriptor??
[  168.540484][  T307] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  169.712135][  T392] usb 4-1: can't set config #0, error -71
[  169.909248][  T307] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  170.302647][  T307] usb 3-1: config 220 has an invalid descriptor of length 80, skipping remainder of the config
[  170.352716][  T392] usb 4-1: USB disconnect, device number 88
[  172.151542][  T307] usb 3-1: config 220 has no interface number 2
[  172.177229][  T307] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  172.670589][    C0] net_ratelimit: 126213 callbacks suppressed
[  172.670614][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  172.670654][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  172.676683][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  172.688813][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  172.700692][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  172.712747][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  172.724710][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  172.737021][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  172.749407][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  172.761296][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  173.916417][  T307] usb 3-1: config 220 interface 0 has no altsetting 0
[  173.923246][  T307] usb 3-1: config 220 interface 76 has no altsetting 0
[  174.144732][  T307] usb 3-1: config 220 interface 1 has no altsetting 0
[  174.377970][ T3478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.392260][  T307] usb 3-1: string descriptor 0 read error: -71
[  174.541510][  T307] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  174.856055][  T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.881731][  T307] usb 3-1: can't set config #220, error -71
[  174.927234][ T3478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.044971][  T307] usb 3-1: USB disconnect, device number 98
[  175.368295][  T510] udevd[510]: setting owner of /dev/bus/usb/003/098 to uid=0, gid=0 failed: No such file or directory
[  175.660512][  T307] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  176.862330][  T307] usb 3-1: Using ep0 maxpacket: 32
[  177.629295][    C0] net_ratelimit: 100143 callbacks suppressed
[  177.629536][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  177.635457][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  177.647458][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  177.659348][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  177.671833][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  177.684105][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  177.696150][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  177.708148][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  177.720474][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  177.732451][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.833116][  T307] usb 3-1: device descriptor read/all, error -71
[  179.383584][   T36] audit: type=1326 audit(2000000051.007:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.0.1029" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9570d9c819 code=0x0
[  182.602168][    C0] net_ratelimit: 118569 callbacks suppressed
[  182.602192][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  182.602220][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  182.608360][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  182.620426][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  182.632441][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  182.644544][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  182.656370][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  182.668436][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  182.680346][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  182.692469][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  187.585242][    C1] net_ratelimit: 127267 callbacks suppressed
[  187.585265][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  187.585293][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  187.591641][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  187.603503][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  187.615407][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  187.627307][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  187.639430][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  187.651250][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  187.663337][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  187.675390][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.182839][ T3496] overlayfs: conflicting options: userxattr,metacopy=on
[  192.575681][    C0] net_ratelimit: 122228 callbacks suppressed
[  192.575707][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  192.575717][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  192.575781][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  192.581779][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  192.593838][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  192.605599][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  192.617562][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  192.629536][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  192.641583][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  192.653590][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  193.975294][   T36] audit: type=1400 audit(2000000065.469:1120): avc:  denied  { mounton } for  pid=3502 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  194.055321][    T9] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  196.716502][    T9] usb 3-1: device descriptor read/all, error -71
[  197.571546][    C0] net_ratelimit: 119787 callbacks suppressed
[  197.571572][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  197.571612][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  197.577746][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  197.589737][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  197.601710][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  197.613843][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  197.625824][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  197.637802][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  197.649770][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  197.661878][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  200.376036][ T3475] bridge0: port 3(syz_tun) entered disabled state
[  202.571273][    C0] net_ratelimit: 118909 callbacks suppressed
[  202.571299][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  202.571325][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  202.577460][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  202.589683][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  202.601587][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  202.613446][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  202.625439][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  202.637554][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  202.649446][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  202.661362][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  204.015073][ T3475] syz_tun (unregistering): left allmulticast mode
[  205.228804][ T3475] syz_tun (unregistering): left promiscuous mode
[  206.457183][ T3475] bridge0: port 3(syz_tun) entered disabled state
[  207.573886][    C0] net_ratelimit: 122786 callbacks suppressed
[  207.573914][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  207.573958][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  207.579995][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  207.592292][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  207.604140][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  207.617248][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  207.629134][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  207.641279][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  207.653252][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  207.665268][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  212.578509][    C0] net_ratelimit: 124848 callbacks suppressed
[  212.578534][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  212.578608][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  212.584608][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  212.596531][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  212.608436][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  212.620753][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  212.632731][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  212.644905][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  212.656654][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  212.668811][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
SYZFAIL: failed to recv rpc
[  216.906397][   T36] audit: type=1400 audit(2000000088.616:1121): avc:  denied  { write } for  pid=283 comm="syz-executor" path="pipe:[2259]" dev="pipefs" ino=2259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  217.584628][    C0] net_ratelimit: 119572 callbacks suppressed
[  217.584652][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  217.584676][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  217.590780][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  217.602793][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  217.614733][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  217.626768][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  217.638699][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  217.651053][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  217.662882][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  217.674849][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  222.591766][    C0] net_ratelimit: 126320 callbacks suppressed
[  222.591791][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  222.591797][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  222.592021][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  222.597865][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  222.609825][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  222.621991][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  222.634061][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  222.645973][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  222.658051][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:c5:bb:bc:c9, vlan:0)
[  222.669986][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)