last executing test programs: 4m5.731737692s ago: executing program 3 (id=958): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000080}, 0x81) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r2, 0x5418, &(0x7f00000010c0)=0xffffbe03) setrlimit(0xe, &(0x7f0000000040)={0xb6, 0x80000000}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1, 0x0, 0x6}, 0x20) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000040)={[0x8, 0x2, 0x0, 0x400000000ff, 0x6, 0x4, 0x4, 0x7, 0x3, 0xffffffff, 0x6, 0x7, 0x1, 0x13, 0x4c3, 0x7ff], 0x3000, 0x110000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) r10 = memfd_create(&(0x7f0000000100)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1m\x13}\xe1\xdf4f!\xd5d\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85\b\x00\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5>j\x87\x04\x11y\xa1\xc8\x9f\x9etiHv\xef\x1a\xedS\xd6\x91%||/c\x87\x94Y\xa0\x8e\x03\x00\x00\x00\x00\x00\x00\x003:\x99\x1e\xac`\x00\x00\x00\x00m\xeaB\xf0K\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80', 0x1) write$binfmt_script(r10, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1m\x13}\xe1\xdf4f!\xd5d\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85\b\x00\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5>j\x87\x04\x11y\xa1\xc8\x9f\x9etiHv\xef\x1a\xedS\xd6\x91%||/c\x87\x94Y\xa0\x8e\x03\x00\x00\x00\x00\x00\x00\x003:\x99\x1e\xac`\x00\x00\x00\x00m\xeaB\xf0K\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80'}]}, 0x197) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4m4.808496079s ago: executing program 3 (id=978): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='.\x00') syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) (async) listen(r2, 0x5) accept4(r2, 0x0, 0x0, 0x80800) (async) accept4(r2, 0x0, 0x0, 0x80800) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x24, 0x1e, {0x1e, 0x31, "533d8f71ae377ab82565cd05a7f112eb38a123f41a5b1834cd8f1069"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000400)={0x34, &(0x7f0000000140)={0x20, 0xe, 0x93, "affc82866ecfee8cdaa16283bcd407c276d7fd6827e46bf5672340d55d57844e9b18e5819c8dfbee976c13f148959f9e1ed77a6ab17e9d5b3127955669ca7dbecb379fc2994e855ca72e3f2e8e155ceacb066e792960994a694cadbb6e19fca522087a0bcda4911535f0a82a02accefa23d0f432ad4e1c1c020485f7af70aaeac2ec2ddbf47d8184a604fdea12c446af1b3ec7"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000002c0)={0xc0, 0xa1, 0x4, 0x4}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02000000d4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x20) syz_usb_connect$uac2(0x5, 0xe3, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1021, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x3, 0x1, 0x5, 0xe0, 0x5, {0x8, 0xb, 0x0, 0x2, 0x1, 0x8, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x7, 0x50, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x2, 0x9, 0x8, 0x1}, @extension_unit={0x8, 0x24, 0x9, 0x6, 0x6136, 0x5b, "c6"}, @source_unit={0x8, 0x24, 0xa, 0xf, 0x4, 0x4, 0xf, 0x3}, @selector_unit={0xc, 0x24, 0xb, 0x1b, 0x7, "bbb8ee1d951635"}, @effect_unit={0x13, 0x24, 0x7, 0x6, 0x4, 0x1, [0x2, 0x3, 0xfe388ed2b2b0824f, 0x1, 0x2, 0x0]}, @input_terminal={0x10, 0x24, 0x2, 0x6, 0x1ff, 0x5, 0x9, 0x4, 0x9, 0x3, 0xb, 0x6c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8135, 0x6, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x0, 0x92, 0x80, {0x8, 0x25, 0x1, 0x81, 0x30, 0x9, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0xff, 0x1, "fc5854bb7f616895"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x1, 0x2, {0x8, 0x25, 0x1, 0xc3, 0x3, 0x1, 0x9}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0x0, 0x3, 0x9, 0x10, 0x2}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x4, [{0x3b, &(0x7f0000000140)=@string={0x3b, 0x3, "edea830279054714f3c010df30f045c1eaf248cf139bc43278d3cf28ce4f81bda7a41145ec1762ed0830a383e7039227df29c20a95dbd7f516"}}, {0x41, &(0x7f0000000340)=@string={0x41, 0x3, "d42dcf3fe1f629550ef8efa8fbd2e71ec2048d65e477d495317a9a127f7edd5e463af6cabd33f894d76139545753e644978209dd3c08c22ad43f7ae6e73f06"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x448}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000340)={0x2, 0xffffffffffffffff}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="0015010000108afabf4dca3e94f7841a705a9d3286381fba2d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="0015010000108afabf4dca3e94f7841a705a9d3286381fba2d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m3.879147154s ago: executing program 3 (id=983): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x80, 0x11) sendfile(r0, r0, 0x0, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x80, 0x11) (async) sendfile(r0, r0, 0x0, 0x4) (async) 4m3.79666477s ago: executing program 3 (id=985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x402, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x7f) dup(r3) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000040)={0x9, 0x1}) close(r2) syz_usb_connect$cdc_ncm(0x5, 0x8e, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x2, 0x1, 0x2, 0x90, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "0bf9a6"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x100, 0x3, 0xfc}, {0x6, 0x24, 0x1a, 0x8, 0xc}, [@acm={0x4, 0x24, 0x2, 0xa}, @country_functional={0x12, 0x24, 0x7, 0xe, 0xc, [0xb, 0x5, 0xa, 0x6, 0xe, 0x3]}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x9, 0x5, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1e, 0xe0, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0xa7, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x4, 0x2}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xff, 0xf5, 0x6, 0x40, 0x1}, 0x30, &(0x7f0000000540)={0x5, 0xf, 0x30, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x6, 0xf00f, 0x740d}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "ecb1d414581efc2eaa1334fde1f09608"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0xdf, 0x4, 0x8, 0xbc}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42c}}]}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000380)="0f01c8f3410f017b98f2470f320f0766baf80cb835c7fc85ef66bafc0cb0f9eec744240001000000c7442402f8c30000c7442406000000000f011424c482c598257e000000f4400fc7b3d7038c82c4217c28c0", 0x53}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000080000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) 4m2.339826605s ago: executing program 3 (id=1018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000024c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x10402}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0xc880) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x894) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101"], 0x0) 4m0.752521442s ago: executing program 3 (id=1032): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x169841, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x0) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r2, &(0x7f00000003c0), 0x100000000000022d) fcntl$setlease(r0, 0x400, 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x804800, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) 3m45.83581761s ago: executing program 32 (id=1032): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x169841, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x0) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r2, &(0x7f00000003c0), 0x100000000000022d) fcntl$setlease(r0, 0x400, 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x804800, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) 2m52.315990295s ago: executing program 0 (id=1629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x6e53, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_IO_FLUSHER(0x39, 0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0xfffffffffffffd0b) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000340)={"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"}) 2m52.168178223s ago: executing program 0 (id=1630): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, &(0x7f0000000080)) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, &(0x7f0000000080)) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) (async) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) read$FUSE(r3, 0x0, 0x0) r4 = getpgrp(0x0) tkill(r4, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x3}, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) write(r0, &(0x7f0000000140)="94a96c0c17af6098cc2400b5", 0xc) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500030000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e000fff04fcff", 0x58}], 0x1) 2m52.150181819s ago: executing program 0 (id=1631): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@allocspi={0xf8, 0x22, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x6, 0x3}, {0x7, 0x0, 0x0, 0x100000}, {0x0, 0x4}}, 0x0, 0x7fff}}, 0xf8}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000180)={0x2, 0x0, [{0x7, 0x3e16, 0x4, 0x2, 0x81}, {0x80000008, 0x2, 0x8, 0x2, 0x7ff}]}) write$binfmt_elf32(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m52.000440766s ago: executing program 0 (id=1634): r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x80000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x800000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) (async) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r5, 0x1) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000240)='FREEZING\x00', 0x9) (async) readahead(r2, 0xfffffffffffffffb, 0x80000000) (async) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)=0xe4bf, 0x12) write$cgroup_int(r8, &(0x7f00000000c0), 0x12) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async) shutdown(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x80000002}) (async) ppoll(&(0x7f0000000080)=[{r1, 0x2}], 0x1, 0x0, 0x0, 0x0) 2m51.159871906s ago: executing program 0 (id=1643): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000003c0)=0x3, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100c0030904000003020200000b410600004ed9d401246005240004000d240f01f006aac09d0c000000090581032000037fff0905820200000001000905030220"], 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x8000, 0x0, 0x402226, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x3, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7f, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x0, 0x0, 0x0, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x10, 0x96, 0xb}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x8, 0x5, 0x9, 0xe7, 0xf8}, 0x1d, &(0x7f0000000080)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0xa, 0x3, 0x200, 0x0, 0x8f, [0xc000, 0x3f00, 0xc0]}]}, 0x8, [{0x6d, &(0x7f00000000c0)=@string={0x6d, 0x3, "1b3d7965a875151ff434701ff045bc55c9cc524f2442774b49039618524a334c81b4a64571ffe7d8565efeada69d35dc260e1e20a9f8693595ba39ce91f20a80e7b976fd0615fe5eec30575c9576828d443a2517c9fa4eee668061b31fe961288e61fbf11a81c1f766c09e"}}, {0x67, &(0x7f0000000140)=@string={0x67, 0x3, "5f18f1aa3becc7161cb2854d7563793af2deb2efb1578b4094cf16b34bc9e181fc7caaf2d84d2e2fa7f1072f5c265bbe385163ff1ae1b1d4357c1cadfb4eaf80187b289adcf5106edd51353335bed50f7be49cdb93f34cbbc368a5d188b10f362727888c5c"}}, {0x13, &(0x7f00000001c0)=@string={0x13, 0x3, "336a57882130581d569f1e706521e0a5e1"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42f}}, {0x14, &(0x7f0000000240)=@string={0x14, 0x3, "d56417df7a259068bf99c8003e590a852a26"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1c09}}, {0x40, &(0x7f00000002c0)=@string={0x40, 0x3, "dfb7f5eb6f4a0812fb942038a8fd37438055f53e0e62eb3b1e7278bfc5c43ed072e1015c1b0420b4322e1cf5da8c5f54238dffe000e2353191a708e6219d"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x449}}]}) 2m50.945553265s ago: executing program 0 (id=1644): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet6_int(r0, 0x29, 0x3f, &(0x7f00000000c0)=0x10, 0x4) syz_clone3(&(0x7f0000000200)={0x40000000, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000540000000001000000e0000001"], 0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) setsockopt$inet6_int(r0, 0x29, 0x3f, &(0x7f00000000c0)=0x10, 0x4) (async) syz_clone3(&(0x7f0000000200)={0x40000000, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000540000000001000000e0000001"], 0x14) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) (async) 2m50.901851282s ago: executing program 33 (id=1644): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet6_int(r0, 0x29, 0x3f, &(0x7f00000000c0)=0x10, 0x4) syz_clone3(&(0x7f0000000200)={0x40000000, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000540000000001000000e0000001"], 0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) setsockopt$inet6_int(r0, 0x29, 0x3f, &(0x7f00000000c0)=0x10, 0x4) (async) syz_clone3(&(0x7f0000000200)={0x40000000, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000540000000001000000e0000001"], 0x14) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) (async) 45.952137318s ago: executing program 5 (id=2541): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x30) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xb, 0xf0, 0x1}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="050f142e2a"]}) 43.342631824s ago: executing program 5 (id=2556): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000003580)=""/4084, 0xff4}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000005580)=""/4091, 0xffb}, {&(0x7f0000000780)=""/240, 0xf0}, {&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000580)=""/50, 0x32}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000680)=""/97, 0x61}], 0xb}, 0x5e}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x90ce}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x4}], 0x8, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r4 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ftruncate(0xffffffffffffffff, 0x1) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGICOUNT(r5, 0x541e, 0xff4f370c567f0000) sendmsg$AUDIT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x10, 0x3e8, 0x100, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x2}, 0x4010) 42.38022685s ago: executing program 5 (id=2559): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffe, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x40}, 0x2}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r3}}}], 0x28}}], 0x2, 0x4001c00) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) r5 = dup2(r0, r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r8, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2, r7}, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, r6}]) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000280)={0x0, 0x1, 0x6, @multicast}, 0x10) 41.335484602s ago: executing program 2 (id=2562): r0 = socket$inet6(0xa, 0xa, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r1, 0x630) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x7a1442, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000180)="900000001c001f4d154a817393278bff0a80a578020000000404840009000100ac1414bb0542d6401051a2d708f3fac8da1a297e0099c5ac0000c5b068d0bf46d3234565a0416466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c17399270714c778cfb11e9e0b390", 0x90, 0x20000040, 0x0, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = syz_open_dev$rtc(&(0x7f00000010c0), 0x40000000000, 0x480000) ioctl$RTC_PLL_SET(r6, 0x40207012, &(0x7f0000001100)={0x3, 0x8001, 0x80, 0x8, 0x5, 0x3, 0x4d2}) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x6000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000000)={{0x0, 0x2, 0xa9, 0x9, 0x100000000, 0x2, 0xb2, 0x1, 0x801, 0x0, 0x2, 0x421, 0xffffffffffffffff, 0x5, 0x3}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001400), 0x400201, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r7, 0xc0205865, &(0x7f00000002c0)={&(0x7f0000000240)=0x8001, 0x2, &(0x7f0000001300)=[{}], &(0x7f0000000280)}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r8, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r9, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="0f01c966b9860100000f32baf80c66b82efbc28566efbafc0ced660fea1bff9d00000fc7b909000f01cb2e2636f3f4c4e279cf403226670f011d08000000", 0x3e}], 0x1, 0x14, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text16={0x10, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) fcntl$lock(r9, 0x6, &(0x7f00000013c0)={0x1, 0x2, 0x9, 0x9}) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000033a80)=""/102380, 0x18fec}, {0x0, 0x41}], 0x2, 0x0, 0x4) 41.273073294s ago: executing program 1 (id=2563): cachestat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xde}, &(0x7f0000000080), 0x0) socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4ea0, 0x0, @mcast2, 0x7}, 0x1c) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x8a, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000000), 0x24, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf257900000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900070000005600000004000400f4000400f4000400f4000400f4000400f4000400f40004f74b9b6d930f0091071d2c7e68392300000000"], 0x50}, 0x1, 0x0, 0x0, 0x80080}, 0x20) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) splice(r2, 0x0, r0, 0x0, 0x25a5, 0x0) 41.251180608s ago: executing program 1 (id=2565): syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x4000, 0x13090, 0x2, 0x29}, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) (async) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sync_file_range(r2, 0x7fffffff, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000000000016, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x7, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0xffffffff, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x6, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x5, 0x1f461e2c, 0x7, 0x2000e665, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x101, 0x7, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x1200000, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x4ffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x916, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x2008, 0x4, 0x8000, 0x9, 0x7fffffff, 0x404, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x4000006, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x0, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x20005, 0x7fff, 0x0, 0x20000001, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x804, 0x8, 0x5, 0x8001, 0x1000, 0x38, 0x800003, 0x200, 0x80, 0x800001, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffbf, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x7], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7ffd, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000004, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 41.204474795s ago: executing program 2 (id=2566): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xe9) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4603000702810000000000000003003e00f9ffffffd80100000000000040000000000000008b00000000000000330d00000500380004"], 0x120) (async) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) setuid(0xee00) (async) socket$inet(0x2, 0x3, 0x7f) (async) close(r0) (async) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 41.140999536s ago: executing program 5 (id=2567): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10010, r0, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x1, &(0x7f0000003c80)={0x0, 0x989680}) (async) r1 = socket$netlink(0x10, 0x3, 0xa) write(r1, &(0x7f0000000000)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008e498534108e583", 0x24) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) (async, rerun: 64) listen(r2, 0xa1) (rerun: 64) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) 41.140431846s ago: executing program 2 (id=2568): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000100)=0x2c) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000200)={0x0, r1}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000009c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f00000002c0)={0x6b8, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x48c, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7f}, @device_a, @device_a, @initial, {0x1, 0x6}}, 0x0, 0x0, 0xf, @val={0x10, 0x1, 0x3a}, [{0xdd, 0x99, "305958acbeb51c40d48fc0ac30da697d7aab15574a5ecb48dcf4b377cc097b787ea6341832d54a12226fdd84a3658c770446fc54ca78c916725e2cfdd1f5da09840874ce29822fb831f135799f1ef4fd6999f0e710487636172a43f0678ce9d24dd0ae0b9338fd6edbcbdc1f75afda5d76744662fc78e6fe9534803cc023a11a118de9eb61669052cb7f0392f8e4c1f111eb957c96bdb9115e"}, {0xdd, 0x2d, "b8ed051e78a91a0a276e5b88f73138dc9b483f34e9dca68c026c7eb374c116a0cc53c4d29000e2264b1dec0fbd"}, {0xdd, 0xd8, "3b92156d52710a5af3392ac60bf5f589854b6e3f1b18d3abb1bf5270f4146028bd4d320393a5e921cda2300b69d5c40333e7d0d93622f48131c6e9e5b59d9266e86261536984863f2037ac452f61ae8cb8e32ae08e3fb108a5a600251c94be7b413e110ef14bb3069cce2abda87579c34a3572f81cca3ff58cfed32cd5b017f210ff50f3e0a070087bc4ba3f9af7a6694f7c1570115933f0dd2f0ff701aedef33e106190a85c74ca881685bf9b6530295cefd4563b9e7909d166e9cea6f4d43357e6a2795dfff331c5678eb174e7702e0aca009684506405"}, {0xdd, 0x63, "6d5ac457644af670d8bf93d0b2608cce832ada3b4813352a1beb2eea37d2386993b1a3e20eb677ddb54c5e6012c9c836c5f6aae7bdb884a788279f26f48b51558a2e0444975e319b37b62c497b8c8cf702977f132eb37295b044531e291ec0597e1b03"}, {0xdd, 0x3b, "af9cc4111f766441b43333e5adf6cb7731a50ac72f2dcd207de0c05baccaa34bcc311a4be1a03177a7fa9984e570113b19e1222ade64fc76967ae1"}, {0xdd, 0x87, "9721220126f1709300727b3a0956737301e0621e814d394c2ebe98048fce5ba3d643b9fa8f1b26b07e4ea877ececb526abfcba88e036dd75a7a0d229a72e78e9d48fe866d89d38f243829b7d5c2cd3f1a62931ef2681d2cd1cb4f520bfa2aa60104dfec7692f7437744d5ac947979db5bff033c8bea86e9f63ea5efaaa4e07f9b0f7ed93a08f32"}, {0xdd, 0x91, "b836fec831e0a3315791ef423549c178591b0244f93ce0a17975b973bc1cbdb24463b3e214e5fc85635013e0d03670eae715ef33cf5caf76f3a67e8debe020969c74cd3f32a3944791822cc5f446c2812dc3f0bfd982325d8d9ef87cd28a21074b44ecb6503550eeb90c4d321f8c52f1c917eeade40e2e5e6d1d74c714ff319fa7a1e4b67a5eb17ff2fb3848e6f1c4c75c"}, {0xdd, 0x5e, "e9d95b6342b58705d4796c666bdd34f07de85cba6d9989cfcd2f56244fce9480ab3067e90ec87a2beae31275ca90d11da83c330901e182a3dd2e7f4155c7530c44c602a57925d0c6f2da49e06e34bab64913b08d626ed9c2626515a45c52"}, {0xdd, 0xa3, "91f4cf51c4711a1d39277a6f1d95107f3056a0cc44cf3f083c624d9886ddf39c653789d3d1efef35660f28070b90e9b52847aaa20ff909d8c1004fe1b2bd78397830f2f63c0fa7b08397fdb86b3fc96f186fe4a10e92ad7722b258ff30257122405a0b2547ce8a25060f8bb8f2b99ba6963ab60515c598a2c615735dd672f0fae893818af1c3797c9b18dfe8cbae6ec013c2a1f41d62c8e53e1ef2f825bde77e6e2c60"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x1d7, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @broadcast, @random="a764c4fa7209", {0x3, 0x5}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x191, 0x4, @broadcast, {0x0, 0xa, @random="a3174b0ef953c03f06a5"}, @void, @val={0x2d, 0x1a, {0x8, 0x2, 0x3, 0x0, {0x7, 0x10e0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x306, 0x6, 0x3}}, [{0xdd, 0x80, "ba37b3d88638b42bbe8981b45f795ad611b886d6f66ef7d19dd293b0ed85fff5d7ff7eca6f8ab54773aa4da806d5bb66c665ef8b12b6bee2487c009d81cc603ceb4f201fcf12dd2b01c94e4154a9e52f32e189150c0fed3539ba05f6c2f071140d9737881f1bd99e3ff80859c185014bd462c08b4cbf50514371b8e4fca5fc5c"}, {0xdd, 0x4b, "a0dba9e9194c004682808703bf19ee81feb6dac30311c0582fc905038cb0c9eab0830a9c76d25de432a23aa48b7534f44a2d5dc2208948bf36b08e14c41f01f877e6e8078d49c1459b0632"}, {0xdd, 0x8, "7df64dfb52d7b44c"}, {0xdd, 0xa1, "56f16bade31fbfec21c7ba282dcf02b76e8fdd128e73397719c0dca14781a701a1ac6bf16cf195bc894f45838d03be69e310867436a4ecdb1f31dac325c86142b4af5b0c9389f1ff06e96533e145831748ea3e6a35a16f9639542cc4da2022705b5fd5eb8c388730e51edb05b1d3a207ad0d8453f687f6b6598518f3f0996c1557c706bba122dc72a98d99def8b337a00fa2d83dc37b574b4ac00ff70007de4677"}, {0xdd, 0x7, "08bbe02fb7addb"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x6b8}, 0x1, 0x0, 0x0, 0x20004880}, 0x8000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a00)='./binderfs/binder0\x00', 0x802, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a40)={{{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000b40)=0xe8) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000202, r5, &(0x7f0000000b80)='./file0\x00') getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000bc0), &(0x7f0000000c00)=0x30) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x80000001) r6 = openat2(r1, &(0x7f0000000c40)='./file0/file0\x00', &(0x7f0000000c80)={0x28642, 0x48, 0x1c}, 0x18) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r3, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x68, r3, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000f00)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r6, 0x330f, 0xf) r7 = accept4$nfc_llcp(r0, &(0x7f0000001000), &(0x7f0000001080)=0x60, 0x0) sync_file_range(r7, 0x4, 0xa337, 0x2) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f00000010c0)) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000001100)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r8, 0x4040942c, &(0x7f0000001140)={0x0, 0x6, [0x6, 0xffffffffffff0000, 0x9545, 0x8, 0x3, 0x5]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001380)={0x2c, &(0x7f0000001180)={0x40, 0x23, 0xf3, {0xf3, 0xc, "f1bfbb68a02c1f604b6eb6b35167bbee53d1ab7881e9377d2fc4c0e3b01e37d33a4c2b86c54af987901e53e46ccc4ae05c108b48467ee2dcb3076e558063d6831faf5c945e78a22f624fdef3573cf526ed75ae71a90ddff655a9d20eb64e48e2a9635957b00e83ec2bd71604ba64a3fc61a0a70d5e799c51eb066428f297b35ea372f45bac5cd328d7e352aed46aa88c0612446f141f58508f696160eca109cb28ebf1069e48b63b7d15e8712683034701d333c5028b0960cbc5cdb209f59db0eefb74935452724f698fa8bd3ef59b39894feeb131641ac0d659a383ae9a1762b4912cd1c2e0f3a339fda4548ff2cd89d4"}}, &(0x7f0000001280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}, &(0x7f00000012c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x8, 0x1, 0x6, "59ba7a23", "6a83b6b9"}}, &(0x7f0000001340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x60, 0x9, 0x8, 0x0, 0x1}}}, &(0x7f00000017c0)={0x84, &(0x7f00000013c0)={0x20, 0x0, 0x4, '8*qW'}, &(0x7f0000001400)={0x0, 0xa, 0x1}, &(0x7f0000001440)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000001480)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000014c0)={0x20, 0x0, 0x4, {0x20, 0x40}}, &(0x7f0000001500)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000001540)={0x40, 0x9, 0x1, 0x1f}, &(0x7f0000001580)={0x40, 0xb, 0x2, "0f82"}, &(0x7f00000015c0)={0x40, 0xf, 0x2, 0xf9}, &(0x7f0000001600)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001680)={0x40, 0x19, 0x2, "2cc3"}, &(0x7f00000016c0)={0x40, 0x1a, 0x2, 0x800}, &(0x7f0000001700)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001740)={0x40, 0x1e, 0x1, 0x59}, &(0x7f0000001780)={0x40, 0x21, 0x1, 0x5}}) close(r0) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f0000001880), &(0x7f00000018c0)=0x8) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x34, 0x8, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) dup(r7) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 40.97881678s ago: executing program 5 (id=2569): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0xffff, 0x91}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000000)) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x17) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file0'}, 0xb) openat2(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) 40.588819649s ago: executing program 2 (id=2571): set_robust_list(&(0x7f0000000200)={&(0x7f0000000180)={&(0x7f0000000140)}, 0xfc5, &(0x7f00000001c0)}, 0x18) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000240)="3187d88b88ce3b0b19eabfa03acc2c02528a56c2239e1b0de74601e46f5c1568963628fb5ef05350d832790b67c0c19136ddce6fb5acf9cefcf59a2a8847e3ef2534754edd0a8c524e90533fc6382fc95eb55eb832eb1785d8cae8e4dd48fec9b48e35a2be29f4818cd13d8a0b4ffff9f6634fcd973a24015ac15128a97e6908e6ceb767cd9510a3d5be5e1966f403cbd884d13c83d2ee7e30233feb15251473206d468fd98783e58e830a1bafd969939a189637a79028c9635672725273dbf060791a41b06f2489fa2acbe64d6ec51870068581505bdf5b47d64eb9542c74ad95eeaa862b9f2eddfd2c2d7ba28f761219", 0xf1}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000000400)="7f47c1268aee1ad0f8b35ed829f04e3b82a390d4b03b8f11c6a57f6f047e9df233f40522d6890d23a8a89471ca7da0b67fc9d578c2d63762600dd0be7cd44013c61d3686d08689f745d3ca16660a3d35b0fea24ea877bd9d378ea7b42aaf95dffabadc089fc7dce15efac49297e25e63c29eaa26aab1c6464ae2d863bbb3580c77aae443824442f0c07441820fdaf6f8a99e73ded7bab97ac3fc79d028cfe3961062fc7d2149a97d13f0bff70824e2a5d17c380427b2dfbb08785b3468c2b22a60a63e2a6c358370fa7dc95a8f03978680f039561b12bd9fba3be461cf1173e48d49cad59a0c9c52252b87f6914d7b91", 0xf0}, {&(0x7f0000000500)="ff924af5c5b76fb9daf0f0eb4ea3d73222744fdfd83eda08c096e52acc7cbce4f82498582ce23eb0a0a599a4b48d5268acf341feca3628cde42679c3b0cd50c9300032cb4ba435e757ce4864c4bfb879ee6725a84e1ffcdda8f0b297fb33782f07a7065222a93687e3acb4317e32d53e34e4d2ec7f955fe5dacef08875cbf184bf85c0cd", 0x84}, {&(0x7f0000000340)="2050250a6a23043b4fbbc0dcb5165b0c96a886d42a166f7dfec88cf6132e08e8e507a7b91cf1b44a9191dda50b2d6c58610c063dd3cb4b4bb7ceccf6aff563ba378e46905173cba6833553dca722512e657305ad7c6dfb8a051bda97ff78c76552afb5cc51fcabda0e1e829551cfefdc2750", 0x72}], 0x6) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c) (async) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x13, 0x8, 0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x13, 0x8, 0x6}]}, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0xa) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'vlan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="3f031c000300140006001e0089e9aaa911d7c2290f0000000000c9167c64114a1b6800000cc9", 0x26, 0x24000094, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000002700)={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @remote, 0x374, 0xfffb, 0x6, 0x480, 0x6, 0xc1040072, r3}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000003f80), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000004480)={&(0x7f0000000000)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x21, 0x6, @l2={'eth', 0x3a, 'gre0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40045}, 0x60) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000004480)={&(0x7f0000000000)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x21, 0x6, @l2={'eth', 0x3a, 'gre0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40045}, 0x60) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000140)}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="389b6601000008f6ebc17392fdffbb34e34e27c92a87711116291cb746db91e343ac0e1008821c00000400", 0x2b}], 0x1}}], 0x2, 0x404c851) 40.553601059s ago: executing program 2 (id=2572): r0 = socket$inet(0x2, 0x802, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@tclass={{0x10, 0x29, 0x39, 0x9ee}}], 0x10}}], 0x1, 0x80) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000080000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f00000006c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) 40.535163484s ago: executing program 2 (id=2573): io_setup(0x7, &(0x7f0000000080)=0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_pgetevents(r0, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 40.332896326s ago: executing program 1 (id=2574): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x1, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x4a2, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x40000000, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x800, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238cd, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x2, 0x20, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0x0, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x5, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESHEX=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 40.320753412s ago: executing program 1 (id=2575): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) (async) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) ioctl$TIOCCONS(r2, 0x541d) write$cgroup_pid(r1, &(0x7f0000000240), 0xb375) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x408, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r4, r4, 0x4, &(0x7f0000000140)={0x2b, 0x5, 0xfffffff9}) write$P9_RSETATTR(r1, &(0x7f00000001c0)={0x7, 0x1b, 0x1}, 0x7) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4e22, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x3}}]}, 0xc4}}, 0x80c4) (async) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='pstore\x00', 0x10005, 0x0) 40.029085039s ago: executing program 5 (id=2577): lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000080)=0x18, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000080)={0x60000}) syz_open_procfs(r0, &(0x7f0000000040)='comm\x00') exit(0x1ff) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) readv(r4, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/34, 0x22}, {&(0x7f0000000600)=""/51, 0x33}], 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 39.998721701s ago: executing program 4 (id=2578): r0 = socket$netlink(0x10, 0x3, 0x14) read(r0, &(0x7f0000000080)=""/43, 0x2b) (async) r1 = socket$netlink(0x10, 0x3, 0xe) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110001000000f4ffffff0000100000000900a2002521f95b00000000"], 0x20}], 0x1}, 0x0) (async) r2 = getpgid(0x0) syz_pidfd_open(r2, 0x0) (async) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) munlockall() ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 39.943693015s ago: executing program 4 (id=2579): r0 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) clock_settime(0x3, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x5, &(0x7f0000000280)={0x0, 0xa4, 0x6}) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r3, &(0x7f0000000740)=""/384, 0x200008c0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffd000/0x2000)=nil) 39.485041434s ago: executing program 4 (id=2580): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, &(0x7f0000000140)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400485c}, 0x40000) (async) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400485c}, 0x40000) 39.468418149s ago: executing program 4 (id=2581): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e0000001000000000000000002000100000000000000fb00000000000300050000000000020000007f0000010000000000000000020013"], 0x60}}, 0x0) r2 = accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x1ff, @loopback={0x0, 0x7ffffffe}, 0x3}, 0xe) 39.416002405s ago: executing program 1 (id=2582): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x186}, 0x1c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x380, 0x3) (async) ptrace$pokeuser(0x6, r1, 0x380, 0x3) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000040)={0xa, 0x4e22, 0xe, @ipv4={'\x00', '\xff\xff', @remote}, 0x14f}, 0x1c, 0x0}, 0x2606c0c0) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e80)='Jm', 0x2}], 0x1}}], 0x1, 0x1) sendto$inet6(r0, &(0x7f0000000340)="7f", 0x1, 0x10, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/205, 0xcd, 0x0, 0x0}, &(0x7f0000000100)=0x40) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="1201500200000040fd07040040000102030109026f0003010380020904000000010100000a24010a000a00020102090401000001220000090401010101020000090501091000d1ff400725010c038100090402000001020000b2b6da47010102000008240201090400fb022401080a020009058209400004260807250104030800d0e5a691dce6961bdf8d991886cc24ae45ca6c18acaac64894cdcb4d1b22797914d369f20e7966"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) 39.372552053s ago: executing program 4 (id=2583): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x40047705, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000e40), 0x0, 0x2) ioctl$HIDIOCSREPORT(r2, 0x8104481f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e22, @loopback}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) (async) ioctl$ASHMEM_GET_NAME(r0, 0x40047705, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000e40), 0x0, 0x2) (async) ioctl$HIDIOCSREPORT(r2, 0x8104481f, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e22, @loopback}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) 38.492849232s ago: executing program 4 (id=2584): unshare(0x60000600) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r4 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf800000000008001c07", @ANYRES32=r4, @ANYBLOB="0c0006000100000001000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x800) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x800) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r7, 0x400, 0x1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x30, r6, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x801c}, 0xc1) 36.962278785s ago: executing program 1 (id=2585): socket(0x11, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r3) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000800000106d042ec2000000000001090224000100008000090400000203000200092100000001222b000905810300"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0) getsockopt(0xffffffffffffffff, 0xba, 0xffff8001, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendto$packet(r6, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x85, 0x6, @broadcast}, 0x14) 25.307899703s ago: executing program 34 (id=2573): io_setup(0x7, &(0x7f0000000080)=0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_pgetevents(r0, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 19.903291123s ago: executing program 35 (id=2577): lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000080)=0x18, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000080)={0x60000}) syz_open_procfs(r0, &(0x7f0000000040)='comm\x00') exit(0x1ff) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) readv(r4, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/34, 0x22}, {&(0x7f0000000600)=""/51, 0x33}], 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 10.323131703s ago: executing program 36 (id=2585): socket(0x11, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r3) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000800000106d042ec2000000000001090224000100008000090400000203000200092100000001222b000905810300"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0) getsockopt(0xffffffffffffffff, 0xba, 0xffff8001, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendto$packet(r6, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x85, 0x6, @broadcast}, 0x14) 0s ago: executing program 37 (id=2584): unshare(0x60000600) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r4 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf800000000008001c07", @ANYRES32=r4, @ANYBLOB="0c0006000100000001000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x800) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x800) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r7, 0x400, 0x1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x30, r6, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x801c}, 0xc1) kernel console output (not intermixed with test programs): 23372036854771712 [ 305.955739][ T6765] total_cache 314089472 [ 305.962083][ T6765] total_rss 483328 [ 305.966303][ T6765] total_rss_huge 0 [ 305.970585][ T6765] total_shmem 314089472 [ 305.975928][ T6765] total_mapped_file 0 [ 305.979971][ T6765] total_dirty 0 [ 305.985640][ T6765] total_writeback 0 [ 305.989938][ T6765] total_workingset_refault_anon 19 [ 305.995521][ T6765] total_workingset_refault_file 0 [ 306.000926][ T6765] total_swap 127963136 [ 306.005316][ T6765] total_swapcached 24576 [ 306.010246][ T6765] total_pgpgin 187351 [ 306.015090][ T6765] total_pgpgout 110551 [ 306.020001][ T6765] total_pgfault 44436 [ 306.031623][ T6765] total_pgmajfault 59 [ 306.037859][ T6765] total_inactive_anon 257626112 [ 306.043657][ T6765] total_active_anon 56946688 [ 306.049264][ T6765] total_inactive_file 0 [ 306.054855][ T6765] total_active_file 0 [ 306.059536][ T6765] total_unevictable 0 [ 306.064199][ T6765] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2103,pid=6767,uid=0 [ 306.080451][ T6765] Memory cgroup out of memory: Killed process 6767 (syz.5.2103) total-vm:90500kB, anon-rss:1356kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 306.111351][ T609] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 306.152685][ T7005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.161305][ T342] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 306.180985][ T7005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.247679][ T6775] syz.5.2103 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 306.262901][ T609] usb 3-1: unable to get BOS descriptor or descriptor too short [ 306.273946][ T609] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 306.286016][ T609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.296231][ T609] usb 3-1: Product: syz [ 306.310805][ T609] usb 3-1: Manufacturer: syz [ 306.317077][ T609] usb 3-1: SerialNumber: syz [ 306.331882][ T342] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 306.332248][ T6775] CPU: 0 UID: 0 PID: 6775 Comm: syz.5.2103 Not tainted syzkaller #0 4b5cec16b486fb71b4486bf07c6a811d89a3863f [ 306.332355][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.332400][ T6775] Call Trace: [ 306.332439][ T6775] [ 306.332469][ T6775] __dump_stack+0x21/0x30 [ 306.332569][ T6775] dump_stack_lvl+0x140/0x1c0 [ 306.332649][ T6775] ? __cfi_dump_stack_lvl+0x10/0x10 [ 306.332726][ T6775] ? ___ratelimit+0x40e/0x5b0 [ 306.332803][ T6775] dump_stack+0x19/0x20 [ 306.332893][ T6775] dump_header+0xd6/0x490 [ 306.332960][ T6775] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 306.333060][ T6775] oom_kill_process+0x35d/0x640 [ 306.333157][ T6775] out_of_memory+0x624/0xa30 [ 306.333261][ T6775] ? __cfi_out_of_memory+0x10/0x10 [ 306.333350][ T6775] ? mutex_lock_killable+0x97/0x1d0 [ 306.333426][ T6775] ? __cfi_mutex_lock_killable+0x10/0x10 [ 306.333503][ T6775] mem_cgroup_out_of_memory+0x2c8/0x390 [ 306.333594][ T6775] ? css_next_descendant_pre+0x202/0x230 [ 306.333664][ T6775] ? drain_obj_stock+0xed0/0xed0 [ 306.333744][ T6775] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 306.333818][ T6775] try_charge_memcg+0x91c/0xe10 [ 306.333888][ T6775] ? __cfi_try_charge_memcg+0x10/0x10 [ 306.333951][ T6775] ? __alloc_pages_noprof+0x35f/0x7e0 [ 306.334020][ T6775] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 306.334084][ T6775] __mem_cgroup_charge+0xfc/0x420 [ 306.334149][ T6775] ? folio_add_lru+0x116/0x400 [ 306.334241][ T6775] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 306.334316][ T6775] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 306.334410][ T6775] ? put_swap_device+0x130/0x130 [ 306.334496][ T6775] ? shmem_huge_global_enabled+0x2da/0x360 [ 306.334574][ T6775] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 306.334659][ T6775] ? __kasan_check_write+0x18/0x20 [ 306.334733][ T6775] ? _raw_spin_lock+0x92/0x120 [ 306.334797][ T6775] shmem_get_folio_gfp+0x607/0x1390 [ 306.334891][ T6775] ? shmem_get_folio+0xc0/0xc0 [ 306.334978][ T6775] ? __kasan_check_write+0x18/0x20 [ 306.335046][ T6775] ? inode_to_bdi+0x6d/0x100 [ 306.335152][ T6775] shmem_write_begin+0xf4/0x270 [ 306.335279][ T6775] generic_perform_write+0x328/0x970 [ 306.335354][ T6775] ? inode_update_timestamps+0x4f0/0x700 [ 306.335424][ T6775] ? __cfi_generic_perform_write+0x10/0x10 [ 306.335487][ T6775] ? down_write+0xee/0x2b0 [ 306.335549][ T6775] ? mnt_get_write_access_file+0x1af/0x3b0 [ 306.335606][ T6775] ? mnt_put_write_access_file+0xc2/0x100 [ 306.335669][ T6775] ? file_update_time+0x1de/0x210 [ 306.335733][ T6775] shmem_file_write_iter+0x105/0x130 [ 306.335798][ T6775] __kernel_write_iter+0x42c/0x8a0 [ 306.335872][ T6775] ? __cfi___kernel_write_iter+0x10/0x10 [ 306.335946][ T6775] ? get_dump_page+0x165/0x220 [ 306.336002][ T6775] ? __asan_memset+0x39/0x50 [ 306.336075][ T6775] ? iov_iter_bvec+0xc0/0x180 [ 306.336151][ T6775] dump_user_range+0xb8b/0xe60 [ 306.336239][ T6775] ? __cfi_dump_user_range+0x10/0x10 [ 306.336327][ T6775] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 306.336406][ T6775] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 306.336483][ T6775] ? elf_core_dump+0x24c0/0x3960 [ 306.336551][ T6775] elf_core_dump+0x2e7e/0x3960 [ 306.336696][ T6775] ? __cfi_elf_core_dump+0x10/0x10 [ 306.336823][ T6775] ? dump_interrupted+0xf0/0xf0 [ 306.336889][ T6775] ? filp_open+0x199/0x1f0 [ 306.336945][ T6775] ? 0xffffffffff600000 [ 306.336996][ T6775] ? freezing_slow_path+0x12b/0x170 [ 306.337084][ T6775] do_coredump+0x208a/0x2fe0 [ 306.337153][ T6775] ? __cfi_do_coredump+0x10/0x10 [ 306.337226][ T6775] ? asm_exc_page_fault+0x2b/0x30 [ 306.337303][ T6775] ? __kasan_slab_free+0x6a/0x80 [ 306.337382][ T6775] ? kmem_cache_free+0x1bd/0x4f0 [ 306.337450][ T6775] ? get_signal+0xa74/0x14e0 [ 306.337516][ T6775] get_signal+0x11f8/0x14e0 [ 306.337589][ T6775] arch_do_signal_or_restart+0xbc/0x760 [ 306.337676][ T6775] ? fixup_vdso_exception+0x20d/0x310 [ 306.337756][ T6775] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 306.337850][ T6775] irqentry_exit_to_user_mode+0x4d/0xb0 [ 306.337940][ T6775] irqentry_exit+0x16/0x60 [ 306.338022][ T6775] exc_page_fault+0x65/0xc0 [ 306.338098][ T6775] asm_exc_page_fault+0x2b/0x30 [ 306.338147][ T6775] RIP: 0033:0x7fbb99c52777 [ 306.338207][ T6775] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 41 1b 00 48 8d 35 34 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 306.338253][ T6775] RSP: 002b:00007fbb9ac4c120 EFLAGS: 00010202 [ 306.338319][ T6775] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbb99d9c799 [ 306.338363][ T6775] RDX: 00007fbb9ac4c140 RSI: 00007fbb9ac4c270 RDI: 000000000000000b [ 306.338414][ T6775] RBP: 00007fbb99e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 306.338463][ T6775] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 306.338515][ T6775] R13: 00007fbb9a016128 R14: 00007fbb9a016090 R15: 00007ffd55e299c8 [ 306.338571][ T6775] [ 306.338648][ T6775] memory: usage 305384kB, limit 307200kB, failcnt 42611 [ 306.361912][ T342] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.375679][ T6775] memory+swap: usage 422956kB, limit 9007199254740988kB, failcnt 0 [ 306.381661][ T342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 306.385218][ T6775] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 306.400611][ T342] usb 2-1: SerialNumber: syz [ 306.456235][ T6775] Memory cgroup stats for [ 306.513977][ T342] cdc_ether 2-1:1.0: skipping garbage [ 306.730623][ T6775] /syz5: [ 306.732444][ T6775] cache 298024960 [ 306.758115][ T342] usb 2-1: bad CDC descriptors [ 306.938738][ T6775] rss 462848 [ 306.942774][ T6775] rss_huge 0 [ 306.946566][ T6775] shmem 298024960 [ 306.951109][ T6775] mapped_file 0 [ 306.954762][ T6775] dirty 0 [ 306.957772][ T6775] writeback 0 [ 306.961970][ T6775] workingset_refault_anon 19 [ 306.966625][ T6775] workingset_refault_file 0 [ 306.982931][ T6775] swap 127639552 [ 306.986561][ T6775] swapcached 24576 [ 306.990486][ T6775] pgpgin 187352 [ 306.994163][ T6775] pgpgout 114442 [ 306.997837][ T6775] pgfault 44437 [ 307.001407][ T6775] pgmajfault 59 [ 307.004919][ T6775] inactive_anon 241336320 [ 307.009314][ T6775] active_anon 56950784 [ 307.013704][ T6775] inactive_file 0 [ 307.018332][ T6775] active_file 0 [ 307.047577][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.056375][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.074828][ T6775] unevictable 0 [ 307.078461][ T6775] hierarchical_memory_limit 314572800 [ 307.088745][ T6775] hierarchical_memsw_limit 9223372036854771712 [ 307.105309][ T6775] total_cache 298024960 [ 307.115425][ T6775] total_rss 462848 [ 307.119448][ T6775] total_rss_huge 0 [ 307.128567][ T6775] total_shmem 298024960 [ 307.132959][ T6775] total_mapped_file 0 [ 307.147245][ T6775] total_dirty 0 [ 307.157358][ T6775] total_writeback 0 [ 307.161968][ T6775] total_workingset_refault_anon 19 [ 307.187652][ T6775] total_workingset_refault_file 0 [ 307.193344][ T6775] total_swap 127639552 [ 307.197628][ T6775] total_swapcached 24576 [ 307.223134][ T6775] total_pgpgin 187352 [ 307.227645][ T6775] total_pgpgout 114442 [ 307.258232][ T6775] total_pgfault 44437 [ 307.262592][ T6775] total_pgmajfault 59 [ 307.287029][ T6775] total_inactive_anon 241336320 [ 307.307242][ T6775] total_active_anon 56950784 [ 307.317382][ T6775] total_inactive_file 0 [ 307.326187][ T6775] total_active_file 0 [ 307.333892][ T6775] total_unevictable 0 [ 307.338484][ T6775] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2103,pid=6766,uid=0 [ 307.353876][ T6775] Memory cgroup out of memory: Killed process 6766 (syz.5.2103) total-vm:90500kB, anon-rss:1356kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 307.533655][ T609] usb 3-1: 1:1: cannot get freq at ep 0x1 [ 307.545291][ T609] usb 3-1: USB disconnect, device number 77 [ 307.581958][ T5677] udevd[5677]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 307.600188][ T6764] syz.5.2103 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 307.624119][ T6764] CPU: 1 UID: 0 PID: 6764 Comm: syz.5.2103 Not tainted syzkaller #0 4b5cec16b486fb71b4486bf07c6a811d89a3863f [ 307.624166][ T6764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 307.624183][ T6764] Call Trace: [ 307.624192][ T6764] [ 307.624202][ T6764] __dump_stack+0x21/0x30 [ 307.624238][ T6764] dump_stack_lvl+0x140/0x1c0 [ 307.624268][ T6764] ? __cfi_dump_stack_lvl+0x10/0x10 [ 307.624299][ T6764] ? ___ratelimit+0x40e/0x5b0 [ 307.624328][ T6764] dump_stack+0x19/0x20 [ 307.624357][ T6764] dump_header+0xd6/0x490 [ 307.624383][ T6764] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 307.624409][ T6764] oom_kill_process+0x35d/0x640 [ 307.624470][ T6764] out_of_memory+0x624/0xa30 [ 307.624505][ T6764] ? __cfi_out_of_memory+0x10/0x10 [ 307.624538][ T6764] ? mutex_lock_killable+0x97/0x1d0 [ 307.624569][ T6764] ? __cfi_mutex_lock_killable+0x10/0x10 [ 307.624603][ T6764] mem_cgroup_out_of_memory+0x2c8/0x390 [ 307.624640][ T6764] ? css_next_descendant_pre+0x202/0x230 [ 307.624666][ T6764] ? drain_obj_stock+0xed0/0xed0 [ 307.624697][ T6764] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 307.624728][ T6764] try_charge_memcg+0x91c/0xe10 [ 307.624754][ T6764] ? __cfi_try_charge_memcg+0x10/0x10 [ 307.624779][ T6764] ? __alloc_pages_noprof+0x35f/0x7e0 [ 307.624806][ T6764] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 307.624834][ T6764] __mem_cgroup_charge+0xfc/0x420 [ 307.624862][ T6764] ? folio_add_lru+0x116/0x400 [ 307.624899][ T6764] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 307.624929][ T6764] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 307.624969][ T6764] ? put_swap_device+0x130/0x130 [ 307.625003][ T6764] ? shmem_huge_global_enabled+0x2da/0x360 [ 307.625038][ T6764] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 307.625072][ T6764] ? __kasan_check_write+0x18/0x20 [ 307.625102][ T6764] ? _raw_spin_lock+0x92/0x120 [ 307.625125][ T6764] shmem_get_folio_gfp+0x607/0x1390 [ 307.625161][ T6764] ? shmem_get_folio+0xc0/0xc0 [ 307.625191][ T6764] ? follow_page_pte+0x90f/0xbc0 [ 307.625216][ T6764] ? inode_to_bdi+0x6d/0x100 [ 307.625243][ T6764] shmem_write_begin+0xf4/0x270 [ 307.625279][ T6764] generic_perform_write+0x328/0x970 [ 307.625308][ T6764] ? __cfi_generic_perform_write+0x10/0x10 [ 307.625333][ T6764] ? down_write+0xee/0x2b0 [ 307.625367][ T6764] ? file_update_time+0xa3/0x210 [ 307.625392][ T6764] shmem_file_write_iter+0x105/0x130 [ 307.625426][ T6764] __kernel_write_iter+0x42c/0x8a0 [ 307.625458][ T6764] ? __cfi___kernel_write_iter+0x10/0x10 [ 307.625487][ T6764] ? get_dump_page+0x165/0x220 [ 307.625510][ T6764] ? __asan_memset+0x39/0x50 [ 307.625538][ T6764] ? iov_iter_bvec+0xc0/0x180 [ 307.625570][ T6764] dump_user_range+0xb8b/0xe60 [ 307.625604][ T6764] ? __cfi_dump_user_range+0x10/0x10 [ 307.625633][ T6764] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 307.625677][ T6764] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 307.625711][ T6764] ? elf_core_dump+0x24c0/0x3960 [ 307.625748][ T6764] elf_core_dump+0x2e7e/0x3960 [ 307.625787][ T6764] ? __cfi_elf_core_dump+0x10/0x10 [ 307.625840][ T6764] ? dump_interrupted+0xf0/0xf0 [ 307.625869][ T6764] ? filp_open+0x199/0x1f0 [ 307.625892][ T6764] ? 0xffffffffff600000 [ 307.625908][ T6764] ? freezing_slow_path+0x12b/0x170 [ 307.625945][ T6764] do_coredump+0x208a/0x2fe0 [ 307.625978][ T6764] ? __cfi_do_coredump+0x10/0x10 [ 307.626005][ T6764] ? asm_exc_page_fault+0x2b/0x30 [ 307.626037][ T6764] ? __kasan_slab_free+0x6a/0x80 [ 307.626071][ T6764] ? kmem_cache_free+0x1bd/0x4f0 [ 307.626102][ T6764] ? get_signal+0xa74/0x14e0 [ 307.626132][ T6764] get_signal+0x11f8/0x14e0 [ 307.626164][ T6764] arch_do_signal_or_restart+0xbc/0x760 [ 307.626199][ T6764] ? fixup_vdso_exception+0x20d/0x310 [ 307.626241][ T6764] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 307.626280][ T6764] irqentry_exit_to_user_mode+0x4d/0xb0 [ 307.626315][ T6764] irqentry_exit+0x16/0x60 [ 307.626346][ T6764] exc_page_fault+0x65/0xc0 [ 307.626377][ T6764] asm_exc_page_fault+0x2b/0x30 [ 307.626399][ T6764] RIP: 0033:0x7fbb99c52777 [ 307.626428][ T6764] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 41 1b 00 48 8d 35 34 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 307.626449][ T6764] RSP: 002b:00007fbb9ac4c120 EFLAGS: 00010202 [ 307.626472][ T6764] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbb99d9c799 [ 307.626490][ T6764] RDX: 00007fbb9ac4c140 RSI: 00007fbb9ac4c270 RDI: 000000000000000b [ 307.626507][ T6764] RBP: 00007fbb99e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 307.626524][ T6764] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 307.626540][ T6764] R13: 00007fbb9a016128 R14: 00007fbb9a016090 R15: 00007ffd55e299c8 [ 307.626561][ T6764] [ 307.626572][ T6764] memory: usage 307200kB, limit 307200kB, failcnt 44650 [ 308.102141][ T6764] memory+swap: usage 431872kB, limit 9007199254740988kB, failcnt 0 [ 308.110164][ T6764] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 308.117364][ T6764] Memory cgroup stats for /syz5: [ 308.117522][ T6764] cache 314085376 [ 308.126511][ T6764] rss 323584 [ 308.129747][ T6764] rss_huge 0 [ 308.133337][ T6764] shmem 314085376 [ 308.139480][ T6764] mapped_file 0 [ 308.143887][ T6764] dirty 0 [ 308.148133][ T6764] writeback 0 [ 308.151616][ T6764] workingset_refault_anon 19 [ 308.156613][ T6764] workingset_refault_file 0 [ 308.164575][ T6764] swap 127086592 [ 308.164810][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 308.172623][ T6764] swapcached 24576 [ 308.182528][ T7022] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 308.192469][ T6764] pgpgin 197392 [ 308.196244][ T6764] pgpgout 120632 [ 308.199931][ T36] audit: type=1400 audit(1772879044.895:6222): avc: denied { relabelto } for pid=7021 comm="syz.5.2181" name="file0" dev="tmpfs" ino=557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 308.235658][ T6764] pgfault 44677 [ 308.241443][ T6764] pgmajfault 59 [ 308.249366][ T6764] inactive_anon 131530752 [ 308.258645][ T6764] active_anon 182878208 [ 308.263892][ T6764] inactive_file 0 [ 308.267676][ T6764] active_file 0 [ 308.271161][ T6764] unevictable 0 [ 308.274996][ T6764] hierarchical_memory_limit 314572800 [ 308.280897][ T6764] hierarchical_memsw_limit 9223372036854771712 [ 308.287431][ T6764] total_cache 314085376 [ 308.291761][ T36] audit: type=1400 audit(1772879044.895:6223): avc: denied { associate } for pid=7021 comm="syz.5.2181" name="file0" dev="tmpfs" ino=557 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 308.320387][ T6764] total_rss 323584 [ 308.324330][ T6764] total_rss_huge 0 [ 308.328351][ T6764] total_shmem 314085376 [ 308.332753][ T6764] total_mapped_file 0 [ 308.337001][ T6764] total_dirty 0 [ 308.340560][ T6764] total_writeback 0 [ 308.344496][ T6764] total_workingset_refault_anon 19 [ 308.349993][ T6764] total_workingset_refault_file 0 [ 308.355173][ T6764] total_swap 127086592 [ 308.359685][ T6764] total_swapcached 24576 [ 308.364022][ T6764] total_pgpgin 197392 [ 308.368747][ T6764] total_pgpgout 120632 [ 308.373119][ T6764] total_pgfault 44677 [ 308.377713][ T6764] total_pgmajfault 59 [ 308.381922][ T6764] total_inactive_anon 131530752 [ 308.387354][ T6764] total_active_anon 182878208 [ 308.392225][ T6764] total_inactive_file 0 [ 308.396824][ T6764] total_active_file 0 [ 308.401069][ T6764] total_unevictable 0 [ 308.405533][ T6764] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2103,pid=6764,uid=0 [ 308.423572][ T6764] Memory cgroup out of memory: Killed process 6764 (syz.5.2103) total-vm:90500kB, anon-rss:1228kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 308.825788][ T10] usb 2-1: USB disconnect, device number 28 [ 308.978870][ T6772] syz.5.2103 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 309.034948][ T7032] syzkaller1: entered promiscuous mode [ 309.041665][ T7032] syzkaller1: entered allmulticast mode [ 309.085387][ T6772] CPU: 1 UID: 0 PID: 6772 Comm: syz.5.2103 Not tainted syzkaller #0 4b5cec16b486fb71b4486bf07c6a811d89a3863f [ 309.085433][ T6772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 309.085450][ T6772] Call Trace: [ 309.085460][ T6772] [ 309.085483][ T6772] __dump_stack+0x21/0x30 [ 309.085520][ T6772] dump_stack_lvl+0x140/0x1c0 [ 309.085551][ T6772] ? __cfi_dump_stack_lvl+0x10/0x10 [ 309.085582][ T6772] ? ___ratelimit+0x40e/0x5b0 [ 309.085613][ T6772] dump_stack+0x19/0x20 [ 309.085643][ T6772] dump_header+0xd6/0x490 [ 309.085671][ T6772] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 309.085697][ T6772] oom_kill_process+0x35d/0x640 [ 309.085733][ T6772] out_of_memory+0x624/0xa30 [ 309.085769][ T6772] ? __cfi_out_of_memory+0x10/0x10 [ 309.085803][ T6772] ? mutex_lock_killable+0x97/0x1d0 [ 309.085835][ T6772] ? __cfi_mutex_lock_killable+0x10/0x10 [ 309.085870][ T6772] mem_cgroup_out_of_memory+0x2c8/0x390 [ 309.085901][ T6772] ? css_next_descendant_pre+0x202/0x230 [ 309.085928][ T6772] ? drain_obj_stock+0xed0/0xed0 [ 309.085961][ T6772] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 309.085993][ T6772] try_charge_memcg+0x91c/0xe10 [ 309.086021][ T6772] ? __cfi_try_charge_memcg+0x10/0x10 [ 309.086046][ T6772] ? __alloc_pages_noprof+0x35f/0x7e0 [ 309.086079][ T6772] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 309.086107][ T6772] __mem_cgroup_charge+0xfc/0x420 [ 309.086136][ T6772] ? folio_add_lru+0x116/0x400 [ 309.086175][ T6772] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 309.086206][ T6772] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 309.086247][ T6772] ? put_swap_device+0x130/0x130 [ 309.086284][ T6772] ? shmem_huge_global_enabled+0x2da/0x360 [ 309.086326][ T6772] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 309.086362][ T6772] ? __kasan_check_write+0x18/0x20 [ 309.086404][ T6772] ? _raw_spin_lock+0x92/0x120 [ 309.086428][ T6772] shmem_get_folio_gfp+0x607/0x1390 [ 309.086464][ T6772] ? shmem_get_folio+0xc0/0xc0 [ 309.086497][ T6772] ? __kasan_check_write+0x18/0x20 [ 309.086525][ T6772] ? inode_to_bdi+0x6d/0x100 [ 309.086552][ T6772] shmem_write_begin+0xf4/0x270 [ 309.086588][ T6772] generic_perform_write+0x328/0x970 [ 309.086613][ T6772] ? inode_update_timestamps+0x4f0/0x700 [ 309.086642][ T6772] ? __cfi_generic_perform_write+0x10/0x10 [ 309.086666][ T6772] ? down_write+0xee/0x2b0 [ 309.086698][ T6772] ? mnt_get_write_access_file+0x1af/0x3b0 [ 309.086723][ T6772] ? mnt_put_write_access_file+0xc2/0x100 [ 309.086748][ T6772] ? file_update_time+0x1de/0x210 [ 309.086773][ T6772] shmem_file_write_iter+0x105/0x130 [ 309.086799][ T6772] __kernel_write_iter+0x42c/0x8a0 [ 309.086831][ T6772] ? __cfi___kernel_write_iter+0x10/0x10 [ 309.086861][ T6772] ? get_dump_page+0x165/0x220 [ 309.086884][ T6772] ? __asan_memset+0x39/0x50 [ 309.086913][ T6772] ? iov_iter_bvec+0xc0/0x180 [ 309.086946][ T6772] dump_user_range+0xb8b/0xe60 [ 309.086978][ T6772] ? __cfi_dump_user_range+0x10/0x10 [ 309.087009][ T6772] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 309.087044][ T6772] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 309.087078][ T6772] ? elf_core_dump+0x24c0/0x3960 [ 309.087115][ T6772] elf_core_dump+0x2e7e/0x3960 [ 309.087155][ T6772] ? __cfi_elf_core_dump+0x10/0x10 [ 309.087198][ T6772] ? dump_interrupted+0xf0/0xf0 [ 309.087226][ T6772] ? filp_open+0x199/0x1f0 [ 309.087250][ T6772] ? 0xffffffffff600000 [ 309.087269][ T6772] ? freezing_slow_path+0x12b/0x170 [ 309.087306][ T6772] do_coredump+0x208a/0x2fe0 [ 309.087346][ T6772] ? __cfi_do_coredump+0x10/0x10 [ 309.087374][ T6772] ? asm_exc_page_fault+0x2b/0x30 [ 309.087406][ T6772] ? __kasan_slab_free+0x6a/0x80 [ 309.087440][ T6772] ? kmem_cache_free+0x1bd/0x4f0 [ 309.087471][ T6772] ? get_signal+0xa74/0x14e0 [ 309.087500][ T6772] get_signal+0x11f8/0x14e0 [ 309.087533][ T6772] arch_do_signal_or_restart+0xbc/0x760 [ 309.087567][ T6772] ? fixup_vdso_exception+0x20d/0x310 [ 309.087603][ T6772] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 309.087642][ T6772] irqentry_exit_to_user_mode+0x4d/0xb0 [ 309.087677][ T6772] irqentry_exit+0x16/0x60 [ 309.087708][ T6772] exc_page_fault+0x65/0xc0 [ 309.087739][ T6772] asm_exc_page_fault+0x2b/0x30 [ 309.087761][ T6772] RIP: 0033:0x7fbb99c52777 [ 309.087783][ T6772] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 41 1b 00 48 8d 35 34 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 309.087804][ T6772] RSP: 002b:00007fbb9ac4c120 EFLAGS: 00010202 [ 309.087827][ T6772] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbb99d9c799 [ 309.087844][ T6772] RDX: 00007fbb9ac4c140 RSI: 00007fbb9ac4c270 RDI: 000000000000000b [ 309.087860][ T6772] RBP: 00007fbb99e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 309.087877][ T6772] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 309.087892][ T6772] R13: 00007fbb9a016128 R14: 00007fbb9a016090 R15: 00007ffd55e299c8 [ 309.087914][ T6772] [ 309.087924][ T6772] memory: usage 307200kB, limit 307200kB, failcnt 47503 [ 309.254109][ T36] audit: type=1400 audit(1772879045.937:6224): avc: denied { unlink } for pid=5338 comm="syz-executor" name="file0" dev="tmpfs" ino=557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 309.286378][ T6772] memory+swap: usage 432164kB, limit 9007199254740988kB, failcnt 0 [ 309.383028][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 309.526759][ T6772] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 309.630819][ T6772] Memory cgroup stats for /syz5: [ 309.631203][ T6772] cache 313905152 [ 309.648161][ T6772] rss 499712 [ 309.651563][ T6772] rss_huge 0 [ 309.654808][ T6772] shmem 313905152 [ 309.658482][ T6772] mapped_file 0 [ 309.664190][ T6772] dirty 0 [ 309.667193][ T6772] writeback 0 [ 309.670865][ T6772] workingset_refault_anon 19 [ 309.675571][ T6772] workingset_refault_file 0 [ 309.680150][ T6772] swap 127963136 [ 309.683827][ T6772] swapcached 24576 [ 309.687698][ T6772] pgpgin 223562 [ 309.691267][ T6772] pgpgout 146803 [ 309.695027][ T6772] pgfault 47280 [ 309.698502][ T6772] pgmajfault 59 [ 309.702018][ T6772] inactive_anon 243134464 [ 309.706369][ T6772] active_anon 71266304 [ 309.708818][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 309.710488][ T6772] inactive_file 0 [ 309.710500][ T6772] active_file 0 [ 309.710509][ T6772] unevictable 0 [ 309.727511][ T10] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 309.739113][ T10] usb 2-1: config 0 has no interface number 0 [ 309.746385][ T10] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 309.757027][ T10] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 309.764255][ T6772] hierarchical_memory_limit 314572800 [ 309.774946][ T6772] hierarchical_memsw_limit 9223372036854771712 [ 309.781319][ T6772] total_cache 313905152 [ 309.785508][ T6772] total_rss 499712 [ 309.789377][ T6772] total_rss_huge 0 [ 309.789627][ T10] usb 2-1: config 0 interface 196 has no altsetting 0 [ 309.793576][ T6772] total_shmem 313905152 [ 309.803798][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 309.813525][ T6772] total_mapped_file 0 [ 309.813545][ T6772] total_dirty 0 [ 309.813554][ T6772] total_writeback 0 [ 309.822299][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.833976][ T10] usb 2-1: Product: syz [ 309.837628][ T6772] total_workingset_refault_anon 19 [ 309.838469][ T10] usb 2-1: Manufacturer: syz [ 309.848615][ T10] usb 2-1: SerialNumber: syz [ 309.856384][ T10] usb 2-1: config 0 descriptor?? [ 309.862172][ T7037] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 309.865202][ T6772] total_workingset_refault_file 0 [ 309.876775][ T6772] total_swap 127963136 [ 309.880951][ T6772] total_swapcached 24576 [ 309.885248][ T6772] total_pgpgin 223562 [ 309.889397][ T6772] total_pgpgout 146803 [ 309.894355][ T6772] total_pgfault 47280 [ 309.898413][ T6772] total_pgmajfault 59 [ 309.902483][ T6772] total_inactive_anon 243134464 [ 309.911471][ T7053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.919963][ T6772] total_active_anon 71266304 [ 309.923010][ T7053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.924689][ T6772] total_inactive_file 0 [ 309.936923][ T6772] total_active_file 0 [ 309.941258][ T6772] total_unevictable 0 [ 309.942559][ T7052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.945272][ T6772] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2103,pid=6761,uid=0 [ 309.957969][ T7052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.970347][ T6772] Memory cgroup out of memory: Killed process 6761 (syz.5.2103) total-vm:90500kB, anon-rss:1356kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 310.092461][ T7037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.102698][ T7037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.133342][ T6763] syz.5.2103 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 310.149026][ T6763] CPU: 0 UID: 0 PID: 6763 Comm: syz.5.2103 Not tainted syzkaller #0 4b5cec16b486fb71b4486bf07c6a811d89a3863f [ 310.149067][ T6763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 310.149084][ T6763] Call Trace: [ 310.149093][ T6763] [ 310.149104][ T6763] __dump_stack+0x21/0x30 [ 310.149144][ T6763] dump_stack_lvl+0x140/0x1c0 [ 310.149175][ T6763] ? __cfi_dump_stack_lvl+0x10/0x10 [ 310.149206][ T6763] ? ___ratelimit+0x40e/0x5b0 [ 310.149243][ T6763] dump_stack+0x19/0x20 [ 310.149271][ T6763] dump_header+0xd6/0x490 [ 310.149298][ T6763] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 310.149324][ T6763] oom_kill_process+0x35d/0x640 [ 310.149358][ T6763] ? __pv_queued_spin_lock_slowpath+0xa21/0xe90 [ 310.149389][ T6763] out_of_memory+0x624/0xa30 [ 310.149423][ T6763] ? __cfi_out_of_memory+0x10/0x10 [ 310.149456][ T6763] ? mutex_lock_killable+0x97/0x1d0 [ 310.149487][ T6763] ? __cfi_mutex_lock_killable+0x10/0x10 [ 310.149520][ T6763] mem_cgroup_out_of_memory+0x2c8/0x390 [ 310.149552][ T6763] ? css_next_descendant_pre+0x202/0x230 [ 310.149578][ T6763] ? drain_obj_stock+0xed0/0xed0 [ 310.149625][ T6763] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 310.149657][ T6763] try_charge_memcg+0x91c/0xe10 [ 310.149684][ T6763] ? __cfi_try_charge_memcg+0x10/0x10 [ 310.149709][ T6763] ? __alloc_pages_noprof+0x35f/0x7e0 [ 310.149736][ T6763] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 310.149763][ T6763] __mem_cgroup_charge+0xfc/0x420 [ 310.149792][ T6763] ? __switch_to_asm+0x3d/0x70 [ 310.149825][ T6763] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 310.149854][ T6763] ? __schedule+0x1357/0x1ea0 [ 310.149881][ T6763] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 310.149918][ T6763] ? put_swap_device+0x130/0x130 [ 310.149949][ T6763] ? shmem_huge_global_enabled+0x2da/0x360 [ 310.149979][ T6763] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 310.150009][ T6763] ? __kasan_check_write+0x18/0x20 [ 310.150034][ T6763] ? _raw_spin_lock+0x92/0x120 [ 310.150053][ T6763] shmem_get_folio_gfp+0x607/0x1390 [ 310.150085][ T6763] ? shmem_get_folio+0xc0/0xc0 [ 310.150112][ T6763] ? follow_page_pte+0x90f/0xbc0 [ 310.150133][ T6763] ? inode_to_bdi+0x6d/0x100 [ 310.150155][ T6763] shmem_write_begin+0xf4/0x270 [ 310.150186][ T6763] generic_perform_write+0x328/0x970 [ 310.150236][ T6763] ? __cfi_generic_perform_write+0x10/0x10 [ 310.150256][ T6763] ? down_write+0xee/0x2b0 [ 310.150284][ T6763] ? file_update_time+0xa3/0x210 [ 310.150306][ T6763] shmem_file_write_iter+0x105/0x130 [ 310.150328][ T6763] __kernel_write_iter+0x42c/0x8a0 [ 310.150355][ T6763] ? __cfi___kernel_write_iter+0x10/0x10 [ 310.150380][ T6763] ? get_dump_page+0x165/0x220 [ 310.150399][ T6763] ? __asan_memset+0x39/0x50 [ 310.150423][ T6763] ? iov_iter_bvec+0xc0/0x180 [ 310.150450][ T6763] dump_user_range+0xb8b/0xe60 [ 310.150478][ T6763] ? __cfi_dump_user_range+0x10/0x10 [ 310.150504][ T6763] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 310.150533][ T6763] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 310.150562][ T6763] ? elf_core_dump+0x24c0/0x3960 [ 310.150593][ T6763] elf_core_dump+0x2e7e/0x3960 [ 310.150626][ T6763] ? __cfi_elf_core_dump+0x10/0x10 [ 310.150664][ T6763] ? dump_interrupted+0xf0/0xf0 [ 310.150687][ T6763] ? filp_open+0x199/0x1f0 [ 310.150707][ T6763] ? 0xffffffffff600000 [ 310.150723][ T6763] ? freezing_slow_path+0x12b/0x170 [ 310.150754][ T6763] do_coredump+0x208a/0x2fe0 [ 310.150782][ T6763] ? __cfi_do_coredump+0x10/0x10 [ 310.150805][ T6763] ? asm_exc_page_fault+0x2b/0x30 [ 310.150833][ T6763] ? __kasan_slab_free+0x6a/0x80 [ 310.150861][ T6763] ? kmem_cache_free+0x1bd/0x4f0 [ 310.150887][ T6763] ? get_signal+0xa74/0x14e0 [ 310.150912][ T6763] get_signal+0x11f8/0x14e0 [ 310.150939][ T6763] arch_do_signal_or_restart+0xbc/0x760 [ 310.150968][ T6763] ? fixup_vdso_exception+0x20d/0x310 [ 310.151000][ T6763] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 310.151033][ T6763] irqentry_exit_to_user_mode+0x4d/0xb0 [ 310.151063][ T6763] irqentry_exit+0x16/0x60 [ 310.151090][ T6763] exc_page_fault+0x65/0xc0 [ 310.151117][ T6763] asm_exc_page_fault+0x2b/0x30 [ 310.151135][ T6763] RIP: 0033:0x7fbb99c52777 [ 310.151154][ T6763] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 41 1b 00 48 8d 35 34 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 310.151173][ T6763] RSP: 002b:00007fbb9ac4c120 EFLAGS: 00010202 [ 310.151193][ T6763] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbb99d9c799 [ 310.151207][ T6763] RDX: 00007fbb9ac4c140 RSI: 00007fbb9ac4c270 RDI: 000000000000000b [ 310.151262][ T6763] RBP: 00007fbb99e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 310.151276][ T6763] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 310.151289][ T6763] R13: 00007fbb9a016128 R14: 00007fbb9a016090 R15: 00007ffd55e299c8 [ 310.151308][ T6763] [ 310.155713][ T6763] memory: usage 306708kB, limit 307200kB, failcnt 49345 [ 310.207096][ T818] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 310.210997][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 310.246047][ T6763] memory+swap: usage 427504kB, limit 9007199254740988kB, failcnt 0 [ 310.699182][ T6763] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 310.713378][ T6763] Memory cgroup stats for /syz5: [ 310.713546][ T6763] cache 308457472 [ 310.726825][ T7058] netlink: 'syz.4.2191': attribute type 4 has an invalid length. [ 310.738832][ T7058] netlink: 'syz.4.2191': attribute type 4 has an invalid length. [ 310.762103][ T6763] rss 258048 [ 310.765747][ T6763] rss_huge 0 [ 310.769775][ T6763] shmem 308457472 [ 310.789212][ T6763] mapped_file 0 [ 310.811699][ T6763] dirty 0 [ 310.816813][ T6763] writeback 65536 [ 310.821004][ T6763] workingset_refault_anon 19 [ 310.851353][ T6763] workingset_refault_file 0 [ 310.855939][ T6763] swap 119361536 [ 310.859894][ T6763] swapcached 90112 [ 310.891185][ T6763] pgpgin 225254 [ 310.894779][ T6763] pgpgout 149868 [ 310.899644][ T6763] pgfault 47324 [ 310.912707][ T6763] pgmajfault 59 [ 310.916876][ T6763] inactive_anon 179372032 [ 310.957193][ T7068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2194'. [ 310.960720][ T609] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 311.007539][ T6763] active_anon 129282048 [ 311.026952][ T6763] inactive_file 0 [ 311.036053][ T6763] active_file 0 [ 311.051805][ T6763] unevictable 0 [ 311.069254][ T6763] hierarchical_memory_limit 314572800 [ 311.085295][ T6763] hierarchical_memsw_limit 9223372036854771712 [ 311.105777][ T6763] total_cache 308457472 [ 311.121397][ T6763] total_rss 258048 [ 311.138473][ T6763] total_rss_huge 0 [ 311.144606][ T609] usb 3-1: unable to get BOS descriptor or descriptor too short [ 311.153705][ T609] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.164592][ T609] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.182169][ T6763] total_shmem 308457472 [ 311.188615][ T609] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 311.196336][ T6763] total_mapped_file 0 [ 311.199966][ T609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.213056][ T6763] total_dirty 0 [ 311.217464][ T609] usb 3-1: Product: syz [ 311.224290][ T609] usb 3-1: Manufacturer: syz [ 311.228206][ T6763] total_writeback 65536 [ 311.234364][ T609] usb 3-1: SerialNumber: syz [ 311.238244][ T6763] total_workingset_refault_anon 19 [ 311.247777][ T609] usb 3-1: selecting invalid altsetting 1 [ 311.254458][ T609] usb 3-1: unit 6 not found! [ 311.256587][ T6763] total_workingset_refault_file 0 [ 311.268064][ T6763] total_swap 119361536 [ 311.278333][ T6763] total_swapcached 90112 [ 311.282925][ T6763] total_pgpgin 225254 [ 311.287532][ T6763] total_pgpgout 149868 [ 311.292499][ T6763] total_pgfault 47324 [ 311.296939][ T6763] total_pgmajfault 59 [ 311.302258][ T6763] total_inactive_anon 179372032 [ 311.309484][ T6763] total_active_anon 129282048 [ 311.315633][ T6763] total_inactive_file 0 [ 311.320936][ T6763] total_active_file 0 [ 311.326040][ T6763] total_unevictable 0 [ 311.331223][ T6763] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2103,pid=6780,uid=0 [ 311.347047][ T6763] Memory cgroup out of memory: Killed process 6780 (syz.5.2103) total-vm:90500kB, anon-rss:1228kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 311.558965][ T6763] syz.5.2103 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 311.592800][ T6763] CPU: 0 UID: 0 PID: 6763 Comm: syz.5.2103 Not tainted syzkaller #0 4b5cec16b486fb71b4486bf07c6a811d89a3863f [ 311.592844][ T6763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 311.592861][ T6763] Call Trace: [ 311.592870][ T6763] [ 311.592880][ T6763] __dump_stack+0x21/0x30 [ 311.592920][ T6763] dump_stack_lvl+0x140/0x1c0 [ 311.592950][ T6763] ? __cfi_dump_stack_lvl+0x10/0x10 [ 311.592981][ T6763] dump_stack+0x19/0x20 [ 311.593014][ T6763] dump_header+0xd6/0x490 [ 311.593042][ T6763] oom_kill_process+0x35d/0x640 [ 311.593077][ T6763] out_of_memory+0x624/0xa30 [ 311.593111][ T6763] ? __cfi_out_of_memory+0x10/0x10 [ 311.593144][ T6763] ? mutex_lock_killable+0x97/0x1d0 [ 311.593184][ T6763] ? __cfi_mutex_lock_killable+0x10/0x10 [ 311.593216][ T6763] mem_cgroup_out_of_memory+0x2c8/0x390 [ 311.593248][ T6763] ? css_next_descendant_pre+0x202/0x230 [ 311.593274][ T6763] ? drain_obj_stock+0xed0/0xed0 [ 311.593305][ T6763] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 311.593336][ T6763] try_charge_memcg+0x91c/0xe10 [ 311.593362][ T6763] ? __cfi_try_charge_memcg+0x10/0x10 [ 311.593387][ T6763] ? __alloc_pages_noprof+0x35f/0x7e0 [ 311.593414][ T6763] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 311.593441][ T6763] __mem_cgroup_charge+0xfc/0x420 [ 311.593469][ T6763] ? folio_add_lru+0x116/0x400 [ 311.593506][ T6763] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 311.593536][ T6763] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 311.593575][ T6763] ? put_swap_device+0x130/0x130 [ 311.593610][ T6763] ? shmem_huge_global_enabled+0x2da/0x360 [ 311.593643][ T6763] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 311.593677][ T6763] ? __kasan_check_write+0x18/0x20 [ 311.593706][ T6763] ? _raw_spin_lock+0x92/0x120 [ 311.593729][ T6763] shmem_get_folio_gfp+0x607/0x1390 [ 311.593765][ T6763] ? shmem_get_folio+0xc0/0xc0 [ 311.593795][ T6763] ? follow_page_pte+0x90f/0xbc0 [ 311.593820][ T6763] ? inode_to_bdi+0x6d/0x100 [ 311.593846][ T6763] shmem_write_begin+0xf4/0x270 [ 311.593881][ T6763] generic_perform_write+0x328/0x970 [ 311.593910][ T6763] ? __cfi_generic_perform_write+0x10/0x10 [ 311.593935][ T6763] ? down_write+0xee/0x2b0 [ 311.593967][ T6763] ? file_update_time+0xa3/0x210 [ 311.593992][ T6763] shmem_file_write_iter+0x105/0x130 [ 311.594018][ T6763] __kernel_write_iter+0x42c/0x8a0 [ 311.594048][ T6763] ? __cfi___kernel_write_iter+0x10/0x10 [ 311.594077][ T6763] ? get_dump_page+0x165/0x220 [ 311.594101][ T6763] ? __asan_memset+0x39/0x50 [ 311.594130][ T6763] ? iov_iter_bvec+0xc0/0x180 [ 311.594167][ T6763] dump_user_range+0xb8b/0xe60 [ 311.594201][ T6763] ? __cfi_dump_user_range+0x10/0x10 [ 311.594231][ T6763] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 311.594264][ T6763] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 311.594297][ T6763] ? elf_core_dump+0x24c0/0x3960 [ 311.594334][ T6763] elf_core_dump+0x2e7e/0x3960 [ 311.594372][ T6763] ? __cfi_elf_core_dump+0x10/0x10 [ 311.594416][ T6763] ? dump_interrupted+0xf0/0xf0 [ 311.594443][ T6763] ? filp_open+0x199/0x1f0 [ 311.594467][ T6763] ? 0xffffffffff600000 [ 311.594485][ T6763] ? freezing_slow_path+0x12b/0x170 [ 311.594521][ T6763] do_coredump+0x208a/0x2fe0 [ 311.594553][ T6763] ? __cfi_do_coredump+0x10/0x10 [ 311.594580][ T6763] ? asm_exc_page_fault+0x2b/0x30 [ 311.594612][ T6763] ? __kasan_slab_free+0x6a/0x80 [ 311.594646][ T6763] ? kmem_cache_free+0x1bd/0x4f0 [ 311.594676][ T6763] ? get_signal+0xa74/0x14e0 [ 311.594705][ T6763] get_signal+0x11f8/0x14e0 [ 311.594736][ T6763] arch_do_signal_or_restart+0xbc/0x760 [ 311.594770][ T6763] ? fixup_vdso_exception+0x20d/0x310 [ 311.594805][ T6763] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 311.594843][ T6763] irqentry_exit_to_user_mode+0x4d/0xb0 [ 311.594877][ T6763] irqentry_exit+0x16/0x60 [ 311.594908][ T6763] exc_page_fault+0x65/0xc0 [ 311.594939][ T6763] asm_exc_page_fault+0x2b/0x30 [ 311.594961][ T6763] RIP: 0033:0x7fbb99c52777 [ 311.594983][ T6763] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 41 1b 00 48 8d 35 34 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 311.595004][ T6763] RSP: 002b:00007fbb9ac4c120 EFLAGS: 00010202 [ 311.595027][ T6763] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbb99d9c799 [ 311.595044][ T6763] RDX: 00007fbb9ac4c140 RSI: 00007fbb9ac4c270 RDI: 000000000000000b [ 311.595061][ T6763] RBP: 00007fbb99e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 311.595077][ T6763] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 311.595093][ T6763] R13: 00007fbb9a016128 R14: 00007fbb9a016090 R15: 00007ffd55e299c8 [ 311.595114][ T6763] [ 311.625730][ T6763] memory: usage 307200kB, limit 307200kB, failcnt 50891 [ 311.753586][ T609] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 311.757000][ T6763] memory+swap: usage 422104kB, limit 9007199254740988kB, failcnt 0 [ 311.792006][ T609] usb 3-1: USB disconnect, device number 78 [ 311.850015][ T5677] udevd[5677]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 311.864990][ T6763] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 312.101557][ T6763] Memory cgroup stats for /syz5: [ 312.102925][ T10] ipheth 2-1:0.196: Unable to find endpoints [ 312.112724][ T6763] cache 285741056 [ 312.118423][ T10] usb 2-1: USB disconnect, device number 29 [ 312.127144][ T6763] rss 225280 [ 312.130429][ T6763] rss_huge 0 [ 312.133742][ T6763] shmem 285741056 [ 312.137479][ T6763] mapped_file 0 [ 312.141013][ T6763] dirty 0 [ 312.144136][ T6763] writeback 0 [ 312.147469][ T6763] workingset_refault_anon 76 [ 312.152557][ T6763] workingset_refault_file 0 [ 312.159619][ T6763] swap 117116928 [ 312.204245][ T6763] swapcached 167936 [ 312.208505][ T6763] pgpgin 235413 [ 312.212293][ T6763] pgpgout 165579 [ 312.216154][ T6763] pgfault 47498 [ 312.220227][ T6763] pgmajfault 88 [ 312.224938][ T6763] inactive_anon 109654016 [ 312.245472][ T6763] active_anon 176386048 [ 312.251388][ T6763] inactive_file 0 [ 312.255297][ T6763] active_file 0 [ 312.259264][ T6763] unevictable 0 [ 312.273050][ T6763] hierarchical_memory_limit 314572800 [ 312.280934][ T6763] hierarchical_memsw_limit 9223372036854771712 [ 312.289953][ T7094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.290609][ T6763] total_cache 285741056 [ 312.310565][ T7094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.313854][ T6763] total_rss 225280 [ 312.330149][ T6763] total_rss_huge 0 [ 312.337540][ T6763] total_shmem 285741056 [ 312.352698][ T6763] total_mapped_file 0 [ 312.356863][ T6763] total_dirty 0 [ 312.369898][ T6763] total_writeback 0 [ 312.378572][ T6763] total_workingset_refault_anon 76 [ 312.394243][ T6763] total_workingset_refault_file 0 [ 312.407207][ T6763] total_swap 117116928 [ 312.411494][ T6763] total_swapcached 167936 [ 312.416133][ T6763] total_pgpgin 235413 [ 312.422086][ T6763] total_pgpgout 165579 [ 312.435505][ T6763] total_pgfault 47498 [ 312.439751][ T6763] total_pgmajfault 88 [ 312.443856][ T6763] total_inactive_anon 109654016 [ 312.448831][ T6763] total_active_anon 176386048 [ 312.457793][ T6763] total_inactive_file 0 [ 312.462156][ T6763] total_active_file 0 [ 312.466247][ T6763] total_unevictable 0 [ 312.470334][ T6763] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2103,pid=6775,uid=0 [ 312.485785][ T6763] Memory cgroup out of memory: Killed process 6775 (syz.5.2103) total-vm:90500kB, anon-rss:1356kB, file-rss:60272kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 312.580319][ T7102] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 312.632634][ T7106] rust_binder: Error while translating object. [ 312.632674][ T7106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 312.639247][ T7106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1273 [ 312.873223][ T7113] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2206'. [ 313.005085][ T609] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 313.183714][ T609] usb 2-1: Using ep0 maxpacket: 32 [ 313.191675][ T609] usb 2-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 313.201205][ T609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.210699][ T609] usb 2-1: Product: syz [ 313.218926][ T609] usb 2-1: Manufacturer: syz [ 313.228239][ T609] usb 2-1: SerialNumber: syz [ 313.338086][ T6772] syz.5.2103 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 313.443057][ T7109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.451956][ T7109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.472199][ T609] usb 2-1: USB disconnect, device number 30 [ 313.479378][ T6772] CPU: 0 UID: 0 PID: 6772 Comm: syz.5.2103 Not tainted syzkaller #0 4b5cec16b486fb71b4486bf07c6a811d89a3863f [ 313.479416][ T6772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 313.479432][ T6772] Call Trace: [ 313.479441][ T6772] [ 313.479452][ T6772] __dump_stack+0x21/0x30 [ 313.479488][ T6772] dump_stack_lvl+0x140/0x1c0 [ 313.479518][ T6772] ? __cfi_dump_stack_lvl+0x10/0x10 [ 313.479548][ T6772] ? ___ratelimit+0x40e/0x5b0 [ 313.479577][ T6772] dump_stack+0x19/0x20 [ 313.479605][ T6772] dump_header+0xd6/0x490 [ 313.479632][ T6772] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 313.479656][ T6772] oom_kill_process+0x35d/0x640 [ 313.479692][ T6772] out_of_memory+0x624/0xa30 [ 313.479724][ T6772] ? __cfi_out_of_memory+0x10/0x10 [ 313.479758][ T6772] ? mutex_lock_killable+0x97/0x1d0 [ 313.479790][ T6772] ? __cfi_mutex_lock_killable+0x10/0x10 [ 313.479824][ T6772] mem_cgroup_out_of_memory+0x2c8/0x390 [ 313.479855][ T6772] ? css_next_descendant_pre+0x202/0x230 [ 313.479880][ T6772] ? drain_obj_stock+0xed0/0xed0 [ 313.479912][ T6772] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 313.479944][ T6772] try_charge_memcg+0x91c/0xe10 [ 313.479979][ T6772] ? __cfi_try_charge_memcg+0x10/0x10 [ 313.480005][ T6772] ? __alloc_pages_noprof+0x35f/0x7e0 [ 313.480034][ T6772] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 313.480062][ T6772] __mem_cgroup_charge+0xfc/0x420 [ 313.480090][ T6772] ? folio_add_lru+0x116/0x400 [ 313.480126][ T6772] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 313.480156][ T6772] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 313.480193][ T6772] ? put_swap_device+0x130/0x130 [ 313.480230][ T6772] ? shmem_huge_global_enabled+0x2da/0x360 [ 313.480264][ T6772] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 313.480298][ T6772] ? __kasan_check_write+0x18/0x20 [ 313.480328][ T6772] ? _raw_spin_lock+0x92/0x120 [ 313.480352][ T6772] shmem_get_folio_gfp+0x607/0x1390 [ 313.480389][ T6772] ? shmem_get_folio+0xc0/0xc0 [ 313.480427][ T6772] ? follow_page_pte+0x90f/0xbc0 [ 313.480451][ T6772] ? inode_to_bdi+0x6d/0x100 [ 313.480478][ T6772] shmem_write_begin+0xf4/0x270 [ 313.480516][ T6772] generic_perform_write+0x328/0x970 [ 313.480544][ T6772] ? __cfi_generic_perform_write+0x10/0x10 [ 313.480569][ T6772] ? down_write+0xee/0x2b0 [ 313.480603][ T6772] ? file_update_time+0xa3/0x210 [ 313.480630][ T6772] shmem_file_write_iter+0x105/0x130 [ 313.480656][ T6772] __kernel_write_iter+0x42c/0x8a0 [ 313.480687][ T6772] ? __cfi___kernel_write_iter+0x10/0x10 [ 313.480716][ T6772] ? get_dump_page+0x165/0x220 [ 313.480740][ T6772] ? __asan_memset+0x39/0x50 [ 313.480769][ T6772] ? iov_iter_bvec+0xc0/0x180 [ 313.480801][ T6772] dump_user_range+0xb8b/0xe60 [ 313.480833][ T6772] ? __cfi_dump_user_range+0x10/0x10 [ 313.480865][ T6772] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 313.480900][ T6772] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 313.480933][ T6772] ? elf_core_dump+0x24c0/0x3960 [ 313.480981][ T6772] elf_core_dump+0x2e7e/0x3960 [ 313.481022][ T6772] ? __cfi_elf_core_dump+0x10/0x10 [ 313.481066][ T6772] ? dump_interrupted+0xf0/0xf0 [ 313.481095][ T6772] ? filp_open+0x199/0x1f0 [ 313.481120][ T6772] ? 0xffffffffff600000 [ 313.481139][ T6772] ? freezing_slow_path+0x12b/0x170 [ 313.481177][ T6772] do_coredump+0x208a/0x2fe0 [ 313.481209][ T6772] ? __cfi_do_coredump+0x10/0x10 [ 313.481237][ T6772] ? asm_exc_page_fault+0x2b/0x30 [ 313.481269][ T6772] ? __kasan_slab_free+0x6a/0x80 [ 313.481304][ T6772] ? kmem_cache_free+0x1bd/0x4f0 [ 313.481337][ T6772] ? get_signal+0xa74/0x14e0 [ 313.481367][ T6772] get_signal+0x11f8/0x14e0 [ 313.481400][ T6772] arch_do_signal_or_restart+0xbc/0x760 [ 313.481435][ T6772] ? fixup_vdso_exception+0x20d/0x310 [ 313.481472][ T6772] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 313.481507][ T6772] irqentry_exit_to_user_mode+0x4d/0xb0 [ 313.481540][ T6772] irqentry_exit+0x16/0x60 [ 313.481571][ T6772] exc_page_fault+0x65/0xc0 [ 313.481602][ T6772] asm_exc_page_fault+0x2b/0x30 [ 313.481625][ T6772] RIP: 0033:0x7fbb99c52777 [ 313.481647][ T6772] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 41 1b 00 48 8d 35 34 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 313.481669][ T6772] RSP: 002b:00007fbb9ac4c120 EFLAGS: 00010202 [ 313.481692][ T6772] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbb99d9c799 [ 313.481709][ T6772] RDX: 00007fbb9ac4c140 RSI: 00007fbb9ac4c270 RDI: 000000000000000b [ 313.481727][ T6772] RBP: 00007fbb99e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 313.481744][ T6772] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 313.481759][ T6772] R13: 00007fbb9a016128 R14: 00007fbb9a016090 R15: 00007ffd55e299c8 [ 313.481782][ T6772] [ 313.979540][ T36] audit: type=1400 audit(1772879050.702:6225): avc: denied { append } for pid=7127 comm="syz.2.2210" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 314.011675][ T6772] memory: usage 307200kB, limit 307200kB, failcnt 54258 [ 314.019331][ T6772] memory+swap: usage 428924kB, limit 9007199254740988kB, failcnt 0 [ 314.027274][ T6772] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 314.034343][ T6772] Memory cgroup stats for /syz5: [ 314.034496][ T6772] cache 314327040 [ 314.044533][ T6772] rss 126976 [ 314.047854][ T6772] rss_huge 0 [ 314.051132][ T6772] shmem 314327040 [ 314.055024][ T6772] mapped_file 0 [ 314.058562][ T6772] dirty 0 [ 314.061702][ T6772] writeback 0 [ 314.065030][ T6772] workingset_refault_anon 76 [ 314.069970][ T6772] workingset_refault_file 0 [ 314.074518][ T6772] swap 124645376 [ 314.078456][ T6772] swapcached 126976 [ 314.082440][ T6772] pgpgin 260447 [ 314.085936][ T6772] pgpgout 183647 [ 314.089617][ T6772] pgfault 48037 [ 314.093124][ T6772] pgmajfault 88 [ 314.096618][ T6772] inactive_anon 156540928 [ 314.101255][ T6772] active_anon 158031872 [ 314.105468][ T6772] inactive_file 0 [ 314.109193][ T6772] active_file 0 [ 314.112717][ T6772] unevictable 0 [ 314.116209][ T6772] hierarchical_memory_limit 314572800 [ 314.121715][ T6772] hierarchical_memsw_limit 9223372036854771712 [ 314.127920][ T6772] total_cache 314327040 [ 314.132153][ T6772] total_rss 126976 [ 314.135897][ T6772] total_rss_huge 0 [ 314.139693][ T6772] total_shmem 314327040 [ 314.143875][ T6772] total_mapped_file 0 [ 314.147931][ T6772] total_dirty 0 [ 314.151545][ T6772] total_writeback 0 [ 314.155437][ T6772] total_workingset_refault_anon 76 [ 314.160840][ T6772] total_workingset_refault_file 0 [ 314.166069][ T6772] total_swap 124645376 [ 314.170208][ T6772] total_swapcached 126976 [ 314.174606][ T6772] total_pgpgin 260447 [ 314.178924][ T6772] total_pgpgout 183647 [ 314.183033][ T6772] total_pgfault 48037 [ 314.187079][ T6772] total_pgmajfault 88 [ 314.191113][ T6772] total_inactive_anon 156540928 [ 314.195998][ T6772] total_active_anon 158031872 [ 314.200793][ T6772] total_inactive_file 0 [ 314.205006][ T6772] total_active_file 0 [ 314.209080][ T6772] total_unevictable 0 [ 314.213093][ T6772] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2103,pid=6785,uid=0 [ 314.228608][ T6772] Memory cgroup out of memory: Killed process 6785 (syz.5.2103) total-vm:90500kB, anon-rss:1356kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 314.353101][ T7140] Invalid ELF header type: 0 != 1 [ 314.365081][ T36] audit: type=1400 audit(1772879051.085:6226): avc: denied { module_load } for pid=7139 comm="syz.4.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 314.484316][ T10] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 314.633328][ T6763] syz.5.2103 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 314.658451][ T6763] CPU: 1 UID: 0 PID: 6763 Comm: syz.5.2103 Not tainted syzkaller #0 4b5cec16b486fb71b4486bf07c6a811d89a3863f [ 314.658493][ T6763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.658510][ T6763] Call Trace: [ 314.658518][ T6763] [ 314.658528][ T6763] __dump_stack+0x21/0x30 [ 314.658564][ T6763] dump_stack_lvl+0x140/0x1c0 [ 314.658594][ T6763] ? __cfi_dump_stack_lvl+0x10/0x10 [ 314.658622][ T6763] ? ___ratelimit+0x40e/0x5b0 [ 314.658651][ T6763] dump_stack+0x19/0x20 [ 314.658679][ T6763] dump_header+0xd6/0x490 [ 314.658705][ T6763] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 314.658730][ T6763] oom_kill_process+0x35d/0x640 [ 314.658765][ T6763] out_of_memory+0x624/0xa30 [ 314.658798][ T6763] ? __cfi_out_of_memory+0x10/0x10 [ 314.658837][ T6763] ? mutex_lock_killable+0x97/0x1d0 [ 314.658876][ T6763] ? __cfi_mutex_lock_killable+0x10/0x10 [ 314.658909][ T6763] mem_cgroup_out_of_memory+0x2c8/0x390 [ 314.658941][ T6763] ? css_next_descendant_pre+0x202/0x230 [ 314.658967][ T6763] ? drain_obj_stock+0xed0/0xed0 [ 314.658998][ T6763] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 314.659029][ T6763] try_charge_memcg+0x91c/0xe10 [ 314.659055][ T6763] ? __cfi_try_charge_memcg+0x10/0x10 [ 314.659080][ T6763] ? __alloc_pages_noprof+0x35f/0x7e0 [ 314.659107][ T6763] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 314.659134][ T6763] __mem_cgroup_charge+0xfc/0x420 [ 314.659162][ T6763] ? folio_add_lru+0x116/0x400 [ 314.659198][ T6763] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 314.659228][ T6763] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 314.659266][ T6763] ? put_swap_device+0x130/0x130 [ 314.659301][ T6763] ? shmem_huge_global_enabled+0x2da/0x360 [ 314.659335][ T6763] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 314.659369][ T6763] ? __kasan_check_write+0x18/0x20 [ 314.659398][ T6763] ? _raw_spin_lock+0x92/0x120 [ 314.659422][ T6763] shmem_get_folio_gfp+0x607/0x1390 [ 314.659457][ T6763] ? shmem_get_folio+0xc0/0xc0 [ 314.659488][ T6763] ? follow_page_pte+0x90f/0xbc0 [ 314.659513][ T6763] ? inode_to_bdi+0x6d/0x100 [ 314.659539][ T6763] shmem_write_begin+0xf4/0x270 [ 314.659575][ T6763] generic_perform_write+0x328/0x970 [ 314.659603][ T6763] ? __cfi_generic_perform_write+0x10/0x10 [ 314.659627][ T6763] ? down_write+0xee/0x2b0 [ 314.659660][ T6763] ? file_update_time+0xa3/0x210 [ 314.659685][ T6763] shmem_file_write_iter+0x105/0x130 [ 314.659712][ T6763] __kernel_write_iter+0x42c/0x8a0 [ 314.659743][ T6763] ? __cfi___kernel_write_iter+0x10/0x10 [ 314.659771][ T6763] ? get_dump_page+0x165/0x220 [ 314.659794][ T6763] ? __asan_memset+0x39/0x50 [ 314.659822][ T6763] ? iov_iter_bvec+0xc0/0x180 [ 314.659860][ T6763] dump_user_range+0xb8b/0xe60 [ 314.659893][ T6763] ? __cfi_dump_user_range+0x10/0x10 [ 314.659923][ T6763] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 314.659957][ T6763] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 314.659991][ T6763] ? elf_core_dump+0x24c0/0x3960 [ 314.660026][ T6763] elf_core_dump+0x2e7e/0x3960 [ 314.660065][ T6763] ? __cfi_elf_core_dump+0x10/0x10 [ 314.660108][ T6763] ? dump_interrupted+0xf0/0xf0 [ 314.660135][ T6763] ? filp_open+0x199/0x1f0 [ 314.660158][ T6763] ? 0xffffffffff600000 [ 314.660177][ T6763] ? freezing_slow_path+0x12b/0x170 [ 314.660214][ T6763] do_coredump+0x208a/0x2fe0 [ 314.660246][ T6763] ? __cfi_do_coredump+0x10/0x10 [ 314.660273][ T6763] ? asm_exc_page_fault+0x2b/0x30 [ 314.660305][ T6763] ? __kasan_slab_free+0x6a/0x80 [ 314.660339][ T6763] ? kmem_cache_free+0x1bd/0x4f0 [ 314.660368][ T6763] ? get_signal+0xa74/0x14e0 [ 314.660397][ T6763] get_signal+0x11f8/0x14e0 [ 314.660429][ T6763] arch_do_signal_or_restart+0xbc/0x760 [ 314.660463][ T6763] ? fixup_vdso_exception+0x20d/0x310 [ 314.660499][ T6763] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 314.660538][ T6763] irqentry_exit_to_user_mode+0x4d/0xb0 [ 314.660572][ T6763] irqentry_exit+0x16/0x60 [ 314.660603][ T6763] exc_page_fault+0x65/0xc0 [ 314.660634][ T6763] asm_exc_page_fault+0x2b/0x30 [ 314.660655][ T6763] RIP: 0033:0x7fbb99c52777 [ 314.660678][ T6763] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 41 1b 00 48 8d 35 34 fa 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 314.660698][ T6763] RSP: 002b:00007fbb9ac4c120 EFLAGS: 00010202 [ 314.660721][ T6763] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbb99d9c799 [ 314.660738][ T6763] RDX: 00007fbb9ac4c140 RSI: 00007fbb9ac4c270 RDI: 000000000000000b [ 314.660756][ T6763] RBP: 00007fbb99e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 314.660772][ T6763] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 314.660787][ T6763] R13: 00007fbb9a016128 R14: 00007fbb9a016090 R15: 00007ffd55e299c8 [ 314.660810][ T6763] [ 314.660891][ T6763] memory: usage 307200kB, limit 307200kB, failcnt 58456 [ 314.674954][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 314.705423][ T6763] memory+swap: usage 431864kB, limit 9007199254740988kB, failcnt 0 [ 314.731700][ T10] usb 3-1: can't read configurations, error -61 [ 314.754278][ T6763] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 314.931156][ T10] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 314.944657][ T7156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.010677][ T6763] Memory cgroup stats for [ 315.017169][ T7156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.025594][ T6763] /syz5 [ 315.046924][ T7156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.053803][ T6763] : [ 315.117744][ T7156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.130631][ T6763] cache 314327040 [ 315.227673][ T6763] rss 126976 [ 315.231426][ T6763] rss_huge 0 [ 315.235184][ T6763] shmem 314327040 [ 315.239286][ T6763] mapped_file 0 [ 315.243248][ T6763] dirty 0 [ 315.246410][ T6763] writeback 0 [ 315.249885][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 315.257578][ T10] usb 3-1: can't read configurations, error -61 [ 315.264460][ T10] usb usb3-port1: attempt power cycle [ 315.270506][ T6763] workingset_refault_anon 76 [ 315.275501][ T6763] workingset_refault_file 0 [ 315.280134][ T6763] swap 127655936 [ 315.283800][ T6763] swapcached 126976 [ 315.287958][ T6763] pgpgin 261215 [ 315.291884][ T6763] pgpgout 184415 [ 315.295627][ T6763] pgfault 48037 [ 315.299264][ T6763] pgmajfault 88 [ 315.302779][ T6763] inactive_anon 238514176 [ 315.307159][ T6763] active_anon 76058624 [ 315.311553][ T6763] inactive_file 0 [ 315.315338][ T6763] active_file 0 [ 315.319223][ T6763] unevictable 0 [ 315.322775][ T6763] hierarchical_memory_limit 314572800 [ 315.328570][ T6763] hierarchical_memsw_limit 9223372036854771712 [ 315.335451][ T6763] total_cache 314327040 [ 315.340069][ T6763] total_rss 126976 [ 315.344095][ T6763] total_rss_huge 0 [ 315.348788][ T6763] total_shmem 314327040 [ 315.353534][ T6763] total_mapped_file 0 [ 315.358222][ T6763] total_dirty 0 [ 315.361918][ T6763] total_writeback 0 [ 315.366304][ T6763] total_workingset_refault_anon 76 [ 315.372951][ T6763] total_workingset_refault_file 0 [ 315.378635][ T6763] total_swap 127655936 [ 315.382861][ T6763] total_swapcached 126976 [ 315.387239][ T6763] total_pgpgin 261215 [ 315.391672][ T6763] total_pgpgout 184415 [ 315.396439][ T6763] total_pgfault 48037 [ 315.401107][ T6763] total_pgmajfault 88 [ 315.405154][ T6763] total_inactive_anon 238514176 [ 315.410713][ T6763] total_active_anon 76058624 [ 315.415867][ T6763] total_inactive_file 0 [ 315.421003][ T6763] total_active_file 0 [ 315.425074][ T6763] total_unevictable 0 [ 315.429504][ T6763] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2103,pid=6763,uid=0 [ 315.451929][ T6763] Memory cgroup out of memory: Killed process 6763 (syz.5.2103) total-vm:90500kB, anon-rss:1228kB, file-rss:57920kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 315.526717][ T396] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 315.616056][ T10] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 315.638038][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 315.646997][ T10] usb 3-1: can't read configurations, error -61 [ 315.685678][ T396] usb 2-1: Using ep0 maxpacket: 16 [ 315.692086][ T396] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.705382][ T396] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.736706][ T396] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 315.747752][ T396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.765045][ T396] usb 2-1: Product: syz [ 315.769386][ T396] usb 2-1: Manufacturer: syz [ 315.774309][ T396] usb 2-1: SerialNumber: syz [ 315.784896][ T10] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 315.816575][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 315.826942][ T10] usb 3-1: can't read configurations, error -61 [ 315.844724][ T10] usb usb3-port1: unable to enumerate USB device [ 315.986480][ T7168] can0: slcan on ttyS3. [ 316.015787][ T396] usb 2-1: 0:2 : does not exist [ 316.035785][ T7167] can0 (unregistered): slcan off ttyS3. [ 316.043022][ T1568] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 316.044674][ T396] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 316.075460][ T396] usb 2-1: USB disconnect, device number 31 [ 316.094079][ T5675] udevd[5675]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 316.271638][ T1568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 316.303899][ T1568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 316.324343][ T1568] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 316.350878][ T1568] usb 6-1: SerialNumber: syz [ 316.451722][ T1568] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 316.463219][ T1568] usb 6-1: USB disconnect, device number 32 [ 316.589711][ T36] audit: type=1400 audit(1772879053.341:6227): avc: denied { ioctl } for pid=7175 comm="syz.5.2224" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 316.797721][ T396] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 316.926863][ T396] usb 2-1: device descriptor read/64, error -71 [ 317.175121][ T396] usb 2-1: device descriptor read/64, error -71 [ 317.184969][ T1568] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 317.344924][ T1568] usb 6-1: config 0 has no interfaces? [ 317.380409][ T1568] usb 6-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 317.393586][ T609] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 317.401627][ T1568] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 317.410243][ T52] tipc: Subscription rejected, illegal request [ 317.420014][ T1568] usb 6-1: SerialNumber: syz [ 317.427949][ T396] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 317.443854][ T1568] usb 6-1: config 0 descriptor?? [ 317.562418][ T396] usb 2-1: device descriptor read/64, error -71 [ 317.582233][ T609] usb 3-1: Using ep0 maxpacket: 32 [ 317.588555][ T609] usb 3-1: config 0 has an invalid interface descriptor of length 6, skipping [ 317.598037][ T609] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.615724][ T609] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 317.631079][ T609] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 317.640527][ T609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.648830][ T609] usb 3-1: Product: syz [ 317.654340][ T609] usb 3-1: Manufacturer: syz [ 317.662520][ T609] usb 3-1: SerialNumber: syz [ 317.672216][ T609] usb 3-1: config 0 descriptor?? [ 317.723947][ T7190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.752156][ T7190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.805117][ T396] usb 2-1: device descriptor read/64, error -71 [ 317.821314][ T609] usb 6-1: USB disconnect, device number 33 [ 317.879218][ T10] usb 3-1: USB disconnect, device number 83 [ 317.920801][ T396] usb usb2-port1: attempt power cycle [ 318.257822][ T396] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 318.278687][ T396] usb 2-1: device descriptor read/8, error -71 [ 318.302005][ T7207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.311085][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.319882][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.328764][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.330094][ T7207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.342160][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.371160][ T7210] netlink: 'syz.4.2233': attribute type 4 has an invalid length. [ 318.382994][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.398642][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.410986][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.419316][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.428062][ T396] usb 2-1: device descriptor read/8, error -71 [ 318.535859][ T31] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 318.564767][ T7219] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2236'. [ 318.564806][ T7220] x_tables: duplicate underflow at hook 2 [ 318.664917][ T396] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 318.686092][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.696549][ T396] usb 2-1: device descriptor read/8, error -71 [ 318.704335][ T31] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 318.713856][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.722493][ T31] usb 6-1: Product: syz [ 318.727216][ T31] usb 6-1: Manufacturer: syz [ 318.732110][ T31] usb 6-1: SerialNumber: syz [ 318.825105][ T396] usb 2-1: device descriptor read/8, error -71 [ 318.933205][ T396] usb usb2-port1: unable to enumerate USB device [ 318.945277][ T31] usb 6-1: unit 8 not found! [ 318.950236][ T31] usb 6-1: unit 6 not found! [ 318.958470][ T31] usb 6-1: USB disconnect, device number 34 [ 318.968998][ T10] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 318.979204][ T5675] udevd[5675]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 319.135393][ T7227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.143838][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 319.144721][ T7227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.156474][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 319.171185][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.186087][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 319.195308][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.203608][ T10] usb 3-1: Product: syz [ 319.208024][ T10] usb 3-1: Manufacturer: syz [ 319.212746][ T10] usb 3-1: SerialNumber: syz [ 319.219887][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 319.226318][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 319.421145][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 319.757535][ T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 319.777397][ T7238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.786143][ T7238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.795073][ T7238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=7238 comm=syz.4.2241 [ 319.837018][ T7224] usb 3-1: reset high-speed USB device number 84 using dummy_hcd [ 319.907877][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.919039][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.929516][ T10] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 319.938918][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.947101][ T609] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 319.955693][ T10] usb 6-1: config 0 descriptor?? [ 320.085421][ T609] usb 2-1: device descriptor read/64, error -71 [ 320.164468][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 320.170750][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 320.179820][ T10] usb 6-1: USB disconnect, device number 35 [ 320.204807][ T396] usb 3-1: USB disconnect, device number 84 [ 320.211630][ T396] usblp0: removed [ 320.323721][ T609] usb 2-1: device descriptor read/64, error -71 [ 320.562249][ T609] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 320.703124][ T609] usb 2-1: device descriptor read/64, error -71 [ 320.969491][ T609] usb 2-1: device descriptor read/64, error -71 [ 321.055448][ T7275] cgroup: none used incorrectly [ 321.088783][ T609] usb usb2-port1: attempt power cycle [ 321.302414][ T36] audit: type=1400 audit(1772879058.083:6228): avc: denied { execute } for pid=7285 comm="syz.5.2257" path="/dev/rnullb0" dev="devtmpfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 321.342484][ T36] audit: type=1400 audit(1772879058.123:6229): avc: denied { setattr } for pid=7287 comm="syz.5.2258" name="" dev="pipefs" ino=49425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 321.436447][ T609] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 321.457490][ T609] usb 2-1: device descriptor read/8, error -71 [ 321.586891][ T609] usb 2-1: device descriptor read/8, error -71 [ 321.708110][ T7304] netlink: 'syz.4.2264': attribute type 6 has an invalid length. [ 321.754444][ T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 321.824107][ T609] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 321.844979][ T609] usb 2-1: device descriptor read/8, error -71 [ 321.857520][ T7310] tipc: Enabling of bearer rejected, failed to enable media [ 321.910927][ T10] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 321.921133][ T10] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 321.930523][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.944859][ T10] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 321.974899][ T609] usb 2-1: device descriptor read/8, error -71 [ 322.082500][ T609] usb usb2-port1: unable to enumerate USB device [ 322.142471][ T609] usb 6-1: USB disconnect, device number 36 [ 322.231426][ T31] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 322.380460][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 322.387433][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 322.397161][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 322.411190][ T31] usb 3-1: string descriptor 0 read error: -22 [ 322.417670][ T31] usb 3-1: New USB device found, idVendor=0582, idProduct=010f, bcdDevice= 0.40 [ 322.427004][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.438870][ T31] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 322.563520][ T7325] 9pnet_fd: Insufficient options for proto=fd [ 322.637065][ T31] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 322.668578][ T31] usb 3-1: USB disconnect, device number 85 [ 322.887254][ T609] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 322.917022][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 323.038474][ T609] usb 2-1: unable to get BOS descriptor or descriptor too short [ 323.050164][ T609] usb 2-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 323.059580][ T609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.067874][ T609] usb 2-1: Product: syz [ 323.072276][ T609] usb 2-1: Manufacturer: syz [ 323.077363][ T609] usb 2-1: SerialNumber: syz [ 323.083320][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 323.094371][ T10] usb 6-1: config 4 has an invalid interface number: 218 but max is 0 [ 323.102897][ T10] usb 6-1: config 4 has no interface number 0 [ 323.109502][ T10] usb 6-1: config 4 interface 218 has no altsetting 0 [ 323.118794][ T10] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=88.0a [ 323.128119][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.136251][ T10] usb 6-1: Product: syz [ 323.140576][ T10] usb 6-1: Manufacturer: syz [ 323.145257][ T10] usb 6-1: SerialNumber: syz [ 323.226563][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.292135][ T609] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 323.299965][ T609] usb 2-1: unit 13 not found! [ 323.351364][ T609] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 323.361258][ T36] audit: type=1400 audit(1772879060.156:6230): avc: denied { setattr } for pid=7335 comm="syz.5.2276" name="file0" dev="tmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 323.374532][ T609] usb 2-1: USB disconnect, device number 40 [ 323.398328][ T10] sr9700 6-1:4.218: probe with driver sr9700 failed with error -22 [ 323.411288][ T10] usb 6-1: USB disconnect, device number 37 [ 323.427875][ T5675] udevd[5675]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 323.513255][ T396] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 323.662341][ T396] usb 3-1: Using ep0 maxpacket: 32 [ 323.669137][ T396] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.679409][ T396] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.690486][ T396] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.700568][ T396] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 323.714390][ T396] usb 3-1: config 0 interface 0 has no altsetting 0 [ 323.721205][ T396] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 323.730420][ T396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.739497][ T396] usb 3-1: config 0 descriptor?? [ 324.201806][ T396] hid-thrustmaster 0003:044F:B65D.0025: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 324.214791][ T396] hid-thrustmaster 0003:044F:B65D.0025: Wrong number of endpoints? [ 324.392154][ C1] hid-thrustmaster 0003:044F:B65D.0025: Unknown packet type 0x0, unable to proceed further with wheel init [ 324.604002][ T609] usb 3-1: USB disconnect, device number 86 [ 324.738726][ T7372] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 324.927794][ T36] audit: type=1400 audit(1772879061.725:6231): avc: denied { map } for pid=7381 comm="syz.1.2292" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 324.981808][ T36] audit: type=1400 audit(1772879061.756:6232): avc: denied { listen } for pid=7383 comm="syz.4.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.118889][ T7400] can0: slcan on ttyS3. [ 325.448525][ T7421] can0 (unregistered): slcan off ttyS3. [ 325.472465][ T7445] overlayfs: missing 'lowerdir' [ 325.545081][ T7463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=7463 comm=syz.2.2308 [ 325.566862][ T7463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=7463 comm=syz.2.2308 [ 325.583153][ T36] audit: type=1400 audit(1772879062.389:6233): avc: denied { audit_write } for pid=7462 comm="syz.2.2308" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 325.669926][ T36] audit: type=1326 audit(1772879062.470:6234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7475 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c059c799 code=0x7ffc0000 [ 325.708276][ T36] audit: type=1326 audit(1772879062.480:6235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7475 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c059c799 code=0x7ffc0000 [ 325.756078][ T36] audit: type=1326 audit(1772879062.480:6236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7475 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f02c059c42b code=0x7ffc0000 [ 325.781146][ T36] audit: type=1326 audit(1772879062.480:6237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7475 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f02c059c42b code=0x7ffc0000 [ 325.841248][ T7486] overlayfs: failed to clone upperpath [ 325.977941][ T438] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 326.137036][ T438] usb 3-1: Using ep0 maxpacket: 16 [ 326.144792][ T438] usb 3-1: config 15 has an invalid interface number: 153 but max is 1 [ 326.153706][ T438] usb 3-1: config 15 has an invalid interface number: 33 but max is 1 [ 326.161974][ T438] usb 3-1: config 15 has an invalid interface number: 117 but max is 1 [ 326.170470][ T438] usb 3-1: config 15 has 3 interfaces, different from the descriptor's value: 2 [ 326.179694][ T438] usb 3-1: config 15 has no interface number 0 [ 326.186022][ T438] usb 3-1: config 15 has no interface number 1 [ 326.192264][ T438] usb 3-1: config 15 has no interface number 2 [ 326.198529][ T438] usb 3-1: config 15 interface 153 altsetting 5 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 326.209740][ T438] usb 3-1: config 15 interface 153 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 326.223237][ T438] usb 3-1: too many endpoints for config 15 interface 33 altsetting 255: 164, using maximum allowed: 30 [ 326.234744][ T438] usb 3-1: config 15 interface 33 altsetting 255 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 326.246065][ T438] usb 3-1: config 15 interface 33 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 164 [ 326.259964][ T438] usb 3-1: config 15 interface 117 altsetting 3 endpoint 0xB has an invalid bInterval 227, changing to 7 [ 326.271881][ T438] usb 3-1: config 15 interface 117 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 326.283307][ T438] usb 3-1: config 15 interface 117 altsetting 3 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 326.295004][ T438] usb 3-1: config 15 interface 117 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 326.305959][ T438] usb 3-1: config 15 interface 117 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 326.317159][ T438] usb 3-1: config 15 interface 117 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 326.328138][ T438] usb 3-1: config 15 interface 117 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 326.339182][ T438] usb 3-1: config 15 interface 117 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 326.350062][ T438] usb 3-1: config 15 interface 117 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 326.361102][ T438] usb 3-1: config 15 interface 153 has no altsetting 0 [ 326.368052][ T438] usb 3-1: config 15 interface 33 has no altsetting 0 [ 326.374987][ T438] usb 3-1: config 15 interface 117 has no altsetting 0 [ 326.375747][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 326.384727][ T438] usb 3-1: New USB device found, idVendor=2001, idProduct=3319, bcdDevice=b6.70 [ 326.407707][ T438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.416203][ T438] usb 3-1: Product: ည [ 326.420535][ T438] usb 3-1: Manufacturer: 렯◱ᄷ粟Ъ䌫왿쾍፣ᦒᭀꙩ뛤ꨏ䓆嗘侭꜇憫꡸蝺碋䑙綒紕宎逯 [ 326.436853][ T438] usb 3-1: SerialNumber: 옚՜ [ 326.534692][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 326.541742][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 117, changing to 7 [ 326.554230][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 226, changing to 7 [ 326.567162][ T10] usb 2-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 326.576668][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.584991][ T10] usb 2-1: Product: syz [ 326.590048][ T10] usb 2-1: Manufacturer: syz [ 326.595182][ T10] usb 2-1: SerialNumber: syz [ 326.802075][ T7496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.812684][ T7496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.827623][ T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 326.834936][ T10] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 326.846554][ T10] usb 2-1: USB disconnect, device number 41 [ 326.870837][ T5677] udevd[5677]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 326.889166][ T36] kauditd_printk_skb: 534 callbacks suppressed [ 326.889210][ T36] audit: type=1400 audit(1772879063.707:6772): avc: denied { create } for pid=7511 comm="syz.5.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 327.150988][ T609] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 327.300058][ T609] usb 6-1: Using ep0 maxpacket: 16 [ 327.307034][ T609] usb 6-1: config 172 has too many interfaces: 73, using maximum allowed: 32 [ 327.316160][ T609] usb 6-1: config 172 has an invalid descriptor of length 41, skipping remainder of the config [ 327.326767][ T609] usb 6-1: config 172 has 0 interfaces, different from the descriptor's value: 73 [ 327.338105][ T609] usb 6-1: New USB device found, idVendor=046d, idProduct=c08d, bcdDevice= 0.40 [ 327.348311][ T609] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.360381][ T609] usb 6-1: Product: syz [ 327.364789][ T609] usb 6-1: Manufacturer: syz [ 327.369497][ T609] usb 6-1: SerialNumber: syz [ 327.582212][ T7520] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=118 sclass=netlink_xfrm_socket pid=7520 comm=syz.1.2321 [ 327.620132][ T609] usb 6-1: USB disconnect, device number 38 [ 327.946272][ T10] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 328.096759][ T10] usb 2-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.108746][ T10] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 328.120083][ T10] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 328.130223][ T10] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 328.139503][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.172221][ T7535] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 328.180926][ T7535] overlayfs: overlapping lowerdir path [ 328.214390][ T7539] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2328'. [ 328.225534][ T7540] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2328'. [ 328.234973][ T7540] netlink: 'syz.5.2328': attribute type 4 has an invalid length. [ 328.244082][ T7539] netlink: 'syz.5.2328': attribute type 4 has an invalid length. [ 328.419850][ T7533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.429477][ T7533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.440099][ T10] usb 2-1: string descriptor 0 read error: -71 [ 328.447218][ T10] hub 2-1:32.0: USB hub found [ 328.454740][ T10] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 328.483627][ T10] usb 2-1: USB disconnect, device number 42 [ 328.572707][ T396] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 328.638386][ T438] usb 3-1: USB disconnect, device number 87 [ 328.722400][ T396] usb 6-1: Using ep0 maxpacket: 8 [ 328.731901][ T396] usb 6-1: string descriptor 0 read error: -22 [ 328.738189][ T396] usb 6-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 328.748343][ T396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.900897][ T7557] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 328.911780][ T36] audit: type=1400 audit(1772879065.739:6773): avc: denied { relabelto } for pid=7555 comm="syz.2.2334" name="cgroup" dev="tmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 328.939956][ T36] audit: type=1400 audit(1772879065.739:6774): avc: denied { associate } for pid=7555 comm="syz.2.2334" name="cgroup" dev="tmpfs" ino=390 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 328.970160][ T7545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.987061][ T7545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.996468][ T7545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.006888][ T7565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.020299][ T7565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.030056][ T7545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.079521][ T396] usb 6-1: USB disconnect, device number 39 [ 329.085847][ T36] audit: type=1400 audit(1772879065.900:6775): avc: denied { unlink } for pid=5979 comm="syz-executor" name="cgroup" dev="tmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 329.210414][ T36] audit: type=1400 audit(1772879066.041:6776): avc: denied { write } for pid=7573 comm="syz.1.2341" name="/" dev="configfs" ino=2625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 329.252253][ T7579] bridge0: port 1(veth1_to_bridge) entered blocking state [ 329.261084][ T7579] bridge0: port 1(veth1_to_bridge) entered disabled state [ 329.268471][ T7579] veth1_to_bridge: entered allmulticast mode [ 329.275205][ T7579] veth1_to_bridge: entered promiscuous mode [ 329.281937][ T7579] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 329.294427][ T7579] bridge0: port 1(veth1_to_bridge) entered blocking state [ 329.301829][ T7579] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 329.333772][ T7586] Invalid logical block size (32769) [ 329.571189][ T7600] @: renamed from vlan0 (while UP) [ 329.576899][ T342] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 329.646684][ T396] usb 3-1: new low-speed USB device number 88 using dummy_hcd [ 329.727814][ T342] usb 2-1: unable to get BOS descriptor or descriptor too short [ 329.736817][ T342] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.747058][ T342] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 329.758129][ T342] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 329.767432][ T342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.775868][ T342] usb 2-1: Product: syz [ 329.780948][ T342] usb 2-1: Manufacturer: syz [ 329.785799][ T342] usb 2-1: SerialNumber: syz [ 329.792773][ T342] usb 2-1: selecting invalid altsetting 1 [ 329.800195][ T396] usb 3-1: Invalid ep0 maxpacket: 16 [ 329.805800][ T342] usb 2-1: unit 6 not found! [ 329.934814][ T396] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 329.991983][ T7586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.001770][ T7586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.089732][ T396] usb 3-1: Invalid ep0 maxpacket: 16 [ 330.095883][ T396] usb usb3-port1: attempt power cycle [ 330.213862][ T342] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 330.231357][ T5675] udevd[5675]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 330.342618][ T439] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 330.413261][ T10] usb 2-1: USB disconnect, device number 43 [ 330.431990][ T396] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 330.452420][ T396] usb 3-1: Invalid ep0 maxpacket: 16 [ 330.492796][ T439] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 330.504655][ T439] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.514864][ T439] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 330.524625][ T439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.534919][ T439] usb 6-1: config 0 descriptor?? [ 330.581145][ T396] usb 3-1: new low-speed USB device number 91 using dummy_hcd [ 330.601546][ T396] usb 3-1: Invalid ep0 maxpacket: 16 [ 330.607244][ T396] usb usb3-port1: unable to enumerate USB device [ 330.944770][ T439] isku 0003:1E7D:319C.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 331.141710][ T439] isku 0003:1E7D:319C.0026: couldn't init struct isku_device [ 331.152129][ T439] isku 0003:1E7D:319C.0026: couldn't install keyboard [ 331.158602][ T10] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 331.164306][ T439] isku 0003:1E7D:319C.0026: probe with driver isku failed with error -71 [ 331.179166][ T439] usb 6-1: USB disconnect, device number 40 [ 331.318026][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 331.327080][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 131, changing to 4 [ 331.338616][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 331.351086][ T10] usb 2-1: New USB device found, idVendor=0499, idProduct=5001, bcdDevice= 0.40 [ 331.360242][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.368301][ T10] usb 2-1: Product: syz [ 331.372501][ T10] usb 2-1: Manufacturer: syz [ 331.377759][ T10] usb 2-1: SerialNumber: syz [ 331.586499][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 331.596747][ T10] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 331.608934][ T10] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 331.619812][ T10] usb 2-1: USB disconnect, device number 44 [ 331.632678][ T5675] udevd[5675]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 331.679462][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2362'. [ 331.691637][ T36] audit: type=1400 audit(1772879068.525:6777): avc: denied { read } for pid=7631 comm="syz.5.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 331.762362][ T7640] overlayfs: failed to clone upperpath [ 331.790728][ T7642] netlink: 'syz.4.2364': attribute type 1 has an invalid length. [ 331.835543][ T7646] overlayfs: failed to clone upperpath [ 331.842270][ T7646] netlink: 460 bytes leftover after parsing attributes in process `syz.4.2366'. [ 332.431215][ T36] audit: type=1400 audit(1772879069.279:6778): avc: denied { setopt } for pid=7686 comm="syz.2.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 332.512289][ T7692] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2380'. [ 332.565259][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'. [ 332.588584][ T7704] netlink: 'syz.2.2384': attribute type 4 has an invalid length. [ 332.596717][ T7704] netlink: 'syz.2.2384': attribute type 5 has an invalid length. [ 332.604534][ T7704] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2384'. [ 332.628163][ T7706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7706 comm=syz.2.2385 [ 332.628154][ T7707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7707 comm=syz.2.2385 [ 332.775118][ T7715] x_tables: duplicate underflow at hook 4 [ 332.779189][ T10] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 332.940042][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 332.949916][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 41, changing to 7 [ 332.975009][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 42087, setting to 1024 [ 332.991463][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 333.004650][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.012991][ T10] usb 6-1: Product: syz [ 333.017485][ T10] usb 6-1: Manufacturer: syz [ 333.023067][ T10] usb 6-1: SerialNumber: syz [ 333.038278][ T10] usb 6-1: config 0 descriptor?? [ 333.044917][ T10] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 61, bLength 9, bSynchAddress 0a [ 333.251221][ T10] usb 6-1: USB disconnect, device number 41 [ 333.264219][ T5677] udevd[5677]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 333.280867][ T609] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 333.415680][ T609] usb 2-1: device descriptor read/64, error -71 [ 333.654522][ T609] usb 2-1: device descriptor read/64, error -71 [ 333.678021][ T7733] input: syz0 as /devices/virtual/input/input42 [ 333.893710][ T609] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 333.922889][ T439] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 334.022405][ T342] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 334.032345][ T609] usb 2-1: device descriptor read/64, error -71 [ 334.072033][ T439] usb 3-1: Using ep0 maxpacket: 16 [ 334.078758][ T439] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 334.089417][ T439] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.100432][ T439] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.109699][ T439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.117828][ T439] usb 3-1: Product: syz [ 334.122078][ T439] usb 3-1: Manufacturer: syz [ 334.126703][ T439] usb 3-1: SerialNumber: syz [ 334.172753][ T342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.183835][ T342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.193681][ T342] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 334.202832][ T342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.211878][ T342] usb 6-1: config 0 descriptor?? [ 334.271099][ T609] usb 2-1: device descriptor read/64, error -71 [ 334.335462][ T439] usb 3-1: 0:2 : does not exist [ 334.340647][ T439] usb 3-1: unit 9 not found! [ 334.350041][ T439] usb 3-1: USB disconnect, device number 92 [ 334.362153][ T5675] udevd[5675]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 334.380601][ T609] usb usb2-port1: attempt power cycle [ 334.387645][ T7754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7754 comm=syz.4.2403 [ 334.620208][ T342] arvo 0003:1E7D:30D4.0027: item fetching failed at offset 6/7 [ 334.628207][ T342] arvo 0003:1E7D:30D4.0027: parse failed [ 334.634040][ T342] arvo 0003:1E7D:30D4.0027: probe with driver arvo failed with error -22 [ 334.738594][ T609] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 334.759951][ T609] usb 2-1: device descriptor read/8, error -71 [ 334.820771][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.829646][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.838118][ T10] usb 6-1: USB disconnect, device number 42 [ 334.889454][ T609] usb 2-1: device descriptor read/8, error -71 [ 335.146446][ T609] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 335.178366][ T609] usb 2-1: device descriptor read/8, error -71 [ 335.307013][ T609] usb 2-1: device descriptor read/8, error -71 [ 335.421864][ T609] usb usb2-port1: unable to enumerate USB device [ 336.023881][ T7813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.023918][ T7813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.043026][ T7813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.043067][ T7813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.059103][ T7813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.059141][ T7813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.073023][ T7813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.073064][ T7813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.087307][ T7813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.087349][ T7813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.101621][ T7813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.101664][ T7813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.409881][ T609] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 336.468018][ T7822] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 336.485518][ T7822] SELinux: failed to load policy [ 336.543699][ T7839] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2430'. [ 336.569635][ T7841] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2428'. [ 336.590179][ T609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 336.600192][ T609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 336.615279][ T609] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 336.629388][ T609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.637605][ T609] usb 2-1: Product: syz [ 336.642018][ T609] usb 2-1: Manufacturer: syz [ 336.646722][ T609] usb 2-1: SerialNumber: syz [ 336.653323][ T609] usb 2-1: config 0 descriptor?? [ 336.739293][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2433'. [ 336.749476][ T7849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2433'. [ 336.871374][ T609] usb 2-1: USB disconnect, device number 49 [ 337.026744][ T10] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 337.175948][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 337.182797][ T10] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 8 [ 337.193071][ T10] usb 3-1: config 1 interface 0 altsetting 93 endpoint 0x3 has invalid maxpacket 24848, setting to 1024 [ 337.204399][ T10] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1024 [ 337.214658][ T10] usb 3-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 337.229489][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 337.238087][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.247679][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 337.256032][ T10] usb 3-1: SerialNumber: syz [ 337.264507][ T7853] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 337.272511][ T7853] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 337.480362][ T7853] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 337.488039][ T7853] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 337.623768][ T439] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 337.643691][ T342] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 337.773007][ T439] usb 2-1: Using ep0 maxpacket: 8 [ 337.781804][ T439] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 337.791571][ T439] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 337.800515][ T439] usb 2-1: Product: syz [ 337.804815][ T439] usb 2-1: Manufacturer: syz [ 337.809668][ T439] usb 2-1: SerialNumber: syz [ 337.816571][ T342] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.827552][ T439] usb 2-1: config 0 descriptor?? [ 337.834624][ T342] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 337.846764][ T342] usb 6-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 337.856125][ T342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.864527][ T342] usb 6-1: Product: syz [ 337.868926][ T342] usb 6-1: Manufacturer: syz [ 337.873619][ T342] usb 6-1: SerialNumber: syz [ 337.898381][ T10] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 338.098739][ T438] usb 3-1: USB disconnect, device number 93 [ 338.105765][ T438] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 338.167002][ T7904] netlink: 'syz.4.2446': attribute type 58 has an invalid length. [ 338.234655][ T7913] netlink: 'syz.4.2448': attribute type 1 has an invalid length. [ 338.297745][ T439] usb 2-1: USB disconnect, device number 50 [ 338.308229][ T342] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 338.336446][ T342] usb 6-1: USB disconnect, device number 43 [ 338.346529][ T5675] udevd[5675]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 338.366111][ T5677] udevd[5677]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 338.772058][ T7933] fuse: Bad value for 'group_id' [ 338.777221][ T7933] fuse: Bad value for 'group_id' [ 338.782576][ T7933] futex_wake_op: syz.1.2455 tries to shift op by 32; fix this program [ 338.887498][ T439] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 338.897571][ T609] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 339.026821][ T342] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 339.038459][ T439] usb 3-1: unable to get BOS descriptor or descriptor too short [ 339.046710][ T609] usb 6-1: Using ep0 maxpacket: 8 [ 339.048481][ T439] usb 3-1: config 127 has no interfaces? [ 339.055074][ T609] usb 6-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 339.060360][ T439] usb 3-1: New USB device found, idVendor=22b8, idProduct=2e0a, bcdDevice=5a.2d [ 339.072040][ T609] usb 6-1: config 1 interface 0 has no altsetting 0 [ 339.080831][ T439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.088670][ T609] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 339.095911][ T439] usb 3-1: Product: syz [ 339.105463][ T609] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 339.109668][ T439] usb 3-1: Manufacturer: syz [ 339.118135][ T609] usb 6-1: SerialNumber: syz [ 339.129999][ T609] usb 6-1: bad CDC descriptors [ 339.142282][ T439] usb 3-1: SerialNumber: syz [ 339.157771][ T7936] 9pnet_fd: Insufficient options for proto=fd [ 339.185905][ T342] usb 2-1: Using ep0 maxpacket: 16 [ 339.192372][ T342] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 339.204426][ T342] usb 2-1: config 0 has no interface number 0 [ 339.210862][ T342] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 339.221597][ T342] usb 2-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid maxpacket 12352, setting to 1024 [ 339.239589][ T342] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 339.252079][ T342] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 339.261640][ T342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.269980][ T342] usb 2-1: Product: syz [ 339.271770][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2459'. [ 339.275628][ T342] usb 2-1: Manufacturer: syz [ 339.287901][ T342] usb 2-1: SerialNumber: syz [ 339.287909][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2459'. [ 339.305754][ T342] usb 2-1: config 0 descriptor?? [ 339.311664][ T7933] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 339.319211][ T7933] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 339.333348][ T396] usb 6-1: USB disconnect, device number 44 [ 339.352050][ T439] usb 3-1: USB disconnect, device number 94 [ 339.533085][ T7933] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 339.540730][ T7933] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 339.904261][ T7958] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2464'. [ 339.930671][ T7958] netlink: 'syz.4.2464': attribute type 27 has an invalid length. [ 339.954446][ T342] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 339.966244][ T7958] sit0: left promiscuous mode [ 339.976729][ T342] asix 2-1:0.251: probe with driver asix failed with error -524 [ 340.048171][ T7963] overlayfs: failed to clone upperpath [ 340.185914][ T7967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=7967 comm=syz.2.2463 [ 340.293661][ T342] usb 2-1: USB disconnect, device number 51 [ 340.380140][ T9] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 340.540155][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 340.548972][ T9] usb 6-1: config index 0 descriptor too short (expected 48074, got 18) [ 340.557817][ T9] usb 6-1: config 254 has too many interfaces: 220, using maximum allowed: 32 [ 340.569332][ T9] usb 6-1: config 254 has an invalid descriptor of length 230, skipping remainder of the config [ 340.580473][ T9] usb 6-1: config 254 has 0 interfaces, different from the descriptor's value: 220 [ 340.592123][ T9] usb 6-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 340.602236][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.610978][ T9] usb 6-1: Product: syz [ 340.615398][ T9] usb 6-1: Manufacturer: syz [ 340.621251][ T9] usb 6-1: SerialNumber: syz [ 340.837344][ T9] usb 6-1: USB disconnect, device number 45 [ 340.890850][ T7979] overlayfs: conflicting options: nfs_export=on,index=off [ 340.989343][ T36] audit: type=1400 audit(1772879077.883:6779): avc: denied { shutdown } for pid=7990 comm="syz.4.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 341.007357][ T609] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 341.055932][ T7999] netlink: 'syz.4.2478': attribute type 6 has an invalid length. [ 341.146489][ T609] usb 3-1: device descriptor read/64, error -71 [ 341.335661][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 341.364673][ T36] audit: type=1400 audit(1772879078.254:6780): avc: denied { unmount } for pid=5338 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 341.389870][ T609] usb 3-1: device descriptor read/64, error -71 [ 341.401443][ T8022] overlayfs: conflicting options: metacopy=off,verity=require [ 341.484921][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 341.491267][ T9] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 341.499582][ T9] usb 2-1: config 0 has no interface number 0 [ 341.506331][ T9] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 341.516540][ T9] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 341.527709][ T9] usb 2-1: config 0 interface 196 has no altsetting 0 [ 341.536428][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 341.545615][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.553653][ T9] usb 2-1: Product: syz [ 341.557874][ T9] usb 2-1: Manufacturer: syz [ 341.562521][ T9] usb 2-1: SerialNumber: syz [ 341.568058][ T9] usb 2-1: config 0 descriptor?? [ 341.573413][ T8003] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 341.634157][ T609] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 341.656292][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2487'. [ 341.665424][ T341] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 341.689305][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2488'. [ 341.763531][ T609] usb 3-1: device descriptor read/64, error -71 [ 341.781701][ T9] ipheth 2-1:0.196: Unable to find endpoints [ 341.813377][ T341] usb 6-1: Using ep0 maxpacket: 8 [ 341.820003][ T341] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 7 [ 341.832922][ T341] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 341.842111][ T341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.850404][ T341] usb 6-1: Product: syz [ 341.854755][ T341] usb 6-1: Manufacturer: syz [ 341.859364][ T341] usb 6-1: SerialNumber: syz [ 342.002400][ T609] usb 3-1: device descriptor read/64, error -71 [ 342.067339][ T341] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 342.077857][ T341] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 342.089896][ T341] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 342.099943][ T341] usb 6-1: USB disconnect, device number 46 [ 342.111383][ T5675] udevd[5675]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 342.112321][ T609] usb usb3-port1: attempt power cycle [ 342.480240][ T609] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 342.501435][ T609] usb 3-1: device descriptor read/8, error -71 [ 342.630767][ T609] usb 3-1: device descriptor read/8, error -71 [ 342.868448][ T609] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 342.889804][ T609] usb 3-1: device descriptor read/8, error -71 [ 342.908166][ T396] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 343.019009][ T609] usb 3-1: device descriptor read/8, error -71 [ 343.057565][ T396] usb 6-1: Using ep0 maxpacket: 16 [ 343.064401][ T396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.075758][ T396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.085643][ T396] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 343.098806][ T396] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 343.108203][ T396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.117267][ T396] usb 6-1: config 0 descriptor?? [ 343.127397][ T609] usb usb3-port1: unable to enumerate USB device [ 343.524815][ T396] kye 0003:0458:5016.0028: control desc unexpectedly large [ 343.533646][ T396] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0028/input/input43 [ 343.548336][ T396] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0028/input/input44 [ 343.567216][ T396] kye 0003:0458:5016.0028: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 343.733866][ T341] usb 6-1: USB disconnect, device number 47 [ 343.791594][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2496'. [ 343.801601][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2496'. [ 343.837532][ T36] audit: type=1400 audit(1772879080.736:6781): avc: denied { nlmsg_write } for pid=8057 comm="syz.2.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 343.871432][ T8060] netlink: 'syz.2.2498': attribute type 12 has an invalid length. [ 344.079119][ T342] usb 2-1: USB disconnect, device number 52 [ 344.110233][ T8066] incfs: ino conflict with backing FS 1 [ 344.121385][ T36] audit: type=1400 audit(1772879081.017:6782): avc: denied { mount } for pid=8065 comm="syz.1.2501" name="/" dev="incremental-fs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 344.144921][ T396] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 344.259856][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2503'. [ 344.309144][ T396] usb 3-1: unable to get BOS descriptor or descriptor too short [ 344.327473][ T396] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.342213][ T396] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 344.352727][ T396] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 344.364458][ T396] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 344.374260][ T396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.382764][ T396] usb 3-1: Product: syz [ 344.387081][ T396] usb 3-1: Manufacturer: syz [ 344.392108][ T396] usb 3-1: SerialNumber: syz [ 344.520857][ T342] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 344.628991][ T8062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8062 comm=syz.2.2499 [ 344.642064][ T8062] netlink: 'syz.2.2499': attribute type 16 has an invalid length. [ 344.650022][ T8062] netlink: 'syz.2.2499': attribute type 2 has an invalid length. [ 344.658093][ T8062] netlink: 61550 bytes leftover after parsing attributes in process `syz.2.2499'. [ 344.675792][ T396] usb 3-1: USB disconnect, device number 99 [ 344.684086][ T342] usb 6-1: unable to get BOS descriptor or descriptor too short [ 344.696084][ T342] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 246, changing to 7 [ 344.711589][ T342] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 344.724202][ T342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.732580][ T342] usb 6-1: Product: syz [ 344.737047][ T342] usb 6-1: Manufacturer: syz [ 344.739983][ T341] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 344.742327][ T342] usb 6-1: SerialNumber: syz [ 344.869360][ T341] usb 2-1: device descriptor read/64, error -71 [ 344.959028][ T342] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 344.970440][ T342] usb 6-1: USB disconnect, device number 48 [ 345.108291][ T341] usb 2-1: device descriptor read/64, error -71 [ 345.192898][ T36] audit: type=1326 audit(1772879082.102:6783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.2509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99cd59c799 code=0x0 [ 345.326574][ T8102] netlink: 'syz.4.2514': attribute type 12 has an invalid length. [ 345.347358][ T341] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 345.441429][ T8118] bridge_slave_0: entered promiscuous mode [ 345.447367][ T8118] bridge_slave_0: entered allmulticast mode [ 345.486579][ T341] usb 2-1: device descriptor read/64, error -71 [ 345.495206][ T609] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 345.504241][ T8128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8128 comm=syz.4.2522 [ 345.523521][ T8127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8127 comm=syz.4.2522 [ 345.556780][ T8135] input: syz1 as /devices/virtual/input/input45 [ 345.667588][ T609] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.679136][ T609] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.689088][ T609] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 345.698392][ T609] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.708073][ T609] usb 3-1: config 0 descriptor?? [ 345.725453][ T341] usb 2-1: device descriptor read/64, error -71 [ 345.832126][ T8171] bpf: Bad value for 'uid' [ 345.847313][ T341] usb usb2-port1: attempt power cycle [ 346.114662][ T609] hid-led 0003:27B8:01ED.0029: collection stack underflow [ 346.122240][ T609] hid-led 0003:27B8:01ED.0029: item 0 4 0 12 parsing failed [ 346.130001][ T609] hid-led 0003:27B8:01ED.0029: probe with driver hid-led failed with error -22 [ 346.173555][ T342] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 346.203460][ T341] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 346.224958][ T341] usb 2-1: device descriptor read/8, error -71 [ 346.323793][ T8180] overlayfs: failed to clone lowerpath [ 346.324325][ T342] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 346.341109][ T342] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 346.351104][ T342] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 346.362476][ T342] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 346.373414][ T341] usb 2-1: device descriptor read/8, error -71 [ 346.374561][ T342] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 346.388854][ T342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.396974][ T342] usb 6-1: Product: syz [ 346.401340][ T342] usb 6-1: Manufacturer: syz [ 346.406093][ T342] usb 6-1: SerialNumber: syz [ 346.611647][ T341] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 346.626591][ T342] usb 6-1: USB disconnect, device number 49 [ 346.634320][ T341] usb 2-1: device descriptor read/8, error -71 [ 346.647876][ T5675] udevd[5675]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 346.772185][ T341] usb 2-1: device descriptor read/8, error -71 [ 346.880475][ T341] usb usb2-port1: unable to enumerate USB device [ 347.164987][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 347.181920][ T347] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 347.194159][ T8186] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2542'. [ 347.204858][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2542'. [ 347.428086][ T342] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 347.597438][ T342] usb 6-1: Using ep0 maxpacket: 16 [ 347.605785][ T342] usb 6-1: unable to get BOS descriptor set [ 347.612741][ T342] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.624905][ T342] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 347.642868][ T8194] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2545'. [ 347.652139][ T342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.661971][ T342] usb 6-1: Product: syz [ 347.671113][ T342] usb 6-1: Manufacturer: syz [ 347.682417][ T342] usb 6-1: SerialNumber: syz [ 347.870253][ T8201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8201 comm=syz.4.2547 [ 347.903164][ T342] usb 6-1: bad CDC descriptors [ 347.919081][ T342] usb 6-1: USB disconnect, device number 50 [ 348.190486][ T342] usb 3-1: USB disconnect, device number 100 [ 348.234554][ T438] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 348.413802][ T438] usb 2-1: Using ep0 maxpacket: 8 [ 348.421666][ T438] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 348.433341][ T438] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 348.443613][ T438] usb 2-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 348.456943][ T438] usb 2-1: config 1 interface 0 has no altsetting 0 [ 348.465742][ T438] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.475723][ T438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.485855][ T438] usb 2-1: Product: 쁿뺴뢋ฑ䢟⏗ꅆ쐬絇櫛䇽ᑋ粒주顰䆕䠤ⶀ蜛턆ሓ䭵힞仚㒑ﱚ핦㾛滗㜖坦佚塞尐聎籠挛瀪胜棼ᄽӹ׉蛈ꄪ澠冨㿣䣛籇ힵ愩輒⏠裞涕딃좙젮敄魚ᰦ㯰쒙뉬졥뙒냖湺䐱︻먚붸ꉀꭕߥ솺ۼޝ鿧⒴囇泫窂鳘Ⱨ [ 348.513989][ T8198] netlink: 'syz.4.2547': attribute type 10 has an invalid length. [ 348.522403][ T438] usb 2-1: Manufacturer: ᤯쐂阞缚퐕ɫ诼率砋≘괁﵂먌浀畅↟도ꐍ杬 [ 348.543266][ T438] usb 2-1: SerialNumber: 䳃真綂◆傕ኞ摧礙干灏왚녂䆅⨅뛆请ᄿഄ㉧鹥ᄆ䕴⣨僚ꦬ [ 348.565024][ T8208] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 348.572462][ T8208] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 348.787214][ T8210] Unsupported ieee802154 address type: 0 [ 348.793380][ T8218] fuse: Unknown parameter 'fdn' [ 348.809595][ T438] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 348.842851][ T438] usb 2-1: USB disconnect, device number 57 [ 349.181562][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 349.230445][ T818] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 351.796168][ T8244] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2562'. [ 351.826929][ T8244] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 351.867252][ T8244] SELinux: failed to load policy [ 352.926356][ T36] audit: type=1400 audit(1772879089.764:6784): avc: denied { mount } for pid=8280 comm="syz.1.2575" name="/" dev="pstore" ino=1233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 352.989666][ T8286] net_ratelimit: 24596 callbacks suppressed [ 352.989695][ T8286] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 353.680999][ T36] audit: type=1400 audit(1772879090.617:6785): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 353.731147][ T8306] overlayfs: failed to clone lowerpath [ 353.767286][ T8306] overlayfs: failed to clone lowerpath [ 412.384883][ T438] usb 5-1: USB disconnect, device number 4 [ 488.825480][ T8287] bridge0: port 3(syz_tun) entered disabled state [ 495.607323][ T37] INFO: task syz.2.2573:8276 blocked for more than 122 seconds. [ 495.862057][ T37] Not tainted syzkaller #0 [ 495.867171][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.232394][ T37] task:syz.2.2573 state:D stack:0 pid:8276 tgid:8276 ppid:5979 flags:0x00004004 [ 496.242708][ T37] Call Trace: [ 496.246041][ T37] [ 496.249027][ T37] __schedule+0x134f/0x1ea0 [ 496.253629][ T37] ? __sched_text_start+0x10/0x10 [ 496.258718][ T37] ? __cfi_percpu_ref_switch_to_atomic_rcu+0x10/0x10 [ 496.265470][ T37] ? __call_rcu_common+0x43b/0x720 [ 496.270653][ T37] schedule+0xc5/0x240 [ 496.274881][ T37] schedule_timeout+0xc7/0x3b0 [ 496.279804][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 496.285274][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 496.290884][ T37] ? __percpu_ref_switch_mode+0x358/0x5e0 [ 496.296951][ T37] wait_for_common+0x369/0x650 [ 496.301817][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 496.307770][ T37] ? wait_for_completion+0x40/0x40 [ 496.312964][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 496.318846][ T37] ? percpu_ref_kill_and_confirm+0xf4/0x220 [ 496.324840][ T37] ? kill_ioctx+0x2b0/0x3d0 [ 496.329494][ T37] wait_for_completion+0x1c/0x40 [ 496.334524][ T37] exit_aio+0x2ec/0x3c0 [ 496.338833][ T37] ? __cfi_exit_aio+0x10/0x10 [ 496.343686][ T37] ? uprobe_clear_state+0x2cd/0x340 [ 496.348948][ T37] __mmput+0x30/0x320 [ 496.352997][ T37] ? mmput+0x4d/0x170 [ 496.357036][ T37] mmput+0x55/0x170 [ 496.360951][ T37] do_exit+0x93f/0x2650 [ 496.365286][ T37] ? __cfi_do_exit+0x10/0x10 [ 496.369933][ T37] ? __sched_text_start+0x10/0x10 [ 496.375040][ T37] ? __kasan_check_read+0x15/0x20 [ 496.380124][ T37] ? __kasan_check_write+0x18/0x20 [ 496.385316][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 496.390582][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 496.396230][ T37] do_group_exit+0x229/0x2f0 [ 496.400881][ T37] ? __kasan_check_write+0x18/0x20 [ 496.406252][ T37] get_signal+0x1398/0x14e0 [ 496.410866][ T37] arch_do_signal_or_restart+0xbc/0x760 [ 496.416532][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 496.422863][ T37] ? __kasan_check_read+0x15/0x20 [ 496.427951][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 496.433493][ T37] do_syscall_64+0x63/0xf0 [ 496.437976][ T37] ? clear_bhb_loop+0x50/0xa0 [ 496.442729][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 496.448720][ T37] RIP: 0033:0x7f99cd5bbd10 [ 496.453230][ T37] RSP: 002b:00007ffd49576578 EFLAGS: 00000246 [ 496.459350][ T37] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f99cd59c502 [ 496.467411][ T37] RDX: 00007ffd49576580 RSI: 00007ffd495766b0 RDI: 0000000000000021 [ 496.475638][ T37] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 496.483866][ T37] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffd49576c80 [ 496.491906][ T37] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 496.499993][ T37] [ 497.641787][ T8287] syz_tun (unregistering): left allmulticast mode [ 497.703000][ T8287] syz_tun (unregistering): left promiscuous mode [ 498.051862][ T37] NMI backtrace for cpu 0 [ 498.051894][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 4b5cec16b486fb71b4486bf07c6a811d89a3863f [ 498.051934][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 498.051950][ T37] Call Trace: [ 498.051960][ T37] [ 498.051971][ T37] __dump_stack+0x21/0x30 [ 498.052006][ T37] dump_stack_lvl+0x140/0x1c0 [ 498.052036][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 498.052069][ T37] dump_stack+0x19/0x20 [ 498.052097][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 498.052122][ T37] ? rcu_read_unlock_special+0xb7/0x420 [ 498.052151][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 498.052174][ T37] ? sched_show_task+0x371/0x530 [ 498.052203][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 498.052231][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 498.052262][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 498.052291][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 498.052316][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 498.052346][ T37] watchdog+0xdad/0xf00 [ 498.052380][ T37] ? __kasan_check_write+0x18/0x20 [ 498.052412][ T37] ? __cfi_watchdog+0x10/0x10 [ 498.052447][ T37] ? __kasan_check_read+0x15/0x20 [ 498.052475][ T37] ? __kthread_parkme+0x137/0x180 [ 498.052510][ T37] ? schedule+0xc5/0x240 [ 498.052535][ T37] kthread+0x2c9/0x370 [ 498.052578][ T37] ? __cfi_watchdog+0x10/0x10 [ 498.052614][ T37] ? __cfi_kthread+0x10/0x10 [ 498.052637][ T37] ret_from_fork+0x64/0xa0 [ 498.052667][ T37] ? __cfi_kthread+0x10/0x10 [ 498.052690][ T37] ret_from_fork_asm+0x1a/0x30 [ 498.052726][ T37] [ 498.052736][ T37] Sending NMI from CPU 0 to CPUs 1: [ 498.305321][ C1] NMI backtrace for cpu 1 [ 498.305351][ C1] CPU: 1 UID: 0 PID: 33 Comm: rcuop/1 Not tainted syzkaller #0 4b5cec16b486fb71b4486bf07c6a811d89a3863f [ 498.305376][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 498.305387][ C1] RIP: 0010:update_stack_state+0xe9/0x4b0 [ 498.305415][ C1] Code: 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 89 03 00 00 41 c6 06 01 b8 a8 00 00 00 49 89 d7 eb 05 b8 10 00 00 00 4c 8d 73 08 <48> 8d 4b 10 4c 89 7d b0 4c 01 f8 48 89 85 78 ff ff ff 48 8d 53 18 [ 498.305431][ C1] RSP: 0018:ffffc9000022f998 EFLAGS: 00000246 [ 498.305448][ C1] RAX: 0000000000000010 RBX: ffffc9000022fae8 RCX: 000000000022fb00 [ 498.305460][ C1] RDX: ffffc90000227b00 RSI: ffffc90000227b00 RDI: ffffc9000022fb40 [ 498.305474][ C1] RBP: ffffc9000022fa58 R08: ffffc9000022fbb0 R09: ffffc9000022fba8 [ 498.305487][ C1] R10: 0000000000000016 R11: ffffffff8175cdf0 R12: 0000000000000000 [ 498.305500][ C1] R13: dffffc0000000000 R14: ffffc9000022faf0 R15: ffffc90000227b00 [ 498.305512][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 498.305527][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.305539][ C1] CR2: 00007fa51a345000 CR3: 00000001052ea000 CR4: 00000000003526b0 [ 498.305554][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 498.305565][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 498.305576][ C1] Call Trace: [ 498.305582][ C1] [ 498.305592][ C1] unwind_next_frame+0x3c1/0x750 [ 498.305612][ C1] ? __kernel_text_address+0x11/0x40 [ 498.305638][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 498.305656][ C1] arch_stack_walk+0x138/0x170 [ 498.305680][ C1] ? do_softirq+0xb8/0x110 [ 498.305703][ C1] stack_trace_save+0xaa/0x100 [ 498.305718][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 498.305734][ C1] ? unwind_next_frame+0x3c1/0x750 [ 498.305752][ C1] kasan_save_track+0x3e/0x80 [ 498.305774][ C1] ? kasan_save_track+0x3e/0x80 [ 498.305796][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 498.305813][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 498.305837][ C1] ? __kmalloc_cache_noprof+0x23c/0x470 [ 498.305866][ C1] ? ref_tracker_alloc+0x184/0x590 [ 498.305886][ C1] ? dst_init+0xcf/0x420 [ 498.305903][ C1] ? dst_alloc+0x163/0x250 [ 498.305918][ C1] ? ip_route_input_rcu+0x1a0e/0x2700 [ 498.305935][ C1] ? ip_route_input_noref+0xd4/0x150 [ 498.305950][ C1] ? arp_process+0x908/0x1790 [ 498.305970][ C1] ? NF_HOOK+0x17e/0x1e0 [ 498.305989][ C1] ? arp_rcv+0x2f8/0x490 [ 498.306009][ C1] ? netif_receive_skb+0x22d/0x7b0 [ 498.306032][ C1] ? br_pass_frame_up+0x126/0x1b0 [ 498.306049][ C1] ? br_handle_frame_finish+0x1317/0x1760 [ 498.306067][ C1] ? br_handle_frame+0x5a6/0xba0 [ 498.306083][ C1] ? __netif_receive_skb_core+0xfb1/0x3ab0 [ 498.306106][ C1] ? process_backlog+0x3e5/0xad0 [ 498.306128][ C1] ? __napi_poll+0xd0/0x610 [ 498.306149][ C1] ? net_rx_action+0x5ea/0xd80 [ 498.306171][ C1] ? handle_softirqs+0x1aa/0x630 [ 498.306194][ C1] ? __do_softirq+0xf/0x16 [ 498.306212][ C1] ? do_softirq+0xb8/0x110 [ 498.306239][ C1] ? __napi_poll+0xd0/0x610 [ 498.306258][ C1] ? net_rx_action+0x5ea/0xd80 [ 498.306281][ C1] kasan_save_alloc_info+0x40/0x50 [ 498.306300][ C1] __kasan_kmalloc+0x96/0xb0 [ 498.306328][ C1] __kmalloc_cache_noprof+0x23c/0x470 [ 498.306349][ C1] ? ref_tracker_alloc+0x184/0x590 [ 498.306368][ C1] ref_tracker_alloc+0x184/0x590 [ 498.306387][ C1] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 498.306408][ C1] ? __kasan_slab_alloc+0x73/0x90 [ 498.306431][ C1] dst_init+0xcf/0x420 [ 498.306447][ C1] dst_alloc+0x163/0x250 [ 498.306464][ C1] ip_route_input_rcu+0x1a0e/0x2700 [ 498.306481][ C1] ? ip_route_input_noref+0x150/0x150 [ 498.306500][ C1] ? __asan_memcpy+0x5a/0x80 [ 498.306520][ C1] ? arpt_do_table+0x1ba7/0x1d80 [ 498.306541][ C1] ip_route_input_noref+0xd4/0x150 [ 498.306557][ C1] ? __cfi_ip_route_input_noref+0x10/0x10 [ 498.306575][ C1] ? __asan_memcpy+0x5a/0x80 [ 498.306595][ C1] arp_process+0x908/0x1790 [ 498.306616][ C1] ? __cfi_arp_process+0x10/0x10 [ 498.306643][ C1] ? __cfi_arp_process+0x10/0x10 [ 498.306662][ C1] NF_HOOK+0x17e/0x1e0 [ 498.306680][ C1] ? __cfi_arp_process+0x10/0x10 [ 498.306700][ C1] ? arp_xmit+0x210/0x210 [ 498.306719][ C1] ? __cfi_arp_process+0x10/0x10 [ 498.306738][ C1] ? br_dev_queue_push_xmit+0x55c/0x700 [ 498.306765][ C1] arp_rcv+0x2f8/0x490 [ 498.306784][ C1] ? __cfi_arp_rcv+0x10/0x10 [ 498.306804][ C1] netif_receive_skb+0x22d/0x7b0 [ 498.306828][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 498.306850][ C1] ? br_flood+0x67e/0x730 [ 498.306875][ C1] br_pass_frame_up+0x126/0x1b0 [ 498.306894][ C1] br_handle_frame_finish+0x1317/0x1760 [ 498.306913][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 498.306931][ C1] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 498.306953][ C1] ? update_group_capacity+0x2c7/0x9f0 [ 498.306975][ C1] br_handle_frame+0x5a6/0xba0 [ 498.306992][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 498.307009][ C1] __netif_receive_skb_core+0xfb1/0x3ab0 [ 498.307033][ C1] ? skb_release_data+0x2ca/0x9a0 [ 498.307057][ C1] ? qdisc_run_end+0x120/0x120 [ 498.307078][ C1] ? sched_balance_update_blocked_averages+0x1360/0x1360 [ 498.307104][ C1] ? __kfree_skb+0x1a8/0x210 [ 498.307125][ C1] ? tipc_udp_send_msg+0x295/0x320 [ 498.307149][ C1] ? sk_skb_reason_drop+0xd8/0x310 [ 498.307172][ C1] ? __kasan_check_write+0x18/0x20 [ 498.307191][ C1] ? _raw_spin_lock_irq+0x93/0x120 [ 498.307207][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 498.307224][ C1] process_backlog+0x3e5/0xad0 [ 498.307249][ C1] __napi_poll+0xd0/0x610 [ 498.307270][ C1] net_rx_action+0x5ea/0xd80 [ 498.307295][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 498.307317][ C1] ? sched_clock+0x44/0x60 [ 498.307336][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 498.307357][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 498.307377][ C1] handle_softirqs+0x1aa/0x630 [ 498.307402][ C1] __do_softirq+0xf/0x16 [ 498.307419][ C1] do_softirq+0xb8/0x110 [ 498.307441][ C1] [ 498.307447][ C1] [ 498.307453][ C1] ? __cfi_do_softirq+0x10/0x10 [ 498.307475][ C1] ? dst_destroy+0x37d/0x460 [ 498.307492][ C1] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 498.307508][ C1] __local_bh_enable_ip+0x74/0x80 [ 498.307531][ C1] rcu_do_batch+0x5d9/0xd40 [ 498.307554][ C1] ? rcu_core+0xd30/0xd30 [ 498.307575][ C1] ? __kasan_check_write+0x18/0x20 [ 498.307594][ C1] ? _raw_spin_lock+0x92/0x120 [ 498.307610][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 498.307627][ C1] ? __kasan_check_read+0x15/0x20 [ 498.307651][ C1] ? rcu_nocb_cb_kthread+0x50f/0xb30 [ 498.307675][ C1] rcu_nocb_cb_kthread+0x524/0xb30 [ 498.307700][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 498.307724][ C1] ? __kasan_check_write+0x18/0x20 [ 498.307742][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 498.307759][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 498.307775][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 498.307791][ C1] ? set_cpus_allowed_ptr+0xa1/0xf0 [ 498.307816][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 498.307841][ C1] ? __kasan_check_read+0x15/0x20 [ 498.307859][ C1] ? __kthread_parkme+0x137/0x180 [ 498.307884][ C1] ? schedule+0xc5/0x240 [ 498.307902][ C1] kthread+0x2c9/0x370 [ 498.307917][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 498.307941][ C1] ? __cfi_kthread+0x10/0x10 [ 498.307957][ C1] ret_from_fork+0x64/0xa0 [ 498.307977][ C1] ? __cfi_kthread+0x10/0x10 [ 498.307992][ C1] ret_from_fork_asm+0x1a/0x30 [ 498.308017][ C1] [ 498.554586][ T8287] bridge0: port 3(syz_tun) entered disabled state