last executing test programs: 54.527139115s ago: executing program 1 (id=168): r0 = fsopen(&(0x7f0000000500)='pstore\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x28b2, 0x9, 0x2, 0x0, 0x4}, 0x30, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000100), 0x4) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) syz_usb_connect(0x6, 0x46, &(0x7f00000000c0)=ANY=[], 0x0) getpgrp(r6) 54.058877563s ago: executing program 1 (id=169): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010007081000418e00000004fcff", 0x58}], 0x1) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) close_range(r0, r0, 0x2) 54.044878314s ago: executing program 1 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/sda\x00', 0x101042, 0x5) ioctl$FIBMAP(r0, 0x2275, &(0x7f0000000000)=0xfffff31c) 53.97769444s ago: executing program 1 (id=171): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000400), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) mount(0x0, &(0x7f0000000480)='./tracing\x00', 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0x40000) r2 = accept4$unix(r0, 0x0, 0x0, 0x80000) recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r2, &(0x7f00000006c0)=""/237, 0xed, 0x10140, 0x0, 0x0) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000080)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000280)="441f0803", 0x1f) getsockopt$inet_opts(r4, 0x0, 0x4, 0x0, &(0x7f00000002c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, 0x0, 0x44000) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="400f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x40, 0x9, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fcntl$lock(r6, 0x26, &(0x7f0000000340)={0x1, 0x0, 0x73f0, 0x9}) 50.093112697s ago: executing program 1 (id=192): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/power/resume', 0x88102, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/power/resume', 0x88102, 0x0) lseek(r2, 0x5, 0x3) write(r1, &(0x7f00000006c0)='7', 0x1) getpid() (async) r3 = getpid() syz_pidfd_open(r3, 0x0) (async) syz_pidfd_open(r3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000700)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x102200, 0x0, 0xffffffffffffff88, 0x0, 0x0, 0x0) setpgid(r5, r5) waitid(0x2, 0x0, 0x0, 0x4, 0x0) (async) waitid(0x2, 0x0, 0x0, 0x4, 0x0) write(r0, &(0x7f0000000540)='27', 0x2) fsopen(&(0x7f0000000640)='bpf\x00', 0x0) (async) fsopen(&(0x7f0000000640)='bpf\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7ffffffff000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_ublk_setup_io_uring(0x224, &(0x7f0000000000)={0x0, 0x2000003, 0x800, 0x20000002, 0x3e2}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) fstat(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0xfe69}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@audit}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}}) 49.732657294s ago: executing program 1 (id=197): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/sda\x00', 0x101042, 0x5) ioctl$FIBMAP(r0, 0x2275, &(0x7f0000000000)=0xfffff31c) 34.463577214s ago: executing program 32 (id=197): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/sda\x00', 0x101042, 0x5) ioctl$FIBMAP(r0, 0x2275, &(0x7f0000000000)=0xfffff31c) 12.066494505s ago: executing program 0 (id=388): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_marker\x00', 0x1, 0x5a) write(r0, &(0x7f0000000180)="2d25c873c6d0ff57318d8185a94d488b38f0fcd919d01038dc3dc25401000000febae03d46fdca85c1a1862b9b169e", 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000004c0)=""/16384, 0x4000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x303, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x16}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x85}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_marker\x00', 0x1, 0x5a) (async) write(r0, &(0x7f0000000180)="2d25c873c6d0ff57318d8185a94d488b38f0fcd919d01038dc3dc25401000000febae03d46fdca85c1a1862b9b169e", 0x2f) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_pipe\x00', 0x0, 0x0) (async) read(r1, &(0x7f00000004c0)=""/16384, 0x4000) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x303, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x16}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x85}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) (async) 9.004858469s ago: executing program 0 (id=409): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "9986a1dc"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 6.268923159s ago: executing program 4 (id=430): r0 = timerfd_create(0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000240)={@local, 0x0, 0x0, 0xff, 0x1, 0x9}, 0x20) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000200)={0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{r2, r3+10000000}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xfffffffffffffff9, 0xf6d, 0x0, 0xd, 0x7fffffff, 0xfffffffffffffffe, 0x5, 0x200000000000000, 0xbd, 0x6, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x5988, 0x8000000000005a, 0x3}) 6.267400189s ago: executing program 4 (id=431): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="020503090efffffff0020000000000000500060000200000f100000000000000fc02000000000000000000000000000000000000000000000200010000000000000009e6ffffff0005000500190000000a000000fffffffdfc00285e2248cd66330000000000000000000000000000febec4ce4efa386b621a6e50ff002c151263e53b5e08e9eda394a838b09639f3203f484f1a31bda1bd56ad33b03bedde61de407775610ca40e7c257fc145ea6083eefe1c3f5f8b63b41bbc983e4ce5845aacb01658d0f35ec454e42e7322dace9d7b568c66330a42d00b8e707047"], 0x70}, 0x1, 0x7}, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000300)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000008c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000980)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x34, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r10, r9, &(0x7f0000000a80)={0x0, 0xa005, 0x100, 0x0, 0x1e7, 0x0, r4}, &(0x7f0000000b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc636, 0x1, 0x2, 0x3ad, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe941, 0x8, 0x1, 0x8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf8af, 0x20, 0x3, 0x10000017, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb2a7, 0x4000, 0x3, 0x264, 0x0, r10}}], 0x4, &(0x7f0000000d80)={0x2e, 0xa, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff}, 0x0, r8, '\x00', {0x2, 0x508, 0x0, 0x0}}, 0x0) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r12 = openat(r11, &(0x7f0000000480)='unbind\x00', 0x1, 0x0) write(r12, &(0x7f00000004c0)='00:03', 0x5) r13 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x19, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r13, 0x0, 0x0) syz_usb_control_io(r13, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="200a5a0000005a246b78d3b788ff01b3549044acd9ba8ab05333ddc6460987632dbb7b25523840f3e06eb0e9a03da011143a7879e671f1693285e5c1009de144658b6e3c827bff4cc7624ef09d2bec3ed7768a215f42219f58b4a2534e3f66a57e261a61"], 0x0, 0x0, 0x0, 0x0}, 0x0) r14 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x4820, 0x6, 0x83}}], 0x68}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r15 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r16 = memfd_create(&(0x7f0000000180)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r16, 0xffff) ioctl$NILFS_IOCTL_SET_SUINFO(r12, 0x40186e8d, &(0x7f00000007c0)={&(0x7f0000000700)=[{0x8, 0x1, 0x0, {0x5, 0x2}}, {0x2, 0x2, 0x0, {0x8, 0x8001, 0x1}}, {0x1ff, 0x0, 0x0, {0x1, 0x200, 0x2}}, {0x8, 0x1, 0x0, {0x7, 0x7a3, 0x1}}, {0x1, 0x1, 0x0, {0x8, 0x7, 0x2}}], 0x5, 0x20, 0x1000}) fcntl$addseals(r16, 0x409, 0x7) ioctl$UDMABUF_CREATE(r15, 0x40187542, &(0x7f0000000280)={r16, 0x0, 0x0, 0x8000}) r17 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r17, 0x0, 0x7, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) 6.028619634s ago: executing program 0 (id=434): r0 = accept4$inet_tcp(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0x4, 0x4) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x184a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x19, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xf8, 0x80, 0x81}}]}}}]}}]}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000240)=0xb, 0x4) sendmsg$can_raw(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@canfd={{0x4, 0x0, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, "23cb0ac4d83c0c17c7de81a204582d7e75b7fc174efc490af249857dbc663151974141b335bce26ad6907dc028d2f5eae6502308bd230744570f569d8dceabbd"}, 0x48}, 0x1, 0x0, 0x0, 0x2000c004}, 0x8014) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="200a5a0000005a246b78d3b788ff01"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000001c0)={0x1, 0x5, 0x400, 0x5c, &(0x7f0000000100)="d9d70b62933ada456e18b88017de4ffd0a028df71fb2e93bd814b9fbdae5ae733e5713efdc06527b107679ae7255c4fc4809f862361bd122b77905274883e5d8491dc03692a582fbe2eea82b6ea7cddd0c144af010644d223f1caae9", 0x32, 0x0, &(0x7f0000000180)="9bdbe1de1ece61263b7f96d60eda1961b134003b07e5986e8667e5a5ed3edc4fb57b433be24b8621105c88b79c4155867db5"}) 5.164881372s ago: executing program 2 (id=435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x65, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) 5.107183088s ago: executing program 2 (id=439): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20702, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000200)={'pim6reg0\x00', 0x400}) close(0x3) (async) close(0x3) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x82084, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x82084, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x111080, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x111080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000540)={0x3, &(0x7f0000000500)=[{0x48d9, 0x73, 0xfa, 0x2}, {0x7f, 0x81, 0x1, 0x5}, {0x5, 0x6e, 0xb}]}) socket$inet(0x2, 0x2, 0xffff0000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast1, @in=@remote, 0x4e20, 0x718, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfffffffffffffffa, 0xf, 0x6, 0x2, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffc, 0x1}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x4003fe}, 0x70bd2c, 0x3505, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8, 0x16, 0xe4}]}, 0x140}}, 0x844) r5 = socket$nl_generic(0x10, 0x3, 0x10) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000005c0)=ANY=[@ANYBLOB="3d8879"]) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x11c0, 0x0) inotify_init1(0x0) (async) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000640)='./file0\x00', 0xa4000061) (async) inotify_add_watch(r7, &(0x7f0000000640)='./file0\x00', 0xa4000061) inotify_add_watch(r7, &(0x7f0000000680)='.\x00', 0xc100092e) (async) inotify_add_watch(r7, &(0x7f0000000680)='.\x00', 0xc100092e) setxattr$system_posix_acl(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000003c0004"], 0x54}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a00000000000001"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.996822359s ago: executing program 2 (id=440): futex_waitv(&(0x7f00000001c0)=[{0x0, &(0x7f0000000200), 0x2}, {0x3, &(0x7f0000000240)=0x3, 0x2}], 0x2, 0x0, &(0x7f0000000280)={0x77359400}, 0x1) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000000c000/0x2000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) exit(0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000340)=0x9, 0xfffffffffffffedb) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'ip6gretap0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000480)={{0x2, 0x4e21, @empty}, {0x306, @remote}, 0xa8, {0x2, 0x4e24, @empty}, 'veth1_macvtap\x00'}) sendto$packet(r0, &(0x7f00000003c0)="0b032200e0ff25000200475400f6a13bb10000a8880089064803", 0x10000, 0x0, &(0x7f0000000400)={0x11, 0x0, r1}, 0x14) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000040)=0xa40, 0x4) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write$tcp_congestion(r5, 0x0, 0xffffff93) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_usb_connect(0x2, 0xb3, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc02010111240201010a0000000000000000020000092403020101000100090d010025d36fe733c6a87f000e0200000e240101470081000200000001001b2404010159555a33593200001000800000aa00389b7110"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 4.996612449s ago: executing program 3 (id=441): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x23c}}, 0x4000) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0x13, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x3, &(0x7f0000000240)=[{0x3, 0x81, 0x3}, {0x61, 0xf}, {0x6, 0x0, 0x0, 0x5}]}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000500)={0x30, 0x30, 0x30}}}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macvtap0\x00'}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, r6, 0x65283e1aaa2ddbb1, 0x70bd27, 0x10, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}}, 0x800) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0xfffffffffffffffc, &(0x7f0000000280)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, 0x0, 0x4, &(0x7f00000001c0)={0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000580), 0x161301, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r8 = epoll_create(0x7) close_range(0xffffffffffffffff, r8, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r1, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0x0) 4.59293318s ago: executing program 4 (id=442): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/sda\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x5385, 0x1) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r2) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x20000008, 0xa2600) (async) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) sendmmsg(r4, &(0x7f0000000240)=[{{&(0x7f0000000280)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000340)='O', 0x36}], 0x1}}], 0x1, 0x0) (async, rerun: 64) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') (rerun: 64) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x2004080, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r3}}) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x48040) 4.548099475s ago: executing program 4 (id=443): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f00000005c0)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000d80)=@filename='./dev/sda1\x00', &(0x7f0000000dc0)='./mnt\x00', &(0x7f0000000e00)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000e40)='./mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/mapper/control\x00', 0x2, 0x82) ioctl(r0, 0xc178fd0c, &(0x7f0000000100)="04000000000000000000000078010000380100000100000000000000000000000000000000000000003f") unlinkat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f00000005c0)='devtmpfs\x00', 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000000d80)=@filename='./dev/sda1\x00', &(0x7f0000000dc0)='./mnt\x00', &(0x7f0000000e00)='ext4\x00', 0x8410, 0x0) (async) chdir(&(0x7f0000000e40)='./mnt\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/mapper/control\x00', 0x2, 0x82) (async) ioctl(r0, 0xc178fd0c, &(0x7f0000000100)="04000000000000000000000078010000380100000100000000000000000000000000000000000000003f") (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x200) (async) 4.476898912s ago: executing program 4 (id=444): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) socket$inet6(0xa, 0x1, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000000440)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd700002000000140000000c00018008000100", @ANYRES32=r6, @ANYBLOB="08003b0bc4fd19f7"], 0x28}, 0x1, 0x0, 0x0, 0x144}, 0xc080) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) mount(&(0x7f0000000300)=@filename='./cgroup\x00', &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380)='erofs\x00', 0x40, 0x0) setns(r8, 0x20000000) bind$packet(r0, &(0x7f0000000140)={0x11, 0xf5, r2, 0x1, 0x4, 0x6, @random="ee0fc199ca71"}, 0x14) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 4.422163668s ago: executing program 0 (id=445): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) syz_usb_disconnect(r0) (async) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, 0x0) (async) mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000002380)=[{&(0x7f00000023c0)="390000001300034700bb5be1c3e4feff06000000040000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x80, 0x3a98, 0x0, 0x8, 0xfb, 0x2, 0x1, 0x5, 0x8f, 0x36, 0xda, 0x0, 0x2}, {0x2, 0x6, 0x1, 0x5, 0x0, 0xe7, 0x8, 0x6e, 0x81, 0x7f, 0x2, 0x3, 0x8}, {0x1, 0x9, 0x9, 0x0, 0x32, 0x6, 0x3, 0xff, 0x4, 0x2, 0x80, 0x5, 0x8000000000000001}], 0x2}) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000240)="f3ac36262e660f1b290f20d86635080000000f22d80f1c28660f3880340f20c06635000000400f22c03e0f01c8660f388279000f705000cf440f20c066350d000000440f22c0", 0x46}], 0x1, 0x2, 0x0, 0x0) (async) close(r2) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000300)=@vmx={0x0, 0x0, 0x2080, {0x2000, 0x0, {}, 0x1}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) (async) r5 = socket$inet6(0xa, 0x3, 0x7) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) (async) r6 = syz_open_dev$evdev(&(0x7f0000002400), 0x0, 0x0) syz_usb_disconnect(r6) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000002500)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f0000002540)={0x1d, r9}, 0x10) (async) writev(r8, &(0x7f0000002580)=[{&(0x7f00000025c0)="9b78456a04552051bd718652", 0xc}, {&(0x7f0000002600)="01", 0x1}], 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000002440)=ANY=[@ANYBLOB="12010000db991b08d112e2fa8b70010203010902"], 0x0) r10 = syz_open_dev$usbmon(&(0x7f0000002480), 0x0, 0x800) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000002, 0x12, r10, 0x0) 3.876809374s ago: executing program 4 (id=446): r0 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000140)=0x0) (async) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7fd, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x8d, 0xa0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x4, 0x4, 0x1}, @as_header={0x7, 0x24, 0x1, 0x4, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0xf1, 0x9, {0x7, 0x25, 0x1, 0x8, 0x70, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xe6, 0x1, 0x7, {0x7, 0x25, 0x1, 0x0, 0xf, 0x4}}}}}}}}]}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xfe, 0x53, 0x3, 0x58, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x8000, 0xe3e1, 0xd01}}) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r3 = userfaultfd(0x80001) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) (async) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) (async) landlock_create_ruleset(&(0x7f0000000000)={0x4878, 0xa, 0x2, 0x1000, 0x0, 0x3}, 0x30, 0x3) 3.844416107s ago: executing program 33 (id=446): r0 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000140)=0x0) (async) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7fd, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x8d, 0xa0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x4, 0x4, 0x1}, @as_header={0x7, 0x24, 0x1, 0x4, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0xf1, 0x9, {0x7, 0x25, 0x1, 0x8, 0x70, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xe6, 0x1, 0x7, {0x7, 0x25, 0x1, 0x0, 0xf, 0x4}}}}}}}}]}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xfe, 0x53, 0x3, 0x58, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x8000, 0xe3e1, 0xd01}}) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r3 = userfaultfd(0x80001) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) (async) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) (async) landlock_create_ruleset(&(0x7f0000000000)={0x4878, 0xa, 0x2, 0x1000, 0x0, 0x3}, 0x30, 0x3) 3.52440566s ago: executing program 5 (id=447): openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x62c40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000e80), 0x42, 0x0) inotify_init1(0x0) pipe(&(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_ublk_setup_io_uring(0x3, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000240)=0x0, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r0, 0x0, 0x68, 0x1) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x10}}}, &(0x7f00000003c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@multicast1, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x2}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@sa_pcpu={0x8, 0x23, 0x2}, @sa_dir={0x5, 0x21, 0x1}]}, 0x108}}, 0x0) r4 = dup(r2) syz_ublk_setup_queues(r4, r1, &(0x7f0000000400)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x62c40, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000e80), 0x42, 0x0) (async) inotify_init1(0x0) (async) pipe(&(0x7f0000000040)) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) syz_ublk_setup_io_uring(0x3, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000240), 0x0, 0x0) (async) syz_io_uring_modify_offsets$flags(r0, 0x0, 0x68, 0x1) (async) pipe2(0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x10}}}, &(0x7f00000003c0)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@multicast1, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x2}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@sa_pcpu={0x8, 0x23, 0x2}, @sa_dir={0x5, 0x21, 0x1}]}, 0x108}}, 0x0) (async) dup(r2) (async) syz_ublk_setup_queues(r4, r1, &(0x7f0000000400)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (async) 3.083037875s ago: executing program 0 (id=448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x65, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r2, 0xae80, 0x18000000) 3.0370972s ago: executing program 5 (id=447): openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x62c40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000e80), 0x42, 0x0) inotify_init1(0x0) pipe(&(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_ublk_setup_io_uring(0x3, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000240)=0x0, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r0, 0x0, 0x68, 0x1) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x10}}}, &(0x7f00000003c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@multicast1, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x2}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@sa_pcpu={0x8, 0x23, 0x2}, @sa_dir={0x5, 0x21, 0x1}]}, 0x108}}, 0x0) r4 = dup(r2) syz_ublk_setup_queues(r4, r1, &(0x7f0000000400)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x62c40, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000e80), 0x42, 0x0) (async) inotify_init1(0x0) (async) pipe(&(0x7f0000000040)) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) syz_ublk_setup_io_uring(0x3, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000240), 0x0, 0x0) (async) syz_io_uring_modify_offsets$flags(r0, 0x0, 0x68, 0x1) (async) pipe2(0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x10}}}, &(0x7f00000003c0)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@multicast1, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x2}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@sa_pcpu={0x8, 0x23, 0x2}, @sa_dir={0x5, 0x21, 0x1}]}, 0x108}}, 0x0) (async) dup(r2) (async) syz_ublk_setup_queues(r4, r1, &(0x7f0000000400)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (async) 2.511010093s ago: executing program 0 (id=449): r0 = syz_usb_connect(0x2, 0x44e, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x12, 0x74, 0xf7, 0x40, 0x4ca, 0xf001, 0xca0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43c, 0x1, 0x26, 0x3, 0xd8, 0xde, "", [{{0x9, 0x4, 0x48, 0x46, 0xc, 0x52, 0x10, 0x7b, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x3f}, [@mixer_unit={0x6, 0x24, 0x4, 0x6, 0x5, "ef"}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x6, 0x4, "6212794e9a"}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x2, "b88f1903ca"}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x3, 0x8, "c82357827eef"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x2, 0x8, 0x1, 0x3, 0x2}]}], [{{0x9, 0x5, 0xb, 0x0, 0x8, 0x3, 0x1, 0xf7, [@generic={0x8f, 0xc, "d5e56f3bd2564ecf9c9a8b8af14c205c2b8955a47e3d3a706d623afc50b9461248193966c7bba9f6404e8c4d3370d3c576d2bac3f26602e892e135bfcb85275712b1759a80491ae517bac2878139c198a17cbb0e114c3df5d423376c61ea4eb39e38ca57d97f020b8a7e28c679bc1fd0fa2f62ef88e5c2131a56aa865052f329695d332da040ffc3fcccc9795d"}, @generic={0xbf, 0x23, "a99a9cbf9979abda8fdfb82f36b156eabea6ddb2f1adc4dfa2f28f8c85923b0e977a2882e798d8c80cdb2f20a9cc09d9c648f876fea7e4bd8a51b89dafc7786f3dd0e82234426977906c2333b4fcc00ce69dc706c18bda323ce24da24a85fa1fe332ec30a5796a3505ee83ec67eeca379d3f96e50e98e82ed870b6e9c003c97aa9febed4077a5a35adacda2bd40fc92f6db6268e436a9b994670f834149dc80fd72dd57550c4680e7d5b3222a7f605a398f8808c52123e3e00f19a227b"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x6, 0x9, 0x9, [@generic={0xa8, 0xd, "c15ea5e08efc9446a5a476d2cb1fa326a846a6da30d2320335332522fe9f0379a842b38f56a190b330483eb41890d756c8424e8dbd67187980486f0d511ac7955b33c1ea80b61336b982a635db497a4069ed63495a73671188131695e37592724f673fa46995132ad7559f2d981baf281512997a5cb2c127f732dcd350840138a39bc475b6cbd02b7a03f584300469afd65c9ad6a7f2119ae624edc8e3c9203604935bf4c215"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x199b}]}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0x8, 0x0, 0x91, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xe5}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0xf7, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x79}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xc3, 0x9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x8, 0x10, 0xd, [@generic={0x34, 0x7, "e568157f4462e19e84da6a9623ab8ae41e6edb36cc75ffded9b075a177300bac6ac84fb07763b11eed62da0740ff40a9bf13"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x9}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0xfb, 0xff, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xd}]}}, {{0x9, 0x5, 0x6, 0x10, 0x60, 0x3, 0x2, 0x94, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x8ac}]}}, {{0x9, 0x5, 0x5, 0x0, 0x460, 0x10, 0xd1, 0x8, [@generic={0x7c, 0x22, "52dd1dec336db93ce8ae67f29a6b32c8deaadd1171a2f1f0f671aa5ef194df0ab007c81bc0244630d0acf59eafa4e9a43c24c66b0c1a8b45c928f0a225fc34a256972026093222ad85a84b53fec9a67d14bcc4c80945837d26486d96d43154b06f2ae04a96b5532087fd05df02ba5201c61fbca431e990d5c6e1"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0xd, 0x4, 0x57, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x431f}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf8, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0xff, 0x5, 0x5, [@generic={0x55, 0xe, "aae8b4a55b653bc9e0929b7fa241d533446d49313a32a08ebe1f512ae2aa0016d42354e4a121ea8dfbaaae699772efa65bc3c47b69b2482043361394fb5ef44f850dbd25664a0f1ecd77607a1c1724498f3d10"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0x3, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}, @generic={0x37, 0x31, "85b0dda251ebbf99f562910b703b4a63f9fe97f25287840e7b0331b5f4a1b5445e5fc6cd08491efadf9d37e011c609149f05af4b3b"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0x2, 0xf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x2}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x201, 0x13, 0x5, 0xf, 0x40, 0x3}, 0x10f, &(0x7f00000004c0)={0x5, 0xf, 0x10f, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x34, "568a68b4f3c6b344859b9c8bcd6b5c54"}, @generic={0xf6, 0x10, 0xb, "627a59d2e2575f90021e7ef34c039d996510d2b977b3f105eb3b1a8649fe2e863b4f3ab15806a790927c6f1f90bb946051be862e268dff668380893d37fe27f96d175c71fbf98b97dc3f0c33c94a821fbd21bad7cfe0af3d3338b6a1ba90fee9bc0e8434c886ef7fafcd62c24e4443dcb50a9fc0839f4f46fb6bc219571799b755ba71a2e159de45f16925cbd2e7948ee823cf405ddc466860acc02cb87e5e84cec097e83eb73a679f288679ca08bb91b5f027c0570ecfa72d7b24e4b196a8ce88eb0a9a8bde8d3dd993b3f74164d8e03ba38c785aae809c95777228e58b2735c72bb9bc5e57b3064415eb6800b4159a80a2d7"}]}, 0x5, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x33, &(0x7f0000000700)=@string={0x33, 0x3, "22dff35719d33ca47142c2bbe55a45cc079f14e012f5c3bfddb41ad774896885740c2f3fbfc5bbe3d002ef5c35ede1abe8"}}]}) syz_usb_control_io$uac3(r0, &(0x7f0000000880)={0x14, &(0x7f00000007c0)={0x40, 0xc, 0x5f, {0x5f, 0x24, "782450c15d87cf1ce07b7e61f6c0c5f431895594a97e2ba373b89debffc2fec6117eb76d78834d93ada5151872e01cbba356d222c40a13dd5f447f0359c79df490a2812ee7d247c4f43e3f5cf095cdfd9521a3352f04f7bea1021433e3"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}}, &(0x7f0000000b00)={0x44, &(0x7f00000008c0)={0x40, 0x15, 0x46, "548717823230935832a02c121636381bb64a8c1cbf8f2c93d29b395a80008a83d3bfd9da6c8a21b8943c9a26be64bcd53f805c6ba65048e220c8f5d7ae9f1442bc54aa26b407"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000009c0)={0x20, 0x81, 0x3, "a36a41"}, &(0x7f0000000a00)={0x20, 0x82, 0x3, "b9e7b7"}, &(0x7f0000000a40)={0x20, 0x83, 0x2, "cc4e"}, &(0x7f0000000a80)={0x20, 0x84, 0x3, "edc371"}, &(0x7f0000000ac0)={0x20, 0x85, 0x3, "f5ac36"}}) r1 = fsopen(&(0x7f0000000b80)='exofs\x00', 0xa49eb4f73f35e299) r2 = socket$igmp6(0xa, 0x3, 0x2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000bc0)=',\x00', 0x0, r2) r3 = syz_open_dev$hiddev(&(0x7f0000000c00), 0x1, 0x20000) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000c40)={0x3, 0x3, 0x6}) r4 = accept$inet_tcp(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x0, @dev}, &(0x7f0000000cc0)=0x10) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000d00)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000e00)=0xe8) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000e40)={0x3d, 0x6f, 0x1, {0x4, [{0x20, 0x2, 0x1}, {0x0, 0x2, 0x5}, {0x18, 0x0, 0x2}, {0x80, 0x4}]}}, 0x3d) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e80)=0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r6, 0x1, 0x5004) r7 = syz_io_uring_complete(0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8010, r7, 0x6308000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r3, 0x4004af77, &(0x7f0000000ec0)=0x800) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000f40), r7) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, r8, 0x800, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24040080}, 0x4008085) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), r7) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000001300)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000012c0)={&(0x7f00000010c0)={0x1f8, r9, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffff4ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe0}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x134, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4445a4af}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe83}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x50000, @mcast1, 0xb2}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) syz_usb_control_io(r0, &(0x7f0000001580)={0x2c, &(0x7f0000001340)={0x20, 0x30, 0x59, {0x59, 0x23, "1578726f5f9d8c91dae6acda498818a199e213e0f5efa345acc244b41c991f4a8ddaa07d8d4df0faccd297373d16110cd5aff0cfff2424646bc12065c69a47a6eb86d76227e9423317dc3a8dd3bbbc8e161f27d3ee5592"}}, &(0x7f00000013c0)={0x0, 0x3, 0x97, @string={0x97, 0x3, "18d9fa9cec8d46cb7e27cfa31c7e79087b1367db53b71b4a45854d1e0348920d31acaa97d145f95f30f45e02bc9d2912e9ec02a1ecf3ef6855fd292b0cd307464bb090e84eecb5f932c543dbd9558e11782cf3e038fe3fe9a5b85b1e5ad4bc7e21bba702d5f20902d4b28f62bad17fbd920c8001bf1c9eded6316e76fcf1a385314e837dedc5c5ce123b0bb3c5c2cb08e3938dc5b6"}}, &(0x7f0000001480)={0x0, 0xf, 0x4e, {0x5, 0xf, 0x4e, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x7fffffd, 0xf000, 0x3, [0xff0000, 0x0, 0xffc0cf, 0x3f00, 0xf]}, @ssp_cap={0x18, 0x10, 0xa, 0x10, 0x3, 0xe3, 0xf0f, 0x4, [0xff00, 0xffc03f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0xe, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x6, 0x9}]}}, &(0x7f0000001500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x1, 0x40, 0x81, "6318ee3b", "1da3c967"}}, &(0x7f0000001540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x10, 0x7f, 0xd, 0x0, 0x3c3c, 0x6}}}, &(0x7f0000001a00)={0x84, &(0x7f00000015c0)={0x0, 0x9, 0x65, "8b460e4f48818a9c51da04f8827012d8ec3224e08ce3ea19f8f2a1daba9833a40102923e2337bb8c561d676b4f64722234a386159cc42266d8e4ed92ce62071c4c03e8408d1d38caf097c325c95ede1ff84251e406354af7797e5a291c817ac9b1a4ab6290"}, &(0x7f0000001640)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000016c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001700)={0x20, 0x0, 0x8, {0x1e0, 0x0, [0x0]}}, &(0x7f0000001740)={0x40, 0x7, 0x2, 0xe}, &(0x7f0000001780)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000017c0)={0x40, 0xb, 0x2, "120a"}, &(0x7f0000001800)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000001840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, &(0x7f0000001880)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000018c0)={0x40, 0x19, 0x2, "be9a"}, &(0x7f0000001900)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001940)={0x40, 0x1c, 0x1, 0xf2}, &(0x7f0000001980)={0x40, 0x1e, 0x1, 0x9d}, &(0x7f00000019c0)={0x40, 0x21, 0x1, 0x5}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001b40)={0x14, &(0x7f0000001ac0)={0x40, 0x6, 0x12, {0x12, 0x0, "07a8878b9800e70009609c2472f1fdf8"}}, &(0x7f0000001b00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001dc0)={0x44, &(0x7f0000001b80)={0x20, 0x10, 0x40, "3c319e26cd0dfa5623a23aa603a39d1ef06b1bb70e3fb990c9a11afef335c355863f0943e22d3a62a07ed5fa66521d7f58b02c8f6dabc6294e48be8d03305329"}, &(0x7f0000001c00)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000001c40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001c80)={0x20, 0x80, 0x1c, {0xff80, 0xe99, 0x3, 0x3, 0xe800, 0x6, 0x10, 0x6, 0xff, 0x0, 0x5, 0x7}}, &(0x7f0000001cc0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000001d00)={0x20, 0x83, 0x2}, &(0x7f0000001d40)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000001d80)={0x20, 0x89, 0x2}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000001e40), 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001e80)={0x0, 0x1, 0x0, [0x602, 0x3, 0x1, 0x7519, 0xc], [0x5, 0x8, 0x64654bb7, 0x62, 0x5e, 0x6, 0xc96, 0x4, 0x8, 0x8, 0x0, 0x3, 0x8, 0x4, 0x1, 0x9, 0xe085, 0x55, 0x10e, 0x6, 0x2, 0xe81c, 0x3, 0x7, 0x4, 0x6, 0x80000000, 0x4, 0x3, 0x7, 0x6, 0x5, 0xffffffffffffff1c, 0x2, 0x7fffffff, 0x3, 0x97, 0x1, 0x9, 0x4, 0x0, 0x8000000000000000, 0x8, 0x7fffffffffffffff, 0x63, 0x0, 0x0, 0x7, 0x2, 0x5, 0x6000000000000000, 0x6, 0x9, 0xfffffffffffffffc, 0x70, 0x100000001, 0x0, 0xfffffffffffffff9, 0x4, 0x4, 0x9, 0xfffffffffffffffb, 0x2, 0x5, 0x8, 0x0, 0x4, 0x81, 0x3, 0x6, 0x6ce765a, 0xf8, 0x1800000000000, 0x6, 0x8, 0x2, 0x3ff, 0xfffffffffffffff9, 0x9, 0x7f, 0xb24, 0x3, 0x5, 0xab2, 0xff, 0x7, 0x7, 0x2, 0x7ff, 0x0, 0x1, 0x2, 0xfffffffffffffff2, 0x94c, 0x6, 0x9, 0x8, 0xffffffffffffffff, 0x2, 0xfe77, 0xffffffffffffb271, 0x9, 0x7, 0x5, 0x5, 0x529, 0x6, 0xe, 0xfffffffffffffff9, 0xe, 0x7fff, 0x6, 0xff, 0x9, 0xd8, 0xaa64, 0x0, 0x2, 0x21, 0x8000000000000001]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000022c0)={r10, 0x9, 0x1, [0x2, 0x7, 0x6, 0xe, 0x5], [0x1ff, 0x2, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x4, 0x3, 0x5, 0x5f, 0x0, 0x9, 0x8001, 0x4, 0xdf0, 0x2, 0x7, 0x2, 0x99e4, 0x7, 0xf4c6, 0x7, 0x1000, 0xa, 0xd3, 0x0, 0x8, 0x7, 0x5, 0x4, 0x6, 0x0, 0x40, 0xc0b2, 0xab7, 0x8, 0x6, 0xb, 0x539, 0x2, 0x0, 0x4, 0x7fff, 0x5, 0x6, 0x4, 0x2, 0x8, 0x6, 0xff63, 0x3, 0x5, 0xb, 0xb0, 0x101, 0x4, 0x1, 0x2, 0x4, 0x4, 0xb62, 0x3, 0x5, 0xfb7, 0x0, 0xa1, 0xfffffffffffff431, 0x3c065a4e, 0x3, 0xfffffffffffffffd, 0x9, 0x8, 0x9, 0x5, 0xffa, 0x9, 0x394, 0xfffffffffffffffb, 0x751d, 0xfffffffffffffffd, 0x5, 0x20f, 0x5, 0x0, 0x100, 0x8215, 0x7, 0x8000, 0x341f073, 0x0, 0x7, 0x7, 0x9, 0x5, 0x9, 0x5, 0x2, 0x5, 0x1, 0x800, 0x6, 0x9, 0x6b, 0x1, 0xfffffffffffffac9, 0x8000000000000000, 0x4, 0x51, 0x1, 0xffff, 0x2, 0x0, 0x10, 0x7fff, 0xfffffffffffffffa, 0x80, 0x8, 0x5, 0x200, 0xffffffffffff0001]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002740)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000002780)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000002840)={'ip_vti0\x00', &(0x7f00000027c0)={'tunl0\x00', r5, 0x80, 0x20, 0x4ab26af9, 0x8, {{0x11, 0x4, 0x2, 0x1, 0x44, 0x66, 0x0, 0xd, 0x4, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1c}, {[@lsrr={0x83, 0x27, 0x20, [@remote, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010101, @rand_addr=0x64010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010101, @multicast2]}, @generic={0x83, 0x8, "fa87e5313857"}, @end]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000033c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003380)={&(0x7f0000002a00)={0x948, r8, 0x20, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x154, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7, 0x37, 0x10, 0x1ff}, {0xb, 0x5, 0xc, 0x6}, {0x8, 0x0, 0xaa, 0xd02}, {0x69b7, 0x7, 0xfd, 0x7}, {0x1, 0x3, 0x10, 0x5}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5a0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1642}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r5}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x4, 0x2, 0x642}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r5}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x23}}}]}}, {{0x8, 0x1, r5}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r5}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5cf}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}]}}]}, 0x948}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) 2.462360848s ago: executing program 5 (id=447): openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x62c40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000e80), 0x42, 0x0) inotify_init1(0x0) pipe(&(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_ublk_setup_io_uring(0x3, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000240)=0x0, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r0, 0x0, 0x68, 0x1) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x10}}}, &(0x7f00000003c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@multicast1, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x2}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@sa_pcpu={0x8, 0x23, 0x2}, @sa_dir={0x5, 0x21, 0x1}]}, 0x108}}, 0x0) r4 = dup(r2) syz_ublk_setup_queues(r4, r1, &(0x7f0000000400)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x62c40, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000e80), 0x42, 0x0) (async) inotify_init1(0x0) (async) pipe(&(0x7f0000000040)) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) syz_ublk_setup_io_uring(0x3, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000240), 0x0, 0x0) (async) syz_io_uring_modify_offsets$flags(r0, 0x0, 0x68, 0x1) (async) pipe2(0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x10}}}, &(0x7f00000003c0)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@multicast1, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x2}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@sa_pcpu={0x8, 0x23, 0x2}, @sa_dir={0x5, 0x21, 0x1}]}, 0x108}}, 0x0) (async) dup(r2) (async) syz_ublk_setup_queues(r4, r1, &(0x7f0000000400)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (async) 1.832919663s ago: executing program 2 (id=450): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x32, @arbitrary=0xf0004000}}, @nested_vmlaunch={0x12f, 0x18}], 0x70}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setownex(r4, 0xf, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.830512433s ago: executing program 3 (id=451): socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x2, 0x0) close(0x3) unshare(0x60000600) socket(0x10, 0x3, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.75683342s ago: executing program 5 (id=447): openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x62c40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000e80), 0x42, 0x0) inotify_init1(0x0) pipe(&(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_ublk_setup_io_uring(0x3, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000240)=0x0, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r0, 0x0, 0x68, 0x1) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x10}}}, &(0x7f00000003c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@multicast1, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x2}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@sa_pcpu={0x8, 0x23, 0x2}, @sa_dir={0x5, 0x21, 0x1}]}, 0x108}}, 0x0) r4 = dup(r2) syz_ublk_setup_queues(r4, r1, &(0x7f0000000400)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x62c40, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000e80), 0x42, 0x0) (async) inotify_init1(0x0) (async) pipe(&(0x7f0000000040)) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) syz_ublk_setup_io_uring(0x3, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000240), 0x0, 0x0) (async) syz_io_uring_modify_offsets$flags(r0, 0x0, 0x68, 0x1) (async) pipe2(0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x10}}}, &(0x7f00000003c0)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@multicast1, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x2}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@sa_pcpu={0x8, 0x23, 0x2}, @sa_dir={0x5, 0x21, 0x1}]}, 0x108}}, 0x0) (async) dup(r2) (async) syz_ublk_setup_queues(r4, r1, &(0x7f0000000400)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (async) 1.004038797s ago: executing program 2 (id=452): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000140)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000340)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000380)={0x0, 0xfb87, 0x1, 0x1, 0x8d}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4000, 0x6, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x82, 0xbd}}], 0x1, &(0x7f0000000900)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000980)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x1c5e42, 0x100) ioctl$IOC_PR_RELEASE(r7, 0x401070ca, &(0x7f0000000640)={0x10001, 0x4}) 1.001555108s ago: executing program 3 (id=453): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x65, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 920.012256ms ago: executing program 5 (id=447): openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x62c40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000e80), 0x42, 0x0) inotify_init1(0x0) pipe(&(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_ublk_setup_io_uring(0x3, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000240)=0x0, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r0, 0x0, 0x68, 0x1) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x10}}}, &(0x7f00000003c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@multicast1, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x2}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@sa_pcpu={0x8, 0x23, 0x2}, @sa_dir={0x5, 0x21, 0x1}]}, 0x108}}, 0x0) r4 = dup(r2) syz_ublk_setup_queues(r4, r1, &(0x7f0000000400)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x62c40, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000e80), 0x42, 0x0) (async) inotify_init1(0x0) (async) pipe(&(0x7f0000000040)) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) syz_ublk_setup_io_uring(0x3, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000240), 0x0, 0x0) (async) syz_io_uring_modify_offsets$flags(r0, 0x0, 0x68, 0x1) (async) pipe2(0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x10}}}, &(0x7f00000003c0)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@multicast1, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x2}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@sa_pcpu={0x8, 0x23, 0x2}, @sa_dir={0x5, 0x21, 0x1}]}, 0x108}}, 0x0) (async) dup(r2) (async) syz_ublk_setup_queues(r4, r1, &(0x7f0000000400)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (async) 919.165016ms ago: executing program 3 (id=454): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000080)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/4130, 0x1022}, {&(0x7f0000001480)=""/189, 0xbd}, {&(0x7f0000001580)=""/297, 0x129}, {&(0x7f00000016c0)=""/161, 0xa1}, {&(0x7f0000001780)=""/202, 0xca}, {&(0x7f0000001880)=""/76, 0x4c}, {&(0x7f0000001900)=""/228, 0xe4}, {&(0x7f0000001a00)=""/133, 0x85}, {&(0x7f0000001ac0)=""/73, 0x49}], 0x9}, 0x1207}], 0x3, 0x40012142, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) 24.764957ms ago: executing program 2 (id=455): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82c1, 0x0) mkdir(&(0x7f0000000680)='./bus\x00', 0x1) mount$incfs(&(0x7f00000006c0)='\x00', &(0x7f0000000700)='./bus\x00', &(0x7f0000000740), 0xc002, 0x0) chdir(&(0x7f0000000780)='./bus\x00') utime(&(0x7f00000007c0)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000840)=0x2) ioctl$VT_GETMODE(r0, 0x5601, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x9e, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x2, 0x1, 0x10, 0x80, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "a6fac27479"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x34ed, 0xfff7, 0x4, 0x2}, {0x6, 0x24, 0x1a, 0xf396, 0x9}, [@mbim_extended={0x8, 0x24, 0x1c, 0x100, 0x2, 0x83}, @country_functional={0x6, 0x24, 0x7, 0x6, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x2, 0xf, 0x7f}, @dmm={0x7, 0x24, 0x14, 0x9, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x80, 0xd2, 0xfffd}, @dmm={0x7, 0x24, 0x14, 0x319, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0xf, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x65, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x6, 0x1, 0xf}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x7, 0x8e, 0x8, 0x40, 0xf}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x4, [{0xe6, &(0x7f00000002c0)=@string={0xe6, 0x3, "2263e16fb06fa460b245cc6062aa44cd115ce9a7c9f04251dac0c6aa88403f8d3785146c2ed2fa5e9a572689fbfb007d0e5e9856c943c589ec574eb911f1d90d73106c64c16b71107fdfba924de20a66c67aeebd949821fc2af5f58b73d56c30d97bb9fea1128631837bcc214066f71d306b45696bd9542e9eb07032ea699537f009d91916971c8fdbd1f3e3c8e184bf88f03ed697d0a877dd92764045c30e761c83e696ecaa6a3c507665b7e0e3fcf25481ba73ab1411fd2faf395ad0a7c052d58d808cacd8d207f6db37f43a47f93eadb3f1a41d0cae14500c016acaa0d75e63b7dd11"}}, {0xd8, &(0x7f00000003c0)=@string={0xd8, 0x3, "a0a8e1ddccef406875c3bb9d2617fcc04ebd448bfc119b9f2340e1ff22a8240c836806a789fb7b22ddc5986c806c173c02c8a1bbc8da2c9244b975721366e81d5713465d110de8534bd3b394e842b87c9fd46fa9a41d66a3ff147acfb94cd21792d2274d8cad64fce90c32709388ebdd9e3ffe3847a57fdf24d09aced619632c34f4a9a02d185334a5edc03e7daad02c0dd91f189924173ab75876c421a56847d00a449020da26daf6f67b8be413bcc80537034ba4faf6a4ad6dc04ad3931adf8f76daa6048e94a28fc733560390db45cfa01e96d167"}}, {0xf1, &(0x7f00000004c0)=@string={0xf1, 0x3, "09c21c30481530db3717cf85a5b890325440a9ad69a6576971c76514e1d8eaf08c9d432685858b080d701d9a82c97494edf723a7de85c022a9a80b78e846531b0aac8b3e92ea775d776dbf7efc9efdbdb2cb546c11aa917b41ba4d196057043c4c972eaeb5304edea6fe32c71ae11f906df5b319377c80db99fbdccad12d15f060440eb206b5687798807dccbbf5be6a1beb7ba0654bc949a24ae9d0c8dd59bda114f33a31a9ffa2a97d14b6dcc9cc998b1127f323f3df7deadfbb50d949111c9238dc44275297d41a19163276d20d22ba89ab91c096891b36692e4e37475ab8e6fdf5939c829884e5560ac170926a"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x411}}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'team_slave_0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x13, 0x7, 0x6, 0x6}}) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x200400c4}, 0x40000) 24.490657ms ago: executing program 3 (id=456): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000026c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000002700)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_DEPS(r0, 0xc138fd0b, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x198, 0x138, 0x0, 0x0, 0x24220, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '0\x00'}}, "163928b1bbc9f0cab8b9f225b0b488a3816982999a8006b7d6a052e350c3cc7ee436601296c23570d28dbfea7f27d0a9376096e07d12aeeaef3bfbac6bd7dd2c751984541a3f72daa71040f4fe6ea1bfbdd30d6f44c8de1dc227"}) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000002840)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xa00, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000002980)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0xa0011, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '2\x00'}}, [@crypt={0x0, 0x400, 0x0, 0x80, 'crypt\x00', {'aes-ecb', 0x20, @hex16=[0x66, 0x35, 0x64, 0x34, 0x30, 0x63, 0x61, 0x37, 0x61, 0x66, 0x33, 0x39, 0x65, 0x39, 0x30, 0x37, 0x33, 0x30, 0x30, 0x31, 0x37, 0x64, 0x39, 0x65, 0x35, 0x65, 0x39, 0x63, 0x35, 0x63, 0x39, 0x61], 0x20, '128', 0x20, {@ram_num={'1:', 0x1}, 0x20, '8'}, ' 1 allow_discards'}}]}) 12.493099ms ago: executing program 3 (id=457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x65, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 0s ago: executing program 5 (id=447): openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x62c40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000e80), 0x42, 0x0) inotify_init1(0x0) pipe(&(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_ublk_setup_io_uring(0x3, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000240)=0x0, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r0, 0x0, 0x68, 0x1) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x10}}}, &(0x7f00000003c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@multicast1, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x2}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@sa_pcpu={0x8, 0x23, 0x2}, @sa_dir={0x5, 0x21, 0x1}]}, 0x108}}, 0x0) r4 = dup(r2) syz_ublk_setup_queues(r4, r1, &(0x7f0000000400)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x62c40, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000e80), 0x42, 0x0) (async) inotify_init1(0x0) (async) pipe(&(0x7f0000000040)) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) syz_ublk_setup_io_uring(0x3, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000240), 0x0, 0x0) (async) syz_io_uring_modify_offsets$flags(r0, 0x0, 0x68, 0x1) (async) pipe2(0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x10}}}, &(0x7f00000003c0)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@multicast1, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x2}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@sa_pcpu={0x8, 0x23, 0x2}, @sa_dir={0x5, 0x21, 0x1}]}, 0x108}}, 0x0) (async) dup(r2) (async) syz_ublk_setup_queues(r4, r1, &(0x7f0000000400)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (async) kernel console output (not intermixed with test programs): ] ? follow_page_pte+0x8fb/0xba0 [ 51.393683][ T826] ? inode_to_bdi+0x6d/0x100 [ 51.393705][ T826] shmem_write_begin+0xf4/0x260 [ 51.393724][ T826] generic_perform_write+0x329/0x970 [ 51.393748][ T826] ? __cfi_generic_perform_write+0x10/0x10 [ 51.393768][ T826] ? generic_write_checks_count+0x426/0x540 [ 51.393792][ T826] ? file_update_time+0xa3/0x210 [ 51.393814][ T826] shmem_file_write_iter+0x105/0x130 [ 51.393836][ T826] __kernel_write_iter+0x45f/0x900 [ 51.393861][ T826] ? __cfi___kernel_write_iter+0x10/0x10 [ 51.393886][ T826] ? get_dump_page+0x165/0x220 [ 51.393906][ T826] ? __asan_memset+0x39/0x50 [ 51.393930][ T826] ? iov_iter_bvec+0xc0/0x180 [ 51.393952][ T826] dump_user_range+0xb8b/0xe60 [ 51.393980][ T826] ? __cfi_dump_user_range+0x10/0x10 [ 51.394006][ T826] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 51.394027][ T826] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 51.394047][ T826] ? elf_core_dump+0x23cf/0x3840 [ 51.394068][ T826] elf_core_dump+0x2d61/0x3840 [ 51.394090][ T826] ? __cfi_elf_core_dump+0x10/0x10 [ 51.394110][ T826] ? mas_next_slot+0xf01/0xfd0 [ 51.394140][ T826] ? dump_interrupted+0xf0/0xf0 [ 51.394163][ T826] ? filp_open+0x199/0x1f0 [ 51.394184][ T826] ? 0xffffffffff600000 [ 51.394199][ T826] do_coredump+0x20d2/0x3050 [ 51.394227][ T826] ? __cfi_do_coredump+0x10/0x10 [ 51.394250][ T826] ? asm_exc_page_fault+0x2b/0x30 [ 51.394279][ T826] ? __kasan_slab_free+0x6a/0x80 [ 51.394298][ T826] ? get_signal+0xa2a/0x1490 [ 51.394316][ T826] get_signal+0x11bf/0x1490 [ 51.394335][ T826] arch_do_signal_or_restart+0xbc/0x700 [ 51.394363][ T826] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 51.394385][ T826] ? __bad_area_nosemaphore+0x2fb/0x680 [ 51.394407][ T826] irqentry_exit_to_user_mode+0x4d/0xb0 [ 51.394433][ T826] irqentry_exit+0x16/0x60 [ 51.394456][ T826] exc_page_fault+0x65/0xc0 [ 51.394479][ T826] asm_exc_page_fault+0x2b/0x30 [ 51.394501][ T826] RIP: 0033:0x7fd36ba54db7 [ 51.394516][ T826] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 a2 28 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 51.394532][ T826] RSP: 002b:00007fd36a5b7120 EFLAGS: 00010202 [ 51.394549][ T826] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fd36bba94d9 [ 51.394562][ T826] RDX: 00007fd36a5b7140 RSI: 00007fd36a5b7270 RDI: 000000000000000b [ 51.394575][ T826] RBP: 00007fd36bc3804e R08: 0000000000000000 R09: 0000000000000000 [ 51.394588][ T826] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 51.394599][ T826] R13: 00007fd36be26218 R14: 00007fd36be26180 R15: 00007ffd90910c18 [ 51.394615][ T826] [ 51.394622][ T826] memory: usage 307200kB, limit 307200kB, failcnt 48401 [ 51.640184][ T312] usb 1-1: USB disconnect, device number 18 [ 51.647700][ T826] memory+swap: usage 432172kB, limit 9007199254740988kB, failcnt 0 [ 51.769678][ T450] usb 3-1: USB disconnect, device number 9 [ 51.778389][ T826] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 51.850373][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.853701][ T826] Memory cgroup stats for /syz3: [ 51.917659][ T826] cache 314327040 [ 51.926360][ T826] rss 241664 [ 51.929818][ T826] rss_huge 0 [ 51.933476][ T826] shmem 314327040 [ 51.937123][ T826] mapped_file 0 [ 51.940603][ T826] dirty 0 [ 51.943533][ T826] writeback 0 [ 51.946811][ T826] workingset_refault_anon 83 [ 51.952205][ T826] workingset_refault_file 32176 [ 51.978162][ T826] swap 127971328 [ 51.981752][ T826] swapcached 24576 [ 51.985467][ T826] pgpgin 222243 [ 51.990297][ T826] pgpgout 145443 [ 51.993848][ T826] pgfault 26271 [ 51.997947][ T826] pgmajfault 639 [ 52.007929][ T826] inactive_anon 85577728 [ 52.012173][ T826] active_anon 228995072 [ 52.016322][ T826] inactive_file 0 [ 52.027950][ T826] active_file 0 [ 52.030822][ T36] audit: type=1400 audit(1794533553.572:310): avc: denied { setopt } for pid=1042 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.038367][ T826] unevictable 0 [ 52.077076][ T826] hierarchical_memory_limit 314572800 [ 52.087149][ T826] hierarchical_memsw_limit 9223372036854771712 [ 52.093846][ T1046] x_tables: unsorted entry at hook 1 [ 52.097930][ T826] total_cache 314327040 [ 52.103291][ T826] total_rss 241664 [ 52.125752][ T36] audit: type=1400 audit(1794533553.662:311): avc: denied { connect } for pid=1047 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 52.127940][ T826] total_rss_huge 0 [ 52.149798][ T1048] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 52.174867][ T826] total_shmem 314327040 [ 52.185754][ T826] total_mapped_file 0 [ 52.191245][ T826] total_dirty 0 [ 52.194768][ T826] total_writeback 0 [ 52.207931][ T826] total_workingset_refault_anon 83 [ 52.213056][ T826] total_workingset_refault_file 32176 [ 52.227986][ T826] total_swap 127971328 [ 52.232100][ T826] total_swapcached 24576 [ 52.236335][ T826] total_pgpgin 222243 [ 52.247923][ T826] total_pgpgout 145443 [ 52.252006][ T826] total_pgfault 26271 [ 52.255982][ T826] total_pgmajfault 639 [ 52.277926][ T826] total_inactive_anon 85577728 [ 52.282733][ T826] total_active_anon 228995072 [ 52.287411][ T826] total_inactive_file 0 [ 52.298258][ T826] total_active_file 0 [ 52.302310][ T826] total_unevictable 0 [ 52.306342][ T826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.149,pid=817,uid=0 [ 52.331996][ T1054] cgroup: fork rejected by pids controller in /syz2 [ 52.338786][ T826] Memory cgroup out of memory: Killed process 817 (syz.3.149) total-vm:90568kB, anon-rss:1284kB, file-rss:34412kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 52.414902][ T799] syz.3.149 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 52.437937][ T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 52.519955][ T799] CPU: 0 UID: 0 PID: 799 Comm: syz.3.149 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a [ 52.519989][ T799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 52.520001][ T799] Call Trace: [ 52.520008][ T799] [ 52.520015][ T799] __dump_stack+0x21/0x30 [ 52.520039][ T799] dump_stack_lvl+0x140/0x1c0 [ 52.520057][ T799] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.520074][ T799] ? ___ratelimit+0x41c/0x5c0 [ 52.520095][ T799] ? __kasan_check_write+0x18/0x20 [ 52.520122][ T799] dump_stack+0x19/0x20 [ 52.520139][ T799] dump_header+0xd9/0x460 [ 52.520163][ T799] oom_kill_process+0x35d/0x640 [ 52.520183][ T799] out_of_memory+0x5d1/0xa20 [ 52.520200][ T799] ? __cfi_out_of_memory+0x10/0x10 [ 52.520217][ T799] ? mutex_lock_killable+0x115/0x1d0 [ 52.520241][ T799] ? __cfi_mutex_lock_killable+0x10/0x10 [ 52.520266][ T799] mem_cgroup_out_of_memory+0x2c5/0x390 [ 52.520293][ T799] ? css_next_descendant_pre+0x1ec/0x210 [ 52.520311][ T799] ? __kasan_check_write+0x18/0x20 [ 52.520336][ T799] ? drain_obj_stock+0xec0/0xec0 [ 52.520363][ T799] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 52.520389][ T799] try_charge_memcg+0x925/0xe10 [ 52.520410][ T799] ? static_key_count+0x45/0x70 [ 52.520430][ T799] ? __cfi_gfp_zone+0x1/0x10 [ 52.520447][ T799] ? __cfi_try_charge_memcg+0x10/0x10 [ 52.520469][ T799] ? __alloc_pages_noprof+0x35a/0x7e0 [ 52.520492][ T799] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 52.520516][ T799] __mem_cgroup_charge+0xfc/0x420 [ 52.520540][ T799] ? folio_add_lru+0x116/0x400 [ 52.520559][ T799] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 52.520585][ T799] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 52.520604][ T799] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 52.520630][ T799] ? shmem_replace_folio+0x9b0/0x9b0 [ 52.520650][ T799] ? shmem_huge_global_enabled+0x2da/0x360 [ 52.520669][ T799] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 52.520687][ T799] ? __kasan_check_write+0x18/0x20 [ 52.520710][ T799] ? _raw_spin_lock+0x92/0x120 [ 52.520729][ T799] shmem_get_folio_gfp+0x5cd/0x12e0 [ 52.520749][ T799] ? shmem_get_folio+0xc0/0xc0 [ 52.520772][ T799] ? follow_page_pte+0x8fb/0xba0 [ 52.520794][ T799] ? inode_to_bdi+0x6d/0x100 [ 52.520816][ T799] shmem_write_begin+0xf4/0x260 [ 52.520836][ T799] generic_perform_write+0x329/0x970 [ 52.520859][ T799] ? __cfi_generic_perform_write+0x10/0x10 [ 52.520879][ T799] ? generic_write_checks_count+0x426/0x540 [ 52.520903][ T799] ? file_update_time+0xa3/0x210 [ 52.520926][ T799] shmem_file_write_iter+0x105/0x130 [ 52.520948][ T799] __kernel_write_iter+0x45f/0x900 [ 52.520974][ T799] ? __cfi___kernel_write_iter+0x10/0x10 [ 52.520999][ T799] ? get_dump_page+0x165/0x220 [ 52.521020][ T799] ? __asan_memset+0x39/0x50 [ 52.521042][ T799] ? iov_iter_bvec+0xc0/0x180 [ 52.521063][ T799] dump_user_range+0xb8b/0xe60 [ 52.521091][ T799] ? __cfi_dump_user_range+0x10/0x10 [ 52.521117][ T799] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 52.521137][ T799] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 52.521158][ T799] ? elf_core_dump+0x23cf/0x3840 [ 52.521179][ T799] elf_core_dump+0x2d61/0x3840 [ 52.521202][ T799] ? __cfi_elf_core_dump+0x10/0x10 [ 52.521221][ T799] ? mas_next_slot+0xf01/0xfd0 [ 52.521251][ T799] ? dump_interrupted+0xf0/0xf0 [ 52.521275][ T799] ? filp_open+0x199/0x1f0 [ 52.521297][ T799] ? 0xffffffffff600000 [ 52.521312][ T799] do_coredump+0x20d2/0x3050 [ 52.521340][ T799] ? __cfi_do_coredump+0x10/0x10 [ 52.521364][ T799] ? asm_exc_page_fault+0x2b/0x30 [ 52.521395][ T799] ? __kasan_slab_free+0x6a/0x80 [ 52.521414][ T799] ? get_signal+0xa2a/0x1490 [ 52.521432][ T799] get_signal+0x11bf/0x1490 [ 52.521451][ T799] arch_do_signal_or_restart+0xbc/0x700 [ 52.521472][ T799] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 52.521494][ T799] ? __bad_area_nosemaphore+0x2fb/0x680 [ 52.521516][ T799] irqentry_exit_to_user_mode+0x4d/0xb0 [ 52.521541][ T799] irqentry_exit+0x16/0x60 [ 52.521564][ T799] exc_page_fault+0x65/0xc0 [ 52.521587][ T799] asm_exc_page_fault+0x2b/0x30 [ 52.521608][ T799] RIP: 0033:0x7fd36ba54db7 [ 52.521623][ T799] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 a2 28 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 52.521639][ T799] RSP: 002b:00007fd36a5b7120 EFLAGS: 00010202 [ 52.521656][ T799] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fd36bba94d9 [ 52.521669][ T799] RDX: 00007fd36a5b7140 RSI: 00007fd36a5b7270 RDI: 000000000000000b [ 52.521683][ T799] RBP: 00007fd36bc3804e R08: 0000000000000000 R09: 0000000000000000 [ 52.521694][ T799] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 52.521706][ T799] R13: 00007fd36be26218 R14: 00007fd36be26180 R15: 00007ffd90910c18 [ 52.521722][ T799] [ 52.521730][ T799] memory: usage 303912kB, limit 307200kB, failcnt 48834 [ 52.998402][ T799] memory+swap: usage 428968kB, limit 9007199254740988kB, failcnt 0 [ 53.006316][ T799] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 53.013234][ T799] Memory cgroup stats for /syz3: [ 53.013382][ T799] cache 310927360 [ 53.039019][ T9] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 53.050090][ T9] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 53.067957][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 53.074660][ T9] usb 1-1: New USB device found, idVendor=0b05, idProduct=184a, bcdDevice= 0.00 [ 53.087956][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.122014][ T9] usb 1-1: config 0 descriptor?? [ 53.127629][ T1052] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 53.156321][ T799] rss 217088 [ 53.217945][ T799] rss_huge 0 [ 53.221188][ T799] shmem 308883456 [ 53.224833][ T799] mapped_file 1789952 [ 53.298610][ T799] dirty 0 [ 53.301617][ T799] writeback 4096 [ 53.305183][ T799] workingset_refault_anon 83 [ 53.381316][ T799] workingset_refault_file 33645 [ 53.386231][ T799] swap 127971328 [ 53.398167][ T799] swapcached 24576 [ 53.401929][ T799] pgpgin 228139 [ 53.405397][ T799] pgpgout 152150 [ 53.419744][ T799] pgfault 26566 [ 53.423255][ T799] pgmajfault 647 [ 53.426814][ T799] inactive_anon 309047296 [ 53.438215][ T799] active_anon 143360 [ 53.442153][ T799] inactive_file 2043904 [ 53.446325][ T799] active_file 0 [ 53.458238][ T799] unevictable 0 [ 53.461754][ T799] hierarchical_memory_limit 314572800 [ 53.467156][ T799] hierarchical_memsw_limit 9223372036854771712 [ 53.485629][ T799] total_cache 310927360 [ 53.493321][ T799] total_rss 217088 [ 53.497094][ T799] total_rss_huge 0 [ 53.508671][ T799] total_shmem 308883456 [ 53.512873][ T799] total_mapped_file 1789952 [ 53.517396][ T799] total_dirty 0 [ 53.531935][ T799] total_writeback 4096 [ 53.536052][ T799] total_workingset_refault_anon 83 [ 53.549012][ T799] total_workingset_refault_file 33645 [ 53.554437][ T799] total_swap 127971328 [ 53.564944][ T9] hid-generic 0003:0B05:184A.0008: unknown main item tag 0xd [ 53.574652][ T9] hid-generic 0003:0B05:184A.0008: unknown main item tag 0x0 [ 53.582306][ T799] total_swapcached 24576 [ 53.586557][ T799] total_pgpgin 228139 [ 53.598200][ T9] hid-generic 0003:0B05:184A.0008: unknown main item tag 0x0 [ 53.605644][ T9] hid-generic 0003:0B05:184A.0008: unknown main item tag 0x0 [ 53.613093][ T799] total_pgpgout 152150 [ 53.617167][ T799] total_pgfault 26566 [ 53.621186][ T799] total_pgmajfault 647 [ 53.625252][ T799] total_inactive_anon 309047296 [ 53.632038][ T9] hid-generic 0003:0B05:184A.0008: unknown main item tag 0x0 [ 53.639474][ T799] total_active_anon 143360 [ 53.643894][ T799] total_inactive_file 2043904 [ 53.657984][ T9] hid-generic 0003:0B05:184A.0008: unknown main item tag 0x0 [ 53.666055][ T799] total_active_file 0 [ 53.670270][ T9] hid-generic 0003:0B05:184A.0008: hidraw0: USB HID v0.04 Device [HID 0b05:184a] on usb-dummy_hcd.0-1/input0 [ 53.682450][ T799] total_unevictable 0 [ 53.686448][ T799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.149,pid=800,uid=0 [ 53.705606][ T799] Memory cgroup out of memory: Killed process 800 (syz.3.149) total-vm:90568kB, anon-rss:1284kB, file-rss:32192kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000 [ 53.777940][ T9] usb 1-1: USB disconnect, device number 19 [ 53.914203][ T826] syz.3.149 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 54.061634][ T826] CPU: 0 UID: 0 PID: 826 Comm: syz.3.149 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a [ 54.061668][ T826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 54.061689][ T826] Call Trace: [ 54.061696][ T826] [ 54.061703][ T826] __dump_stack+0x21/0x30 [ 54.061726][ T826] dump_stack_lvl+0x140/0x1c0 [ 54.061743][ T826] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.061761][ T826] ? ___ratelimit+0x41c/0x5c0 [ 54.061783][ T826] ? __kasan_check_write+0x18/0x20 [ 54.061809][ T826] dump_stack+0x19/0x20 [ 54.061826][ T826] dump_header+0xd9/0x460 [ 54.061851][ T826] oom_kill_process+0x35d/0x640 [ 54.061870][ T826] out_of_memory+0x5d1/0xa20 [ 54.061888][ T826] ? __cfi_out_of_memory+0x10/0x10 [ 54.061904][ T826] ? mutex_lock_killable+0x115/0x1d0 [ 54.061928][ T826] ? __cfi_mutex_lock_killable+0x10/0x10 [ 54.061953][ T826] mem_cgroup_out_of_memory+0x2c5/0x390 [ 54.061980][ T826] ? css_next_descendant_pre+0x1ec/0x210 [ 54.061998][ T826] ? __kasan_check_write+0x18/0x20 [ 54.062023][ T826] ? drain_obj_stock+0xec0/0xec0 [ 54.062050][ T826] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 54.062075][ T826] try_charge_memcg+0x925/0xe10 [ 54.062096][ T826] ? static_key_count+0x45/0x70 [ 54.062117][ T826] ? __cfi_gfp_zone+0x1/0x10 [ 54.062134][ T826] ? __cfi_try_charge_memcg+0x10/0x10 [ 54.062156][ T826] ? __alloc_pages_noprof+0x35a/0x7e0 [ 54.062178][ T826] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 54.062201][ T826] __mem_cgroup_charge+0xfc/0x420 [ 54.062224][ T826] ? folio_add_lru+0x116/0x400 [ 54.062244][ T826] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 54.062270][ T826] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 54.062291][ T826] ? shmem_replace_folio+0x9b0/0x9b0 [ 54.062311][ T826] ? shmem_huge_global_enabled+0x2da/0x360 [ 54.062329][ T826] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 54.062347][ T826] ? __kasan_check_write+0x18/0x20 [ 54.062371][ T826] ? _raw_spin_lock+0x92/0x120 [ 54.062389][ T826] shmem_get_folio_gfp+0x5cd/0x12e0 [ 54.062409][ T826] ? shmem_get_folio+0xc0/0xc0 [ 54.062424][ T826] ? follow_page_pte+0x8fb/0xba0 [ 54.062446][ T826] ? inode_to_bdi+0x6d/0x100 [ 54.062468][ T826] shmem_write_begin+0xf4/0x260 [ 54.062486][ T826] generic_perform_write+0x329/0x970 [ 54.062509][ T826] ? __cfi_generic_perform_write+0x10/0x10 [ 54.062530][ T826] ? generic_write_checks_count+0x426/0x540 [ 54.062553][ T826] ? file_update_time+0xa3/0x210 [ 54.062576][ T826] shmem_file_write_iter+0x105/0x130 [ 54.062597][ T826] __kernel_write_iter+0x45f/0x900 [ 54.062623][ T826] ? __cfi___kernel_write_iter+0x10/0x10 [ 54.062648][ T826] ? get_dump_page+0x165/0x220 [ 54.062669][ T826] ? __asan_memset+0x39/0x50 [ 54.062700][ T826] ? iov_iter_bvec+0xc0/0x180 [ 54.062725][ T826] dump_user_range+0xb8b/0xe60 [ 54.062753][ T826] ? __cfi_dump_user_range+0x10/0x10 [ 54.062778][ T826] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 54.062798][ T826] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 54.062818][ T826] ? elf_core_dump+0x23cf/0x3840 [ 54.062839][ T826] elf_core_dump+0x2d61/0x3840 [ 54.062861][ T826] ? __cfi_elf_core_dump+0x10/0x10 [ 54.062881][ T826] ? mas_next_slot+0xf01/0xfd0 [ 54.062910][ T826] ? dump_interrupted+0xf0/0xf0 [ 54.062934][ T826] ? filp_open+0x199/0x1f0 [ 54.062955][ T826] ? 0xffffffffff600000 [ 54.062971][ T826] do_coredump+0x20d2/0x3050 [ 54.062999][ T826] ? __cfi_do_coredump+0x10/0x10 [ 54.063022][ T826] ? asm_exc_page_fault+0x2b/0x30 [ 54.063051][ T826] ? __kasan_slab_free+0x6a/0x80 [ 54.063070][ T826] ? get_signal+0xa2a/0x1490 [ 54.063087][ T826] get_signal+0x11bf/0x1490 [ 54.063106][ T826] arch_do_signal_or_restart+0xbc/0x700 [ 54.063128][ T826] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 54.063149][ T826] ? __bad_area_nosemaphore+0x2fb/0x680 [ 54.063171][ T826] irqentry_exit_to_user_mode+0x4d/0xb0 [ 54.063196][ T826] irqentry_exit+0x16/0x60 [ 54.063219][ T826] exc_page_fault+0x65/0xc0 [ 54.063242][ T826] asm_exc_page_fault+0x2b/0x30 [ 54.063263][ T826] RIP: 0033:0x7fd36ba54db7 [ 54.063278][ T826] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 a2 28 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 54.063294][ T826] RSP: 002b:00007fd36a5b7120 EFLAGS: 00010202 [ 54.063311][ T826] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fd36bba94d9 [ 54.063324][ T826] RDX: 00007fd36a5b7140 RSI: 00007fd36a5b7270 RDI: 000000000000000b [ 54.063336][ T826] RBP: 00007fd36bc3804e R08: 0000000000000000 R09: 0000000000000000 [ 54.063348][ T826] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 54.063358][ T826] R13: 00007fd36be26218 R14: 00007fd36be26180 R15: 00007ffd90910c18 [ 54.063373][ T826] [ 54.063380][ T826] memory: usage 307192kB, limit 307200kB, failcnt 51922 [ 54.556971][ T826] memory+swap: usage 431884kB, limit 9007199254740988kB, failcnt 0 [ 54.648207][ T826] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 54.685637][ T826] Memory cgroup stats for /syz3: [ 54.685778][ T826] cache 313896960 [ 54.698193][ T826] rss 520192 [ 54.701408][ T826] rss_huge 0 [ 54.704607][ T826] shmem 313229312 [ 54.727961][ T826] mapped_file 667648 [ 54.737937][ T826] dirty 0 [ 54.741170][ T826] writeback 0 [ 54.751274][ T826] workingset_refault_anon 95 [ 54.766161][ T826] workingset_refault_file 34961 [ 54.777949][ T826] swap 127803392 [ 54.781513][ T826] swapcached 110592 [ 54.785313][ T826] pgpgin 242356 [ 54.807971][ T826] pgpgout 165556 [ 54.817950][ T826] pgfault 27573 [ 54.825780][ T826] pgmajfault 687 [ 54.835854][ T826] inactive_anon 28340224 [ 54.847955][ T826] active_anon 285499392 [ 54.857961][ T313] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 54.862401][ T826] inactive_file 471040 [ 54.878066][ T826] active_file 0 [ 54.881553][ T826] unevictable 0 [ 54.898181][ T826] hierarchical_memory_limit 314572800 [ 54.903587][ T826] hierarchical_memsw_limit 9223372036854771712 [ 54.927954][ T826] total_cache 313896960 [ 54.937943][ T826] total_rss 520192 [ 54.947953][ T826] total_rss_huge 0 [ 54.951684][ T826] total_shmem 313229312 [ 54.957949][ T31] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 54.978086][ T826] total_mapped_file 667648 [ 54.988180][ T826] total_dirty 0 [ 54.991650][ T826] total_writeback 0 [ 54.995454][ T826] total_workingset_refault_anon 95 [ 55.009030][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.020222][ T826] total_workingset_refault_file 34961 [ 55.028171][ T313] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 55.035776][ T826] total_swap 127803392 [ 55.045874][ T826] total_swapcached 110592 [ 55.047596][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.057928][ T826] total_pgpgin 242356 [ 55.062214][ T826] total_pgpgout 165556 [ 55.072760][ T313] usb 3-1: config 0 descriptor?? [ 55.086538][ T826] total_pgfault 27573 [ 55.090585][ T826] total_pgmajfault 687 [ 55.094656][ T826] total_inactive_anon 28340224 [ 55.117927][ T826] total_active_anon 285499392 [ 55.122680][ T826] total_inactive_file 471040 [ 55.127274][ T826] total_active_file 0 [ 55.139026][ T31] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 55.157939][ T826] total_unevictable 0 [ 55.162443][ T826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.149,pid=823,uid=0 [ 55.187596][ T31] usb 1-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 55.206825][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.214920][ T826] Memory cgroup out of memory: Killed process 823 (syz.3.149) total-vm:90568kB, anon-rss:1412kB, file-rss:34468kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 55.231862][ T31] usb 1-1: Product: syz [ 55.236033][ T31] usb 1-1: Manufacturer: syz [ 55.247961][ T31] usb 1-1: SerialNumber: syz [ 55.268052][ T798] syz.3.149 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 55.317965][ T798] CPU: 0 UID: 0 PID: 798 Comm: syz.3.149 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a [ 55.318006][ T798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 55.318018][ T798] Call Trace: [ 55.318024][ T798] [ 55.318031][ T798] __dump_stack+0x21/0x30 [ 55.318054][ T798] dump_stack_lvl+0x140/0x1c0 [ 55.318072][ T798] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.318089][ T798] ? ___ratelimit+0x41c/0x5c0 [ 55.318111][ T798] ? __kasan_check_write+0x18/0x20 [ 55.318138][ T798] dump_stack+0x19/0x20 [ 55.318154][ T798] dump_header+0xd9/0x460 [ 55.318179][ T798] oom_kill_process+0x35d/0x640 [ 55.318199][ T798] out_of_memory+0x5d1/0xa20 [ 55.318216][ T798] ? __cfi_out_of_memory+0x10/0x10 [ 55.318234][ T798] ? mutex_lock_killable+0x115/0x1d0 [ 55.318257][ T798] ? __cfi_mutex_lock_killable+0x10/0x10 [ 55.318282][ T798] mem_cgroup_out_of_memory+0x2c5/0x390 [ 55.318309][ T798] ? css_next_descendant_pre+0x1ec/0x210 [ 55.318328][ T798] ? __kasan_check_write+0x18/0x20 [ 55.318352][ T798] ? drain_obj_stock+0xec0/0xec0 [ 55.318377][ T798] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 55.318404][ T798] try_charge_memcg+0x925/0xe10 [ 55.318425][ T798] ? static_key_count+0x45/0x70 [ 55.318445][ T798] ? __cfi_gfp_zone+0x1/0x10 [ 55.318462][ T798] ? __cfi_try_charge_memcg+0x10/0x10 [ 55.318484][ T798] ? __alloc_pages_noprof+0x35a/0x7e0 [ 55.318506][ T798] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 55.318529][ T798] __mem_cgroup_charge+0xfc/0x420 [ 55.318553][ T798] ? folio_add_lru+0x116/0x400 [ 55.318573][ T798] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 55.318599][ T798] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 55.318618][ T798] ? irqentry_exit+0x4a/0x60 [ 55.318644][ T798] ? shmem_replace_folio+0x9b0/0x9b0 [ 55.318662][ T798] ? shmem_huge_global_enabled+0x2da/0x360 [ 55.318681][ T798] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 55.318699][ T798] ? __kasan_check_write+0x18/0x20 [ 55.318723][ T798] ? _raw_spin_lock+0x92/0x120 [ 55.318741][ T798] shmem_get_folio_gfp+0x5cd/0x12e0 [ 55.318761][ T798] ? shmem_get_folio+0xc0/0xc0 [ 55.318777][ T798] ? follow_page_pte+0x8fb/0xba0 [ 55.318799][ T798] ? inode_to_bdi+0x6d/0x100 [ 55.318821][ T798] shmem_write_begin+0xf4/0x260 [ 55.318840][ T798] generic_perform_write+0x329/0x970 [ 55.318863][ T798] ? __cfi_generic_perform_write+0x10/0x10 [ 55.318884][ T798] ? generic_write_checks_count+0x426/0x540 [ 55.318907][ T798] ? file_update_time+0xa3/0x210 [ 55.318930][ T798] shmem_file_write_iter+0x105/0x130 [ 55.318951][ T798] __kernel_write_iter+0x45f/0x900 [ 55.318984][ T798] ? __cfi___kernel_write_iter+0x10/0x10 [ 55.319007][ T798] ? get_dump_page+0x165/0x220 [ 55.319027][ T798] ? __asan_memset+0x39/0x50 [ 55.319050][ T798] ? iov_iter_bvec+0xc0/0x180 [ 55.319071][ T798] dump_user_range+0xb8b/0xe60 [ 55.319099][ T798] ? __cfi_dump_user_range+0x10/0x10 [ 55.319125][ T798] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 55.319146][ T798] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 55.319166][ T798] ? elf_core_dump+0x23cf/0x3840 [ 55.319187][ T798] elf_core_dump+0x2d61/0x3840 [ 55.319210][ T798] ? __cfi_elf_core_dump+0x10/0x10 [ 55.319229][ T798] ? mas_next_slot+0xf01/0xfd0 [ 55.319258][ T798] ? dump_interrupted+0xf0/0xf0 [ 55.319284][ T798] ? filp_open+0x199/0x1f0 [ 55.319305][ T798] ? 0xffffffffff600000 [ 55.319320][ T798] do_coredump+0x20d2/0x3050 [ 55.319346][ T798] ? __cfi_do_coredump+0x10/0x10 [ 55.319370][ T798] ? asm_exc_page_fault+0x2b/0x30 [ 55.319400][ T798] ? __kasan_slab_free+0x6a/0x80 [ 55.319419][ T798] ? get_signal+0xa2a/0x1490 [ 55.319436][ T798] get_signal+0x11bf/0x1490 [ 55.319456][ T798] arch_do_signal_or_restart+0xbc/0x700 [ 55.319477][ T798] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 55.319498][ T798] ? __bad_area_nosemaphore+0x2fb/0x680 [ 55.319519][ T798] irqentry_exit_to_user_mode+0x4d/0xb0 [ 55.319545][ T798] irqentry_exit+0x16/0x60 [ 55.319568][ T798] exc_page_fault+0x65/0xc0 [ 55.319591][ T798] asm_exc_page_fault+0x2b/0x30 [ 55.319613][ T798] RIP: 0033:0x7fd36ba54db7 [ 55.319629][ T798] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 a2 28 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 55.319645][ T798] RSP: 002b:00007fd36a5b7120 EFLAGS: 00010202 [ 55.319662][ T798] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fd36bba94d9 [ 55.319675][ T798] RDX: 00007fd36a5b7140 RSI: 00007fd36a5b7270 RDI: 000000000000000b [ 55.319686][ T798] RBP: 00007fd36bc3804e R08: 0000000000000000 R09: 0000000000000000 [ 55.319698][ T798] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 55.319710][ T798] R13: 00007fd36be26218 R14: 00007fd36be26180 R15: 00007ffd90910c18 [ 55.319726][ T798] [ 55.327980][ T798] memory: usage 300640kB, limit 307200kB, failcnt 53782 [ 55.487316][ T313] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 55.539334][ T798] memory+swap: usage 399428kB, limit 9007199254740988kB, failcnt 0 [ 55.585802][ T313] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0009/input/input9 [ 55.657965][ T798] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 55.738633][ T313] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 55.755130][ T798] Memory cgroup stats for /syz3: [ 55.864590][ T798] cache 285757440 [ 55.882569][ T798] rss 446464 [ 55.885794][ T798] rss_huge 0 [ 55.889614][ T798] shmem 285753344 [ 55.893285][ T798] mapped_file 0 [ 55.896753][ T798] dirty 0 [ 55.899947][ T798] writeback 0 [ 55.903489][ T798] workingset_refault_anon 95 [ 55.919655][ T798] workingset_refault_file 35704 [ 55.925615][ T798] swap 122720256 [ 55.938139][ T798] swapcached 110592 [ 55.942096][ T31] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 55.948809][ T798] pgpgin 243295 [ 55.952268][ T798] pgpgout 173399 [ 55.955808][ T798] pgfault 27627 [ 55.967969][ T31] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 55.974717][ T798] pgmajfault 718 [ 55.981640][ T31] usb 1-1: USB disconnect, device number 20 [ 55.988030][ T798] inactive_anon 105660416 [ 55.992642][ T798] active_anon 180629504 [ 55.996808][ T798] inactive_file 0 [ 56.010128][ T798] active_file 4096 [ 56.017978][ T798] unevictable 0 [ 56.023427][ T798] hierarchical_memory_limit 314572800 [ 56.030627][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.056380][ T798] hierarchical_memsw_limit 9223372036854771712 [ 56.062823][ T798] total_cache 285757440 [ 56.077768][ T798] total_rss 446464 [ 56.082427][ T798] total_rss_huge 0 [ 56.087958][ T798] total_shmem 285753344 [ 56.092776][ T798] total_mapped_file 0 [ 56.096766][ T798] total_dirty 0 [ 56.105600][ T798] total_writeback 0 [ 56.120960][ T798] total_workingset_refault_anon 95 [ 56.126080][ T798] total_workingset_refault_file 35704 [ 56.138388][ T798] total_swap 122720256 [ 56.147930][ T798] total_swapcached 110592 [ 56.152323][ T798] total_pgpgin 243295 [ 56.157938][ T798] total_pgpgout 173399 [ 56.162009][ T798] total_pgfault 27627 [ 56.176554][ T798] total_pgmajfault 718 [ 56.180681][ T798] total_inactive_anon 105660416 [ 56.185527][ T798] total_active_anon 180629504 [ 56.197964][ T798] total_inactive_file 0 [ 56.202152][ T798] total_active_file 4096 [ 56.206388][ T798] total_unevictable 0 [ 56.217953][ T798] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.149,pid=805,uid=0 [ 56.247965][ T798] Memory cgroup out of memory: Killed process 805 (syz.3.149) total-vm:90568kB, anon-rss:1284kB, file-rss:34720kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 56.716455][ T36] audit: type=1400 audit(1794533558.252:312): avc: denied { create } for pid=1146 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 56.728951][ T1145] FAULT_INJECTION: forcing a failure. [ 56.728951][ T1145] name failslab, interval 1, probability 0, space 0, times 0 [ 56.750082][ T36] audit: type=1400 audit(1794533558.292:313): avc: denied { getopt } for pid=1146 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.813527][ T826] syz.3.149 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 56.964685][ T826] CPU: 1 UID: 0 PID: 826 Comm: syz.3.149 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a [ 56.964717][ T826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 56.964729][ T826] Call Trace: [ 56.964736][ T826] [ 56.964743][ T826] __dump_stack+0x21/0x30 [ 56.964765][ T826] dump_stack_lvl+0x140/0x1c0 [ 56.964783][ T826] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.964799][ T826] ? ___ratelimit+0x41c/0x5c0 [ 56.964821][ T826] ? __kasan_check_write+0x18/0x20 [ 56.964848][ T826] dump_stack+0x19/0x20 [ 56.964864][ T826] dump_header+0xd9/0x460 [ 56.964889][ T826] oom_kill_process+0x35d/0x640 [ 56.964908][ T826] out_of_memory+0x5d1/0xa20 [ 56.964933][ T826] ? __cfi_out_of_memory+0x10/0x10 [ 56.964950][ T826] ? mutex_lock_killable+0x97/0x1d0 [ 56.964974][ T826] ? __cfi_mutex_lock_killable+0x10/0x10 [ 56.964999][ T826] mem_cgroup_out_of_memory+0x2c5/0x390 [ 56.965026][ T826] ? css_next_descendant_pre+0x1ec/0x210 [ 56.965044][ T826] ? __kasan_check_write+0x18/0x20 [ 56.965068][ T826] ? drain_obj_stock+0xec0/0xec0 [ 56.965094][ T826] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 56.965123][ T826] try_charge_memcg+0x925/0xe10 [ 56.965144][ T826] ? static_key_count+0x45/0x70 [ 56.965164][ T826] ? __cfi_gfp_zone+0x1/0x10 [ 56.965180][ T826] ? __cfi_try_charge_memcg+0x10/0x10 [ 56.965203][ T826] ? __alloc_pages_noprof+0x35a/0x7e0 [ 56.965226][ T826] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 56.965249][ T826] __mem_cgroup_charge+0xfc/0x420 [ 56.965273][ T826] ? folio_add_lru+0x116/0x400 [ 56.965293][ T826] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 56.965318][ T826] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 56.965340][ T826] ? shmem_replace_folio+0x9b0/0x9b0 [ 56.965359][ T826] ? shmem_huge_global_enabled+0x2da/0x360 [ 56.965377][ T826] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 56.965400][ T826] ? __kasan_check_write+0x18/0x20 [ 56.965427][ T826] ? _raw_spin_lock+0x92/0x120 [ 56.965446][ T826] shmem_get_folio_gfp+0x5cd/0x12e0 [ 56.965465][ T826] ? shmem_get_folio+0xc0/0xc0 [ 56.965482][ T826] ? __kasan_check_write+0x18/0x20 [ 56.965505][ T826] ? inode_to_bdi+0x6d/0x100 [ 56.965527][ T826] shmem_write_begin+0xf4/0x260 [ 56.965546][ T826] generic_perform_write+0x329/0x970 [ 56.965566][ T826] ? inode_update_timestamps+0x4d1/0x6e0 [ 56.965588][ T826] ? __cfi_generic_perform_write+0x10/0x10 [ 56.965607][ T826] ? generic_write_checks_count+0x426/0x540 [ 56.965625][ T826] ? mnt_get_write_access_file+0x1af/0x3b0 [ 56.965644][ T826] ? mnt_put_write_access_file+0xc2/0x100 [ 56.965664][ T826] ? file_update_time+0x1de/0x210 [ 56.965684][ T826] shmem_file_write_iter+0x105/0x130 [ 56.965708][ T826] __kernel_write_iter+0x45f/0x900 [ 56.965733][ T826] ? __cfi___kernel_write_iter+0x10/0x10 [ 56.965755][ T826] ? get_dump_page+0x165/0x220 [ 56.965774][ T826] ? __asan_memset+0x39/0x50 [ 56.965797][ T826] ? iov_iter_bvec+0xc0/0x180 [ 56.965816][ T826] dump_user_range+0xb8b/0xe60 [ 56.965843][ T826] ? __cfi_dump_user_range+0x10/0x10 [ 56.965870][ T826] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 56.965890][ T826] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 56.965910][ T826] ? elf_core_dump+0x23cf/0x3840 [ 56.965937][ T826] elf_core_dump+0x2d61/0x3840 [ 56.965959][ T826] ? __cfi_elf_core_dump+0x10/0x10 [ 56.965979][ T826] ? mas_next_slot+0xf01/0xfd0 [ 56.966008][ T826] ? dump_interrupted+0xf0/0xf0 [ 56.966032][ T826] ? filp_open+0x199/0x1f0 [ 56.966054][ T826] ? 0xffffffffff600000 [ 56.966070][ T826] do_coredump+0x20d2/0x3050 [ 56.966098][ T826] ? __cfi_do_coredump+0x10/0x10 [ 56.966122][ T826] ? asm_exc_page_fault+0x2b/0x30 [ 56.966152][ T826] ? __kasan_slab_free+0x6a/0x80 [ 56.966171][ T826] ? get_signal+0xa2a/0x1490 [ 56.966188][ T826] get_signal+0x11bf/0x1490 [ 56.966207][ T826] arch_do_signal_or_restart+0xbc/0x700 [ 56.966228][ T826] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 56.966249][ T826] ? __bad_area_nosemaphore+0x2fb/0x680 [ 56.966270][ T826] irqentry_exit_to_user_mode+0x4d/0xb0 [ 56.966296][ T826] irqentry_exit+0x16/0x60 [ 56.966319][ T826] exc_page_fault+0x65/0xc0 [ 56.966342][ T826] asm_exc_page_fault+0x2b/0x30 [ 56.966363][ T826] RIP: 0033:0x7fd36ba54db7 [ 56.966380][ T826] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 a2 28 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 56.966395][ T826] RSP: 002b:00007fd36a5b7120 EFLAGS: 00010202 [ 56.966411][ T826] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fd36bba94d9 [ 56.966424][ T826] RDX: 00007fd36a5b7140 RSI: 00007fd36a5b7270 RDI: 000000000000000b [ 56.966437][ T826] RBP: 00007fd36bc3804e R08: 0000000000000000 R09: 0000000000000000 [ 56.966448][ T826] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 56.966460][ T826] R13: 00007fd36be26218 R14: 00007fd36be26180 R15: 00007ffd90910c18 [ 56.966475][ T826] [ 57.507944][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 57.515543][ T450] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 57.604184][ T826] memory: usage 307076kB, limit 307200kB, failcnt 55178 [ 57.616487][ T311] usb 3-1: USB disconnect, device number 10 [ 57.650417][ T1145] CPU: 0 UID: 0 PID: 1145 Comm: syz.3.226 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a [ 57.650454][ T1145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 57.650467][ T1145] Call Trace: [ 57.650474][ T1145] [ 57.650482][ T1145] __dump_stack+0x21/0x30 [ 57.650507][ T1145] dump_stack_lvl+0x140/0x1c0 [ 57.650526][ T1145] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.650545][ T1145] ? security_file_alloc+0x49/0x220 [ 57.650573][ T1145] dump_stack+0x19/0x20 [ 57.650591][ T1145] should_fail_ex+0x3c2/0x510 [ 57.650610][ T1145] should_failslab+0xac/0x100 [ 57.650632][ T1145] kmem_cache_alloc_noprof+0x42/0x410 [ 57.650659][ T1145] ? alloc_file_pseudo+0x191/0x1f0 [ 57.650681][ T1145] ? alloc_empty_file+0xbf/0x270 [ 57.650703][ T1145] alloc_empty_file+0xbf/0x270 [ 57.650725][ T1145] ? __mutex_init+0xa6/0x1a0 [ 57.650747][ T1145] alloc_file_clone+0x5a/0xe0 [ 57.650769][ T1145] create_pipe_files+0x3bf/0x6c0 [ 57.650796][ T1145] __do_pipe_flags+0x50/0x2f0 [ 57.650823][ T1145] do_pipe2+0xab/0x190 [ 57.650839][ T1145] ? xfd_validate_state+0x68/0x140 [ 57.650858][ T1145] ? pipe_fcntl+0x520/0x520 [ 57.650877][ T1145] __x64_sys_pipe2+0x5e/0x70 [ 57.650903][ T1145] x64_sys_call+0x8be/0x2ee0 [ 57.650923][ T1145] do_syscall_64+0x57/0xf0 [ 57.650942][ T1145] ? clear_bhb_loop+0x50/0xa0 [ 57.650969][ T1145] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.650993][ T1145] RIP: 0033:0x7fd36bba94d9 [ 57.651011][ T1145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.651028][ T1145] RSP: 002b:00007fd36c980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 57.651050][ T1145] RAX: ffffffffffffffda RBX: 00007fd36be25fa0 RCX: 00007fd36bba94d9 [ 57.651065][ T1145] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 57.651077][ T1145] RBP: 00007fd36bc3804e R08: 0000000000000000 R09: 0000000000000000 [ 57.651090][ T1145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.651102][ T1145] R13: 00007fd36be26038 R14: 00007fd36be25fa0 R15: 00007ffd90910c18 [ 57.651119][ T1145] [ 57.669056][ T450] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.687930][ T826] memory+swap: usage 431888kB, limit 9007199254740988kB, failcnt 0 [ 57.690386][ T450] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 57.694770][ T826] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 57.694786][ T826] Memory cgroup stats for /syz3 [ 57.904389][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 57.917970][ T311] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 57.926076][ T450] usb 1-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 57.935151][ T450] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.943177][ T450] usb 1-1: Product: syz [ 57.947513][ T450] usb 1-1: Manufacturer: syz [ 57.952175][ T450] usb 1-1: SerialNumber: syz [ 57.961272][ T31] usb 4-1: config 1 has an invalid descriptor of length 163, skipping remainder of the config [ 57.972588][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.988588][ T31] usb 4-1: too many endpoints for config 1 interface 0 altsetting 42: 153, using maximum allowed: 30 [ 58.003246][ T31] usb 4-1: config 1 interface 0 altsetting 42 has 0 endpoint descriptors, different from the interface descriptor's value: 153 [ 58.015148][ T826] : [ 58.016476][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 58.018024][ T826] cache 314122240 [ 58.020318][ T31] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 58.025520][ T826] rss 425984 [ 58.029200][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.049536][ T31] usb 4-1: Product: syz [ 58.053801][ T31] usb 4-1: Manufacturer: syz [ 58.058433][ T31] usb 4-1: SerialNumber: syz [ 58.067659][ T826] rss_huge 0 [ 58.071051][ T826] shmem 314109952 [ 58.075659][ T311] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 58.087690][ T311] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 58.098660][ T826] mapped_file 0 [ 58.102138][ T826] dirty 0 [ 58.105089][ T826] writeback 0 [ 58.108424][ T311] usb 3-1: config 0 interface 0 has no altsetting 0 [ 58.115089][ T311] usb 3-1: New USB device found, idVendor=0b05, idProduct=184a, bcdDevice= 0.00 [ 58.124167][ T826] workingset_refault_anon 188 [ 58.128917][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.137516][ T826] workingset_refault_file 37116 [ 58.142901][ T311] usb 3-1: config 0 descriptor?? [ 58.147939][ T826] swap 127942656 [ 58.151509][ T826] swapcached 53248 [ 58.155345][ T826] pgpgin 260708 [ 58.158865][ T826] pgpgout 183908 [ 58.160562][ T1154] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.162427][ T826] pgfault 28585 [ 58.173267][ T1152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.178534][ T826] pgmajfault 769 [ 58.182489][ T1152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.185819][ T826] inactive_anon 9207808 [ 58.197167][ T826] active_anon 305352704 [ 58.201363][ T826] inactive_file 12288 [ 58.205360][ T826] active_file 0 [ 58.213340][ T826] unevictable 0 [ 58.216831][ T826] hierarchical_memory_limit 314572800 [ 58.235261][ T826] hierarchical_memsw_limit 9223372036854771712 [ 58.241498][ T826] total_cache 314122240 [ 58.245705][ T826] total_rss 425984 [ 58.249499][ T826] total_rss_huge 0 [ 58.255029][ T826] total_shmem 314109952 [ 58.259268][ T826] total_mapped_file 0 [ 58.263268][ T826] total_dirty 0 [ 58.266747][ T826] total_writeback 0 [ 58.270657][ T826] total_workingset_refault_anon 188 [ 58.279974][ T826] total_workingset_refault_file 37116 [ 58.291081][ T31] usb 4-1: USB disconnect, device number 6 [ 58.312279][ T450] usb 1-1: Can't get UAC3 power state for id 11 [ 58.326267][ T826] total_swap 127942656 [ 58.330518][ T826] total_swapcached 53248 [ 58.335052][ T826] total_pgpgin 260708 [ 58.339185][ T826] total_pgpgout 183908 [ 58.343356][ T450] usb 1-1: 5:0: failed to get current value for ch 0 (-71) [ 58.350782][ T826] total_pgfault 28585 [ 58.354865][ T826] total_pgmajfault 769 [ 58.359041][ T826] total_inactive_anon 9207808 [ 58.363847][ T826] total_active_anon 305352704 [ 58.368655][ T826] total_inactive_file 12288 [ 58.373260][ T826] total_active_file 0 [ 58.377357][ T826] total_unevictable 0 [ 58.381710][ T826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.149,pid=813,uid=0 [ 58.396783][ T826] Memory cgroup out of memory: Killed process 813 (syz.3.149) total-vm:90568kB, anon-rss:1284kB, file-rss:35108kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 58.414123][ T450] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 58.425715][ T450] usb 1-1: USB disconnect, device number 21 [ 58.446478][ T382] udevd[382]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.598100][ T311] hid-generic 0003:0B05:184A.000A: unknown main item tag 0xd [ 58.605243][ T798] syz.3.149 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 58.605583][ T311] hid-generic 0003:0B05:184A.000A: unknown main item tag 0x0 [ 58.635814][ T311] hid-generic 0003:0B05:184A.000A: unknown main item tag 0x0 [ 58.643442][ T311] hid-generic 0003:0B05:184A.000A: unknown main item tag 0x0 [ 58.651050][ T311] hid-generic 0003:0B05:184A.000A: unknown main item tag 0x0 [ 58.658878][ T311] hid-generic 0003:0B05:184A.000A: unknown main item tag 0x0 [ 58.666481][ T311] hid-generic 0003:0B05:184A.000A: unknown main item tag 0x0 [ 58.674066][ T311] hid-generic 0003:0B05:184A.000A: unknown main item tag 0x0 [ 58.687943][ T311] hid-generic 0003:0B05:184A.000A: unknown main item tag 0x0 [ 58.695355][ T311] hid-generic 0003:0B05:184A.000A: unknown main item tag 0x0 [ 58.708148][ T311] hid-generic 0003:0B05:184A.000A: unknown main item tag 0x0 [ 58.715562][ T311] hid-generic 0003:0B05:184A.000A: unknown main item tag 0x0 [ 58.726437][ T798] CPU: 0 UID: 0 PID: 798 Comm: syz.3.149 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a [ 58.726466][ T798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 58.726479][ T798] Call Trace: [ 58.726485][ T798] [ 58.726492][ T798] __dump_stack+0x21/0x30 [ 58.726515][ T798] dump_stack_lvl+0x140/0x1c0 [ 58.726532][ T798] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.726550][ T798] ? ___ratelimit+0x41c/0x5c0 [ 58.726572][ T798] ? __kasan_check_write+0x18/0x20 [ 58.726598][ T798] dump_stack+0x19/0x20 [ 58.726614][ T798] dump_header+0xd9/0x460 [ 58.726639][ T798] oom_kill_process+0x35d/0x640 [ 58.726659][ T798] out_of_memory+0x5d1/0xa20 [ 58.726677][ T798] ? __cfi_out_of_memory+0x10/0x10 [ 58.726694][ T798] ? mutex_lock_killable+0x97/0x1d0 [ 58.726717][ T798] ? __cfi_mutex_lock_killable+0x10/0x10 [ 58.726743][ T798] mem_cgroup_out_of_memory+0x2c5/0x390 [ 58.726769][ T798] ? css_next_descendant_pre+0x1ec/0x210 [ 58.726788][ T798] ? __kasan_check_write+0x18/0x20 [ 58.726812][ T798] ? drain_obj_stock+0xec0/0xec0 [ 58.726838][ T798] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 58.726864][ T798] try_charge_memcg+0x925/0xe10 [ 58.726885][ T798] ? static_key_count+0x45/0x70 [ 58.726906][ T798] ? __cfi_gfp_zone+0x1/0x10 [ 58.726923][ T798] ? __cfi_try_charge_memcg+0x10/0x10 [ 58.726945][ T798] ? __alloc_pages_noprof+0x35a/0x7e0 [ 58.726968][ T798] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 58.726991][ T798] __mem_cgroup_charge+0xfc/0x420 [ 58.727015][ T798] ? folio_add_lru+0x116/0x400 [ 58.727035][ T798] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 58.727060][ T798] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 58.727083][ T798] ? shmem_replace_folio+0x9b0/0x9b0 [ 58.727102][ T798] ? shmem_huge_global_enabled+0x2da/0x360 [ 58.727121][ T798] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 58.727146][ T798] ? __kasan_check_write+0x18/0x20 [ 58.727171][ T798] ? _raw_spin_lock+0x92/0x120 [ 58.727190][ T798] shmem_get_folio_gfp+0x5cd/0x12e0 [ 58.727211][ T798] ? shmem_get_folio+0xc0/0xc0 [ 58.727227][ T798] ? follow_page_pte+0x8fb/0xba0 [ 58.727249][ T798] ? inode_to_bdi+0x6d/0x100 [ 58.727272][ T798] shmem_write_begin+0xf4/0x260 [ 58.727290][ T798] generic_perform_write+0x329/0x970 [ 58.727314][ T798] ? __cfi_generic_perform_write+0x10/0x10 [ 58.727335][ T798] ? generic_write_checks_count+0x426/0x540 [ 58.727358][ T798] ? file_update_time+0xa3/0x210 [ 58.727381][ T798] shmem_file_write_iter+0x105/0x130 [ 58.727404][ T798] __kernel_write_iter+0x45f/0x900 [ 58.727430][ T798] ? __cfi___kernel_write_iter+0x10/0x10 [ 58.727456][ T798] ? get_dump_page+0x165/0x220 [ 58.727477][ T798] ? __asan_memset+0x39/0x50 [ 58.727502][ T798] ? iov_iter_bvec+0xc0/0x180 [ 58.727524][ T798] dump_user_range+0xb8b/0xe60 [ 58.727552][ T798] ? __cfi_dump_user_range+0x10/0x10 [ 58.727579][ T798] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 58.727598][ T798] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 58.727618][ T798] ? elf_core_dump+0x23cf/0x3840 [ 58.727639][ T798] elf_core_dump+0x2d61/0x3840 [ 58.727657][ T798] ? __cfi_elf_core_dump+0x10/0x10 [ 58.727676][ T798] ? mas_next_slot+0xf01/0xfd0 [ 58.727707][ T798] ? dump_interrupted+0xf0/0xf0 [ 58.727731][ T798] ? filp_open+0x199/0x1f0 [ 58.727753][ T798] ? 0xffffffffff600000 [ 58.727768][ T798] do_coredump+0x20d2/0x3050 [ 58.727796][ T798] ? __cfi_do_coredump+0x10/0x10 [ 58.727820][ T798] ? asm_exc_page_fault+0x2b/0x30 [ 58.727851][ T798] ? __kasan_slab_free+0x6a/0x80 [ 58.727870][ T798] ? get_signal+0xa2a/0x1490 [ 58.727888][ T798] get_signal+0x11bf/0x1490 [ 58.727908][ T798] arch_do_signal_or_restart+0xbc/0x700 [ 58.727926][ T798] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 58.727946][ T798] ? __bad_area_nosemaphore+0x2fb/0x680 [ 58.727968][ T798] irqentry_exit_to_user_mode+0x4d/0xb0 [ 58.727994][ T798] irqentry_exit+0x16/0x60 [ 58.728018][ T798] exc_page_fault+0x65/0xc0 [ 58.728042][ T798] asm_exc_page_fault+0x2b/0x30 [ 58.728065][ T798] RIP: 0033:0x7fd36ba54db7 [ 58.728078][ T798] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 a2 28 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 58.728091][ T798] RSP: 002b:00007fd36a5b7120 EFLAGS: 00010202 [ 58.728106][ T798] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fd36bba94d9 [ 58.728117][ T798] RDX: 00007fd36a5b7140 RSI: 00007fd36a5b7270 RDI: 000000000000000b [ 58.728128][ T798] RBP: 00007fd36bc3804e R08: 0000000000000000 R09: 0000000000000000 [ 58.728146][ T798] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 58.728156][ T798] R13: 00007fd36be26218 R14: 00007fd36be26180 R15: 00007ffd90910c18 [ 58.728170][ T798] [ 58.732586][ T311] hid-generic 0003:0B05:184A.000A: unknown main item tag 0x0 [ 58.797957][ T798] memory: usage 307200kB, limit 307200kB, failcnt 56751 [ 58.835537][ T311] hid-generic 0003:0B05:184A.000A: unknown main item tag 0x0 [ 58.919666][ T798] memory+swap: usage 419220kB, limit 9007199254740988kB, failcnt 0 [ 58.964849][ T311] hid-generic 0003:0B05:184A.000A: unknown main item tag 0x0 [ 59.018332][ T798] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 59.020027][ T311] hid-generic 0003:0B05:184A.000A: unknown main item tag 0x0 [ 59.023993][ T798] Memory cgroup stats for /syz3: [ 59.024117][ T798] cache 303968256 [ 59.034518][ T311] hid-generic 0003:0B05:184A.000A: hidraw0: USB HID v0.04 Device [HID 0b05:184a] on usb-dummy_hcd.2-1/input0 [ 59.118371][ T798] rss 303104 [ 59.126409][ T311] usb 3-1: USB disconnect, device number 11 [ 59.179806][ T798] rss_huge 0 [ 59.295858][ T798] shmem 299704320 [ 59.317805][ T36] audit: type=1400 audit(1794533560.852:314): avc: denied { map } for pid=1165 comm="syz.0.234" path="socket:[9901]" dev="sockfs" ino=9901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.317960][ T798] mapped_file 4067328 [ 59.403014][ T36] audit: type=1400 audit(1794533560.852:315): avc: denied { read } for pid=1165 comm="syz.0.234" path="socket:[9901]" dev="sockfs" ino=9901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.416449][ T798] dirty 0 [ 59.470605][ T36] audit: type=1400 audit(1794533560.882:316): avc: denied { mounton } for pid=1165 comm="syz.0.234" path="/69/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 59.475448][ T1177] SELinux: policydb magic number 0x8646e69 does not match expected magic number 0xf97cff8c [ 59.528115][ T1171] fuse: blksize only supported for fuseblk [ 59.541121][ T36] audit: type=1400 audit(1794533560.882:317): avc: denied { append } for pid=1165 comm="syz.0.234" name="sda" dev="devtmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.562395][ T798] writeback 0 [ 59.606840][ T36] audit: type=1400 audit(1794533561.012:318): avc: denied { load_policy } for pid=1160 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 59.609947][ T798] workingset_refault_anon 210 [ 59.707234][ T1177] SELinux: failed to load policy [ 59.767654][ T1188] FAULT_INJECTION: forcing a failure. [ 59.767654][ T1188] name failslab, interval 1, probability 0, space 0, times 0 [ 59.787942][ T798] workingset_refault_file 38263 [ 59.792813][ T798] swap 122064896 [ 59.796356][ T798] swapcached 110592 [ 59.811175][ T1188] CPU: 1 UID: 0 PID: 1188 Comm: syz.0.240 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a [ 59.811206][ T1188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 59.811219][ T1188] Call Trace: [ 59.811225][ T1188] [ 59.811233][ T1188] __dump_stack+0x21/0x30 [ 59.811257][ T1188] dump_stack_lvl+0x140/0x1c0 [ 59.811276][ T1188] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.811296][ T1188] dump_stack+0x19/0x20 [ 59.811313][ T1188] should_fail_ex+0x3c2/0x510 [ 59.811332][ T1188] should_failslab+0xac/0x100 [ 59.811353][ T1188] kmem_cache_alloc_noprof+0x42/0x410 [ 59.811381][ T1188] ? mas_wr_store_type+0x13f3/0x1b40 [ 59.811406][ T1188] ? mas_alloc_nodes+0x254/0x9d0 [ 59.811434][ T1188] mas_alloc_nodes+0x254/0x9d0 [ 59.811461][ T1188] mas_preallocate+0x79b/0xc90 [ 59.811485][ T1188] ? unlink_file_vma_batch_final+0x240/0x2d0 [ 59.811506][ T1188] ? free_pgtables+0x70f/0x790 [ 59.811531][ T1188] ? __cfi_mas_preallocate+0x10/0x10 [ 59.811565][ T1188] ? __cfi_free_pgtables+0x10/0x10 [ 59.811592][ T1188] ? lru_add_drain_cpu+0x338/0x450 [ 59.811615][ T1188] commit_merge+0x4c6/0xee0 [ 59.811631][ T1188] ? __kasan_check_write+0x18/0x20 [ 59.811659][ T1188] ? vma_expand+0x5b0/0x5b0 [ 59.811675][ T1188] ? mas_prev_slot+0xb6b/0xc20 [ 59.811702][ T1188] vma_expand+0x354/0x5b0 [ 59.811719][ T1188] vma_merge_new_range+0x659/0x900 [ 59.811748][ T1188] mmap_region+0xc1d/0x1d10 [ 59.811775][ T1188] ? __cfi_mmap_region+0x10/0x10 [ 59.811802][ T1188] ? __kasan_check_read+0x15/0x20 [ 59.811826][ T1188] ? arch_get_unmapped_area_topdown+0x235/0x830 [ 59.811849][ T1188] ? __cfi_futex_wake_mark+0x10/0x10 [ 59.811875][ T1188] ? __get_unmapped_area+0x406/0x470 [ 59.811901][ T1188] do_mmap+0xa47/0x1370 [ 59.811926][ T1188] ? __cfi_selinux_mmap_file+0x10/0x10 [ 59.811950][ T1188] ? __cfi_do_mmap+0x10/0x10 [ 59.811971][ T1188] ? __kasan_check_write+0x18/0x20 [ 59.811992][ T1188] ? down_write_killable+0xee/0x2d0 [ 59.812016][ T1188] ? __cfi_down_write_killable+0x10/0x10 [ 59.812039][ T1188] ? do_futex+0x32a/0x510 [ 59.812058][ T1188] vm_mmap_pgoff+0x367/0x4b0 [ 59.812083][ T1188] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 59.812107][ T1188] ? xfd_validate_state+0x68/0x140 [ 59.812124][ T1188] ksys_mmap_pgoff+0xfa/0x1e0 [ 59.812148][ T1188] ? __kasan_check_write+0x18/0x20 [ 59.812172][ T1188] __x64_sys_mmap+0x121/0x140 [ 59.812193][ T1188] x64_sys_call+0x13bf/0x2ee0 [ 59.812213][ T1188] do_syscall_64+0x57/0xf0 [ 59.812233][ T1188] ? clear_bhb_loop+0x50/0xa0 [ 59.812258][ T1188] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.812282][ T1188] RIP: 0033:0x7f5692fa94d9 [ 59.812299][ T1188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.812315][ T1188] RSP: 002b:00007f5693f1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 59.812335][ T1188] RAX: ffffffffffffffda RBX: 00007f5693225fa0 RCX: 00007f5692fa94d9 [ 59.812350][ T1188] RDX: 0000000002000007 RSI: 0000000000001000 RDI: 0000200000ffc000 [ 59.812364][ T1188] RBP: 00007f569303804e R08: ffffffffffffffff R09: 0000000000000000 [ 59.812377][ T1188] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 59.812390][ T1188] R13: 00007f5693226038 R14: 00007f5693225fa0 R15: 00007fff5f99b648 [ 59.812407][ T1188] [ 59.822980][ T798] pgpgin 263468 [ 60.148126][ T798] pgpgout 189165 [ 60.157734][ T798] pgfault 28737 [ 60.163026][ T798] pgmajfault 785 [ 60.166585][ T798] inactive_anon 186159104 [ 60.177465][ T798] active_anon 113913856 [ 60.181836][ T798] inactive_file 0 [ 60.185589][ T798] active_file 4263936 [ 60.189869][ T798] unevictable 0 [ 60.193342][ T798] hierarchical_memory_limit 314572800 [ 60.199058][ T798] hierarchical_memsw_limit 9223372036854771712 [ 60.205273][ T798] total_cache 303968256 [ 60.209719][ T798] total_rss 303104 [ 60.213440][ T798] total_rss_huge 0 [ 60.217222][ T798] total_shmem 299704320 [ 60.221730][ T798] total_mapped_file 4067328 [ 60.226228][ T798] total_dirty 0 [ 60.229928][ T798] total_writeback 0 [ 60.233815][ T798] total_workingset_refault_anon 210 [ 60.239228][ T798] total_workingset_refault_file 38263 [ 60.244698][ T798] total_swap 122064896 [ 60.249030][ T798] total_swapcached 110592 [ 60.253379][ T798] total_pgpgin 263468 [ 60.257457][ T798] total_pgpgout 189165 [ 60.261780][ T798] total_pgfault 28737 [ 60.265763][ T798] total_pgmajfault 785 [ 60.270241][ T798] total_inactive_anon 186159104 [ 60.275093][ T798] total_active_anon 113913856 [ 60.277958][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 60.280028][ T798] total_inactive_file 0 [ 60.291716][ T798] total_active_file 4263936 [ 60.296226][ T798] total_unevictable 0 [ 60.300429][ T798] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.149,pid=808,uid=0 [ 60.315325][ T798] Memory cgroup out of memory: Killed process 808 (syz.3.149) total-vm:90568kB, anon-rss:1284kB, file-rss:34136kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 60.379547][ T1196] FAULT_INJECTION: forcing a failure. [ 60.379547][ T1196] name failslab, interval 1, probability 0, space 0, times 0 [ 60.427966][ T1196] CPU: 0 UID: 0 PID: 1196 Comm: syz.0.244 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a [ 60.428001][ T1196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 60.428016][ T1196] Call Trace: [ 60.428022][ T1196] [ 60.428030][ T1196] __dump_stack+0x21/0x30 [ 60.428056][ T1196] dump_stack_lvl+0x140/0x1c0 [ 60.428075][ T1196] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.428094][ T1196] ? unwind_get_return_address+0x51/0x90 [ 60.428121][ T1196] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 60.428142][ T1196] dump_stack+0x19/0x20 [ 60.428159][ T1196] should_fail_ex+0x3c2/0x510 [ 60.428178][ T1196] should_failslab+0xac/0x100 [ 60.428200][ T1196] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 60.428228][ T1196] ? __d_alloc+0x42/0x8c0 [ 60.428255][ T1196] __d_alloc+0x42/0x8c0 [ 60.428280][ T1196] ? walk_component+0x19a/0x450 [ 60.428307][ T1196] ? link_path_walk+0x723/0xeb0 [ 60.428333][ T1196] d_alloc_parallel+0xe4/0x1370 [ 60.428363][ T1196] ? avc_has_perm_noaudit+0x26b/0x360 [ 60.428385][ T1196] ? __cfi_d_alloc_parallel+0x10/0x10 [ 60.428413][ T1196] ? __kasan_check_write+0x18/0x20 [ 60.428439][ T1196] ? rwsem_read_trylock+0x275/0x5a0 [ 60.428463][ T1196] ? downgrade_write+0x470/0x470 [ 60.428486][ T1196] __lookup_slow+0x150/0x420 [ 60.428505][ T1196] ? try_to_unlazy+0x62a/0xb50 [ 60.428542][ T1196] ? lookup_one_len+0x300/0x300 [ 60.428564][ T1196] ? down_read+0x7f/0xe0 [ 60.428590][ T1196] lookup_slow+0x57/0x80 [ 60.428610][ T1196] link_path_walk+0x991/0xeb0 [ 60.428639][ T1196] path_openat+0x298/0x35a0 [ 60.428663][ T1196] ? kasan_save_alloc_info+0x3a/0x50 [ 60.428689][ T1196] ? __kasan_slab_alloc+0x73/0x90 [ 60.428709][ T1196] ? getname+0x1b/0x30 [ 60.428725][ T1196] ? x64_sys_call+0xe69/0x2ee0 [ 60.428746][ T1196] ? do_syscall_64+0x57/0xf0 [ 60.428767][ T1196] ? do_filp_open+0x440/0x440 [ 60.428791][ T1196] do_filp_open+0x1f2/0x440 [ 60.428813][ T1196] ? __cfi_do_filp_open+0x10/0x10 [ 60.428836][ T1196] ? __cfi_kfree_link+0x10/0x10 [ 60.428861][ T1196] ? alloc_fd+0x4c1/0x570 [ 60.428882][ T1196] do_sys_openat2+0x134/0x1d0 [ 60.428906][ T1196] ? fput+0x1a4/0x230 [ 60.428926][ T1196] ? do_sys_open+0x100/0x100 [ 60.428949][ T1196] ? __cfi_ksys_write+0x10/0x10 [ 60.428968][ T1196] __x64_sys_openat+0x13a/0x170 [ 60.428994][ T1196] x64_sys_call+0xe69/0x2ee0 [ 60.429015][ T1196] do_syscall_64+0x57/0xf0 [ 60.429034][ T1196] ? clear_bhb_loop+0x50/0xa0 [ 60.429060][ T1196] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.429085][ T1196] RIP: 0033:0x7f5692f69d0e [ 60.429102][ T1196] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.429120][ T1196] RSP: 002b:00007f5693f1bf18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 60.429142][ T1196] RAX: ffffffffffffffda RBX: 00007f5693f1c6c0 RCX: 00007f5692f69d0e [ 60.429158][ T1196] RDX: 0000000000000000 RSI: 00007f569303771e RDI: ffffffffffffff9c [ 60.429172][ T1196] RBP: 00007f569303804e R08: 0000000000000000 R09: 0000000000000000 [ 60.429186][ T1196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.429198][ T1196] R13: 00007f5693226038 R14: 00007f5693225fa0 R15: 00007fff5f99b648 [ 60.429214][ T1196] [ 60.459036][ T807] syz.3.149 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 60.460664][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.485887][ T807] CPU: 1 UID: 0 PID: 807 Comm: syz.3.149 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a [ 60.485914][ T807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 60.485926][ T807] Call Trace: [ 60.485931][ T807] [ 60.485938][ T807] __dump_stack+0x21/0x30 [ 60.485960][ T807] dump_stack_lvl+0x140/0x1c0 [ 60.485977][ T807] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.485993][ T807] ? ___ratelimit+0x41c/0x5c0 [ 60.486021][ T807] ? __kasan_check_write+0x18/0x20 [ 60.486046][ T807] dump_stack+0x19/0x20 [ 60.486061][ T807] dump_header+0xd9/0x460 [ 60.486085][ T807] oom_kill_process+0x35d/0x640 [ 60.486103][ T807] ? __pv_queued_spin_lock_slowpath+0x22e/0xe90 [ 60.486126][ T807] out_of_memory+0x5d1/0xa20 [ 60.486143][ T807] ? __cfi_out_of_memory+0x10/0x10 [ 60.486160][ T807] ? mutex_lock_killable+0x97/0x1d0 [ 60.486185][ T807] ? __cfi_mutex_lock_killable+0x10/0x10 [ 60.486209][ T807] mem_cgroup_out_of_memory+0x2c5/0x390 [ 60.486234][ T807] ? css_next_descendant_pre+0x1ec/0x210 [ 60.486252][ T807] ? __kasan_check_write+0x18/0x20 [ 60.486276][ T807] ? drain_obj_stock+0xec0/0xec0 [ 60.486300][ T807] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 60.486325][ T807] try_charge_memcg+0x925/0xe10 [ 60.486345][ T807] ? static_key_count+0x45/0x70 [ 60.486364][ T807] ? __cfi_gfp_zone+0x1/0x10 [ 60.486380][ T807] ? __cfi_try_charge_memcg+0x10/0x10 [ 60.486402][ T807] ? __alloc_pages_noprof+0x35a/0x7e0 [ 60.486424][ T807] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 60.486446][ T807] __mem_cgroup_charge+0xfc/0x420 [ 60.486469][ T807] ? folio_add_lru+0x116/0x400 [ 60.486487][ T807] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 60.486511][ T807] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 60.486532][ T807] ? shmem_replace_folio+0x9b0/0x9b0 [ 60.486550][ T807] ? shmem_huge_global_enabled+0x2da/0x360 [ 60.486568][ T807] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 60.486585][ T807] ? __kasan_check_write+0x18/0x20 [ 60.486607][ T807] ? _raw_spin_lock+0x92/0x120 [ 60.486621][ T807] shmem_get_folio_gfp+0x5cd/0x12e0 [ 60.486637][ T807] ? shmem_get_folio+0xc0/0xc0 [ 60.486651][ T807] ? follow_page_pte+0x8fb/0xba0 [ 60.486693][ T807] ? inode_to_bdi+0x6d/0x100 [ 60.486715][ T807] shmem_write_begin+0xf4/0x260 [ 60.486733][ T807] generic_perform_write+0x329/0x970 [ 60.486756][ T807] ? __cfi_generic_perform_write+0x10/0x10 [ 60.486776][ T807] ? generic_write_checks_count+0x426/0x540 [ 60.486798][ T807] ? file_update_time+0xa3/0x210 [ 60.486820][ T807] shmem_file_write_iter+0x105/0x130 [ 60.486840][ T807] __kernel_write_iter+0x45f/0x900 [ 60.486866][ T807] ? __cfi___kernel_write_iter+0x10/0x10 [ 60.486891][ T807] ? get_dump_page+0x165/0x220 [ 60.486911][ T807] ? __asan_memset+0x39/0x50 [ 60.486934][ T807] ? iov_iter_bvec+0xc0/0x180 [ 60.486954][ T807] dump_user_range+0xb8b/0xe60 [ 60.486981][ T807] ? __cfi_dump_user_range+0x10/0x10 [ 60.487011][ T807] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 60.487030][ T807] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 60.487049][ T807] ? elf_core_dump+0x23cf/0x3840 [ 60.487069][ T807] elf_core_dump+0x2d61/0x3840 [ 60.487091][ T807] ? __cfi_elf_core_dump+0x10/0x10 [ 60.487109][ T807] ? mas_next_slot+0xf01/0xfd0 [ 60.487137][ T807] ? dump_interrupted+0xf0/0xf0 [ 60.487160][ T807] ? filp_open+0x199/0x1f0 [ 60.487180][ T807] ? 0xffffffffff600000 [ 60.487195][ T807] do_coredump+0x20d2/0x3050 [ 60.487221][ T807] ? __cfi_do_coredump+0x10/0x10 [ 60.487244][ T807] ? asm_exc_page_fault+0x2b/0x30 [ 60.487273][ T807] ? __kasan_slab_free+0x6a/0x80 [ 60.487291][ T807] ? get_signal+0xa2a/0x1490 [ 60.487308][ T807] get_signal+0x11bf/0x1490 [ 60.487326][ T807] arch_do_signal_or_restart+0xbc/0x700 [ 60.487346][ T807] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 60.487366][ T807] ? __bad_area_nosemaphore+0x2fb/0x680 [ 60.487387][ T807] irqentry_exit_to_user_mode+0x4d/0xb0 [ 60.487411][ T807] irqentry_exit+0x16/0x60 [ 60.487433][ T807] exc_page_fault+0x65/0xc0 [ 60.487455][ T807] asm_exc_page_fault+0x2b/0x30 [ 60.487475][ T807] RIP: 0033:0x7fd36ba54db7 [ 60.487491][ T807] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 a2 28 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 60.487505][ T807] RSP: 002b:00007fd36a5b7120 EFLAGS: 00010202 [ 60.487521][ T807] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fd36bba94d9 [ 60.487534][ T807] RDX: 00007fd36a5b7140 RSI: 00007fd36a5b7270 RDI: 000000000000000b [ 60.487546][ T807] RBP: 00007fd36bc3804e R08: 0000000000000000 R09: 0000000000000000 [ 60.487558][ T807] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 60.487569][ T807] R13: 00007fd36be26218 R14: 00007fd36be26180 R15: 00007ffd90910c18 [ 60.487585][ T807] [ 60.487635][ T807] memory: usage 307200kB, limit 307200kB, failcnt 59716 [ 60.496475][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 60.514393][ T807] memory+swap: usage 425196kB, limit 9007199254740988kB, failcnt 0 [ 60.527927][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.554708][ T807] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 60.578602][ T9] usb 3-1: config 0 descriptor?? [ 60.602447][ T807] Memory cgroup stats for [ 61.084928][ T9] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 61.088437][ T807] /syz3 [ 61.107151][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000B/input/input10 [ 61.110903][ T807] : [ 61.207190][ T9] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 61.231566][ T807] cache 292417536 [ 61.334178][ T311] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 61.344885][ T807] rss 667648 [ 61.348161][ T807] rss_huge 0 [ 61.351373][ T807] shmem 292409344 [ 61.354996][ T807] mapped_file 0 [ 61.358476][ T807] dirty 0 [ 61.361409][ T807] writeback 0 [ 61.364688][ T807] workingset_refault_anon 291 [ 61.369400][ T807] workingset_refault_file 38263 [ 61.374246][ T807] swap 118059008 [ 61.377785][ T807] swapcached 249856 [ 61.381617][ T807] pgpgin 268548 [ 61.385074][ T807] pgpgout 196944 [ 61.388655][ T807] pgfault 29104 [ 61.392110][ T807] pgmajfault 801 [ 61.395653][ T807] inactive_anon 170913792 [ 61.400002][ T807] active_anon 122368000 [ 61.404151][ T807] inactive_file 8192 [ 61.408263][ T807] active_file 0 [ 61.411724][ T807] unevictable 0 [ 61.415179][ T807] hierarchical_memory_limit 314572800 [ 61.420628][ T807] hierarchical_memsw_limit 9223372036854771712 [ 61.426781][ T807] total_cache 292417536 [ 61.431283][ T807] total_rss 667648 [ 61.435004][ T807] total_rss_huge 0 [ 61.438911][ T807] total_shmem 292409344 [ 61.443074][ T807] total_mapped_file 0 [ 61.447057][ T807] total_dirty 0 [ 61.450760][ T807] total_writeback 0 [ 61.454566][ T807] total_workingset_refault_anon 291 [ 61.459955][ T807] total_workingset_refault_file 38263 [ 61.465326][ T807] total_swap 118059008 [ 61.469690][ T807] total_swapcached 249856 [ 61.474027][ T807] total_pgpgin 268548 [ 61.478183][ T807] total_pgpgout 196944 [ 61.482254][ T807] total_pgfault 29104 [ 61.486226][ T807] total_pgmajfault 801 [ 61.490568][ T807] total_inactive_anon 170913792 [ 61.495492][ T807] total_active_anon 122368000 [ 61.500521][ T807] total_inactive_file 8192 [ 61.505029][ T807] total_active_file 0 [ 61.509235][ T311] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 61.527305][ T311] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 61.538547][ T807] total_unevictable 0 [ 61.542792][ T311] usb 1-1: config 0 interface 0 has no altsetting 0 [ 61.549718][ T807] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.149,pid=810,uid=0 [ 61.564553][ T311] usb 1-1: New USB device found, idVendor=0b05, idProduct=184a, bcdDevice= 0.00 [ 61.573834][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.582174][ T807] Memory cgroup out of memory: Killed process 810 (syz.3.149) total-vm:90568kB, anon-rss:1412kB, file-rss:33732kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 61.599917][ T311] usb 1-1: config 0 descriptor?? [ 61.605150][ T1198] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 61.740154][ T36] audit: type=1400 audit(1794533563.282:319): avc: denied { create } for pid=1202 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 61.786062][ T12] bridge_slave_1: left allmulticast mode [ 61.791913][ T12] bridge_slave_1: left promiscuous mode [ 61.797575][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.815400][ T12] bridge_slave_0: left allmulticast mode [ 61.821834][ T12] bridge_slave_0: left promiscuous mode [ 61.827536][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.944734][ T1202] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.956013][ T1202] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.970204][ T1202] bridge_slave_0: entered allmulticast mode [ 61.992462][ T1202] bridge_slave_0: entered promiscuous mode [ 62.005607][ T12] veth1_macvtap: left promiscuous mode [ 62.016413][ T311] hid-generic 0003:0B05:184A.000C: unknown main item tag 0xd [ 62.023886][ T311] hid-generic 0003:0B05:184A.000C: unknown main item tag 0x0 [ 62.026119][ T12] veth0_vlan: left promiscuous mode [ 62.034138][ T311] hid-generic 0003:0B05:184A.000C: unknown main item tag 0x0 [ 62.038602][ T829] syz.3.149 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 62.053602][ T311] hid-generic 0003:0B05:184A.000C: unknown main item tag 0x0 [ 62.061287][ T829] CPU: 0 UID: 0 PID: 829 Comm: syz.3.149 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a [ 62.061316][ T829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 62.061328][ T829] Call Trace: [ 62.061334][ T829] [ 62.061340][ T829] __dump_stack+0x21/0x30 [ 62.061369][ T829] dump_stack_lvl+0x140/0x1c0 [ 62.061385][ T829] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.061400][ T829] ? ___ratelimit+0x41c/0x5c0 [ 62.061419][ T829] ? __kasan_check_write+0x18/0x20 [ 62.061442][ T829] dump_stack+0x19/0x20 [ 62.061456][ T829] dump_header+0xd9/0x460 [ 62.061478][ T829] oom_kill_process+0x35d/0x640 [ 62.061494][ T829] out_of_memory+0x5d1/0xa20 [ 62.061509][ T829] ? __cfi_out_of_memory+0x10/0x10 [ 62.061524][ T829] ? mutex_lock_killable+0x97/0x1d0 [ 62.061545][ T829] ? __cfi_mutex_lock_killable+0x10/0x10 [ 62.061567][ T829] mem_cgroup_out_of_memory+0x2c5/0x390 [ 62.061590][ T829] ? css_next_descendant_pre+0x1ec/0x210 [ 62.061607][ T829] ? __kasan_check_write+0x18/0x20 [ 62.061628][ T829] ? drain_obj_stock+0xec0/0xec0 [ 62.061652][ T829] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 62.061674][ T829] try_charge_memcg+0x925/0xe10 [ 62.061692][ T829] ? static_key_count+0x45/0x70 [ 62.061710][ T829] ? __cfi_gfp_zone+0x1/0x10 [ 62.061726][ T829] ? __cfi_try_charge_memcg+0x10/0x10 [ 62.061745][ T829] ? __alloc_pages_noprof+0x35a/0x7e0 [ 62.061764][ T829] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 62.061785][ T829] __mem_cgroup_charge+0xfc/0x420 [ 62.061805][ T829] ? folio_add_lru+0x116/0x400 [ 62.061823][ T829] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 62.061845][ T829] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 62.061865][ T829] ? shmem_replace_folio+0x9b0/0x9b0 [ 62.061882][ T829] ? shmem_huge_global_enabled+0x2da/0x360 [ 62.061897][ T829] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 62.061913][ T829] ? __kasan_check_write+0x18/0x20 [ 62.061934][ T829] ? _raw_spin_lock+0x92/0x120 [ 62.061951][ T829] shmem_get_folio_gfp+0x5cd/0x12e0 [ 62.061968][ T829] ? shmem_get_folio+0xc0/0xc0 [ 62.061982][ T829] ? follow_page_pte+0x8fb/0xba0 [ 62.062001][ T829] ? inode_to_bdi+0x6d/0x100 [ 62.062020][ T829] shmem_write_begin+0xf4/0x260 [ 62.062037][ T829] generic_perform_write+0x329/0x970 [ 62.062058][ T829] ? __cfi_generic_perform_write+0x10/0x10 [ 62.062076][ T829] ? generic_write_checks_count+0x426/0x540 [ 62.062096][ T829] ? file_update_time+0xa3/0x210 [ 62.062116][ T829] shmem_file_write_iter+0x105/0x130 [ 62.062135][ T829] __kernel_write_iter+0x45f/0x900 [ 62.062158][ T829] ? __cfi___kernel_write_iter+0x10/0x10 [ 62.062181][ T829] ? get_dump_page+0x165/0x220 [ 62.062199][ T829] ? __asan_memset+0x39/0x50 [ 62.062220][ T829] ? iov_iter_bvec+0xc0/0x180 [ 62.062239][ T829] dump_user_range+0xb8b/0xe60 [ 62.062264][ T829] ? __cfi_dump_user_range+0x10/0x10 [ 62.062287][ T829] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 62.062305][ T829] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 62.062322][ T829] ? elf_core_dump+0x23cf/0x3840 [ 62.062341][ T829] elf_core_dump+0x2d61/0x3840 [ 62.062391][ T829] ? __cfi_elf_core_dump+0x10/0x10 [ 62.062408][ T829] ? mas_next_slot+0xf01/0xfd0 [ 62.062434][ T829] ? dump_interrupted+0xf0/0xf0 [ 62.062455][ T829] ? filp_open+0x199/0x1f0 [ 62.062474][ T829] ? 0xffffffffff600000 [ 62.062487][ T829] do_coredump+0x20d2/0x3050 [ 62.062512][ T829] ? __cfi_do_coredump+0x10/0x10 [ 62.062533][ T829] ? asm_exc_page_fault+0x2b/0x30 [ 62.062561][ T829] ? __kasan_slab_free+0x6a/0x80 [ 62.062578][ T829] ? get_signal+0xa2a/0x1490 [ 62.062593][ T829] get_signal+0x11bf/0x1490 [ 62.062609][ T829] arch_do_signal_or_restart+0xbc/0x700 [ 62.062627][ T829] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 62.062646][ T829] ? __bad_area_nosemaphore+0x2fb/0x680 [ 62.062666][ T829] irqentry_exit_to_user_mode+0x4d/0xb0 [ 62.062688][ T829] irqentry_exit+0x16/0x60 [ 62.062713][ T829] exc_page_fault+0x65/0xc0 [ 62.062733][ T829] asm_exc_page_fault+0x2b/0x30 [ 62.062753][ T829] RIP: 0033:0x7fd36ba54db7 [ 62.062767][ T829] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 a2 28 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 62.062781][ T829] RSP: 002b:00007fd36a5b7120 EFLAGS: 00010202 [ 62.062796][ T829] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fd36bba94d9 [ 62.062808][ T829] RDX: 00007fd36a5b7140 RSI: 00007fd36a5b7270 RDI: 000000000000000b [ 62.062819][ T829] RBP: 00007fd36bc3804e R08: 0000000000000000 R09: 0000000000000000 [ 62.062830][ T829] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 62.062840][ T829] R13: 00007fd36be26218 R14: 00007fd36be26180 R15: 00007ffd90910c18 [ 62.062854][ T829] [ 62.071242][ T311] hid-generic 0003:0B05:184A.000C: unknown main item tag 0x0 [ 62.092210][ T829] memory: usage 306908kB, limit 307200kB, failcnt 62884 [ 62.112978][ T311] hid-generic 0003:0B05:184A.000C: unknown main item tag 0x0 [ 62.115052][ T829] memory+swap: usage 429004kB, limit 9007199254740988kB, failcnt 0 [ 62.133152][ T311] hid-generic 0003:0B05:184A.000C: unknown main item tag 0x0 [ 62.133185][ T311] hid-generic 0003:0B05:184A.000C: unknown main item tag 0x0 [ 62.138205][ T829] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 62.148116][ T311] hid-generic 0003:0B05:184A.000C: unknown main item tag 0x0 [ 62.190872][ T829] Memory cgroup stats for [ 62.226045][ T311] hid-generic 0003:0B05:184A.000C: unknown main item tag 0x0 [ 62.233234][ T829] /syz3 [ 62.267989][ T311] hid-generic 0003:0B05:184A.000C: unknown main item tag 0x0 [ 62.275448][ T1202] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.286691][ T311] hid-generic 0003:0B05:184A.000C: unknown main item tag 0x0 [ 62.296470][ T1202] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.307949][ T311] hid-generic 0003:0B05:184A.000C: unknown main item tag 0x0 [ 62.317031][ T1202] bridge_slave_1: entered allmulticast mode [ 62.317534][ T1202] bridge_slave_1: entered promiscuous mode [ 62.350894][ T829] : [ 62.363453][ T311] hid-generic 0003:0B05:184A.000C: unknown main item tag 0x0 [ 62.457852][ T1202] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.461542][ T311] hid-generic 0003:0B05:184A.000C: unknown main item tag 0x0 [ 62.464348][ T1202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.484131][ T311] hid-generic 0003:0B05:184A.000C: unknown main item tag 0x0 [ 62.490111][ T1202] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.508089][ T311] hid-generic 0003:0B05:184A.000C: hidraw1: USB HID v0.04 Device [HID 0b05:184a] on usb-dummy_hcd.0-1/input0 [ 62.513964][ T1202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.551166][ T311] usb 1-1: USB disconnect, device number 22 [ 62.724832][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.727252][ T829] cache 313204736 [ 62.735597][ T829] rss 827392 [ 62.738867][ T829] rss_huge 0 [ 62.738970][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.742062][ T829] shmem 312971264 [ 62.742070][ T829] mapped_file 241664 [ 62.742076][ T829] dirty 0 [ 62.742081][ T829] writeback 0 [ 62.742085][ T829] workingset_refault_anon 444 [ 62.742092][ T829] workingset_refault_file 39353 [ 62.742097][ T829] swap 127291392 [ 62.742103][ T829] swapcached 557056 [ 62.742109][ T829] pgpgin 288409 [ 62.742114][ T829] pgpgout 211609 [ 62.742120][ T829] pgfault 29928 [ 62.742126][ T829] pgmajfault 853 [ 62.805766][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.812847][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.826844][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.833928][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.838323][ T829] inactive_anon 52211712 [ 62.847026][ T829] active_anon 262098944 [ 62.851992][ T829] inactive_file 0 [ 62.855650][ T829] active_file 0 [ 62.859730][ T829] unevictable 0 [ 62.863535][ T829] hierarchical_memory_limit 314572800 [ 62.869581][ T829] hierarchical_memsw_limit 9223372036854771712 [ 62.876035][ T829] total_cache 313204736 [ 62.877183][ T1202] veth0_vlan: entered promiscuous mode [ 62.886433][ T829] total_rss 827392 [ 62.890591][ T829] total_rss_huge 0 [ 62.894733][ T829] total_shmem 312971264 [ 62.896770][ T1202] veth1_macvtap: entered promiscuous mode [ 62.904914][ T829] total_mapped_file 241664 [ 62.910871][ T829] total_dirty 0 [ 62.914346][ T829] total_writeback 0 [ 62.918427][ T829] total_workingset_refault_anon 444 [ 62.923707][ T829] total_workingset_refault_file 39353 [ 62.928962][ T36] audit: type=1400 audit(1794533564.462:320): avc: denied { mounton } for pid=1202 comm="syz-executor" path="/root/syzkaller.jKrNH9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 62.930674][ T829] total_swap 127291392 [ 62.961232][ T829] total_swapcached 557056 [ 62.965588][ T829] total_pgpgin 288409 [ 62.971819][ T829] total_pgpgout 211609 [ 62.975637][ T45] usb 3-1: USB disconnect, device number 12 [ 62.978460][ T829] total_pgfault 29928 [ 62.987691][ T829] total_pgmajfault 853 [ 62.992020][ T829] total_inactive_anon 52211712 [ 63.002239][ T829] total_active_anon 262098944 [ 63.007625][ T829] total_inactive_file 0 [ 63.012078][ T829] total_active_file 0 [ 63.016093][ T829] total_unevictable 0 [ 63.024304][ T829] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.149,pid=811,uid=0 [ 63.041091][ T829] Memory cgroup out of memory: Killed process 811 (syz.3.149) total-vm:90568kB, anon-rss:1284kB, file-rss:38308kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 63.193502][ T826] syz.3.149 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 63.263138][ T826] CPU: 1 UID: 0 PID: 826 Comm: syz.3.149 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a [ 63.263165][ T826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 63.263175][ T826] Call Trace: [ 63.263180][ T826] [ 63.263186][ T826] __dump_stack+0x21/0x30 [ 63.263206][ T826] dump_stack_lvl+0x140/0x1c0 [ 63.263221][ T826] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.263237][ T826] ? ___ratelimit+0x41c/0x5c0 [ 63.263265][ T826] ? __kasan_check_write+0x18/0x20 [ 63.263288][ T826] dump_stack+0x19/0x20 [ 63.263302][ T826] dump_header+0xd9/0x460 [ 63.263325][ T826] oom_kill_process+0x35d/0x640 [ 63.263343][ T826] out_of_memory+0x5d1/0xa20 [ 63.263359][ T826] ? __cfi_out_of_memory+0x10/0x10 [ 63.263374][ T826] ? mutex_lock_killable+0x115/0x1d0 [ 63.263394][ T826] ? __cfi_mutex_lock_killable+0x10/0x10 [ 63.263416][ T826] mem_cgroup_out_of_memory+0x2c5/0x390 [ 63.263440][ T826] ? css_next_descendant_pre+0x1ec/0x210 [ 63.263456][ T826] ? __kasan_check_write+0x18/0x20 [ 63.263477][ T826] ? drain_obj_stock+0xec0/0xec0 [ 63.263500][ T826] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 63.263523][ T826] try_charge_memcg+0x925/0xe10 [ 63.263542][ T826] ? static_key_count+0x45/0x70 [ 63.263560][ T826] ? __cfi_gfp_zone+0x1/0x10 [ 63.263575][ T826] ? __cfi_try_charge_memcg+0x10/0x10 [ 63.263595][ T826] ? __alloc_pages_noprof+0x35a/0x7e0 [ 63.263615][ T826] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 63.263635][ T826] __mem_cgroup_charge+0xfc/0x420 [ 63.263657][ T826] ? __kasan_check_write+0x18/0x20 [ 63.263678][ T826] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 63.263701][ T826] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 63.263719][ T826] ? shmem_replace_folio+0x9b0/0x9b0 [ 63.263736][ T826] ? shmem_huge_global_enabled+0x2da/0x360 [ 63.263753][ T826] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 63.263769][ T826] ? __kasan_check_write+0x18/0x20 [ 63.263789][ T826] ? _raw_spin_lock+0x92/0x120 [ 63.263806][ T826] shmem_get_folio_gfp+0x5cd/0x12e0 [ 63.263820][ T826] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 63.263841][ T826] ? shmem_get_folio+0xc0/0xc0 [ 63.263855][ T826] ? follow_page_pte+0x8fb/0xba0 [ 63.263874][ T826] ? inode_to_bdi+0x6d/0x100 [ 63.263894][ T826] shmem_write_begin+0xf4/0x260 [ 63.263911][ T826] generic_perform_write+0x329/0x970 [ 63.263931][ T826] ? __cfi_generic_perform_write+0x10/0x10 [ 63.263949][ T826] ? generic_write_checks_count+0x426/0x540 [ 63.263969][ T826] ? file_update_time+0xa3/0x210 [ 63.263989][ T826] shmem_file_write_iter+0x105/0x130 [ 63.264007][ T826] __kernel_write_iter+0x45f/0x900 [ 63.264030][ T826] ? __cfi___kernel_write_iter+0x10/0x10 [ 63.264052][ T826] ? get_dump_page+0x165/0x220 [ 63.264070][ T826] ? __asan_memset+0x39/0x50 [ 63.264091][ T826] ? iov_iter_bvec+0xc0/0x180 [ 63.264110][ T826] dump_user_range+0xb8b/0xe60 [ 63.264135][ T826] ? __cfi_dump_user_range+0x10/0x10 [ 63.264159][ T826] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 63.264177][ T826] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 63.264196][ T826] ? elf_core_dump+0x23cf/0x3840 [ 63.264215][ T826] elf_core_dump+0x2d61/0x3840 [ 63.264235][ T826] ? __cfi_elf_core_dump+0x10/0x10 [ 63.264273][ T826] ? mas_next_slot+0xf01/0xfd0 [ 63.264300][ T826] ? dump_interrupted+0xf0/0xf0 [ 63.264322][ T826] ? filp_open+0x199/0x1f0 [ 63.264342][ T826] ? 0xffffffffff600000 [ 63.264355][ T826] do_coredump+0x20d2/0x3050 [ 63.264380][ T826] ? __cfi_do_coredump+0x10/0x10 [ 63.264402][ T826] ? asm_exc_page_fault+0x2b/0x30 [ 63.264429][ T826] ? __kasan_slab_free+0x6a/0x80 [ 63.264446][ T826] ? get_signal+0xa2a/0x1490 [ 63.264462][ T826] get_signal+0x11bf/0x1490 [ 63.264479][ T826] arch_do_signal_or_restart+0xbc/0x700 [ 63.264498][ T826] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 63.264517][ T826] ? __bad_area_nosemaphore+0x2fb/0x680 [ 63.264537][ T826] irqentry_exit_to_user_mode+0x4d/0xb0 [ 63.264560][ T826] irqentry_exit+0x16/0x60 [ 63.264581][ T826] exc_page_fault+0x65/0xc0 [ 63.264602][ T826] asm_exc_page_fault+0x2b/0x30 [ 63.264622][ T826] RIP: 0033:0x7fd36ba54db7 [ 63.264636][ T826] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 a2 28 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 63.264651][ T826] RSP: 002b:00007fd36a5b7120 EFLAGS: 00010202 [ 63.264668][ T826] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fd36bba94d9 [ 63.264680][ T826] RDX: 00007fd36a5b7140 RSI: 00007fd36a5b7270 RDI: 000000000000000b [ 63.264692][ T826] RBP: 00007fd36bc3804e R08: 0000000000000000 R09: 0000000000000000 [ 63.264704][ T826] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 63.264715][ T826] R13: 00007fd36be26218 R14: 00007fd36be26180 R15: 00007ffd90910c18 [ 63.264730][ T826] [ 63.264736][ T826] memory: usage 306740kB, limit 307200kB, failcnt 64554 [ 63.764579][ T826] memory+swap: usage 431912kB, limit 9007199254740988kB, failcnt 0 [ 63.811491][ T826] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 63.820107][ T826] Memory cgroup stats for /syz3: [ 63.820620][ T826] cache 313630720 [ 63.837081][ T826] rss 724992 [ 63.841229][ T826] rss_huge 0 [ 63.844731][ T826] shmem 313626624 [ 63.850635][ T826] mapped_file 0 [ 63.861821][ T826] dirty 0 [ 63.864982][ T826] writeback 0 [ 63.876092][ T826] workingset_refault_anon 457 [ 63.881083][ T826] workingset_refault_file 40474 [ 63.886203][ T826] swap 127709184 [ 63.890058][ T826] swapcached 286720 [ 63.905155][ T826] pgpgin 298188 [ 63.917130][ T826] pgpgout 221388 [ 63.922780][ T826] pgfault 30174 [ 63.925342][ T36] audit: type=1400 audit(1794533565.462:321): avc: denied { execute } for pid=1233 comm="syz.2.255" path="/proc/276/task/277/net/anycast6" dev="proc" ino=4026532438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 63.926948][ T826] pgmajfault 876 [ 63.954901][ T826] inactive_anon 127045632 [ 63.959788][ T826] active_anon 187523072 [ 63.963996][ T826] inactive_file 0 [ 63.967848][ T36] audit: type=1400 audit(1794533565.462:322): avc: denied { create } for pid=1233 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 63.976538][ T826] active_file 4096 [ 63.993141][ T826] unevictable 0 [ 63.996664][ T826] hierarchical_memory_limit 314572800 [ 64.009975][ T826] hierarchical_memsw_limit 9223372036854771712 [ 64.016207][ T826] total_cache 313630720 [ 64.020872][ T826] total_rss 724992 [ 64.025117][ T826] total_rss_huge 0 [ 64.029743][ T826] total_shmem 313626624 [ 64.041696][ T826] total_mapped_file 0 [ 64.045721][ T826] total_dirty 0 [ 64.049636][ T826] total_writeback 0 [ 64.062293][ T826] total_workingset_refault_anon 457 [ 64.067549][ T826] total_workingset_refault_file 40474 [ 64.073301][ T826] total_swap 127709184 [ 64.077436][ T826] total_swapcached 286720 [ 64.083062][ T826] total_pgpgin 298188 [ 64.098246][ T826] total_pgpgout 221388 [ 64.111397][ T826] total_pgfault 30174 [ 64.115373][ T826] total_pgmajfault 876 [ 64.119510][ T826] total_inactive_anon 127045632 [ 64.124579][ T826] total_active_anon 187523072 [ 64.129419][ T826] total_inactive_file 0 [ 64.138616][ T826] total_active_file 4096 [ 64.142876][ T826] total_unevictable 0 [ 64.146858][ T826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.149,pid=826,uid=0 [ 64.162402][ T826] Memory cgroup out of memory: Killed process 826 (syz.3.149) total-vm:90568kB, anon-rss:1372kB, file-rss:41604kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 64.218891][ T311] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 64.230143][ T36] audit: type=1326 audit(1794533565.772:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1237 comm="syz.0.257" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5692fa94d9 code=0x0 [ 64.277644][ T807] syz.3.149 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 64.291734][ T807] CPU: 0 UID: 0 PID: 807 Comm: syz.3.149 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a [ 64.291765][ T807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 64.291777][ T807] Call Trace: [ 64.291784][ T807] [ 64.291792][ T807] __dump_stack+0x21/0x30 [ 64.291815][ T807] dump_stack_lvl+0x140/0x1c0 [ 64.291833][ T807] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.291851][ T807] ? ___ratelimit+0x41c/0x5c0 [ 64.291873][ T807] ? __kasan_check_write+0x18/0x20 [ 64.291901][ T807] dump_stack+0x19/0x20 [ 64.291918][ T807] dump_header+0xd9/0x460 [ 64.291943][ T807] oom_kill_process+0x35d/0x640 [ 64.291964][ T807] ? __set_cpus_allowed_ptr+0x1d6/0x2c0 [ 64.291988][ T807] out_of_memory+0x5d1/0xa20 [ 64.292006][ T807] ? __cfi_out_of_memory+0x10/0x10 [ 64.292024][ T807] ? mutex_lock_killable+0x97/0x1d0 [ 64.292048][ T807] ? __cfi_mutex_lock_killable+0x10/0x10 [ 64.292074][ T807] mem_cgroup_out_of_memory+0x2c5/0x390 [ 64.292101][ T807] ? css_next_descendant_pre+0x1ec/0x210 [ 64.292120][ T807] ? __kasan_check_write+0x18/0x20 [ 64.292152][ T807] ? drain_obj_stock+0xec0/0xec0 [ 64.292180][ T807] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 64.292207][ T807] try_charge_memcg+0x925/0xe10 [ 64.292228][ T807] ? static_key_count+0x45/0x70 [ 64.292249][ T807] ? __cfi_gfp_zone+0x1/0x10 [ 64.292267][ T807] ? __cfi_try_charge_memcg+0x10/0x10 [ 64.292290][ T807] ? __alloc_pages_noprof+0x35a/0x7e0 [ 64.292314][ T807] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 64.292338][ T807] __mem_cgroup_charge+0xfc/0x420 [ 64.292363][ T807] ? folio_add_lru+0x116/0x400 [ 64.292383][ T807] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 64.292410][ T807] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 64.292433][ T807] ? shmem_replace_folio+0x9b0/0x9b0 [ 64.292453][ T807] ? shmem_huge_global_enabled+0x2da/0x360 [ 64.292473][ T807] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 64.292493][ T807] ? __kasan_check_write+0x18/0x20 [ 64.292517][ T807] ? _raw_spin_lock+0x92/0x120 [ 64.292538][ T807] shmem_get_folio_gfp+0x5cd/0x12e0 [ 64.292559][ T807] ? shmem_get_folio+0xc0/0xc0 [ 64.292576][ T807] ? follow_page_pte+0x8fb/0xba0 [ 64.292599][ T807] ? inode_to_bdi+0x6d/0x100 [ 64.292622][ T807] shmem_write_begin+0xf4/0x260 [ 64.292643][ T807] generic_perform_write+0x329/0x970 [ 64.292666][ T807] ? __cfi_generic_perform_write+0x10/0x10 [ 64.292688][ T807] ? generic_write_checks_count+0x426/0x540 [ 64.292715][ T807] ? file_update_time+0xa3/0x210 [ 64.292740][ T807] shmem_file_write_iter+0x105/0x130 [ 64.292763][ T807] __kernel_write_iter+0x45f/0x900 [ 64.292791][ T807] ? __cfi___kernel_write_iter+0x10/0x10 [ 64.292816][ T807] ? get_dump_page+0x165/0x220 [ 64.292838][ T807] ? __asan_memset+0x39/0x50 [ 64.292862][ T807] ? iov_iter_bvec+0xc0/0x180 [ 64.292884][ T807] dump_user_range+0xb8b/0xe60 [ 64.292913][ T807] ? __cfi_dump_user_range+0x10/0x10 [ 64.292941][ T807] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 64.292961][ T807] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 64.292982][ T807] ? elf_core_dump+0x23cf/0x3840 [ 64.293003][ T807] elf_core_dump+0x2d61/0x3840 [ 64.293027][ T807] ? __cfi_elf_core_dump+0x10/0x10 [ 64.293047][ T807] ? mas_next_slot+0xf01/0xfd0 [ 64.293078][ T807] ? dump_interrupted+0xf0/0xf0 [ 64.293103][ T807] ? filp_open+0x199/0x1f0 [ 64.293126][ T807] ? 0xffffffffff600000 [ 64.293142][ T807] do_coredump+0x20d2/0x3050 [ 64.293178][ T807] ? __cfi_do_coredump+0x10/0x10 [ 64.293203][ T807] ? asm_exc_page_fault+0x2b/0x30 [ 64.293234][ T807] ? __kasan_slab_free+0x6a/0x80 [ 64.293253][ T807] ? get_signal+0xa2a/0x1490 [ 64.293272][ T807] get_signal+0x11bf/0x1490 [ 64.293292][ T807] arch_do_signal_or_restart+0xbc/0x700 [ 64.293313][ T807] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 64.293335][ T807] ? __bad_area_nosemaphore+0x2fb/0x680 [ 64.293359][ T807] irqentry_exit_to_user_mode+0x4d/0xb0 [ 64.293388][ T807] irqentry_exit+0x16/0x60 [ 64.293411][ T807] exc_page_fault+0x65/0xc0 [ 64.293435][ T807] asm_exc_page_fault+0x2b/0x30 [ 64.293459][ T807] RIP: 0033:0x7fd36ba54db7 [ 64.293474][ T807] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 a2 28 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 64.293491][ T807] RSP: 002b:00007fd36a5b7120 EFLAGS: 00010202 [ 64.293508][ T807] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fd36bba94d9 [ 64.293523][ T807] RDX: 00007fd36a5b7140 RSI: 00007fd36a5b7270 RDI: 000000000000000b [ 64.293537][ T807] RBP: 00007fd36bc3804e R08: 0000000000000000 R09: 0000000000000000 [ 64.293550][ T807] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 64.293563][ T807] R13: 00007fd36be26218 R14: 00007fd36be26180 R15: 00007ffd90910c18 [ 64.293578][ T807] [ 64.293586][ T807] memory: usage 307200kB, limit 307200kB, failcnt 66436 [ 64.369071][ T311] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 64.373763][ T807] memory+swap: usage 431784kB, limit 9007199254740988kB, failcnt 0 [ 64.379279][ T311] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 64.384654][ T807] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 64.398199][ T311] usb 3-1: config 0 interface 0 has no altsetting 0 [ 64.401016][ T807] Memory cgroup stats for [ 64.406244][ T311] usb 3-1: New USB device found, idVendor=0b05, idProduct=184a, bcdDevice= 0.00 [ 64.431345][ T807] /syz3 [ 64.436677][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.455637][ T807] : [ 64.466024][ T311] usb 3-1: config 0 descriptor?? [ 64.488029][ T807] cache 289419264 [ 64.491083][ T1236] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 64.495237][ T807] rss 724992 [ 64.597958][ T45] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 64.598914][ T807] rss_huge 0 [ 64.717942][ T450] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.726083][ T807] shmem 289415168 [ 64.759043][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.760424][ T807] mapped_file 0 [ 64.767820][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.778910][ T807] dirty 0 [ 64.786761][ T45] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 64.797244][ T807] writeback 0 [ 64.804378][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.810396][ T807] workingset_refault_anon 457 [ 64.818976][ T45] usb 1-1: config 0 descriptor?? [ 64.823828][ T807] workingset_refault_file 40474 [ 64.899021][ T450] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.901867][ T807] swap 120422400 [ 64.904901][ T450] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 64.914451][ T807] swapcached 286720 [ 64.920159][ T450] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.925077][ T807] pgpgin 298188 [ 64.930410][ T311] hid-generic 0003:0B05:184A.000D: unknown main item tag 0xd [ 64.934616][ T807] pgpgout 227299 [ 64.934627][ T807] pgfault 30174 [ 64.934634][ T807] pgmajfault 876 [ 64.934642][ T807] inactive_anon 191426560 [ 64.945359][ T311] hid-generic 0003:0B05:184A.000D: unknown main item tag 0x0 [ 64.950334][ T807] active_anon 98930688 [ 64.950346][ T807] inactive_file 0 [ 64.950353][ T807] active_file 4096 [ 64.950360][ T807] unevictable 0 [ 64.950366][ T807] hierarchical_memory_limit 314572800 [ 64.950374][ T807] hierarchical_memsw_limit 9223372036854771712 [ 64.950382][ T807] total_cache 289419264 [ 64.954857][ T450] usb 5-1: config 0 descriptor?? [ 64.962948][ T807] total_rss 724992 [ 64.966865][ T311] hid-generic 0003:0B05:184A.000D: unknown main item tag 0x0 [ 64.975025][ T807] total_rss_huge 0 [ 64.978384][ T311] hid-generic 0003:0B05:184A.000D: unknown main item tag 0x0 [ 64.985773][ T807] total_shmem 289415168 [ 64.992392][ T311] hid-generic 0003:0B05:184A.000D: unknown main item tag 0x0 [ 64.992816][ T807] total_mapped_file 0 [ 64.996360][ T311] hid-generic 0003:0B05:184A.000D: unknown main item tag 0x0 [ 65.000685][ T807] total_dirty 0 [ 65.007931][ T311] hid-generic 0003:0B05:184A.000D: unknown main item tag 0x0 [ 65.012056][ T807] total_writeback 0 [ 65.015527][ T311] hid-generic 0003:0B05:184A.000D: unknown main item tag 0x0 [ 65.019476][ T807] total_workingset_refault_anon 457 [ 65.023206][ T311] hid-generic 0003:0B05:184A.000D: unknown main item tag 0x0 [ 65.028393][ T807] total_workingset_refault_file 40474 [ 65.034585][ T311] hid-generic 0003:0B05:184A.000D: unknown main item tag 0x0 [ 65.038632][ T807] total_swap 120422400 [ 65.043457][ T311] hid-generic 0003:0B05:184A.000D: unknown main item tag 0x0 [ 65.047056][ T807] total_swapcached 286720 [ 65.047067][ T807] total_pgpgin 298188 [ 65.054507][ T311] hid-generic 0003:0B05:184A.000D: unknown main item tag 0x0 [ 65.058499][ T807] total_pgpgout 227299 [ 65.065710][ T311] hid-generic 0003:0B05:184A.000D: unknown main item tag 0x0 [ 65.069863][ T807] total_pgfault 30174 [ 65.077096][ T311] hid-generic 0003:0B05:184A.000D: unknown main item tag 0x0 [ 65.081175][ T807] total_pgmajfault 876 [ 65.088421][ T311] hid-generic 0003:0B05:184A.000D: unknown main item tag 0x0 [ 65.091973][ T807] total_inactive_anon 191426560 [ 65.099536][ T311] hid-generic 0003:0B05:184A.000D: unknown main item tag 0x0 [ 65.103188][ T807] total_active_anon 98930688 [ 65.118003][ T311] hid-generic 0003:0B05:184A.000D: hidraw0: USB HID v0.04 Device [HID 0b05:184a] on usb-dummy_hcd.2-1/input0 [ 65.123178][ T807] total_inactive_file 0 [ 65.148012][ T311] usb 3-1: USB disconnect, device number 13 [ 65.151716][ T807] total_active_file 4096 [ 65.239632][ T807] total_unevictable 0 [ 65.243613][ T807] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.149,pid=829,uid=0 [ 65.258753][ T807] Memory cgroup out of memory: Killed process 829 (syz.3.149) total-vm:90568kB, anon-rss:1244kB, file-rss:43008kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 65.260912][ T45] hid (null): unknown global tag 0xe [ 65.284259][ T45] hid-steam 0003:28DE:1142.000E: unknown global tag 0xe [ 65.291553][ T45] hid-steam 0003:28DE:1142.000E: item 0 4 1 14 parsing failed [ 65.308110][ T45] hid-steam 0003:28DE:1142.000E: steam_probe:parse of hid interface failed [ 65.327042][ T45] hid-steam 0003:28DE:1142.000E: probe with driver hid-steam failed with error -22 [ 65.400432][ T450] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 65.418647][ T450] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000F/input/input12 [ 65.471289][ T64] usb 1-1: USB disconnect, device number 23 [ 65.494902][ T450] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 65.671113][ T36] audit: type=1400 audit(1794533567.212:324): avc: denied { bind } for pid=1249 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.783249][ T36] audit: type=1400 audit(1794533567.322:325): avc: denied { checkpoint_restore } for pid=1253 comm="syz.3.262" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.895743][ T36] audit: type=1400 audit(1794533567.432:326): avc: denied { setcheckreqprot } for pid=1253 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 66.265816][ T1271] FAULT_INJECTION: forcing a failure. [ 66.265816][ T1271] name failslab, interval 1, probability 0, space 0, times 0 [ 66.286665][ T1275] rust_binder: 1266:1275 transaction async to 1266:0 failed ENOSPC, code 4294967295 size 0-24 line process.rs:1093 [ 66.287178][ T1271] CPU: 1 UID: 0 PID: 1271 Comm: syz.2.266 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a [ 66.287204][ T1271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 66.287217][ T1271] Call Trace: [ 66.287224][ T1271] [ 66.287232][ T1271] __dump_stack+0x21/0x30 [ 66.287257][ T1271] dump_stack_lvl+0x140/0x1c0 [ 66.287275][ T1271] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.287293][ T1271] ? cred_has_capability+0x296/0x3a0 [ 66.287320][ T1271] dump_stack+0x19/0x20 [ 66.287336][ T1271] should_fail_ex+0x3c2/0x510 [ 66.287354][ T1271] should_failslab+0xac/0x100 [ 66.287374][ T1271] kmem_cache_alloc_noprof+0x42/0x410 [ 66.287399][ T1271] ? create_new_namespaces+0x48/0x6f0 [ 66.287419][ T1271] create_new_namespaces+0x48/0x6f0 [ 66.287437][ T1271] ? ns_capable+0x90/0xf0 [ 66.287456][ T1271] unshare_nsproxy_namespaces+0x124/0x180 [ 66.287476][ T1271] ksys_unshare+0x4f9/0x920 [ 66.287492][ T1271] ? fput+0x1a4/0x230 [ 66.287513][ T1271] ? __cfi_ksys_unshare+0x10/0x10 [ 66.287530][ T1271] ? __kasan_check_write+0x18/0x20 [ 66.287556][ T1271] __x64_sys_unshare+0x3c/0x50 [ 66.287572][ T1271] x64_sys_call+0x2998/0x2ee0 [ 66.287591][ T1271] do_syscall_64+0x57/0xf0 [ 66.287610][ T1271] ? clear_bhb_loop+0x50/0xa0 [ 66.287633][ T1271] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.287656][ T1271] RIP: 0033:0x7f540fda94d9 [ 66.287672][ T1271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.287688][ T1271] RSP: 002b:00007f5410d09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 66.287708][ T1271] RAX: ffffffffffffffda RBX: 00007f5410025fa0 RCX: 00007f540fda94d9 [ 66.287723][ T1271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000046020000 [ 66.287735][ T1271] RBP: 00007f540fe3804e R08: 0000000000000000 R09: 0000000000000000 [ 66.287747][ T1271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.287760][ T1271] R13: 00007f5410026038 R14: 00007f5410025fa0 R15: 00007ffc52ba8388 [ 66.287776][ T1271] [ 66.394778][ T1274] netlink: 'syz.3.264': attribute type 8 has an invalid length. [ 66.555455][ T45] rust_binder: 1266: undelivered TRANSACTION_ERROR: 29201 [ 66.584409][ T1281] loop3: detected capacity change from 0 to 4 [ 66.887973][ T9] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 67.039077][ T9] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 67.050096][ T9] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 67.065260][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 67.071970][ T9] usb 3-1: New USB device found, idVendor=0b05, idProduct=184a, bcdDevice= 0.00 [ 67.081239][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.090184][ T9] usb 3-1: config 0 descriptor?? [ 67.095920][ T1283] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 67.451933][ T311] usb 5-1: USB disconnect, device number 2 [ 67.468794][ T36] audit: type=1400 audit(1794533569.012:327): avc: denied { getopt } for pid=1294 comm="syz.4.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.506091][ T9] hid-generic 0003:0B05:184A.0010: unknown main item tag 0xd [ 67.513633][ T9] hid-generic 0003:0B05:184A.0010: unknown main item tag 0x0 [ 67.521185][ T9] hid-generic 0003:0B05:184A.0010: unknown main item tag 0x0 [ 67.528761][ T9] hid-generic 0003:0B05:184A.0010: unknown main item tag 0x0 [ 67.536164][ T9] hid-generic 0003:0B05:184A.0010: unknown main item tag 0x0 [ 67.543618][ T9] hid-generic 0003:0B05:184A.0010: unknown main item tag 0x0 [ 67.551045][ T9] hid-generic 0003:0B05:184A.0010: unknown main item tag 0x0 [ 67.558481][ T9] hid-generic 0003:0B05:184A.0010: unknown main item tag 0x0 [ 67.565869][ T9] hid-generic 0003:0B05:184A.0010: unknown main item tag 0x0 [ 67.573274][ T9] hid-generic 0003:0B05:184A.0010: unknown main item tag 0x0 [ 67.580845][ T9] hid-generic 0003:0B05:184A.0010: unknown main item tag 0x0 [ 67.588896][ T9] hid-generic 0003:0B05:184A.0010: hidraw0: USB HID v0.04 Device [HID 0b05:184a] on usb-dummy_hcd.2-1/input0 [ 67.624116][ T36] audit: type=1400 audit(1794533569.162:328): avc: denied { ioctl } for pid=1306 comm="syz.3.274" path="socket:[10790]" dev="sockfs" ino=10790 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.670888][ T1319] SELinux: security_context_str_to_sid () failed with errno=-22 [ 67.670892][ T36] audit: type=1400 audit(1794533569.212:329): avc: denied { remount } for pid=1318 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.714420][ T1324] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.714505][ T311] usb 3-1: USB disconnect, device number 14 [ 67.721677][ T1324] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.740730][ T1324] bridge0: entered allmulticast mode [ 67.759887][ T36] audit: type=1400 audit(1794533569.302:330): avc: denied { bind } for pid=1327 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.864847][ T1333] SELinux: policydb magic number 0x7637069 does not match expected magic number 0xf97cff8c [ 67.875080][ T1333] SELinux: failed to load policy [ 67.977970][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 68.138958][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.149961][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 68.159082][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.168286][ T9] usb 4-1: config 0 descriptor?? [ 68.188637][ T1337] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 68.198949][ T1337] SELinux: failed to load policy [ 68.213574][ T1339] Bluetooth: TIOCSERCONFIG is not supported [ 68.229116][ T36] audit: type=1400 audit(1794533569.772:331): avc: denied { accept } for pid=1340 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.324985][ T1343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 68.353456][ T36] audit: type=1400 audit(1794533569.892:332): avc: denied { setopt } for pid=1352 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.373576][ T36] audit: type=1400 audit(1794533569.912:333): avc: denied { mount } for pid=1352 comm="syz.0.289" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 68.399643][ T1353] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 68.421981][ T36] audit: type=1400 audit(1794533569.962:334): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 68.443961][ T36] audit: type=1400 audit(1794533569.982:335): avc: denied { read } for pid=1358 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.510222][ T36] audit: type=1400 audit(1794533570.052:336): avc: denied { search } for pid=1358 comm="syz.2.292" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 68.598420][ T9] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 68.608826][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0011/input/input13 [ 68.680344][ T9] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 68.717975][ T313] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 68.767956][ T45] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 68.868968][ T313] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 68.880019][ T313] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 68.890778][ T313] usb 5-1: config 0 interface 0 has no altsetting 0 [ 68.897401][ T313] usb 5-1: New USB device found, idVendor=0b05, idProduct=184a, bcdDevice= 0.00 [ 68.906486][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.915043][ T313] usb 5-1: config 0 descriptor?? [ 68.920324][ T1362] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 68.928151][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 68.935643][ T45] usb 3-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 68.945052][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.953239][ T45] usb 3-1: Product: syz [ 68.957407][ T45] usb 3-1: Manufacturer: syz [ 68.962041][ T45] usb 3-1: SerialNumber: syz [ 69.168688][ T1359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.177275][ T1359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.187939][ T45] usb 3-1: unit 0 not found! [ 69.192553][ T45] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 69.207512][ T45] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 69.216771][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 69.227430][ T45] usb 3-1: USB disconnect, device number 15 [ 69.237548][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.317644][ T1367] kvm: MONITOR instruction emulated as NOP! [ 69.330401][ T313] hid-generic 0003:0B05:184A.0012: unknown main item tag 0xd [ 69.337881][ T313] hid-generic 0003:0B05:184A.0012: unknown main item tag 0x0 [ 69.345404][ T313] hid-generic 0003:0B05:184A.0012: unknown main item tag 0x0 [ 69.353778][ T313] hid-generic 0003:0B05:184A.0012: unknown main item tag 0x0 [ 69.361209][ T313] hid-generic 0003:0B05:184A.0012: unknown main item tag 0x0 [ 69.368718][ T313] hid-generic 0003:0B05:184A.0012: unknown main item tag 0x0 [ 69.376191][ T313] hid-generic 0003:0B05:184A.0012: unknown main item tag 0x0 [ 69.383618][ T313] hid-generic 0003:0B05:184A.0012: unknown main item tag 0x0 [ 69.391198][ T313] hid-generic 0003:0B05:184A.0012: unknown main item tag 0x0 [ 69.398619][ T313] hid-generic 0003:0B05:184A.0012: unknown main item tag 0x0 [ 69.406087][ T313] hid-generic 0003:0B05:184A.0012: unknown main item tag 0x0 [ 69.418097][ T313] hid-generic 0003:0B05:184A.0012: hidraw1: USB HID v0.04 Device [HID 0b05:184a] on usb-dummy_hcd.4-1/input0 [ 69.533849][ T313] usb 5-1: USB disconnect, device number 3 [ 69.568513][ T1376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 69.817965][ T45] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 69.937961][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 69.969302][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 69.977725][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 69.988789][ T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 70.002093][ T45] usb 1-1: language id specifier not provided by device, defaulting to English [ 70.012099][ T45] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 70.021168][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.029179][ T45] usb 1-1: Product: syz [ 70.033330][ T45] usb 1-1: Manufacturer: syz [ 70.037929][ T45] usb 1-1: SerialNumber: syz [ 70.058271][ T1381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.298'. [ 70.067207][ T1381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.298'. [ 70.076124][ T1381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.298'. [ 70.085026][ T1381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.298'. [ 70.093921][ T1381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.298'. [ 70.102820][ T1381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.298'. [ 70.111722][ T1381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.298'. [ 70.120648][ T1381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.298'. [ 70.147955][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 70.154387][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 70.164044][ T9] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 70.173141][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.181180][ T9] usb 3-1: Product: syz [ 70.185348][ T9] usb 3-1: Manufacturer: syz [ 70.189964][ T9] usb 3-1: SerialNumber: syz [ 70.248118][ T45] usb 1-1: unit 4: unexpected type 0x03 [ 70.254352][ T45] usb 1-1: unit 0 not found! [ 70.258975][ T45] usb 1-1: unit 8 not found! [ 70.266423][ T45] usb 1-1: USB disconnect, device number 24 [ 70.275527][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.377948][ T311] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 70.403205][ T9] usb 3-1: USB disconnect, device number 16 [ 70.420747][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.529306][ T311] usb 5-1: unable to get BOS descriptor or descriptor too short [ 70.537346][ T311] usb 5-1: not running at top speed; connect to a high speed hub [ 70.545794][ T311] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.555917][ T311] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 70.568268][ T311] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 70.577338][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.585381][ T311] usb 5-1: Product: syz [ 70.589573][ T311] usb 5-1: Manufacturer: syz [ 70.594150][ T311] usb 5-1: SerialNumber: syz [ 70.723282][ T9] usb 4-1: USB disconnect, device number 7 [ 70.768470][ T1397] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 70.789573][ T1400] FAULT_INJECTION: forcing a failure. [ 70.789573][ T1400] name failslab, interval 1, probability 0, space 0, times 0 [ 70.803051][ T1400] CPU: 0 UID: 0 PID: 1400 Comm: syz.3.304 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a [ 70.803084][ T1400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 70.803097][ T1400] Call Trace: [ 70.803105][ T1400] [ 70.803112][ T1400] __dump_stack+0x21/0x30 [ 70.803136][ T1400] dump_stack_lvl+0x140/0x1c0 [ 70.803156][ T1400] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.803175][ T1400] ? xas_find_marked+0xcab/0xda0 [ 70.803201][ T1400] dump_stack+0x19/0x20 [ 70.803219][ T1400] should_fail_ex+0x3c2/0x510 [ 70.803239][ T1400] should_failslab+0xac/0x100 [ 70.803260][ T1400] kmem_cache_alloc_noprof+0x42/0x410 [ 70.803289][ T1400] ? __proc_create+0x535/0xb40 [ 70.803316][ T1400] __proc_create+0x535/0xb40 [ 70.803342][ T1400] ? proc_symlink+0x2d0/0x2d0 [ 70.803367][ T1400] ? __cfi_make_kgid+0x10/0x10 [ 70.803386][ T1400] _proc_mkdir+0x68/0x150 [ 70.803412][ T1400] netfilter_net_init+0x241/0x2a0 [ 70.803437][ T1400] ops_init+0x2ff/0x5d0 [ 70.803456][ T1400] ? __kasan_check_write+0x18/0x20 [ 70.803482][ T1400] ? rwsem_read_trylock+0x275/0x5a0 [ 70.803506][ T1400] setup_net+0x227/0x9b0 [ 70.803522][ T1400] ? copy_net_ns+0xa20/0xa20 [ 70.803548][ T1400] ? down_read_killable+0x7f/0x100 [ 70.803573][ T1400] ? __cfi_down_read_killable+0x10/0x10 [ 70.803599][ T1400] copy_net_ns+0x4fc/0xa20 [ 70.803625][ T1400] create_new_namespaces+0x390/0x6f0 [ 70.803658][ T1400] unshare_nsproxy_namespaces+0x124/0x180 [ 70.803679][ T1400] ksys_unshare+0x4f9/0x920 [ 70.803696][ T1400] ? fput+0x1a4/0x230 [ 70.803720][ T1400] ? __cfi_ksys_unshare+0x10/0x10 [ 70.803730][ T311] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 70.803736][ T1400] ? __kasan_check_write+0x18/0x20 [ 70.803761][ T1400] __x64_sys_unshare+0x3c/0x50 [ 70.803776][ T1400] x64_sys_call+0x2998/0x2ee0 [ 70.803797][ T1400] do_syscall_64+0x57/0xf0 [ 70.803818][ T1400] ? clear_bhb_loop+0x50/0xa0 [ 70.803847][ T1400] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.803874][ T1400] RIP: 0033:0x7fd36bba94d9 [ 70.803891][ T1400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.803908][ T1400] RSP: 002b:00007fd36c980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 70.803930][ T1400] RAX: ffffffffffffffda RBX: 00007fd36be25fa0 RCX: 00007fd36bba94d9 [ 70.803944][ T1400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 70.803957][ T1400] RBP: 00007fd36bc3804e R08: 0000000000000000 R09: 0000000000000000 [ 70.803971][ T1400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.803984][ T1400] R13: 00007fd36be26038 R14: 00007fd36be25fa0 R15: 00007ffd90910c18 [ 70.804002][ T1400] [ 70.804010][ T1400] cannot create netfilter proc entry [ 70.816650][ T311] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 71.085669][ T311] usb 5-1: 2:1 : format type 12 is not supported yet [ 71.108040][ T311] usb 5-1: USB disconnect, device number 4 [ 71.119978][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.167949][ T9] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 71.318886][ T9] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 71.329922][ T9] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 71.341330][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 71.348089][ T9] usb 3-1: New USB device found, idVendor=0b05, idProduct=184a, bcdDevice= 0.00 [ 71.357181][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.366202][ T9] usb 3-1: config 0 descriptor?? [ 71.371484][ T1406] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 71.781238][ T9] hid-generic 0003:0B05:184A.0013: unknown main item tag 0xd [ 71.788741][ T9] hid-generic 0003:0B05:184A.0013: unknown main item tag 0x0 [ 71.796128][ T9] hid-generic 0003:0B05:184A.0013: unknown main item tag 0x0 [ 71.803601][ T9] hid-generic 0003:0B05:184A.0013: unknown main item tag 0x0 [ 71.811009][ T9] hid-generic 0003:0B05:184A.0013: unknown main item tag 0x0 [ 71.818504][ T9] hid-generic 0003:0B05:184A.0013: unknown main item tag 0x0 [ 71.825908][ T9] hid-generic 0003:0B05:184A.0013: unknown main item tag 0x0 [ 71.833535][ T9] hid-generic 0003:0B05:184A.0013: unknown main item tag 0x0 [ 71.840949][ T9] hid-generic 0003:0B05:184A.0013: unknown main item tag 0x0 [ 71.848398][ T9] hid-generic 0003:0B05:184A.0013: unknown main item tag 0x0 [ 71.855790][ T9] hid-generic 0003:0B05:184A.0013: unknown main item tag 0x0 [ 71.863204][ T9] hid-generic 0003:0B05:184A.0013: unknown main item tag 0x0 [ 71.870644][ T9] hid-generic 0003:0B05:184A.0013: unknown main item tag 0x0 [ 71.878111][ T9] hid-generic 0003:0B05:184A.0013: unknown main item tag 0x0 [ 71.885491][ T9] hid-generic 0003:0B05:184A.0013: unknown main item tag 0x0 [ 71.892929][ T313] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 71.900681][ T9] hid-generic 0003:0B05:184A.0013: unknown main item tag 0x0 [ 71.908851][ T9] hid-generic 0003:0B05:184A.0013: hidraw0: USB HID v0.04 Device [HID 0b05:184a] on usb-dummy_hcd.2-1/input0 [ 71.984959][ T9] usb 3-1: USB disconnect, device number 17 [ 72.061994][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.078158][ T313] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 72.091543][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.100077][ T313] usb 1-1: config 0 descriptor?? [ 72.267986][ T311] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 72.417934][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 72.418995][ T311] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 72.435614][ T311] usb 4-1: config 1 interface 0 altsetting 1 has an endpoint descriptor with address 0x31, changing to 0x1 [ 72.447013][ T311] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 72.457885][ T311] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 72.472087][ T311] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 72.481151][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.489152][ T311] usb 4-1: Product: syz [ 72.493300][ T311] usb 4-1: Manufacturer: syz [ 72.498199][ T311] usb 4-1: SerialNumber: syz [ 72.504682][ T311] usb-storage 4-1:1.0: USB Mass Storage device detected [ 72.509143][ T313] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 72.518236][ T1442] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 72.522368][ T313] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0014/input/input15 [ 72.528495][ T311] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 72.540611][ T1443] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 72.554371][ T311] scsi host1: usb-storage 4-1:1.0 [ 72.599028][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.612274][ T313] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 72.624834][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 72.640152][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 72.649437][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.659273][ T9] usb 5-1: Found UVC 1.00 device (046d:0825) [ 72.704607][ T313] usb 4-1: USB disconnect, device number 8 [ 72.859850][ T1437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.868429][ T1437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.876630][ T9] usb 5-1: No streaming interface found for terminal 2. [ 73.081408][ T1437] sd 0:0:1:0: PR command failed: 1026 [ 73.086916][ T1437] sd 0:0:1:0: Sense Key : 0x5 [current] [ 73.092633][ T1437] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 73.617954][ T31] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 73.767940][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 73.774161][ T31] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.785206][ T31] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.795032][ T31] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 73.808093][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 73.814715][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 73.823834][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.832576][ T31] usb 3-1: config 0 descriptor?? [ 74.058196][ T1455] loop6: detected capacity change from 7 to 0 [ 74.397973][ T311] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 74.529513][ T450] usb 3-1: USB disconnect, device number 18 [ 74.557940][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 74.564143][ T311] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 74.575061][ T311] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.586140][ T311] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 74.599108][ T311] usb 4-1: config 0 interface 0 has no altsetting 0 [ 74.605718][ T311] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 74.614769][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.623590][ T311] usb 4-1: config 0 descriptor?? [ 74.660806][ T31] usb 1-1: USB disconnect, device number 25 [ 75.007980][ T31] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 75.031355][ T311] wacom 0003:056A:0000.0016: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 75.042229][ T311] wacom 0003:056A:0000.0016: hidraw0: USB HID v0.00 Joystick [HID 056a:0000] on usb-dummy_hcd.3-1/input0 [ 75.055584][ T1483] overlayfs: failed to resolve './file1/file0': -2 [ 75.063983][ T311] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0000.0016/input/input17 [ 75.077613][ T1483] overlayfs: overlapping lowerdir path [ 75.169286][ T31] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 75.177665][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.187883][ T31] usb 1-1: config 0 has no interface number 0 [ 75.194498][ T31] usb 1-1: too many endpoints for config 0 interface 110 altsetting 134: 236, using maximum allowed: 30 [ 75.206925][ T311] usb 5-1: USB disconnect, device number 5 [ 75.222678][ T31] usb 1-1: config 0 interface 110 altsetting 134 has 0 endpoint descriptors, different from the interface descriptor's value: 236 [ 75.237164][ T1465] input: syz0 as /devices/virtual/input/input16 [ 75.248783][ T31] usb 1-1: config 0 interface 110 has no altsetting 0 [ 75.270312][ T31] usb 1-1: New USB device found, idVendor=0f05, idProduct=184a, bcdDevice= 0.00 [ 75.283288][ T45] usb 4-1: USB disconnect, device number 9 [ 75.292369][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 75.292383][ T36] audit: type=1400 audit(1794533576.822:345): avc: denied { ioctl } for pid=1464 comm="syz.3.321" path="socket:[15767]" dev="sockfs" ino=15767 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.323121][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.326551][ T36] audit: type=1400 audit(1794533576.822:346): avc: denied { read } for pid=1464 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.350066][ T31] usb 1-1: config 0 descriptor?? [ 75.393349][ T36] audit: type=1400 audit(1794533576.932:347): avc: denied { listen } for pid=1498 comm="syz.4.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 75.558539][ T36] audit: type=1400 audit(1794533577.092:348): avc: denied { getopt } for pid=1503 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.560111][ T31] usb 1-1: string descriptor 0 read error: -71 [ 75.592215][ T31] usb 1-1: USB disconnect, device number 26 [ 75.596247][ T1510] __nla_validate_parse: 25 callbacks suppressed [ 75.596264][ T1510] netlink: 44 bytes leftover after parsing attributes in process `syz.4.333'. [ 76.037973][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 76.076878][ T36] audit: type=1400 audit(1794533577.612:349): avc: denied { read write } for pid=1519 comm="syz.2.335" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 76.107982][ T36] audit: type=1400 audit(1794533577.612:350): avc: denied { open } for pid=1519 comm="syz.2.335" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 76.208977][ T9] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 76.234786][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 76.245879][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 76.256775][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 76.270743][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.278903][ T1529] ./dev/sda1: Can't lookup blockdev [ 76.279844][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 76.293065][ T9] usb 4-1: SerialNumber: syz [ 76.299339][ T1518] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 76.307977][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 76.330141][ T36] audit: type=1400 audit(1794533577.872:351): avc: denied { accept } for pid=1531 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.417867][ T1535] overlayfs: overlapping lowerdir path [ 76.425497][ T36] audit: type=1400 audit(1794533577.962:352): avc: denied { ioctl } for pid=1534 comm="syz.0.341" path="socket:[15883]" dev="sockfs" ino=15883 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.463576][ T31] usb 3-1: device descriptor read/64, error -71 [ 76.513119][ T9] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 76.530891][ T9] usb 4-1: USB disconnect, device number 10 [ 76.707988][ T31] usb 3-1: device descriptor read/64, error -71 [ 76.714307][ T45] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 76.867978][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 76.874198][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.885122][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 76.897946][ T45] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 76.906973][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.915612][ T45] usb 1-1: config 0 descriptor?? [ 76.977962][ T31] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 77.031682][ T1544] tipc: Enabling of bearer rejected, failed to enable media [ 77.103615][ T36] audit: type=1400 audit(1794533578.642:353): avc: denied { create } for pid=1546 comm="syz.3.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 77.123281][ T31] usb 3-1: device descriptor read/64, error -71 [ 77.130809][ T45] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 77.138111][ T45] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 77.145331][ T45] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 77.152601][ T45] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 77.159870][ T45] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 77.167089][ T45] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 77.174350][ T45] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 77.181577][ T45] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 77.188800][ T45] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 77.196018][ T45] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 77.203268][ T45] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 77.210516][ T45] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 77.217743][ T45] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 77.228602][ T45] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0017/input/input20 [ 77.244935][ T45] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 77.367948][ T31] usb 3-1: device descriptor read/64, error -71 [ 77.488187][ T31] usb usb3-port1: attempt power cycle [ 77.500986][ T36] audit: type=1400 audit(1794533579.042:354): avc: denied { write } for pid=1559 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.530316][ T9] usb 1-1: USB disconnect, device number 27 [ 77.600121][ T45] rust_binder: 1574: undelivered freeze notification, 0000000000000001 [ 77.827997][ T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 77.848923][ T31] usb 3-1: device descriptor read/8, error -71 [ 77.857956][ T313] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 77.989017][ T31] usb 3-1: device descriptor read/8, error -71 [ 78.017938][ T313] usb 5-1: Using ep0 maxpacket: 8 [ 78.023958][ T313] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.034214][ T313] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 78.053502][ T313] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 78.068990][ T313] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 78.078104][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.086097][ T313] usb 5-1: Product: syz [ 78.096498][ T313] usb 5-1: Manufacturer: syz [ 78.101593][ T313] usb 5-1: SerialNumber: syz [ 78.247951][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 78.268989][ T31] usb 3-1: device descriptor read/8, error -71 [ 78.328000][ T45] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 78.373372][ T313] usb 5-1: USB disconnect, device number 6 [ 78.409182][ T31] usb 3-1: device descriptor read/8, error -71 [ 78.489087][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.500006][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.509911][ T45] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 78.519295][ T31] usb usb3-port1: unable to enumerate USB device [ 78.526033][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.538186][ T45] usb 1-1: config 0 descriptor?? [ 78.669966][ T1593] FAULT_INJECTION: forcing a failure. [ 78.669966][ T1593] name failslab, interval 1, probability 0, space 0, times 0 [ 78.682623][ T1593] CPU: 0 UID: 0 PID: 1593 Comm: syz.3.358 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a [ 78.682656][ T1593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 78.682669][ T1593] Call Trace: [ 78.682676][ T1593] [ 78.682685][ T1593] __dump_stack+0x21/0x30 [ 78.682709][ T1593] dump_stack_lvl+0x140/0x1c0 [ 78.682727][ T1593] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.682743][ T1593] ? avc_has_perm+0x155/0x240 [ 78.682764][ T1593] ? __cfi_avc_has_perm+0x10/0x10 [ 78.682780][ T1593] ? hook_file_open+0x1f2/0x8d0 [ 78.682794][ T1593] dump_stack+0x19/0x20 [ 78.682804][ T1593] should_fail_ex+0x3c2/0x510 [ 78.682821][ T1593] should_failslab+0xac/0x100 [ 78.682842][ T1593] __kmalloc_cache_noprof+0x41/0x470 [ 78.682868][ T1593] ? vhost_task_create+0x12c/0x3f0 [ 78.682891][ T1593] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 78.682910][ T1593] vhost_task_create+0x12c/0x3f0 [ 78.682922][ T1593] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 78.682937][ T1593] ? __cfi_vhost_task_create+0x10/0x10 [ 78.682950][ T1593] ? __cfi_vhost_task_fn+0x10/0x10 [ 78.682964][ T1593] ? __kasan_check_write+0x18/0x20 [ 78.682989][ T1593] ? mutex_lock+0x97/0x1d0 [ 78.683013][ T1593] ? __cfi_mutex_lock+0x10/0x10 [ 78.683035][ T1593] ? kernel_text_address+0xa9/0xe0 [ 78.683055][ T1593] kvm_mmu_post_init_vm+0x161/0x300 [ 78.683065][ T1593] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 78.683082][ T1593] ? _parse_integer_limit+0x195/0x1e0 [ 78.683097][ T1593] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 78.683119][ T1593] ? kstrtoull+0x13b/0x1e0 [ 78.683144][ T1593] ? kstrtouint+0x78/0xf0 [ 78.683169][ T1593] ? ioctl_has_perm+0x1bc/0x500 [ 78.683186][ T1593] ? __asan_memcpy+0x5a/0x80 [ 78.683201][ T1593] ? ioctl_has_perm+0x408/0x500 [ 78.683211][ T1593] ? has_cap_mac_admin+0xd0/0xd0 [ 78.683220][ T1593] ? __kasan_check_write+0x18/0x20 [ 78.683234][ T1593] ? mutex_lock_killable+0x97/0x1d0 [ 78.683249][ T1593] ? __cfi_mutex_lock_killable+0x10/0x10 [ 78.683273][ T1593] ? proc_fail_nth_write+0x184/0x220 [ 78.683298][ T1593] kvm_vcpu_ioctl+0xa43/0x1000 [ 78.683328][ T1593] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 78.683340][ T1593] ? hook_file_ioctl+0x1ef/0x590 [ 78.683354][ T1593] ? __cfi_vfs_write+0x10/0x10 [ 78.683369][ T1593] ? __cfi_hook_file_ioctl+0x10/0x10 [ 78.683383][ T1593] ? __kasan_check_write+0x18/0x20 [ 78.683402][ T1593] ? mutex_unlock+0x90/0x240 [ 78.683425][ T1593] ? __cfi_mutex_unlock+0x10/0x10 [ 78.683449][ T1593] ? __fget_files+0x2bc/0x330 [ 78.683469][ T1593] ? bpf_lsm_file_ioctl+0xd/0x20 [ 78.683483][ T1593] ? security_file_ioctl+0x3e/0x110 [ 78.683497][ T1593] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 78.683508][ T1593] __se_sys_ioctl+0x126/0x1b0 [ 78.683520][ T1593] __x64_sys_ioctl+0x7f/0xa0 [ 78.683530][ T1593] x64_sys_call+0x1878/0x2ee0 [ 78.683548][ T1593] do_syscall_64+0x57/0xf0 [ 78.683567][ T1593] ? clear_bhb_loop+0x50/0xa0 [ 78.683591][ T1593] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.683615][ T1593] RIP: 0033:0x7fd36bba94d9 [ 78.683627][ T1593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.683636][ T1593] RSP: 002b:00007fd36c980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.683649][ T1593] RAX: ffffffffffffffda RBX: 00007fd36be25fa0 RCX: 00007fd36bba94d9 [ 78.683658][ T1593] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 78.683665][ T1593] RBP: 00007fd36c980090 R08: 0000000000000000 R09: 0000000000000000 [ 78.683673][ T1593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.683682][ T1593] R13: 00007fd36be26038 R14: 00007fd36be25fa0 R15: 00007ffd90910c18 [ 78.683699][ T1593] [ 79.054492][ T45] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 79.061532][ T45] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 79.068677][ T45] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 79.075785][ T45] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 79.085876][ T45] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 79.092902][ T45] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 79.100548][ T45] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 79.108129][ T45] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 79.189393][ T45] cp2112 0003:10C4:EA90.0018: Part Number: 0x00 Device Version: 0x00 [ 79.395569][ T45] cp2112 0003:10C4:EA90.0018: error requesting SMBus config [ 79.404026][ T45] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -71 [ 79.414477][ T45] usb 1-1: USB disconnect, device number 28 [ 79.437954][ T31] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 79.478542][ T1242] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 79.527129][ T1628] FAULT_INJECTION: forcing a failure. [ 79.527129][ T1628] name failslab, interval 1, probability 0, space 0, times 0 [ 79.539895][ T1628] CPU: 0 UID: 0 PID: 1628 Comm: syz.4.368 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a [ 79.539920][ T1628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 79.539928][ T1628] Call Trace: [ 79.539933][ T1628] [ 79.539938][ T1628] __dump_stack+0x21/0x30 [ 79.539953][ T1628] dump_stack_lvl+0x140/0x1c0 [ 79.539963][ T1628] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.539974][ T1628] dump_stack+0x19/0x20 [ 79.539983][ T1628] should_fail_ex+0x3c2/0x510 [ 79.539994][ T1628] should_failslab+0xac/0x100 [ 79.540006][ T1628] kmem_cache_alloc_node_noprof+0x45/0x420 [ 79.540021][ T1628] ? dup_task_struct+0xc1/0xd80 [ 79.540036][ T1628] ? kasan_save_alloc_info+0x3a/0x50 [ 79.540050][ T1628] ? __kasan_kmalloc+0x96/0xb0 [ 79.540060][ T1628] ? __kmalloc_cache_noprof+0x23c/0x470 [ 79.540076][ T1628] dup_task_struct+0xc1/0xd80 [ 79.540089][ T1628] ? __kasan_check_write+0x18/0x20 [ 79.540103][ T1628] ? _raw_spin_lock_irq+0x93/0x120 [ 79.540115][ T1628] ? copy_process+0x33a0/0x33a0 [ 79.540129][ T1628] ? __kasan_check_write+0x18/0x20 [ 79.540143][ T1628] copy_process+0x579/0x33a0 [ 79.540159][ T1628] ? kasan_save_alloc_info+0x3a/0x50 [ 79.540172][ T1628] ? __cfi_copy_process+0x10/0x10 [ 79.540186][ T1628] ? __kmalloc_cache_noprof+0x23c/0x470 [ 79.540201][ T1628] ? __kasan_check_write+0x18/0x20 [ 79.540215][ T1628] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 79.540229][ T1628] vhost_task_create+0x1f7/0x3f0 [ 79.540242][ T1628] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 79.540256][ T1628] ? __cfi_vhost_task_create+0x10/0x10 [ 79.540269][ T1628] ? __cfi_vhost_task_fn+0x10/0x10 [ 79.540281][ T1628] ? __kasan_check_write+0x18/0x20 [ 79.540295][ T1628] ? mutex_lock+0x97/0x1d0 [ 79.540308][ T1628] ? __cfi_mutex_lock+0x10/0x10 [ 79.540320][ T1628] ? kernel_text_address+0xa9/0xe0 [ 79.540344][ T1628] kvm_mmu_post_init_vm+0x161/0x300 [ 79.540355][ T1628] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 79.540371][ T1628] ? _parse_integer_limit+0x195/0x1e0 [ 79.540387][ T1628] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 79.540402][ T1628] ? kstrtoull+0x13b/0x1e0 [ 79.540416][ T1628] ? kstrtouint+0x78/0xf0 [ 79.540430][ T1628] ? ioctl_has_perm+0x1bc/0x500 [ 79.540440][ T1628] ? __asan_memcpy+0x5a/0x80 [ 79.540454][ T1628] ? ioctl_has_perm+0x408/0x500 [ 79.540463][ T1628] ? has_cap_mac_admin+0xd0/0xd0 [ 79.540473][ T1628] ? __kasan_check_write+0x18/0x20 [ 79.540487][ T1628] ? mutex_lock_killable+0x97/0x1d0 [ 79.540500][ T1628] ? __cfi_mutex_lock_killable+0x10/0x10 [ 79.540514][ T1628] ? proc_fail_nth_write+0x184/0x220 [ 79.540529][ T1628] kvm_vcpu_ioctl+0xa43/0x1000 [ 79.540541][ T1628] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 79.540552][ T1628] ? hook_file_ioctl+0x1ef/0x590 [ 79.540566][ T1628] ? __cfi_vfs_write+0x10/0x10 [ 79.540581][ T1628] ? __cfi_hook_file_ioctl+0x10/0x10 [ 79.540595][ T1628] ? __kasan_check_write+0x18/0x20 [ 79.540609][ T1628] ? mutex_unlock+0x90/0x240 [ 79.540621][ T1628] ? __cfi_mutex_unlock+0x10/0x10 [ 79.540635][ T1628] ? __fget_files+0x2bc/0x330 [ 79.540646][ T1628] ? bpf_lsm_file_ioctl+0xd/0x20 [ 79.540658][ T1628] ? security_file_ioctl+0x3e/0x110 [ 79.540673][ T1628] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 79.540684][ T1628] __se_sys_ioctl+0x126/0x1b0 [ 79.540695][ T1628] __x64_sys_ioctl+0x7f/0xa0 [ 79.540706][ T1628] x64_sys_call+0x1878/0x2ee0 [ 79.540718][ T1628] do_syscall_64+0x57/0xf0 [ 79.540729][ T1628] ? clear_bhb_loop+0x50/0xa0 [ 79.540743][ T1628] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.540757][ T1628] RIP: 0033:0x7f315fba94d9 [ 79.540768][ T1628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.540778][ T1628] RSP: 002b:00007f3160b17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.540791][ T1628] RAX: ffffffffffffffda RBX: 00007f315fe25fa0 RCX: 00007f315fba94d9 [ 79.540799][ T1628] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 79.540807][ T1628] RBP: 00007f3160b17090 R08: 0000000000000000 R09: 0000000000000000 [ 79.540814][ T1628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.540821][ T1628] R13: 00007f315fe26038 R14: 00007f315fe25fa0 R15: 00007ffe6db57e58 [ 79.540831][ T1628] [ 79.618191][ T1242] usb 3-1: device descriptor read/64, error -71 [ 79.990063][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 4 [ 80.001227][ T31] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1023 [ 80.002276][ T1634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.371'. [ 80.014047][ T31] usb 4-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 80.030282][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.038328][ T31] usb 4-1: Product: syz [ 80.042552][ T31] usb 4-1: Manufacturer: syz [ 80.047151][ T31] usb 4-1: SerialNumber: syz [ 80.207968][ T1242] usb 3-1: device descriptor read/64, error -71 [ 80.255336][ T1605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.263926][ T45] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 80.272082][ T1605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.286282][ T31] usb 4-1: Can't get UAC3 power state for id 10 [ 80.293775][ T31] usb 4-1: BAAD HEADPHONE p_chmask mismatch [ 80.303109][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 80.314987][ T31] usb 4-1: USB disconnect, device number 11 [ 80.327702][ T825] udevd[825]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.417971][ T1624] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 80.437983][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 80.444212][ T45] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 80.452392][ T1242] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 80.460042][ T45] usb 1-1: config 0 has no interface number 0 [ 80.467579][ T45] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 80.476703][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.484905][ T45] usb 1-1: Product: syz [ 80.489156][ T45] usb 1-1: Manufacturer: syz [ 80.493757][ T45] usb 1-1: SerialNumber: syz [ 80.499245][ T45] usb 1-1: config 0 descriptor?? [ 80.504954][ T45] smsc95xx v2.0.0 [ 80.578922][ T1624] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.589061][ T1624] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.597979][ T1624] usb 5-1: config 1 has no interface number 0 [ 80.604089][ T1242] usb 3-1: device descriptor read/64, error -71 [ 80.611689][ T1624] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 80.620743][ T1624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.628744][ T1624] usb 5-1: Product: syz [ 80.632904][ T1624] usb 5-1: Manufacturer: syz [ 80.637482][ T1624] usb 5-1: SerialNumber: syz [ 80.847978][ T1242] usb 3-1: device descriptor read/64, error -71 [ 80.958042][ T1242] usb usb3-port1: attempt power cycle [ 81.005041][ T1624] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 81.014875][ T1624] usb 5-1: USB disconnect, device number 7 [ 81.021161][ T382] udevd[382]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.057953][ T450] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 81.208958][ T450] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.220493][ T450] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 81.231372][ T450] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 81.241114][ T450] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.254068][ T450] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.263238][ T450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.271793][ T450] usb 4-1: config 0 descriptor?? [ 81.317999][ T1242] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 81.338940][ T1242] usb 3-1: device descriptor read/8, error -71 [ 81.479021][ T1242] usb 3-1: device descriptor read/8, error -71 [ 81.507068][ T45] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 81.518309][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 81.518325][ T36] audit: type=1400 audit(1794533583.062:358): avc: denied { read write } for pid=1660 comm="syz.4.377" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 81.551468][ T36] audit: type=1400 audit(1794533583.062:359): avc: denied { open } for pid=1660 comm="syz.4.377" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 81.576096][ T36] audit: type=1400 audit(1794533583.062:360): avc: denied { ioctl } for pid=1660 comm="syz.4.377" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 81.679548][ T450] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 81.690071][ T450] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 81.717957][ T1242] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 81.718041][ T45] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 81.736609][ T45] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 81.745935][ T45] usb 1-1: USB disconnect, device number 29 [ 81.753410][ T1242] usb 3-1: device descriptor read/8, error -71 [ 81.838014][ T1624] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 81.888940][ T1242] usb 3-1: device descriptor read/8, error -71 [ 81.967948][ T1624] usb 5-1: device descriptor read/64, error -71 [ 81.998024][ T1242] usb usb3-port1: unable to enumerate USB device [ 82.207956][ T1624] usb 5-1: device descriptor read/64, error -71 [ 82.269904][ T1670] FAULT_INJECTION: forcing a failure. [ 82.269904][ T1670] name failslab, interval 1, probability 0, space 0, times 0 [ 82.282545][ T1670] CPU: 0 UID: 0 PID: 1670 Comm: syz.2.380 Not tainted syzkaller #0 d0298b8d1e296f515c72f3e7771343822107510a [ 82.282566][ T1670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 82.282574][ T1670] Call Trace: [ 82.282579][ T1670] [ 82.282585][ T1670] __dump_stack+0x21/0x30 [ 82.282600][ T1670] dump_stack_lvl+0x140/0x1c0 [ 82.282610][ T1670] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.282620][ T1670] ? __kasan_check_write+0x18/0x20 [ 82.282636][ T1670] ? copy_mm+0x307/0x1da0 [ 82.282653][ T1670] dump_stack+0x19/0x20 [ 82.282663][ T1670] should_fail_ex+0x3c2/0x510 [ 82.282673][ T1670] should_failslab+0xac/0x100 [ 82.282685][ T1670] kmem_cache_alloc_noprof+0x42/0x410 [ 82.282701][ T1670] ? alloc_pid+0xa5/0xb80 [ 82.282717][ T1670] ? __asan_memcpy+0x5a/0x80 [ 82.282732][ T1670] alloc_pid+0xa5/0xb80 [ 82.282745][ T1670] copy_process+0x1494/0x33a0 [ 82.282760][ T1670] ? __cfi_copy_process+0x10/0x10 [ 82.282774][ T1670] ? __kmalloc_cache_noprof+0x23c/0x470 [ 82.282793][ T1670] ? __kasan_check_write+0x18/0x20 [ 82.282817][ T1670] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 82.282841][ T1670] vhost_task_create+0x1f7/0x3f0 [ 82.282854][ T1670] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 82.282868][ T1670] ? __cfi_vhost_task_create+0x10/0x10 [ 82.282881][ T1670] ? __cfi_vhost_task_fn+0x10/0x10 [ 82.282894][ T1670] ? __kasan_check_write+0x18/0x20 [ 82.282908][ T1670] ? mutex_lock+0x97/0x1d0 [ 82.282921][ T1670] ? __cfi_mutex_lock+0x10/0x10 [ 82.282934][ T1670] ? kernel_text_address+0xa9/0xe0 [ 82.282950][ T1670] kvm_mmu_post_init_vm+0x161/0x300 [ 82.282961][ T1670] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 82.282976][ T1670] ? _parse_integer_limit+0x195/0x1e0 [ 82.282992][ T1670] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 82.283007][ T1670] ? kstrtoull+0x13b/0x1e0 [ 82.283021][ T1670] ? kstrtouint+0x78/0xf0 [ 82.283038][ T1670] ? ioctl_has_perm+0x1bc/0x500 [ 82.283048][ T1670] ? __asan_memcpy+0x5a/0x80 [ 82.283062][ T1670] ? ioctl_has_perm+0x408/0x500 [ 82.283072][ T1670] ? has_cap_mac_admin+0xd0/0xd0 [ 82.283081][ T1670] ? __kasan_check_write+0x18/0x20 [ 82.283096][ T1670] ? mutex_lock_killable+0x97/0x1d0 [ 82.283109][ T1670] ? __cfi_mutex_lock_killable+0x10/0x10 [ 82.283122][ T1670] ? proc_fail_nth_write+0x184/0x220 [ 82.283137][ T1670] kvm_vcpu_ioctl+0xa43/0x1000 [ 82.283150][ T1670] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 82.283161][ T1670] ? hook_file_ioctl+0x1ef/0x590 [ 82.283175][ T1670] ? __cfi_vfs_write+0x10/0x10 [ 82.283189][ T1670] ? __cfi_hook_file_ioctl+0x10/0x10 [ 82.283203][ T1670] ? __kasan_check_write+0x18/0x20 [ 82.283217][ T1670] ? mutex_unlock+0x90/0x240 [ 82.283229][ T1670] ? __cfi_mutex_unlock+0x10/0x10 [ 82.283243][ T1670] ? __fget_files+0x2bc/0x330 [ 82.283254][ T1670] ? bpf_lsm_file_ioctl+0xd/0x20 [ 82.283266][ T1670] ? security_file_ioctl+0x3e/0x110 [ 82.283281][ T1670] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 82.283292][ T1670] __se_sys_ioctl+0x126/0x1b0 [ 82.283303][ T1670] __x64_sys_ioctl+0x7f/0xa0 [ 82.283314][ T1670] x64_sys_call+0x1878/0x2ee0 [ 82.283325][ T1670] do_syscall_64+0x57/0xf0 [ 82.283337][ T1670] ? clear_bhb_loop+0x50/0xa0 [ 82.283351][ T1670] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.283365][ T1670] RIP: 0033:0x7f540fda94d9 [ 82.283375][ T1670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.283384][ T1670] RSP: 002b:00007f5410d09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.283397][ T1670] RAX: ffffffffffffffda RBX: 00007f5410025fa0 RCX: 00007f540fda94d9 [ 82.283406][ T1670] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 82.283413][ T1670] RBP: 00007f5410d09090 R08: 0000000000000000 R09: 0000000000000000 [ 82.283421][ T1670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.283428][ T1670] R13: 00007f5410026038 R14: 00007f5410025fa0 R15: 00007ffc52ba8388 [ 82.283437][ T1670] [ 82.588229][ T1624] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 82.740998][ T1677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.749437][ T1677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.807966][ T1624] usb 5-1: device descriptor read/64, error -71 [ 82.977975][ T1242] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 83.047977][ T1624] usb 5-1: device descriptor read/64, error -71 [ 83.127974][ T1242] usb 3-1: Using ep0 maxpacket: 8 [ 83.134118][ T1242] usb 3-1: config 3 has an invalid interface number: 45 but max is 0 [ 83.137968][ T1680] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 83.142734][ T1242] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 83.158629][ T1242] usb 3-1: config 3 has no interface number 0 [ 83.164712][ T1242] usb 3-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.177600][ T1624] usb usb5-port1: attempt power cycle [ 83.183226][ T1242] usb 3-1: config 3 interface 45 has no altsetting 0 [ 83.191481][ T1242] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 83.200561][ T1242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.208555][ T1242] usb 3-1: Product: syz [ 83.212731][ T1242] usb 3-1: Manufacturer: syz [ 83.217304][ T1242] usb 3-1: SerialNumber: syz [ 83.432075][ T1242] usb 3-1: USB disconnect, device number 27 [ 83.434620][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.500237][ T1683] rust_binder: 1682:1683 got reply transaction with no transaction stack [ 83.508711][ T1683] rust_binder: 1682:1683 transaction reply to 0:0 failed EINVAL, code 1 size 0-0 line thread.rs:1556 [ 83.519658][ T1624] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 83.521509][ T9] rust_binder: 1682: undelivered TRANSACTION_ERROR: 29201 [ 83.539034][ T1624] usb 5-1: device descriptor read/8, error -71 [ 83.668967][ T1624] usb 5-1: device descriptor read/8, error -71 [ 83.907979][ T1624] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 83.928940][ T1624] usb 5-1: device descriptor read/8, error -71 [ 83.994236][ T45] usb 4-1: USB disconnect, device number 12 [ 84.049661][ T1693] fuse: Bad value for 'fd' [ 84.059019][ T1624] usb 5-1: device descriptor read/8, error -71 [ 84.138953][ T45] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 84.157965][ T1242] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 84.168149][ T1624] usb usb5-port1: unable to enumerate USB device [ 84.289458][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 84.297112][ T45] usb 4-1: can't read configurations, error -61 [ 84.307975][ T1242] usb 1-1: Using ep0 maxpacket: 16 [ 84.314341][ T1242] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.325738][ T1242] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 84.338762][ T1242] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.345412][ T1242] usb 1-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 84.354746][ T1242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.364793][ T1242] usb 1-1: config 0 descriptor?? [ 84.427978][ T45] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 84.580279][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 84.588139][ T45] usb 4-1: can't read configurations, error -61 [ 84.589865][ T1701] syzkaller1: entered promiscuous mode [ 84.594574][ T45] usb usb4-port1: attempt power cycle [ 84.599936][ T1701] syzkaller1: entered allmulticast mode [ 84.774615][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.781602][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.788670][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.795546][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.802410][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.809291][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.816132][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.822993][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.830032][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.836876][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.843843][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.850760][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.857612][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.864509][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.871413][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.878381][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.885244][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.892248][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.899306][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.906163][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.913032][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.919910][ T1242] wacom 0003:056A:0303.001A: unknown main item tag 0x0 [ 84.926904][ T1242] wacom 0003:056A:0303.001A: Unknown device_type for 'HID 056a:0303'. Assuming pen. [ 84.936911][ T1242] wacom 0003:056A:0303.001A: hidraw0: USB HID v0.00 Device [HID 056a:0303] on usb-dummy_hcd.0-1/input0 [ 84.948021][ T45] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 84.956318][ T1242] input: Wacom Intuos PT M Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0303.001A/input/input22 [ 84.968474][ T1624] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 84.979598][ T1711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.989818][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 84.991251][ T1711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.997391][ T45] usb 4-1: can't read configurations, error -61 [ 85.128975][ T1624] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.139827][ T45] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 85.148162][ T1624] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.161014][ T1624] usb 5-1: config 0 interface 0 has no altsetting 0 [ 85.168216][ T1624] usb 5-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 85.177222][ T1624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.186097][ T1624] usb 5-1: config 0 descriptor?? [ 85.198004][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 85.205609][ T45] usb 4-1: can't read configurations, error -61 [ 85.212129][ T45] usb usb4-port1: unable to enumerate USB device [ 85.408075][ T1721] netlink: 57 bytes leftover after parsing attributes in process `syz.2.396'. [ 85.598671][ T1624] wacom 0003:056A:003F.001B: hidraw1: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.4-1/input0 [ 85.677970][ T9] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 85.795095][ T313] usb 5-1: USB disconnect, device number 12 [ 85.828983][ T9] usb 3-1: config 176 has an invalid interface descriptor of length 3, skipping [ 85.838318][ T9] usb 3-1: config 176 has an invalid descriptor of length 153, skipping remainder of the config [ 85.848772][ T9] usb 3-1: config 176 has 0 interfaces, different from the descriptor's value: 4 [ 85.859769][ T9] usb 3-1: string descriptor 0 read error: -22 [ 85.865941][ T9] usb 3-1: New USB device found, idVendor=09fb, idProduct=6026, bcdDevice=ae.dc [ 85.875012][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.086355][ T1624] usb 3-1: USB disconnect, device number 28 [ 86.323846][ T1730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.400'. [ 86.333248][ T1730] overlay: Unknown parameter '/' [ 86.578019][ T1624] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 86.728977][ T36] audit: type=1400 audit(1794533588.272:361): avc: denied { map } for pid=1746 comm="syz.2.407" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.754185][ T1624] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.764497][ T1624] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.779709][ T1624] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 86.789667][ T1624] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.804130][ T1624] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 86.813190][ T1624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.821196][ T1624] usb 5-1: Product: syz [ 86.825367][ T1624] usb 5-1: Manufacturer: syz [ 86.830010][ T1624] usb 5-1: SerialNumber: syz [ 86.836862][ T1624] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 86.848098][ T1624] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 86.858900][ T1624] usbserial_generic 5-1:1.0: generic converter detected [ 86.866560][ T1624] usb 5-1: generic converter now attached to ttyUSB0 [ 86.927812][ T608] usb 1-1: USB disconnect, device number 30 [ 87.018071][ T313] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 87.037976][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 87.107274][ T1753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.115817][ T1753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.124645][ T1753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.133108][ T1753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.169087][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 87.180147][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.190140][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 87.195362][ T313] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 87.204481][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.213515][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.224680][ T313] usb 4-1: config 0 descriptor?? [ 87.229954][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 87.239129][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.248327][ T9] usb 3-1: config 0 descriptor?? [ 87.287978][ T608] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 87.439017][ T608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.449947][ T1745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.450073][ T1745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.458376][ T608] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 87.477115][ T608] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.492397][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 87.501025][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 87.510465][ T608] usb 1-1: config 0 descriptor?? [ 87.516052][ T9] usb 3-1: USB disconnect, device number 29 [ 87.693263][ T313] isku 0003:1E7D:319C.001C: unknown main item tag 0x0 [ 87.700156][ T313] isku 0003:1E7D:319C.001C: item fetching failed at offset 1/7 [ 87.707875][ T313] isku 0003:1E7D:319C.001C: parse failed [ 87.713592][ T313] isku 0003:1E7D:319C.001C: probe with driver isku failed with error -22 [ 87.807946][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 87.925754][ T608] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 87.935214][ T608] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001D/input/input28 [ 87.957943][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 87.964152][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 99, changing to 7 [ 87.976738][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 87.985895][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.993925][ T9] usb 3-1: Product: syz [ 87.999165][ T9] usb 3-1: Manufacturer: syz [ 88.004264][ T9] usb 3-1: SerialNumber: syz [ 88.010030][ T608] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 88.228290][ T9] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 88.238482][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 88.249831][ T9] usb 3-1: USB disconnect, device number 30 [ 88.257961][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.568974][ T36] audit: type=1400 audit(1794533590.112:362): avc: denied { map } for pid=1766 comm="syz.3.413" path="/98/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 88.748571][ T1782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1782 comm=syz.2.418 [ 89.333533][ T1624] usb 5-1: USB disconnect, device number 13 [ 89.344694][ T1624] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 89.351811][ T36] audit: type=1400 audit(1794533590.892:363): avc: denied { read } for pid=1804 comm="syz.4.424" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.356090][ T1624] usbserial_generic 5-1:1.0: device disconnected [ 89.423442][ T1806] syzkaller1: entered promiscuous mode [ 89.429025][ T1806] syzkaller1: entered allmulticast mode [ 89.557247][ T36] audit: type=1400 audit(1794533591.092:364): avc: denied { create } for pid=1810 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.584470][ T36] audit: type=1400 audit(1794533591.102:365): avc: denied { bind } for pid=1810 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.584768][ T1813] ./dev/sda1: Can't lookup blockdev [ 89.615647][ T36] audit: type=1400 audit(1794533591.102:366): avc: denied { mount } for pid=1810 comm="syz.2.426" name="/" dev="ramfs" ino=19731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 89.639242][ T36] audit: type=1400 audit(1794533591.112:367): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 89.663421][ T1823] SELinux: policydb string does not match my string SE Linux [ 89.671088][ T1823] SELinux: failed to load policy [ 89.783367][ T1833] printk: legacy console [ttyS0] disabled syzkaller