last executing test programs: 6.174385569s ago: executing program 1 (id=107): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000040), 0x6e, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/166, 0xa6}, {&(0x7f0000000180)=""/12, 0xc}, {&(0x7f00000001c0)=""/54, 0x36}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000280)=""/142, 0x8e}], 0x5, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}, 0x40002123) setsockopt$inet6_tcp_int(r5, 0x6, 0x11, &(0x7f0000000500)=0x5, 0x4) (async, rerun: 32) ioctl$sock_SIOCSIFBR(r9, 0x8941, &(0x7f00000005c0)=@get={0x1, &(0x7f0000000540)=""/77, 0x100000001}) (rerun: 32) ioctl$KVM_CAP_STEAL_TIME(r9, 0x4068aea3, &(0x7f0000000600)) (async) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f0000000680)) (async) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0x0) (async) fgetxattr(r12, &(0x7f00000006c0)=@random={'user.', '-\x00'}, &(0x7f0000000700)=""/233, 0xe9) ioctl$PTP_EXTTS_REQUEST2(r10, 0x40103d0b, &(0x7f0000000800)={0x3, 0x8}) (async) ioctl$sock_FIOGETOWN(r13, 0x8903, &(0x7f0000000840)=0x0) ioctl$TIOCSPGRP(r11, 0x5410, &(0x7f0000000880)=r14) ioctl$INCFS_IOC_FILL_BLOCKS(r11, 0x80106720, &(0x7f0000000980)={0x1, &(0x7f0000000940)=[{0x9, 0x69, &(0x7f00000008c0)="9002578c917c994041d5ba9fecb261d5cdd672959b5349a7326931b6aaab7479e2b4d615b2287a99eb160badf66956c9260bb0902c86b4d28bd0b52df0d6db033751ecd6a3d78b2b7f33ed0238f0127a6e605702866ac7f71d2da2806a7b2c87c3409a79c6c40bd007", 0x1}]}) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000009c0)={0x7ff, 0x9, 0xfffffffb, 0x0, 0x8}) (async, rerun: 64) ioctl$SNAPSHOT_UNFREEZE(r8, 0x3302) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a00)={'macsec0\x00'}) (async) pipe(&(0x7f0000000a40)) (async) ioctl$XFS_IOC_GETBMAPX(r6, 0xc0205838, &(0x7f0000000a80)={0x4, 0x100000000, 0x2, 0x7ff, 0x1, 0x4ccda4d8ff483d2a, 0x8}) r15 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000003, 0x100011, r15, 0x80000000) (async, rerun: 64) setsockopt$sock_timeval(r10, 0x1, 0x15, &(0x7f0000000ac0)={0x0, 0xea60}, 0x10) (rerun: 64) ioctl$XFS_IOC_OPEN_BY_HANDLE(r10, 0xc038586b, &(0x7f0000000c00)={r10, &(0x7f0000000b00)='user.', 0x111000, &(0x7f0000000b40)={@_ha_fsid={[0x3, 0x7a]}, {0x8, 0xef45, 0x4}}, 0x9, &(0x7f0000000b80)={@_ha_fsid}, &(0x7f0000000bc0)=0x5}) readahead(r15, 0x8, 0xc0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async, rerun: 64) r16 = openat2(r3, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x2000, 0xc0, 0x8}, 0x18) (rerun: 64) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r16, 0x4010ae74, &(0x7f0000000cc0)={0x9, 0xa6f, 0x634}) (async) dup(r9) ioctl$BTRFS_IOC_ENCODED_WRITE(r15, 0x40809440, &(0x7f00000020c0)={&(0x7f0000002040)=[{&(0x7f0000000d00)="5b9652544919e9ef052af2e72379f0dd5eb6566c45fdbfc6fc70a3a2412b274d107562f0e9522b49056dd2aa3c0c1e4074ac7a93508bce70acec4532453e04ed148cb6c53673151bf1dec03bff7889cc6cfa59b392bf24eb9d1e58206ebb15539d4e464cb76711068d30074981c9da13e0be5ab8ea10d5de4be26f6687ee6bebea16f890d669788ade8360981a1c2aa68f7a0168e0270a75fbca585a4861bbcb87d234309cc0cb7ecb657e1d290cebc3d9414bba9e8dafce527fe46dc53dc821ae45eaf7091448060377bc497e02b2138960e549baf82dc07d03e99dddf3ad64ff7b30bdeafef5aeb0699fbff414d33491c666cdade1f1b4", 0xf8}, {&(0x7f0000000e00)="890e9fe5ea4ecfa37f411801", 0xc}, {&(0x7f0000000e40)="c520fd4d215a7ad93ea3a6c3293ffb3ada4cdbbad30ebf1c2983388fb1fa98d0e20dab500191b96545333e42c694c66a41e74155cea0955fc28a573abeb37085fa077126d1d87f44292f351429f1815e2592209b538b4d6a19e988b6945a48543c0ee759b6298a837d11c7d34ca22254973efeb51a2597be8f9bb80f75c39b943e74a4921c94c85b3a9395b819b7cb896623de44e2f9deaa3babd106d383fed93caa563eb6015b08cb1ecaa41dd9d0d8cb16ed45a338911ae9723d282165d428047a4b1eac45d9fd4799d1a7406a91ceba66de", 0xd3}, {&(0x7f0000000f40)="6dbfd7dc9d8548839ff4977543f65205004401e6da72610463a786fc1a8b665fadc1943e4f8a5c959595425d7a8c769fa8c6a5cac50f2b66b118f26fcf8a6cba48a6669450fdc400a1d6d7328079f5426f7544715501a6ada800e4e5eb4e06151916a91b52941ec6f30f062384a43ae88075cf550540ba3ecb3f9acc48381f2d6ed19873481e032f1b7345490c1078b241a3d75ee6477d91cbecf77e3a0fa6c69fec746764f31d5110f4fed44b1cf58fd11252df26868022b0e0c683b3a88030207f207107aad40b958cc4659b67114ff3385ecd6af5f270a156f9ab666b92544fa155", 0xe3}, {&(0x7f0000001040)="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", 0x1000}], 0x5, 0x1, 0x0, 0x0, 0x5, 0x2, 0x3, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000002180)={0x6, &(0x7f0000002140)=[{0x10, 0x3, 0x3}, {0xbc, 0xf7, 0xb, 0x1}, {0xf, 0x7, 0x7, 0xfffff800}, {0x0, 0x4, 0x4d, 0xff}, {0x175f, 0x1, 0x4, 0x6}, {0x0, 0x3, 0x3, 0x3}]}) (async, rerun: 32) ioctl$UFFDIO_ZEROPAGE(r16, 0xc020aa04, &(0x7f00000021c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) (rerun: 32) 6.021862235s ago: executing program 1 (id=108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20000888) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x4}, 0x4) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) 5.463865338s ago: executing program 0 (id=111): munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (async, rerun: 32) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xffffffffffffff00, 0x6}}, 0x28) (async, rerun: 32) r1 = userfaultfd(0x80001) (rerun: 32) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4a1}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) syz_usb_connect$midi(0x0, 0x41, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x67, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x6, [], [{{0x9, 0x5, 0x8, 0x1e, 0x200, 0x9, 0x81, 0xa6, {0x14, 0x25, 0x1, 0x10, "75479719933d85d2574ae415413a55fd"}}}]}}}}}]}}, 0x0) 4.766876494s ago: executing program 0 (id=113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{0xeeee8000, 0x2000, 0xb, 0xad, 0x3, 0x4, 0x7c, 0x8, 0x0, 0x29, 0x9}, {0x2, 0x30000, 0xa, 0x2c, 0x8, 0x2, 0x7f, 0x4, 0x4, 0xf0, 0x9, 0x80}, {0x9000, 0xeeee0000, 0x8, 0x5, 0x1, 0x22, 0x0, 0xd, 0x0, 0x5, 0xb}, {0xdddd0000, 0x54000, 0x0, 0xe7, 0x8, 0x2, 0x1, 0x3c, 0x8, 0x8b, 0xd, 0xed}, {0x4, 0x8080000, 0x3, 0x4, 0x5, 0x86, 0x9, 0x7f, 0xa, 0x0, 0x4, 0x43}, {0x30000, 0x6000, 0xb, 0x0, 0x2, 0x24, 0x7f, 0xaf, 0x9, 0xc, 0x8, 0x3d}, {0x40000, 0x8000000, 0x3, 0x2, 0x8, 0x5, 0x1, 0x83, 0x5, 0x82, 0x3}, {0x5000, 0x3000, 0x3, 0x5, 0x9, 0xa6, 0x3, 0x36, 0x0, 0x9, 0xb0, 0xfe}, {0x9000, 0x2070}, {0xd000, 0x7}, 0x80000033, 0x0, 0xeeef0000, 0x2507, 0x4, 0x0, 0x58000, [0x4, 0x7, 0x7, 0x3]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 4.539224942s ago: executing program 0 (id=115): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x6c, @string={0x6c, 0x3, "2016318d00e08628d71582aa458ee7f664b2ab52c37eb97a9b9553887a9ea8d59da883ffec95e683ef3ddfafa197c68584ead603033de8f83cd254cd3824699cce57725e9dcd3cebdeacef0ad179ee6718c434bd08a02ce7692b6a97bcd392f569540ff334854258f558"}}, &(0x7f0000000440)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xb, "d9"}, @global=@item_4={0x3, 0x1, 0x3, "180827be"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) rt_sigprocmask(0x1000000, &(0x7f0000000080)={[0x8]}, 0x0, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x6c, @string={0x6c, 0x3, "2016318d00e08628d71582aa458ee7f664b2ab52c37eb97a9b9553887a9ea8d59da883ffec95e683ef3ddfafa197c68584ead603033de8f83cd254cd3824699cce57725e9dcd3cebdeacef0ad179ee6718c434bd08a02ce7692b6a97bcd392f569540ff334854258f558"}}, &(0x7f0000000440)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xb, "d9"}, @global=@item_4={0x3, 0x1, 0x3, "180827be"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) rt_sigprocmask(0x1000000, &(0x7f0000000080)={[0x8]}, 0x0, 0x8) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) (async) 4.292054564s ago: executing program 1 (id=116): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r0, 0x80407000) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460504028d0400000000000000020006000400000019000000380000005e0200000804000004002000dd"], 0x38) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x300, 0x70bd29, 0x5, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4.104923225s ago: executing program 1 (id=117): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40187014, &(0x7f0000000200)) setuid(0xee00) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (async) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1f84de2c97b0e51c, 0x8) (async) r1 = fsmount(r0, 0x1f84de2c97b0e51c, 0x8) openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x27) (async) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x27) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x2b, &(0x7f0000000080)={0x13, 0x10, 0x3}) (async) rt_tgsigqueueinfo(r2, r3, 0x2b, &(0x7f0000000080)={0x13, 0x10, 0x3}) r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r4, &(0x7f0000000740)=""/377, 0x179) (async) read(r4, &(0x7f0000000740)=""/377, 0x179) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) truncate(&(0x7f0000000000)='./file0\x00', 0x6) (async) truncate(&(0x7f0000000000)='./file0\x00', 0x6) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) unshare(0x2c020400) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000001c0)=0x3) (async) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSDEBUG(r5, 0x40047440, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r6 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x1) (async) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) r8 = openat(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x4003, 0x28) lseek(r8, 0x1, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 3.751830873s ago: executing program 1 (id=118): mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x2000008, &(0x7f0000000000)=ANY=[@ANYBLOB="6e725f00f6ffff64733d6d2c00"]) 3.431645807s ago: executing program 0 (id=119): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x8000, 0x1000000000, 0x1ffffffffffd, 0x3, 0x2d191, 0x3da0000000000, 0x2004cb, 0x80001000, 0xa7c, 0x3, 0x5, 0x9, 0x7, 0x0, 0x0, 0x8], 0xffffffff, 0xa02}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="000000002400000000000000290000003200000000000000000000000000ffffac1414300939"], 0x50}}], 0x1, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 3.418763429s ago: executing program 3 (id=120): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x1000000001, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, 0x0, 0x1) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000000c0)="366623ec66b90009000066b80088000066ba000000000ff7fa3e660f3881b4b902baf80c66b83f369b8466efbafc0c0f201cee26260f5fc8baf80c66b834cc398466efbafc0c66b82e6d2a0366ef0f9919660f73d200", 0x56}], 0x1, 0x2, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fce000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0xffff1000, {}, 0x1}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011e57ed00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) read(r5, 0x0, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0x2) ptrace$pokeuser(0x6, r4, 0x358, 0xffff8880b870e000) 3.151693024s ago: executing program 0 (id=121): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000003340), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000003380)={0x14, r1, 0x3ed0f2fc0dbe7387, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4040) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x8481, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="080028bd7000fddbdf250a00000008003200e1000000060028000100000008003900000000000600280001000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x810) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES64=0x0, @ANYRESOCT=r1, @ANYBLOB="19d646a6774cb0f5e40c58504919e161861d49ecd725e711be9370e6bea93e96ffde1d216f5cd4df7d6f1986ee77bdc935871a1dc69034d935c242297f6f3b65432bde398f779c036af76e6f1ddcf8c394fab14caff5c9662c6d83b1722f4e0331076692f4d85b7de8a4e8acf33ecac1d7c06c96876ac6a6f311f5507bccc2a0", @ANYRES64=r1, @ANYRES16=r2, @ANYRESOCT=r0], 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) 3.150864704s ago: executing program 3 (id=122): syz_usb_connect(0x2, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db7700000003090220000100ac31000904000000ef"], 0x0) r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4e22, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x3}}]}, 0xc4}}, 0x80c4) open(&(0x7f0000000040)='./file0\x00', 0x2080, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x1000) 2.522172979s ago: executing program 2 (id=125): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x141041, 0x0) pwritev2(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="96fd", 0x2}], 0x1, 0x1, 0x3, 0x1a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r5, &(0x7f00000000c0)="8f2a0a65bd8c602b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 2.239014376s ago: executing program 2 (id=126): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xdc, 0x81, 0x3, 0xffffffff, 0x2, 0x3e, 0x1001, 0xfe, 0x40, 0x20000002001df, 0x0, 0x3e, 0x38, 0x1, 0x27, 0x5}, [{0x3, 0x0, 0x7fffffffffffffff, 0x2, 0x6, 0xfff, 0x80059b4, 0x8}]}, 0x78) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 2.206091382s ago: executing program 2 (id=127): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4004080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a87000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 2.031517441s ago: executing program 1 (id=128): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000400)=0x55e, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x5, 0x4) syz_usb_connect$uac2(0x4, 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000401e040030400001020301090286f00201003003080b00020109200609040000000101200009240102000626000311240803060000000000000200030000000c240304020301030d85c480090401000001022000090401010101022000090501092000080500082501010604040009040200000102200009040201010102200009052209ff0303e6400825010303fe0500"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 1.910887711s ago: executing program 2 (id=129): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x374, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0xff7f, 0x6, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x1, 0x82}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1555555555555758}) syz_usb_control_io(r0, 0x0, 0x0) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x6666, 0x8801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x19, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)={'b', ' *:* ', 'r\x00'}, 0x8) (async) sync_file_range(r2, 0x401, 0x8, 0x7) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async) syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (rerun: 32) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7, "270a81bb"}]}}, 0x0}, 0x0) (rerun: 32) 1.55830804s ago: executing program 3 (id=130): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x2, "eb4ce3b9"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_012={0x2, 0x0, 0x9, "beff"}, @local=@item_4={0x3, 0x2, 0x0, "8b923659"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x2, "eb4ce3b9"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_012={0x2, 0x0, 0x9, "beff"}, @local=@item_4={0x3, 0x2, 0x0, "8b923659"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) (async) socketpair(0x1, 0x1, 0x0, 0x0) (async) 599.415ms ago: executing program 2 (id=131): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x1000000001, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, 0x0, 0x1) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000000c0)="366623ec66b90009000066b80088000066ba000000000ff7fa3e660f3881b4b902baf80c66b83f369b8466efbafc0c0f201cee26260f5fc8baf80c66b834cc398466efbafc0c66b82e6d2a0366ef0f9919660f73d200", 0x56}], 0x1, 0x2, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fce000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0xffff1000, {}, 0x1}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) read(r5, 0x0, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0x2) ptrace$pokeuser(0x6, r4, 0x358, 0xffff8880b870e000) 321.307096ms ago: executing program 2 (id=132): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES8=0x0, @ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="014390634bbf2e59dc3dd0212c0eb20427b4e33b8a7de17a6208d3f9c7b90057fe7cb782effa4b184c84062d024cb4d87827e3a0dc3a8f36de8b4f236545d373b90c54090d9e4296a6b4bc85b7df8e09275bcb10738c7237337372b0838369f389bc3c762b7be5757f38b028eda8ec54c866c1d687ff1e"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x6, 0x4d, 0xb, "eda8af0000000045"}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)={0x20, 0x8, 0x3e, {0x3e, 0x8, "455cac8277e5a59b9892092d811832e5f8868ca23d3a1e8cf93d3a4f05b9a4bcdb70a8e941ea6930dd7bb2cb165621aa3959a9818c8fe3a401d19c8a"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}, &(0x7f0000000180)={0x0, 0x22, 0x18, {[@local=@item_4={0x3, 0x2, 0x0, "cbe1cb9f"}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x1, 0x2, 0x8, "86"}, @local=@item_4={0x3, 0x2, 0x4, "5c25cb25"}, @global=@item_012={0x1, 0x1, 0xb, "90"}, @local=@item_012={0x0, 0x2, 0xa}, @local=@item_012={0x2, 0x2, 0x5, "dcf1"}, @global=@item_4={0x3, 0x1, 0x8, "949a0674"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x100, 0xd3, 0x1, {0x22, 0x124}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)={0x20, 0x13, 0xdd, "48398e9bcc4b41c27b44d9cad1c40cd76b15b29d13b191a258e86c84e1b78c01ab598ba7cc7512a32ca0d00c0b7582ef9023193742184e77a7ee6d0d9c5f372e0665a616b6452e362679f66f68c36b611d27f3959767720716fbef23639948b610dc19891761500367eedb6da6a72ce8c9ad9db69ac23d2784c5164b2713a2f03943b4bb28d59d0925e59d0f48b5faa24b6282dd0f8317d56dd7875aa44223f55c20e9d0670d46d7f1e7c16ede710ea11dfbf0047b00052b28af3f755f95cfdda44057ff1f380733e1b829a4829cb271ef9cc3ae83bc667ddeb5ffabdb"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x14}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000480)={0x20, 0x1, 0xc4, "928dca5914e6ca636a67a93f9b91940c6fb3c4d24e0aa135592aad620bc03d867548409ff30025fe06c1bb4433cce0d032ceb3f5112d482547e3b79d2d3b932faea64080459cf64308da6043e901d112f668edaafb24a381b48cb0a44213f3b4bd45351fdea1f947990568a79c36de12a0ab5c892024af7d4277d598e2d1f8dffe8505dedfc811d9efeefa216f956e71c5532ada207ef87641c6495292b8ea7b4cf522d05da7290e478b61936b3219f0623e0f226c30994c527d22f3374b51777453cec9"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0xa}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x3, "0f39be"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 293.198201ms ago: executing program 3 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe0, r1, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2cef}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa0ec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd135}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x11}, 0x808c4) recvmmsg(r0, &(0x7f0000000980)=[{{&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/7, 0x7}, {&(0x7f00000002c0)=""/43, 0x2b}], 0x2, &(0x7f0000000340)=""/23, 0x17}, 0x1}, {{&(0x7f0000000380)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/181, 0xb5}, {&(0x7f0000000780)=""/243, 0xf3}], 0x7, &(0x7f0000000900)=""/90, 0x5a}, 0xf}], 0x2, 0x0, &(0x7f0000000a00)={0x0, 0x989680}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000e80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000ac0)={0x374, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "faa9aceaef5b57167926686ad9a1ffa509e3c3c968b6ed"}}, @TIPC_NLA_NODE_ID={0x58, 0x3, "d3a4939a928419cf88386de101ae469be5f597d876ffc93c0f724e162656a517496f1542974271cf584ef4ceba0dbc175652d8c5c7c1144e8c067d810352b4eb50ad407864f296ad0ca87a6556d764313d44c90f"}, @TIPC_NLA_NODE_ID={0xbc, 0x3, "5eedaae3b0646d820e387bb362faf77df521666486d41929566cc38a5f917c0343ea99bb1e0c65fd0b06705bd789a7b7d1c4095e2763553c9c9d9621bc0c813cd38a688be68c5c288b7f4c2e91d4ce6150901be3eb762dd3e2bc1b3b6620e3f42115678b15988f9411cced19d64ecef7d820629a097e76e7bd9a4c52e135523823713da5db9f339517b5eac89a8686651207e9fd806a00ce1eb6ce3c81d7024ad894c2201f96f53e4d6d6dfd290cab8c08277fa69d16dad4"}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcde}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc24}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xce3, @remote, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff8000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x88}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7fff, @loopback, 0x794}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @remote, 0x9}}}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x18f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa4e00000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc1}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @private1, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x6c, 0x200, @local, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}]}]}, 0x374}, 0x1, 0x0, 0x0, 0x90}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x44, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0x1c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c081) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x80) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000001040)={0x2710, 0x4, 0x8000000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r7 = fspick(0xffffffffffffffff, &(0x7f0000001080)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000010c0)='#..{\x00', &(0x7f0000001100)='wlan0\x00', 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000001140)={0x0, 0x1, 0x6}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_SIOCSIFBR(r8, 0x8941, &(0x7f00000012c0)=@add_del={0x2, &(0x7f0000001280)='veth0_macvtap\x00'}) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000001300)='\x00', &(0x7f0000001340)='%{\x00', 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000001480)={r5, &(0x7f0000001380)='wlan0\x00', 0x101000, &(0x7f00000013c0)={@align=0x9, {0x5, 0x6, 0x8000, 0x2}}, 0xc, &(0x7f0000001400)={@_ha_fsid}, &(0x7f0000001440)=0x7}) read$FUSE(r9, &(0x7f00000014c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000003500)={0x6, 'veth1_vlan\x00', {0x48000000}, 0x7f}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000003580)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000003680)=0xe8) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000003bc0)={r9, &(0x7f0000003ac0)='\x00', 0x412000, &(0x7f0000003b00)={@_ha_fsid={[0x2, 0x2]}, {0x5, 0x1, 0x7, 0xd663}}, 0x5, &(0x7f0000003b40)={@_ha_fsid}, &(0x7f0000003b80)=0x5}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003c00)={0x0}, &(0x7f0000003c40)=0xc) r16 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000003c80), 0x0, 0x0) r17 = eventfd(0x7) r18 = open_tree(r9, &(0x7f0000003cc0)='./file0\x00', 0x100001) sendmsg$netlink(r0, &(0x7f0000005ec0)={&(0x7f0000003540)=@proc={0x10, 0x0, 0x25dfdbfc, 0x10000000}, 0xc, &(0x7f0000003a80)=[{&(0x7f00000036c0)={0x39c, 0x19, 0x0, 0x70bd26, 0x25dfdbfe, "", [@typed={0x4, 0x10e}, @generic="c1ecb52bb08530b1da79", @typed={0x8, 0x14b, 0x0, 0x0, @u32=0x6}, @nested={0xb8, 0xd0, 0x0, 0x1, [@generic="6b4ff6a936e1e8078fdc3c5208898bc248913db33d66cc292c9524866150c22529a48f5c265e180e572352e1131c0832a3eea7fd9c6e0852124cda79b212538e574400b187b728b7816eb6c41fae3449470ca37c6027584c73f9603066d6a9eb2218b2b1f23b170768567a110294575ae4e7e61aa3055fc38c82a19e01044b54dccce13b581c8781915d50b8804db38d1a8c81aeeffed02fc66f485fdecc23998cd813ed39a310ac97a815217d31669d4e7e2bea"]}, @nested={0x1b4, 0x48, 0x0, 0x1, [@nested={0x4, 0x13d}, @nested={0x4, 0xae}, @nested={0x4, 0x4d}, @generic="57111e60c40d69f26940b7b74ee49040bd2e3bfdecf90814b457baaa7c5f87aeebbb636238ee80e1f797476c8767c51e563f4f23837b39a5f3b369bbafd2338639ac896a4b58ca0b2a83ddfba6e5d72033f2ade9ed9ec98e87f009733499b76dd1b678a4d33b15d569c63059e70cfd95cbc579cc0a2daefedbbd8dd4ba3e78fe9831bd830109ae68b38526613134869ff1de22edd985eac57def9d83266b242a84c19fdac5d4cdb8fb6d1218037b136de355f610ddc7282be5da98b0810cd4b9fe6a56eb0ef4a93cc558263eabb307e8542fe02cb432b22166c447b636c58b37cb8ce678315fa33d5b796b9084ab9914703e4bd71cab4f3e1055", @generic="00cb7579e3bef1703a93a8ceef6655a417711470f5d66e23953cdc3afdae218f22f21a1a127d4cb67d2f6f4b75c2072656b36ed1f12ac4f1c27edececd91bd916d2b7bc9aaf6c071c412192a9d296c0b69681f91fa993f95fcdefbbd04fdaa29e586899cc382a7031b3f8b62b78c716214a6d6d82eb9974bd0d3cc8ad51627031dede59d5aa2b61f13b739c1244eca87f7a54527c4c6e10a6359718edc2ab6be5793", @typed={0x8, 0x12f, 0x0, 0x0, @pid=r12}]}, @typed={0x8, 0x5c, 0x0, 0x0, @pid=r12}, @nested={0x82, 0x108, 0x0, 0x1, [@typed={0xc, 0x116, 0x0, 0x0, @u64=0x4a4a}, @nested={0x4, 0x4b}, @nested={0x4, 0x8a}, @typed={0x8, 0x14b, 0x0, 0x0, @uid=r13}, @generic="148d7483a8a73a1f1bc7ea3f812e0a0bb3d87e5f1587ec3c9ee32c78dae7ed3c76bfbb15aae8cc63bf30af5a5d4dffee483b74bb4b8eba2644b7d7c16ea00b2ff4e31d6208d0eac292923b90f285cbb2cb63d1429d8fc83b4425ec7e263158b9aaed"]}, @generic="def2b12f113ad56f84f46cd8d09b9678c7915c32ef13997b29e3019412de3831ace3f53be1b5694d50e878ac981ec720fd029e32cfda82fa511a0200a17aa5e0cc5ec3f566bfcbde7dd84f49a20d763de0fe11aa5fdf287b44f919cdd29af5034fac9932d45ce4ec5f5ca35049c8df49ab768c137963b8c9dede64db635f"]}, 0x39c}], 0x1, &(0x7f0000005d80)=[@rights={{0x1c, 0x1, 0x1, [r14, r6, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r12, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r15, r10, r11}}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [r16, r9, r0, r5, r2, r17]}}, @rights={{0x18, 0x1, 0x1, [r18, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {r12, r10, r11}}}, @rights={{0x1c, 0x1, 0x1, [r5, r8, r2]}}], 0x110, 0x20004044}, 0x8840) 171.621341ms ago: executing program 3 (id=134): r0 = socket$netlink(0x10, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000000c0)={0xcc, 0x50, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 17.442077ms ago: executing program 0 (id=135): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') sendfile(r0, r0, &(0x7f0000000000)=0x5, 0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat, @fd, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0xfffffffffffffd75) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f00000020c0)) 0s ago: executing program 3 (id=136): r0 = openat(0xffffffffffffff9c, &(0x7f0000002140)='./file1\x00', 0x42, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) syz_usb_connect$midi(0x0, 0x32, &(0x7f0000001140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xfc08, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x80, 0x0, 0xf, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x78, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0x3, 0x19, {0x5, 0x25, 0x1, 0x1, "e4"}}}]}}}}}]}}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): cess permissive=1 [ 13.438239][ T36] audit: type=1400 audit(1776012859.640:63): avc: denied { siginh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 21.156396][ T36] audit: type=1400 audit(1776012867.360:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.159228][ T282] cgroup: Unknown subsys name 'net' [ 21.179146][ T36] audit: type=1400 audit(1776012867.370:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.206334][ T36] audit: type=1400 audit(1776012867.390:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.206921][ T282] cgroup: Unknown subsys name 'devices' [ 21.348575][ T282] cgroup: Unknown subsys name 'hugetlb' [ 21.354185][ T282] cgroup: Unknown subsys name 'rlimit' [ 21.529520][ T36] audit: type=1400 audit(1776012867.740:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.552691][ T36] audit: type=1400 audit(1776012867.740:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.577417][ T36] audit: type=1400 audit(1776012867.740:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.606865][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.615596][ T36] audit: type=1400 audit(1776012867.820:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.641052][ T36] audit: type=1400 audit(1776012867.820:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.684511][ T36] audit: type=1400 audit(1776012867.890:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.710056][ T36] audit: type=1400 audit(1776012867.890:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.710683][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.492473][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.499552][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.506606][ T292] bridge_slave_0: entered allmulticast mode [ 22.513005][ T292] bridge_slave_0: entered promiscuous mode [ 22.521958][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.529072][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.536163][ T292] bridge_slave_1: entered allmulticast mode [ 22.542369][ T292] bridge_slave_1: entered promiscuous mode [ 22.577991][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.585068][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.592382][ T289] bridge_slave_0: entered allmulticast mode [ 22.598748][ T289] bridge_slave_0: entered promiscuous mode [ 22.604992][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.612064][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.619183][ T289] bridge_slave_1: entered allmulticast mode [ 22.625341][ T289] bridge_slave_1: entered promiscuous mode [ 22.648226][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.655265][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.662361][ T290] bridge_slave_0: entered allmulticast mode [ 22.668617][ T290] bridge_slave_0: entered promiscuous mode [ 22.674927][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.681987][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.689049][ T290] bridge_slave_1: entered allmulticast mode [ 22.695275][ T290] bridge_slave_1: entered promiscuous mode [ 22.725939][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.733044][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.740241][ T291] bridge_slave_0: entered allmulticast mode [ 22.746435][ T291] bridge_slave_0: entered promiscuous mode [ 22.755129][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.762177][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.769241][ T291] bridge_slave_1: entered allmulticast mode [ 22.775557][ T291] bridge_slave_1: entered promiscuous mode [ 22.903317][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.910393][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.917696][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.924738][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.938483][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.945526][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.952816][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.959862][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.969939][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.976997][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.984247][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.991288][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.999721][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.006780][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.014056][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.021105][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.063775][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.071438][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.078810][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.085959][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.093668][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.100863][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.108270][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.115454][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.134555][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.141614][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.150947][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.158005][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.170055][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.177111][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.184679][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.191717][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.205318][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.212369][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.219947][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.226992][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.249716][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.256841][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.264466][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.271519][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.305517][ T292] veth0_vlan: entered promiscuous mode [ 23.313854][ T289] veth0_vlan: entered promiscuous mode [ 23.334385][ T289] veth1_macvtap: entered promiscuous mode [ 23.348682][ T290] veth0_vlan: entered promiscuous mode [ 23.355355][ T291] veth0_vlan: entered promiscuous mode [ 23.364461][ T292] veth1_macvtap: entered promiscuous mode [ 23.387416][ T290] veth1_macvtap: entered promiscuous mode [ 23.401820][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.433241][ T291] veth1_macvtap: entered promiscuous mode [ 23.453346][ T310] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.702097][ T337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 23.766765][ T308] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.927433][ T308] usb 3-1: Using ep0 maxpacket: 32 [ 23.941868][ T308] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 23.961817][ T308] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.976180][ T308] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.987788][ T308] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 24.000854][ T308] usb 3-1: config 0 interface 0 has no altsetting 0 [ 24.008161][ T308] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 24.017373][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.026550][ T308] usb 3-1: config 0 descriptor?? [ 24.238119][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.386867][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 24.393207][ T31] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 24.401383][ T31] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 24.410131][ T31] usb 4-1: config 0 has no interface number 0 [ 24.416244][ T31] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 24.426315][ T31] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 24.438185][ T31] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 24.447290][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.455304][ T31] usb 4-1: Product: syz [ 24.466932][ T31] usb 4-1: Manufacturer: syz [ 24.471564][ T31] usb 4-1: SerialNumber: syz [ 24.481461][ T308] hid-thrustmaster 0003:044F:B65D.0001: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 24.482392][ T31] usb 4-1: config 0 descriptor?? [ 24.500936][ T372] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 24.508340][ T372] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 24.515771][ T308] hid-thrustmaster 0003:044F:B65D.0001: Wrong number of endpoints? [ 24.545709][ T382] tmpfs: Unknown parameter 'gr' [ 24.551169][ T382] option changes via remount are deprecated (pid=381 comm=syz.1.14) [ 24.626757][ T65] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.713210][ T392] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.722987][ T372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.732387][ T392] bridge_slave_0 (unregistering): left allmulticast mode [ 24.738481][ T372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.751507][ T392] bridge_slave_0 (unregistering): left promiscuous mode [ 24.758557][ T392] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.787973][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.798984][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.808863][ T65] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 24.819033][ C0] hid-thrustmaster 0003:044F:B65D.0001: URB to get model id failed with error -71 [ 24.827047][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.836337][ T308] usb 3-1: USB disconnect, device number 2 [ 24.848117][ T65] usb 1-1: config 0 descriptor?? [ 24.856938][ T65] usbhid 1-1:0.0: can't add hid device: -22 [ 24.863339][ T65] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 24.923558][ T31] asix 4-1:0.251: probe with driver asix failed with error -71 [ 24.932891][ T31] usb 4-1: USB disconnect, device number 2 [ 24.989029][ T396] capability: warning: `syz.1.17' uses deprecated v2 capabilities in a way that may be insecure [ 25.000449][ T395] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 25.009296][ T395] overlayfs: missing 'lowerdir' [ 25.057936][ T9] usb 1-1: USB disconnect, device number 2 [ 25.266823][ T308] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 25.417834][ T308] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 1024, setting to 64 [ 25.430185][ T308] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 25.439257][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.447544][ T308] usb 2-1: Product: syz [ 25.451724][ T308] usb 2-1: Manufacturer: syz [ 25.456301][ T308] usb 2-1: SerialNumber: syz [ 25.463426][ T399] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 25.574500][ T418] netlink: 'syz.0.23': attribute type 4 has an invalid length. [ 25.585102][ T418] netlink: 'syz.0.23': attribute type 4 has an invalid length. [ 25.678849][ T308] usb 2-1: USB disconnect, device number 2 [ 25.689675][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.706793][ T401] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 25.858264][ T401] usb 3-1: unable to get BOS descriptor or descriptor too short [ 25.866862][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.868496][ T401] usb 3-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 25.883471][ T401] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.891540][ T401] usb 3-1: Product: syz [ 25.895731][ T401] usb 3-1: Manufacturer: syz [ 25.900390][ T401] usb 3-1: SerialNumber: syz [ 26.017931][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.028911][ T31] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 26.037978][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.046644][ T31] usb 1-1: config 0 descriptor?? [ 26.107606][ T401] usb 3-1: __uac_clock_find_source(): recursive clock topology detected, id 8. [ 26.116630][ T401] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 26.126789][ T401] usb 3-1: failed to enable PITCH for EP 0x1 [ 26.132818][ T401] usb 3-1: __uac_clock_find_source(): recursive clock topology detected, id 8. [ 26.141849][ T401] usb 3-1: __uac_clock_find_source(): recursive clock topology detected, id 8. [ 26.151522][ T401] usb 3-1: unit 2 not found! [ 26.158371][ T401] usb 3-1: unit 8: unexpected type 0x0c [ 26.173267][ T401] usb 3-1: USB disconnect, device number 3 [ 26.174731][ T423] overlayfs: missing 'lowerdir' [ 26.193068][ T423] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.229621][ T36] kauditd_printk_skb: 85 callbacks suppressed [ 26.229655][ T36] audit: type=1400 audit(1776012872.440:159): avc: denied { getopt } for pid=424 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.313111][ T36] audit: type=1400 audit(1776012872.520:160): avc: denied { getopt } for pid=431 comm="syz.1.27" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.457038][ T31] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 26.466787][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input5 [ 26.538441][ T36] audit: type=1400 audit(1776012872.750:161): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=460 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.561281][ T65] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.569093][ T31] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 26.582300][ T36] audit: type=1400 audit(1776012872.750:162): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=460 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.606409][ T36] audit: type=1400 audit(1776012872.750:163): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=460 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.649435][ T435] can: request_module (can-proto-7) failed. [ 26.658571][ T308] usb 1-1: USB disconnect, device number 3 [ 26.708263][ T36] audit: type=1400 audit(1776012872.920:164): avc: denied { ioctl } for pid=434 comm="syz.2.28" path="socket:[4489]" dev="sockfs" ino=4489 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.733500][ T36] audit: type=1400 audit(1776012872.920:165): avc: denied { create } for pid=434 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 26.753874][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.764781][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.774563][ T65] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 26.787443][ T65] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 26.796469][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.805087][ T65] usb 2-1: config 0 descriptor?? [ 27.215154][ T65] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x2 [ 27.222755][ T65] plantronics 0003:047F:FFFF.0003: item fetching failed at offset 11/15 [ 27.231455][ T65] plantronics 0003:047F:FFFF.0003: parse failed [ 27.237782][ T65] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22 [ 27.274832][ T36] audit: type=1400 audit(1776012873.480:166): avc: denied { setopt } for pid=446 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.294573][ T36] audit: type=1400 audit(1776012873.480:167): avc: denied { accept } for pid=446 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.315394][ T36] audit: type=1400 audit(1776012873.480:168): avc: denied { read } for pid=446 comm="syz.0.32" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.336652][ T308] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.415879][ T65] usb 2-1: USB disconnect, device number 3 [ 27.488681][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.504600][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.518974][ T308] usb 4-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 27.528275][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.537413][ T308] usb 4-1: config 0 descriptor?? [ 27.678909][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 27.691163][ T470] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 27.816752][ T31] usb 1-1: device descriptor read/64, error -71 [ 27.926875][ T401] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.953113][ T442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.965281][ T442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.984667][ T308] wacom 0003:056A:030C.0004: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.3-1/input0 [ 28.066798][ T401] usb 3-1: device descriptor read/64, error -71 [ 28.076818][ T31] usb 1-1: device descriptor read/64, error -71 [ 28.178628][ T65] usb 4-1: USB disconnect, device number 3 [ 28.306767][ T401] usb 3-1: device descriptor read/64, error -71 [ 28.316795][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 28.446738][ T31] usb 1-1: device descriptor read/64, error -71 [ 28.546743][ T401] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 28.676742][ T401] usb 3-1: device descriptor read/64, error -71 [ 28.686868][ T31] usb 1-1: device descriptor read/64, error -71 [ 28.796910][ T31] usb usb1-port1: attempt power cycle [ 28.916759][ T401] usb 3-1: device descriptor read/64, error -71 [ 28.936758][ T308] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 29.026812][ T401] usb usb3-port1: attempt power cycle [ 29.088124][ T308] usb 4-1: unable to get BOS descriptor or descriptor too short [ 29.096129][ T308] usb 4-1: not running at top speed; connect to a high speed hub [ 29.107167][ T308] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 29.125803][ T308] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 29.135361][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.143394][ T308] usb 4-1: Product: syz [ 29.146843][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 29.147596][ T308] usb 4-1: Manufacturer: syz [ 29.159644][ T308] usb 4-1: SerialNumber: syz [ 29.167861][ T31] usb 1-1: device descriptor read/8, error -71 [ 29.246743][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 29.297809][ T31] usb 1-1: device descriptor read/8, error -71 [ 29.368551][ T308] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 29.377047][ T401] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 29.384579][ T308] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 29.392831][ T308] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 29.401293][ T308] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 29.410392][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 29.421158][ T401] usb 3-1: device descriptor read/8, error -71 [ 29.427401][ T308] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 29.435957][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 29.447685][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 29.457520][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 29.472647][ T9] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 29.483630][ T308] usb 4-1: USB disconnect, device number 4 [ 29.491332][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.501539][ T9] usb 2-1: Product: syz [ 29.506070][ T9] usb 2-1: Manufacturer: syz [ 29.510754][ T9] usb 2-1: SerialNumber: syz [ 29.516289][ T9] usb 2-1: config 0 descriptor?? [ 29.546786][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 29.558023][ T401] usb 3-1: device descriptor read/8, error -71 [ 29.567682][ T31] usb 1-1: device descriptor read/8, error -71 [ 29.697720][ T31] usb 1-1: device descriptor read/8, error -71 [ 29.727106][ T486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.735615][ T486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.743901][ T65] usb 2-1: USB disconnect, device number 4 [ 29.796756][ T401] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 29.806878][ T31] usb usb1-port1: unable to enumerate USB device [ 29.817932][ T401] usb 3-1: device descriptor read/8, error -71 [ 29.947822][ T401] usb 3-1: device descriptor read/8, error -71 [ 30.056816][ T401] usb usb3-port1: unable to enumerate USB device [ 30.126749][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 30.281083][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 30.290978][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 30.300057][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.308084][ T9] usb 4-1: Product: syz [ 30.312251][ T9] usb 4-1: Manufacturer: syz [ 30.316867][ T9] usb 4-1: SerialNumber: syz [ 30.496768][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 30.524302][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 30.559608][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 30.570578][ T9] usb 4-1: USB disconnect, device number 5 [ 30.582601][ T426] udevd[426]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.646789][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 30.653250][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 30.661886][ T31] usb 2-1: too many endpoints for config 1 interface 0 altsetting 1: 120, using maximum allowed: 30 [ 30.672711][ T31] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 30.682551][ T31] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 30.692490][ T31] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 120 [ 30.705561][ T31] usb 2-1: config 1 interface 0 has no altsetting 0 [ 30.716958][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.726042][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.734388][ T31] usb 2-1: Product: В [ 30.738883][ T31] usb 2-1: SerialNumber: syz [ 30.744487][ T492] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 30.751681][ T492] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 30.856725][ T65] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 30.962114][ T31] usb 2-1: USB disconnect, device number 5 [ 31.006745][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 31.014325][ T65] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 246, changing to 7 [ 31.026981][ T65] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 31.036085][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.044764][ T65] usb 1-1: Product: syz [ 31.051628][ T65] usb 1-1: Manufacturer: syz [ 31.061448][ T505] overlayfs: unescaped trailing colons in lowerdir mount option. [ 31.061998][ T65] usb 1-1: SerialNumber: syz [ 31.074645][ T505] netlink: 'syz.3.50': attribute type 1 has an invalid length. [ 31.083340][ T505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 31.102598][ T507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 31.106829][ T308] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 31.267843][ T308] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 31.276251][ T308] usb 3-1: config 0 has no interface number 0 [ 31.281147][ T498] fuse: Bad value for 'rootmode' [ 31.282807][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 31.282845][ T36] audit: type=1400 audit(1776012877.480:192): avc: denied { mounton } for pid=497 comm="syz.0.48" path="/10/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 31.298438][ T498] netlink: 36 bytes leftover after parsing attributes in process `syz.0.48'. [ 31.315338][ T308] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.335335][ T308] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.345355][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 31.356164][ T36] audit: type=1400 audit(1776012877.500:193): avc: denied { write } for pid=497 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.365642][ T498] netlink: 'syz.0.48': attribute type 1 has an invalid length. [ 31.376382][ T308] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.397024][ T308] usb 3-1: config 0 interface 1 has no altsetting 0 [ 31.403983][ T308] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 31.413381][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.427995][ T308] usb 3-1: config 0 descriptor?? [ 31.435412][ T65] usb 1-1: 1:1 : bogus bTerminalLink 1 [ 31.442576][ T65] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 31.476833][ T65] usb 1-1: USB disconnect, device number 8 [ 31.511900][ T426] udevd[426]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.547888][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 31.558952][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 31.576751][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 31.592506][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.766992][ T530] cgroup: fork rejected by pids controller in /syz1 [ 31.804392][ T9] usb 4-1: USB disconnect, device number 6 [ 31.836098][ T36] audit: type=1400 audit(1776012878.040:194): avc: denied { write } for pid=499 comm="syz.2.49" name="route" dev="proc" ino=4026532482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 32.059168][ T36] audit: type=1400 audit(1776012878.270:195): avc: denied { setopt } for pid=499 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.094401][ T36] audit: type=1400 audit(1776012878.270:196): avc: denied { relabelfrom } for pid=499 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 32.126827][ T36] audit: type=1400 audit(1776012878.270:197): avc: denied { relabelto } for pid=499 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 32.147658][ T36] audit: type=1400 audit(1776012878.270:198): avc: denied { setopt } for pid=499 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.171421][ T308] uclogic 0003:145F:0212.0005: failed retrieving string descriptor #100: -71 [ 32.181327][ T308] uclogic 0003:145F:0212.0005: failed retrieving pen parameters: -71 [ 32.189492][ T308] uclogic 0003:145F:0212.0005: pen probing failed: -71 [ 32.196375][ T308] uclogic 0003:145F:0212.0005: failed probing parameters: -71 [ 32.206771][ T308] uclogic 0003:145F:0212.0005: probe with driver uclogic failed with error -71 [ 32.220658][ T308] usb 3-1: USB disconnect, device number 8 [ 32.276734][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 32.336823][ T36] audit: type=1400 audit(1776012878.550:199): avc: denied { ioctl } for pid=667 comm="syz.3.61" path="socket:[4939]" dev="sockfs" ino=4939 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.366815][ T36] audit: type=1400 audit(1776012878.570:200): avc: denied { bind } for pid=667 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.406994][ T36] audit: type=1400 audit(1776012878.600:201): avc: denied { write } for pid=667 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.439840][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.448517][ T9] usb 1-1: config 129 has an invalid descriptor of length 223, skipping remainder of the config [ 32.459223][ T9] usb 1-1: config 129 has 0 interfaces, different from the descriptor's value: 1 [ 32.469041][ T9] usb 1-1: string descriptor 0 read error: -22 [ 32.475248][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 32.486737][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.712145][ T610] netlink: 'syz.0.60': attribute type 10 has an invalid length. [ 32.754081][ T501] usb 1-1: USB disconnect, device number 9 [ 33.286434][ T684] netlink: 220 bytes leftover after parsing attributes in process `syz.0.68'. [ 33.556798][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 33.594958][ T695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.72'. [ 33.666748][ T308] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 33.717778][ T9] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8 [ 33.727578][ T9] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 33.742858][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 33.758239][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 33.767457][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.776008][ T9] usb 4-1: Product: చ [ 33.780287][ T9] usb 4-1: Manufacturer: Ɯ哑㤰﮻앙㧮늦⓲㈧㹇㓋癩〵ૄ㼓茛企殆찇笁밼멕숕⽗㥇塄⚻霦䍀콇䊮࿯ᏽ災쫥政暂ꥊ舮欟⒐㡱䋱ࣽ㬱騛铦賬ꈒ퍎ﴂ檃嶙焹駓ɛꗺ䣹粌뵟ꑕ見篜䁢㶿齒䖒藆鹫᱋ᇋ啔過ş [ 33.836679][ T9] usb 4-1: SerialNumber: С [ 33.842909][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.856737][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.868439][ T686] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.875646][ T686] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.884276][ T308] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 33.893446][ T308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.906458][ T308] usb 2-1: config 0 descriptor?? [ 33.966737][ T401] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 34.102775][ T9] usblp0: Disabling reads from problematic bidirectional printer [ 34.116734][ T401] usb 3-1: device descriptor read/64, error -71 [ 34.258939][ T713] 9pnet_fd: Insufficient options for proto=fd [ 34.304195][ T686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.313118][ T686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.324152][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 6 proto 3 vid 0x03F0 pid 0x0004 [ 34.344830][ T9] usb 4-1: USB disconnect, device number 7 [ 34.352345][ T9] usblp0: removed [ 34.366759][ T401] usb 3-1: device descriptor read/64, error -71 [ 34.374241][ T308] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 34.381122][ T308] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 34.388006][ T308] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 34.394812][ T308] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 34.401762][ T308] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 34.408632][ T308] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 34.415516][ T308] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 34.423232][ T308] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 34.636764][ T401] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 34.782140][ T401] usb 3-1: device descriptor read/64, error -71 [ 34.899856][ T723] mmap: syz.0.78 (723) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.980374][ T729] random: crng reseeded on system resumption [ 34.988728][ T727] veth0_virt_wifi: entered allmulticast mode [ 35.028102][ T727] veth0_virt_wifi: left allmulticast mode [ 35.036734][ T401] usb 3-1: device descriptor read/64, error -71 [ 35.064221][ T682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.125642][ T682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.166958][ T401] usb usb3-port1: attempt power cycle [ 35.219635][ T308] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 35.227140][ T308] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 35.234322][ T308] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -71 [ 35.248032][ T308] usb 2-1: USB disconnect, device number 6 [ 35.388152][ T742] Zero length message leads to an empty skb [ 35.411259][ T501] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 35.506731][ T401] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 35.537776][ T401] usb 3-1: device descriptor read/8, error -71 [ 35.567744][ T501] usb 1-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config [ 35.578132][ T501] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 35.587211][ T501] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.595973][ T501] usb 1-1: config 0 descriptor?? [ 35.602177][ T501] usb 1-1: bad CDC descriptors [ 35.687752][ T401] usb 3-1: device descriptor read/8, error -71 [ 35.877163][ T540] syz.1.58 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 35.926791][ T401] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 35.957743][ T401] usb 3-1: device descriptor read/8, error -71 [ 36.007583][ T540] CPU: 1 UID: 0 PID: 540 Comm: syz.1.58 Not tainted syzkaller #0 c4f271c1f416af74072d306bc5476bac4a1aadeb [ 36.007613][ T540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 36.007629][ T540] Call Trace: [ 36.007635][ T540] [ 36.007642][ T540] __dump_stack+0x21/0x30 [ 36.007677][ T540] dump_stack_lvl+0x140/0x1c0 [ 36.007701][ T540] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.007724][ T540] ? ___ratelimit+0x40e/0x5b0 [ 36.007745][ T540] dump_stack+0x19/0x20 [ 36.007773][ T540] dump_header+0xd6/0x490 [ 36.007795][ T540] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 36.007820][ T540] oom_kill_process+0x35d/0x640 [ 36.007840][ T540] out_of_memory+0x624/0xa30 [ 36.007867][ T540] ? __cfi_out_of_memory+0x10/0x10 [ 36.007894][ T540] ? mutex_lock_killable+0x97/0x1d0 [ 36.007916][ T540] ? __cfi_mutex_lock_killable+0x10/0x10 [ 36.007939][ T540] mem_cgroup_out_of_memory+0x2c8/0x390 [ 36.007965][ T540] ? css_next_descendant_pre+0x202/0x230 [ 36.007985][ T540] ? drain_obj_stock+0xed0/0xed0 [ 36.008013][ T540] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 36.008039][ T540] try_charge_memcg+0x91c/0xe10 [ 36.008066][ T540] ? finish_fault+0xe63/0x1140 [ 36.008093][ T540] ? __cfi_try_charge_memcg+0x10/0x10 [ 36.008115][ T540] ? __alloc_pages_noprof+0x35f/0x7e0 [ 36.008136][ T540] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 36.008159][ T540] __mem_cgroup_charge+0xfc/0x420 [ 36.008182][ T540] ? do_pte_missing+0x3859/0x4410 [ 36.008201][ T540] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 36.008226][ T540] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 36.008247][ T540] ? put_swap_device+0x130/0x130 [ 36.008265][ T540] ? shmem_huge_global_enabled+0x2da/0x360 [ 36.008293][ T540] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 36.008319][ T540] ? __kasan_check_write+0x18/0x20 [ 36.008343][ T540] ? _raw_spin_lock+0x92/0x120 [ 36.008370][ T540] shmem_get_folio_gfp+0x607/0x1390 [ 36.008399][ T540] ? shmem_get_folio+0xc0/0xc0 [ 36.008425][ T540] ? __kasan_check_write+0x18/0x20 [ 36.008448][ T540] ? inode_to_bdi+0x6d/0x100 [ 36.008471][ T540] shmem_write_begin+0xf4/0x270 [ 36.008488][ T540] generic_perform_write+0x32b/0x970 [ 36.008509][ T540] ? inode_update_timestamps+0x4f0/0x700 [ 36.008533][ T540] ? __cfi_generic_perform_write+0x10/0x10 [ 36.008552][ T540] ? down_write+0xee/0x2b0 [ 36.008575][ T540] ? mnt_get_write_access_file+0x1af/0x3b0 [ 36.008595][ T540] ? mnt_put_write_access_file+0xc2/0x100 [ 36.008616][ T540] ? file_update_time+0x1de/0x210 [ 36.008638][ T540] shmem_file_write_iter+0x105/0x130 [ 36.008663][ T540] __kernel_write_iter+0x42c/0x8a0 [ 36.008691][ T540] ? __cfi___kernel_write_iter+0x10/0x10 [ 36.008716][ T540] ? get_dump_page+0x165/0x220 [ 36.008736][ T540] ? __asan_memset+0x39/0x50 [ 36.008765][ T540] ? iov_iter_bvec+0xc0/0x180 [ 36.008782][ T540] dump_user_range+0xb8b/0xe60 [ 36.008810][ T540] ? __cfi_dump_user_range+0x10/0x10 [ 36.008836][ T540] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 36.008863][ T540] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 36.008893][ T540] ? elf_core_dump+0x24c0/0x3960 [ 36.008914][ T540] elf_core_dump+0x2e7e/0x3960 [ 36.008936][ T540] ? __cfi_elf_core_dump+0x10/0x10 [ 36.008960][ T540] ? dump_interrupted+0xf0/0xf0 [ 36.008984][ T540] ? filp_open+0x199/0x1f0 [ 36.009004][ T540] ? 0xffffffffff600000 [ 36.009036][ T540] do_coredump+0x208a/0x2fe0 [ 36.009063][ T540] ? __cfi_do_coredump+0x10/0x10 [ 36.009087][ T540] ? asm_exc_page_fault+0x2b/0x30 [ 36.009121][ T540] ? __kasan_slab_free+0x6a/0x80 [ 36.009138][ T540] ? kmem_cache_free+0x1bd/0x4f0 [ 36.009164][ T540] ? get_signal+0xa74/0x14e0 [ 36.009187][ T540] get_signal+0x11f8/0x14e0 [ 36.009211][ T540] arch_do_signal_or_restart+0xbc/0x760 [ 36.009239][ T540] ? fixup_vdso_exception+0x20d/0x310 [ 36.009267][ T540] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 36.009297][ T540] irqentry_exit_to_user_mode+0x4d/0xb0 [ 36.009322][ T540] irqentry_exit+0x16/0x60 [ 36.009343][ T540] exc_page_fault+0x65/0xc0 [ 36.009365][ T540] asm_exc_page_fault+0x2b/0x30 [ 36.009391][ T540] RIP: 0033:0x7f868259c821 [ 36.009406][ T540] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 36.009421][ T540] RSP: 002b:ffffffffffffff90 EFLAGS: 00010217 [ 36.009439][ T540] RAX: 0000000000000000 RBX: 00007f8682816090 RCX: 00007f868259c819 [ 36.009452][ T540] RDX: 0000000000000000 RSI: ffffffffffffff90 RDI: 0000000000020000 [ 36.009464][ T540] RBP: 00007f8682632c91 R08: 0000000000000000 R09: 0000000000000000 [ 36.009476][ T540] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 36.009488][ T540] R13: 00007f8682816128 R14: 00007f8682816090 R15: 00007ffc12217368 [ 36.009504][ T540] [ 36.133084][ T401] usb 3-1: device descriptor read/8, error -71 [ 36.291444][ T540] memory: usage 307200kB, limit 307200kB, failcnt 22970 [ 36.447202][ T401] usb usb3-port1: unable to enumerate USB device [ 36.458231][ T540] memory+swap: usage 431900kB, limit 9007199254740988kB, failcnt 0 [ 36.513038][ T540] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 36.519952][ T540] Memory cgroup stats for /syz1: [ 36.520149][ T540] cache 314290176 [ 36.528850][ T540] rss 40960 [ 36.531989][ T540] rss_huge 0 [ 36.535216][ T540] shmem 314224640 [ 36.538961][ T540] mapped_file 0 [ 36.542615][ T540] dirty 0 [ 36.545571][ T540] writeback 0 [ 36.548908][ T540] workingset_refault_anon 30 [ 36.553578][ T540] workingset_refault_file 5204 [ 36.558378][ T540] swap 127692800 [ 36.561988][ T540] swapcached 249856 [ 36.565807][ T540] pgpgin 120166 [ 36.569325][ T540] pgpgout 43366 [ 36.572867][ T540] pgfault 9634 [ 36.576263][ T540] pgmajfault 206 [ 36.579891][ T540] inactive_anon 181882880 [ 36.584314][ T540] active_anon 132624384 [ 36.588516][ T540] inactive_file 0 [ 36.592230][ T540] active_file 0 [ 36.595710][ T540] unevictable 0 [ 36.599253][ T540] hierarchical_memory_limit 314572800 [ 36.604739][ T540] hierarchical_memsw_limit 9223372036854771712 [ 36.610949][ T540] total_cache 314290176 [ 36.615189][ T540] total_rss 40960 [ 36.618904][ T540] total_rss_huge 0 [ 36.622713][ T540] total_shmem 314224640 [ 36.626954][ T540] total_mapped_file 0 [ 36.631014][ T540] total_dirty 0 [ 36.634507][ T540] total_writeback 0 [ 36.638371][ T540] total_workingset_refault_anon 30 [ 36.643567][ T540] total_workingset_refault_file 5204 [ 36.648916][ T540] total_swap 127692800 [ 36.653019][ T540] total_swapcached 249856 [ 36.657392][ T540] total_pgpgin 120166 [ 36.661390][ T540] total_pgpgout 43366 [ 36.665379][ T540] total_pgfault 9634 [ 36.669315][ T540] total_pgmajfault 206 [ 36.673389][ T540] total_inactive_anon 181882880 [ 36.678294][ T540] total_active_anon 132624384 [ 36.682984][ T540] total_inactive_file 0 [ 36.691738][ T540] total_active_file 0 [ 36.695762][ T540] total_unevictable 0 [ 36.699791][ T540] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.58,pid=538,uid=0 [ 36.700895][ T746] process 'syz.2.86' launched '/dev/fd/3' with NULL argv: empty string added [ 36.714392][ T36] kauditd_printk_skb: 120 callbacks suppressed [ 36.714407][ T36] audit: type=1400 audit(1776012882.910:322): avc: denied { execute } for pid=745 comm="syz.2.86" dev="tmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.735253][ T540] Memory cgroup out of memory: Killed process 538 (syz.1.58) total-vm:90372kB, anon-rss:1228kB, file-rss:21992kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 36.751208][ T36] audit: type=1400 audit(1776012882.940:323): avc: denied { execute_no_trans } for pid=745 comm="syz.2.86" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.943743][ T553] syz.1.58 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 37.015873][ T553] CPU: 0 UID: 0 PID: 553 Comm: syz.1.58 Not tainted syzkaller #0 c4f271c1f416af74072d306bc5476bac4a1aadeb [ 37.015912][ T553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 37.015925][ T553] Call Trace: [ 37.015932][ T553] [ 37.015941][ T553] __dump_stack+0x21/0x30 [ 37.015981][ T553] dump_stack_lvl+0x140/0x1c0 [ 37.016009][ T553] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.016038][ T553] ? ___ratelimit+0x40e/0x5b0 [ 37.016063][ T553] dump_stack+0x19/0x20 [ 37.016091][ T553] dump_header+0xd6/0x490 [ 37.016116][ T553] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 37.016142][ T553] oom_kill_process+0x35d/0x640 [ 37.016164][ T553] out_of_memory+0x624/0xa30 [ 37.016196][ T553] ? __cfi_out_of_memory+0x10/0x10 [ 37.016228][ T553] ? mutex_lock_killable+0x97/0x1d0 [ 37.016254][ T553] ? __cfi_mutex_lock_killable+0x10/0x10 [ 37.016282][ T553] mem_cgroup_out_of_memory+0x2c8/0x390 [ 37.016314][ T553] ? css_next_descendant_pre+0x202/0x230 [ 37.016339][ T553] ? drain_obj_stock+0xed0/0xed0 [ 37.016372][ T553] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 37.016403][ T553] try_charge_memcg+0x91c/0xe10 [ 37.016429][ T553] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 37.016461][ T553] ? __cfi_try_charge_memcg+0x10/0x10 [ 37.016488][ T553] ? __alloc_pages_noprof+0x35f/0x7e0 [ 37.016532][ T553] __mem_cgroup_charge+0xfc/0x420 [ 37.016561][ T553] ? filemap_get_entry+0x41b/0x490 [ 37.016583][ T553] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 37.016615][ T553] filemap_add_folio+0x57/0x3e0 [ 37.016650][ T553] __filemap_get_folio+0x5f0/0xba0 [ 37.016674][ T553] ? __cfi___filemap_get_folio+0x10/0x10 [ 37.016697][ T553] ? filemap_map_pages+0x17db/0x1b90 [ 37.016724][ T553] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 37.016748][ T553] filemap_fault+0xbcb/0x1b40 [ 37.016772][ T553] ? __cfi_filemap_fault+0x10/0x10 [ 37.016792][ T553] ? __kasan_check_read+0x15/0x20 [ 37.016819][ T553] ? __cfi_filemap_map_pages+0x10/0x10 [ 37.016845][ T553] ? vma_data_pages+0x104/0x140 [ 37.016875][ T553] do_pte_missing+0x360d/0x4410 [ 37.016900][ T553] ? shmem_inode_acct_blocks+0x361/0x470 [ 37.016933][ T553] ? shmem_alloc_and_add_folio+0xd86/0x10b0 [ 37.016964][ T553] ? pte_marker_clear+0x1b0/0x1b0 [ 37.016990][ T553] ? put_swap_device+0x130/0x130 [ 37.017011][ T553] ? __pte_offset_map+0x1b0/0x230 [ 37.017041][ T553] ? pte_offset_map_rw_nolock+0xba/0x110 [ 37.017071][ T553] handle_mm_fault+0x11b8/0x1bf0 [ 37.017092][ T553] ? __kasan_check_write+0x18/0x20 [ 37.017126][ T553] ? __cfi_handle_mm_fault+0x10/0x10 [ 37.017148][ T553] ? follow_page_pte+0x2c8/0xbc0 [ 37.017175][ T553] ? gup_must_unshare+0x1e0/0x1e0 [ 37.017201][ T553] ? vma_is_secretmem+0x11/0x50 [ 37.017228][ T553] __get_user_pages+0x1170/0x22b0 [ 37.017254][ T553] ? __kasan_check_write+0x18/0x20 [ 37.017288][ T553] ? populate_vma_page_range+0x220/0x220 [ 37.017312][ T553] ? __kernel_write_iter+0x6a4/0x8a0 [ 37.017345][ T553] get_dump_page+0x10c/0x220 [ 37.017369][ T553] ? __cfi_get_dump_page+0x10/0x10 [ 37.017393][ T553] ? __asan_memset+0x39/0x50 [ 37.017424][ T553] dump_user_range+0x18b/0xe60 [ 37.017459][ T553] ? __cfi_dump_user_range+0x10/0x10 [ 37.017490][ T553] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 37.017522][ T553] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 37.017554][ T553] ? elf_core_dump+0x24c0/0x3960 [ 37.017578][ T553] elf_core_dump+0x2e7e/0x3960 [ 37.017604][ T553] ? __cfi_elf_core_dump+0x10/0x10 [ 37.017633][ T553] ? dump_interrupted+0xf0/0xf0 [ 37.017663][ T553] ? filp_open+0x199/0x1f0 [ 37.017688][ T553] ? 0xffffffffff600000 [ 37.017707][ T553] do_coredump+0x208a/0x2fe0 [ 37.017742][ T553] ? __cfi_do_coredump+0x10/0x10 [ 37.017771][ T553] ? asm_exc_page_fault+0x2b/0x30 [ 37.017814][ T553] ? __kasan_slab_free+0x6a/0x80 [ 37.017835][ T553] ? kmem_cache_free+0x1bd/0x4f0 [ 37.017873][ T553] ? get_signal+0xa74/0x14e0 [ 37.017901][ T553] get_signal+0x11f8/0x14e0 [ 37.017932][ T553] arch_do_signal_or_restart+0xbc/0x760 [ 37.017974][ T553] ? fixup_vdso_exception+0x20d/0x310 [ 37.018009][ T553] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 37.018046][ T553] irqentry_exit_to_user_mode+0x4d/0xb0 [ 37.018077][ T553] irqentry_exit+0x16/0x60 [ 37.018104][ T553] exc_page_fault+0x65/0xc0 [ 37.018131][ T553] asm_exc_page_fault+0x2b/0x30 [ 37.018164][ T553] RIP: 0033:0x7f868259c821 [ 37.018184][ T553] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 37.018204][ T553] RSP: 002b:ffffffffffffff90 EFLAGS: 00010217 [ 37.018225][ T553] RAX: 0000000000000000 RBX: 00007f8682816090 RCX: 00007f868259c819 [ 37.018242][ T553] RDX: 0000000000000000 RSI: ffffffffffffff90 RDI: 0000000000020000 [ 37.018258][ T553] RBP: 00007f8682632c91 R08: 0000000000000000 R09: 0000000000000000 [ 37.018273][ T553] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 37.018287][ T553] R13: 00007f8682816128 R14: 00007f8682816090 R15: 00007ffc12217368 [ 37.018307][ T553] [ 37.216814][ T65] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 37.286845][ T401] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 37.388256][ T553] memory: usage 296548kB, limit 307200kB, failcnt 24626 [ 37.467553][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.496916][ T743] Bluetooth: hci0: command 0x1003 tx timeout [ 37.526902][ T401] usb 3-1: device descriptor read/64, error -71 [ 37.549174][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.589311][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.609345][ T65] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 37.630085][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.650660][ T65] usb 2-1: config 0 descriptor?? [ 37.696968][ T553] memory+swap: usage 431856kB, limit 9007199254740988kB, failcnt 0 [ 37.705020][ T553] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 37.721617][ T553] Memory cgroup stats for /syz1: [ 37.721805][ T553] cache 313937920 [ 37.736046][ T553] rss 122880 [ 37.743162][ T553] rss_huge 0 [ 37.746423][ T553] shmem 303411200 [ 37.750358][ T553] mapped_file 9773056 [ 37.754477][ T553] dirty 0 [ 37.757634][ T553] writeback 32768 [ 37.761323][ T553] workingset_refault_anon 30 [ 37.766027][ T553] workingset_refault_file 8619 [ 37.771291][ T553] swap 127709184 [ 37.774894][ T553] swapcached 278528 [ 37.778974][ T553] pgpgin 126964 [ 37.782484][ T553] pgpgout 50164 [ 37.785990][ T553] pgfault 9988 [ 37.789717][ T553] pgmajfault 220 [ 37.793316][ T553] inactive_anon 270385152 [ 37.796852][ T401] usb 3-1: device descriptor read/64, error -71 [ 37.817327][ T553] active_anon 33026048 [ 37.826758][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 37.840212][ T553] inactive_file 4947968 [ 37.853102][ T553] active_file 5025792 [ 37.866713][ T553] unevictable 0 [ 37.878813][ T553] hierarchical_memory_limit 314572800 [ 37.893314][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0xe [ 37.903893][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 37.916774][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 37.926081][ T553] hierarchical_memsw_limit 9223372036854771712 [ 37.932611][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 37.939857][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 37.948080][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 37.958960][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 37.969377][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 37.976509][ T553] total_cache 313937920 [ 37.980967][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 37.994138][ T36] audit: type=1326 audit(1776012884.200:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=728 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3bb999c819 code=0x7fc00000 [ 38.018899][ T31] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 38.027481][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.034773][ T553] total_rss 122880 [ 38.050419][ T31] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 38.056846][ T401] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 38.059940][ T307] usb 1-1: USB disconnect, device number 10 [ 38.077068][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.078774][ T553] total_rss_huge 0 [ 38.084285][ T31] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 38.099505][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.106567][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.118237][ T31] usb 4-1: config 220 has no interface number 2 [ 38.124655][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.124993][ T36] audit: type=1400 audit(1776012884.330:325): avc: denied { audit_write } for pid=752 comm="syz.0.88" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 38.132031][ T31] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 38.163247][ T553] total_shmem 303411200 [ 38.166564][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.176947][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.184000][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.191196][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.198266][ T31] usb 4-1: config 220 interface 0 has no altsetting 0 [ 38.203859][ T553] total_mapped_file 9773056 [ 38.205407][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.219285][ T31] usb 4-1: config 220 interface 76 has no altsetting 0 [ 38.226382][ T31] usb 4-1: config 220 interface 1 has no altsetting 0 [ 38.233355][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.236869][ T401] usb 3-1: device descriptor read/64, error -71 [ 38.240660][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.253988][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.261465][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.268647][ T553] total_dirty 0 [ 38.272122][ T553] total_writeback 32768 [ 38.276287][ T553] total_workingset_refault_anon 30 [ 38.286813][ T31] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 38.298426][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.306493][ T31] usb 4-1: Product: syz [ 38.310750][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.318011][ T31] usb 4-1: Manufacturer: syz [ 38.322701][ T31] usb 4-1: SerialNumber: syz [ 38.329791][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.341750][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.351064][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.360394][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.368611][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.379878][ T553] total_workingset_refault_file 8619 [ 38.385202][ T553] total_swap 127709184 [ 38.398317][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.405402][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.417675][ T65] itetech 0003:06CB:73F5.0007: unknown main item tag 0x0 [ 38.432342][ T553] total_swapcached 278528 [ 38.437994][ T65] itetech 0003:06CB:73F5.0007: hidraw0: USB HID v0.03 Device [HID 06cb:73f5] on usb-dummy_hcd.1-1/input0 [ 38.463533][ T553] total_pgpgin 126964 [ 38.467868][ T553] total_pgpgout 50164 [ 38.471918][ T553] total_pgfault 9988 [ 38.475843][ T553] total_pgmajfault 220 [ 38.480164][ T553] total_inactive_anon 270385152 [ 38.485104][ T553] total_active_anon 33026048 [ 38.489927][ T553] total_inactive_file 4947968 [ 38.494630][ T553] total_active_file 5025792 [ 38.506712][ T553] total_unevictable 0 [ 38.510791][ T553] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.58,pid=536,uid=0 [ 38.537448][ T401] usb 3-1: device descriptor read/64, error -71 [ 38.546133][ T553] Memory cgroup out of memory: Killed process 536 (syz.1.58) total-vm:90372kB, anon-rss:1228kB, file-rss:21956kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 38.553589][ T31] usb 4-1: selecting invalid altsetting 0 [ 38.572883][ T31] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 38.579387][ T31] usb 4-1: No valid video chain found. [ 38.588085][ T31] usb 4-1: USB disconnect, device number 8 [ 38.612131][ T552] syz.1.58 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 38.647152][ T401] usb usb3-port1: attempt power cycle [ 38.666743][ T552] CPU: 1 UID: 0 PID: 552 Comm: syz.1.58 Not tainted syzkaller #0 c4f271c1f416af74072d306bc5476bac4a1aadeb [ 38.666770][ T552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 38.666781][ T552] Call Trace: [ 38.666788][ T552] [ 38.666795][ T552] __dump_stack+0x21/0x30 [ 38.666825][ T552] dump_stack_lvl+0x140/0x1c0 [ 38.666849][ T552] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.666873][ T552] ? ___ratelimit+0x40e/0x5b0 [ 38.666894][ T552] dump_stack+0x19/0x20 [ 38.666916][ T552] dump_header+0xd6/0x490 [ 38.666938][ T552] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 38.666960][ T552] oom_kill_process+0x35d/0x640 [ 38.666978][ T552] out_of_memory+0x624/0xa30 [ 38.667006][ T552] ? __cfi_out_of_memory+0x10/0x10 [ 38.667034][ T552] ? mutex_lock_killable+0x115/0x1d0 [ 38.667056][ T552] ? __cfi_mutex_lock_killable+0x10/0x10 [ 38.667096][ T552] mem_cgroup_out_of_memory+0x2c8/0x390 [ 38.667125][ T552] ? css_next_descendant_pre+0x202/0x230 [ 38.667147][ T552] ? drain_obj_stock+0xed0/0xed0 [ 38.667176][ T552] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 38.667204][ T552] try_charge_memcg+0x91c/0xe10 [ 38.667228][ T552] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 38.667257][ T552] ? __cfi_try_charge_memcg+0x10/0x10 [ 38.667280][ T552] ? __alloc_pages_noprof+0x35f/0x7e0 [ 38.667305][ T552] __mem_cgroup_charge+0xfc/0x420 [ 38.667331][ T552] ? filemap_get_entry+0x41b/0x490 [ 38.667350][ T552] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 38.667389][ T552] filemap_add_folio+0x57/0x3e0 [ 38.667416][ T552] __filemap_get_folio+0x5f0/0xba0 [ 38.667435][ T552] ? __cfi___filemap_get_folio+0x10/0x10 [ 38.667454][ T552] ? filemap_map_pages+0x17db/0x1b90 [ 38.667474][ T552] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 38.667496][ T552] filemap_fault+0xbcb/0x1b40 [ 38.667517][ T552] ? __cfi_filemap_fault+0x10/0x10 [ 38.667535][ T552] ? __kasan_check_read+0x15/0x20 [ 38.667560][ T552] ? __cfi_filemap_map_pages+0x10/0x10 [ 38.667588][ T552] ? vma_data_pages+0x104/0x140 [ 38.667612][ T552] do_pte_missing+0x360d/0x4410 [ 38.667633][ T552] ? shmem_inode_acct_blocks+0x361/0x470 [ 38.667661][ T552] ? shmem_alloc_and_add_folio+0xd86/0x10b0 [ 38.667680][ T552] ? pte_marker_clear+0x1b0/0x1b0 [ 38.667701][ T552] ? put_swap_device+0x130/0x130 [ 38.667718][ T552] ? __pte_offset_map+0x1b0/0x230 [ 38.667743][ T552] ? pte_offset_map_rw_nolock+0xba/0x110 [ 38.667768][ T552] handle_mm_fault+0x11b8/0x1bf0 [ 38.667784][ T552] ? __kasan_check_write+0x18/0x20 [ 38.667813][ T552] ? __cfi_handle_mm_fault+0x10/0x10 [ 38.667831][ T552] ? follow_page_pte+0x2c8/0xbc0 [ 38.667853][ T552] ? gup_must_unshare+0x1e0/0x1e0 [ 38.667874][ T552] ? vma_is_secretmem+0x11/0x50 [ 38.667897][ T552] __get_user_pages+0x1170/0x22b0 [ 38.667918][ T552] ? __kasan_check_write+0x18/0x20 [ 38.667965][ T552] ? populate_vma_page_range+0x220/0x220 [ 38.667986][ T552] ? __kernel_write_iter+0x6a4/0x8a0 [ 38.668015][ T552] get_dump_page+0x10c/0x220 [ 38.668036][ T552] ? __cfi_get_dump_page+0x10/0x10 [ 38.668058][ T552] ? __asan_memset+0x39/0x50 [ 38.668085][ T552] dump_user_range+0x18b/0xe60 [ 38.668115][ T552] ? __cfi_dump_user_range+0x10/0x10 [ 38.668143][ T552] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 38.668172][ T552] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 38.668211][ T552] ? elf_core_dump+0x24c0/0x3960 [ 38.668230][ T552] elf_core_dump+0x2e7e/0x3960 [ 38.668252][ T552] ? __cfi_elf_core_dump+0x10/0x10 [ 38.668278][ T552] ? dump_interrupted+0xf0/0xf0 [ 38.668302][ T552] ? filp_open+0x199/0x1f0 [ 38.668323][ T552] ? 0xffffffffff600000 [ 38.668338][ T552] do_coredump+0x208a/0x2fe0 [ 38.668366][ T552] ? __cfi_do_coredump+0x10/0x10 [ 38.668390][ T552] ? asm_exc_page_fault+0x2b/0x30 [ 38.668425][ T552] ? __kasan_slab_free+0x6a/0x80 [ 38.668443][ T552] ? kmem_cache_free+0x1bd/0x4f0 [ 38.668469][ T552] ? get_signal+0xa74/0x14e0 [ 38.668493][ T552] get_signal+0x11f8/0x14e0 [ 38.668518][ T552] arch_do_signal_or_restart+0xbc/0x760 [ 38.668546][ T552] ? fixup_vdso_exception+0x20d/0x310 [ 38.668580][ T552] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 38.668612][ T552] irqentry_exit_to_user_mode+0x4d/0xb0 [ 38.668636][ T552] irqentry_exit+0x16/0x60 [ 38.668659][ T552] exc_page_fault+0x65/0xc0 [ 38.668681][ T552] asm_exc_page_fault+0x2b/0x30 [ 38.668709][ T552] RIP: 0033:0x7f868259c821 [ 38.668726][ T552] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 38.668741][ T552] RSP: 002b:ffffffffffffff90 EFLAGS: 00010217 [ 38.668759][ T552] RAX: 0000000000000000 RBX: 00007f8682816090 RCX: 00007f868259c819 [ 38.668773][ T552] RDX: 0000000000000000 RSI: ffffffffffffff90 RDI: 0000000000020000 [ 38.668786][ T552] RBP: 00007f8682632c91 R08: 0000000000000000 R09: 0000000000000000 [ 38.668799][ T552] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 38.668811][ T552] R13: 00007f8682816128 R14: 00007f8682816090 R15: 00007ffc12217368 [ 38.668828][ T552] [ 38.668836][ T552] memory: usage 305588kB, limit 307200kB, failcnt 29299 [ 38.680228][ T308] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 38.838737][ T308] usb 1-1: unable to get BOS descriptor or descriptor too short [ 38.956818][ T552] memory+swap: usage 426700kB, limit 9007199254740988kB, failcnt 0 [ 39.036857][ T401] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 39.201789][ T552] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 39.208989][ T552] Memory cgroup stats for /syz1: [ 39.209165][ T552] cache 309833728 [ 39.217972][ T308] usb 1-1: config 4 has an invalid interface number: 218 but max is 0 [ 39.226164][ T308] usb 1-1: config 4 has no interface number 0 [ 39.232490][ T308] usb 1-1: config 4 interface 218 has no altsetting 0 [ 39.239522][ T552] rss 151552 [ 39.244845][ T401] usb 3-1: device descriptor read/8, error -71 [ 39.252052][ T36] audit: type=1400 audit(1776012885.460:326): avc: denied { getopt } for pid=761 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.256848][ T552] rss_huge 0 [ 39.271649][ T308] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=88.0a [ 39.283445][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.292034][ T308] usb 1-1: Product: syz [ 39.296221][ T308] usb 1-1: Manufacturer: syz [ 39.301006][ T308] usb 1-1: SerialNumber: syz [ 39.306062][ T552] shmem 305278976 [ 39.310164][ T552] mapped_file 4026368 [ 39.314264][ T552] dirty 0 [ 39.317525][ T552] writeback 0 [ 39.320852][ T552] workingset_refault_anon 30 [ 39.325463][ T552] workingset_refault_file 14055 [ 39.330548][ T552] swap 125435904 [ 39.334127][ T552] swapcached 4096 [ 39.338004][ T552] pgpgin 137505 [ 39.341490][ T552] pgpgout 61780 [ 39.344976][ T552] pgfault 10528 [ 39.348694][ T552] pgmajfault 318 [ 39.352292][ T552] inactive_anon 302989312 [ 39.356645][ T552] active_anon 2404352 [ 39.360919][ T552] inactive_file 0 [ 39.364596][ T552] active_file 4366336 [ 39.368858][ T552] unevictable 0 [ 39.372351][ T552] hierarchical_memory_limit 314572800 [ 39.378845][ T401] usb 3-1: device descriptor read/8, error -71 [ 39.386166][ T552] hierarchical_memsw_limit 9223372036854771712 [ 39.416708][ T552] total_cache 309833728 [ 39.420902][ T552] total_rss 151552 [ 39.424645][ T552] total_rss_huge 0 [ 39.456711][ T552] total_shmem 305278976 [ 39.460905][ T552] total_mapped_file 4026368 [ 39.465423][ T552] total_dirty 0 [ 39.496713][ T552] total_writeback 0 [ 39.500687][ T552] total_workingset_refault_anon 30 [ 39.505830][ T552] total_workingset_refault_file 14055 [ 39.519547][ T308] sr9700 1-1:4.218: probe with driver sr9700 failed with error -22 [ 39.528615][ T308] usb 1-1: USB disconnect, device number 11 [ 39.556878][ T552] total_swap 125435904 [ 39.560968][ T552] total_swapcached 4096 [ 39.565136][ T552] total_pgpgin 137505 [ 39.596726][ T552] total_pgpgout 61780 [ 39.600740][ T552] total_pgfault 10528 [ 39.604749][ T552] total_pgmajfault 318 [ 39.626746][ T401] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 39.636879][ T552] total_inactive_anon 302989312 [ 39.651583][ T552] total_active_anon 2404352 [ 39.657803][ T401] usb 3-1: device descriptor read/8, error -71 [ 39.670590][ T552] total_inactive_file 0 [ 39.687835][ T552] total_active_file 4366336 [ 39.729070][ T552] total_unevictable 0 [ 39.733079][ T552] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.58,pid=556,uid=0 [ 39.810745][ T401] usb 3-1: device descriptor read/8, error -71 [ 39.829622][ T552] Memory cgroup out of memory: Killed process 556 (syz.1.58) total-vm:90372kB, anon-rss:1228kB, file-rss:21960kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 39.867616][ T773] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3346507651 (6693015302 ns) > initial count (5554120192 ns). Using initial count to start timer. [ 39.926879][ T401] usb usb3-port1: unable to enumerate USB device [ 40.063474][ T65] usb 2-1: USB disconnect, device number 7 [ 40.111364][ T551] syz.1.58 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 40.197173][ T781] random: crng reseeded on system resumption [ 40.220193][ T551] CPU: 1 UID: 0 PID: 551 Comm: syz.1.58 Not tainted syzkaller #0 c4f271c1f416af74072d306bc5476bac4a1aadeb [ 40.220225][ T551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 40.220237][ T551] Call Trace: [ 40.220244][ T551] [ 40.220252][ T551] __dump_stack+0x21/0x30 [ 40.220283][ T551] dump_stack_lvl+0x140/0x1c0 [ 40.220308][ T551] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.220350][ T551] ? ___ratelimit+0x40e/0x5b0 [ 40.220373][ T551] dump_stack+0x19/0x20 [ 40.220399][ T551] dump_header+0xd6/0x490 [ 40.220422][ T551] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 40.220454][ T551] oom_kill_process+0x35d/0x640 [ 40.220474][ T551] out_of_memory+0x624/0xa30 [ 40.220505][ T551] ? __cfi_out_of_memory+0x10/0x10 [ 40.220536][ T551] ? mutex_lock_killable+0x97/0x1d0 [ 40.220561][ T551] ? __cfi_mutex_lock_killable+0x10/0x10 [ 40.220588][ T551] mem_cgroup_out_of_memory+0x2c8/0x390 [ 40.220618][ T551] ? css_next_descendant_pre+0x202/0x230 [ 40.220642][ T551] ? drain_obj_stock+0xed0/0xed0 [ 40.220673][ T551] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 40.220702][ T551] try_charge_memcg+0x91c/0xe10 [ 40.220727][ T551] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 40.220757][ T551] ? __cfi_try_charge_memcg+0x10/0x10 [ 40.220783][ T551] ? __alloc_pages_noprof+0x35f/0x7e0 [ 40.220809][ T551] __mem_cgroup_charge+0xfc/0x420 [ 40.220836][ T551] ? filemap_get_entry+0x41b/0x490 [ 40.220856][ T551] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 40.220886][ T551] filemap_add_folio+0x57/0x3e0 [ 40.220917][ T551] __filemap_get_folio+0x5f0/0xba0 [ 40.220939][ T551] ? __cfi___filemap_get_folio+0x10/0x10 [ 40.220960][ T551] ? filemap_map_pages+0x17db/0x1b90 [ 40.220983][ T551] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 40.221007][ T551] filemap_fault+0xbcb/0x1b40 [ 40.221030][ T551] ? __cfi_filemap_fault+0x10/0x10 [ 40.221051][ T551] ? __kasan_check_read+0x15/0x20 [ 40.221079][ T551] ? __cfi_filemap_map_pages+0x10/0x10 [ 40.221102][ T551] ? vma_data_pages+0x104/0x140 [ 40.221129][ T551] do_pte_missing+0x360d/0x4410 [ 40.221152][ T551] ? shmem_inode_acct_blocks+0x361/0x470 [ 40.221183][ T551] ? shmem_alloc_and_add_folio+0xd86/0x10b0 [ 40.221204][ T551] ? finish_task_switch+0x1d9/0x760 [ 40.221228][ T551] ? pte_marker_clear+0x1b0/0x1b0 [ 40.221251][ T551] ? put_swap_device+0x130/0x130 [ 40.221270][ T551] ? __pte_offset_map+0x1b0/0x230 [ 40.221297][ T551] ? pte_offset_map_rw_nolock+0xba/0x110 [ 40.221325][ T551] handle_mm_fault+0x11b8/0x1bf0 [ 40.221344][ T551] ? __kasan_check_write+0x18/0x20 [ 40.221376][ T551] ? __cfi_handle_mm_fault+0x10/0x10 [ 40.221395][ T551] ? follow_page_pte+0x2c8/0xbc0 [ 40.221420][ T551] ? gup_must_unshare+0x1e0/0x1e0 [ 40.221443][ T551] ? vma_is_secretmem+0x11/0x50 [ 40.221473][ T551] __get_user_pages+0x1170/0x22b0 [ 40.221495][ T551] ? __kasan_check_write+0x18/0x20 [ 40.221527][ T551] ? populate_vma_page_range+0x220/0x220 [ 40.221549][ T551] ? __kernel_write_iter+0x6a4/0x8a0 [ 40.221579][ T551] get_dump_page+0x10c/0x220 [ 40.221601][ T551] ? __cfi_get_dump_page+0x10/0x10 [ 40.221623][ T551] ? __asan_memset+0x39/0x50 [ 40.221651][ T551] dump_user_range+0x18b/0xe60 [ 40.221683][ T551] ? __cfi_dump_user_range+0x10/0x10 [ 40.221712][ T551] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 40.221743][ T551] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 40.221773][ T551] ? elf_core_dump+0x24c0/0x3960 [ 40.221795][ T551] elf_core_dump+0x2e7e/0x3960 [ 40.221820][ T551] ? __cfi_elf_core_dump+0x10/0x10 [ 40.221848][ T551] ? dump_interrupted+0xf0/0xf0 [ 40.221876][ T551] ? filp_open+0x199/0x1f0 [ 40.221899][ T551] ? 0xffffffffff600000 [ 40.221916][ T551] do_coredump+0x208a/0x2fe0 [ 40.221947][ T551] ? __cfi_do_coredump+0x10/0x10 [ 40.221974][ T551] ? asm_exc_page_fault+0x2b/0x30 [ 40.222013][ T551] ? __kasan_slab_free+0x6a/0x80 [ 40.222033][ T551] ? kmem_cache_free+0x1bd/0x4f0 [ 40.222062][ T551] ? get_signal+0xa74/0x14e0 [ 40.222088][ T551] get_signal+0x11f8/0x14e0 [ 40.222116][ T551] arch_do_signal_or_restart+0xbc/0x760 [ 40.222148][ T551] ? fixup_vdso_exception+0x20d/0x310 [ 40.222180][ T551] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 40.222214][ T551] irqentry_exit_to_user_mode+0x4d/0xb0 [ 40.222242][ T551] irqentry_exit+0x16/0x60 [ 40.222267][ T551] exc_page_fault+0x65/0xc0 [ 40.222292][ T551] asm_exc_page_fault+0x2b/0x30 [ 40.222323][ T551] RIP: 0033:0x7f868259c821 [ 40.222340][ T551] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 40.222357][ T551] RSP: 002b:ffffffffffffff90 EFLAGS: 00010217 [ 40.222377][ T551] RAX: 0000000000000000 RBX: 00007f8682816090 RCX: 00007f868259c819 [ 40.222393][ T551] RDX: 0000000000000000 RSI: ffffffffffffff90 RDI: 0000000000020000 [ 40.222408][ T551] RBP: 00007f8682632c91 R08: 0000000000000000 R09: 0000000000000000 [ 40.222422][ T551] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 40.222436][ T551] R13: 00007f8682816128 R14: 00007f8682816090 R15: 00007ffc12217368 [ 40.222461][ T551] [ 40.222469][ T551] memory: usage 305308kB, limit 307200kB, failcnt 32864 [ 40.236812][ T401] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 40.508973][ T551] memory+swap: usage 430544kB, limit 9007199254740988kB, failcnt 0 [ 40.513068][ T308] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 40.629281][ T551] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 40.788978][ T308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.799990][ T308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.809774][ T308] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 40.819027][ T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.827868][ T308] usb 1-1: config 0 descriptor?? [ 40.876782][ T401] usb 3-1: Using ep0 maxpacket: 16 [ 40.883110][ T401] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 40.893298][ T401] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 40.902564][ T401] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.910710][ T401] usb 3-1: Product: syz [ 40.914983][ T401] usb 3-1: Manufacturer: syz [ 40.920007][ T401] usb 3-1: SerialNumber: syz [ 40.926898][ T401] r8152-cfgselector 3-1: Unknown version 0x0000 [ 40.933187][ T401] r8152-cfgselector 3-1: config 0 descriptor?? [ 41.118965][ T795] netlink: 'syz.1.100': attribute type 27 has an invalid length. [ 41.175253][ T795] ======================================================= [ 41.175253][ T795] WARNING: The mand mount option has been deprecated and [ 41.175253][ T795] and is ignored by this kernel. Remove the mand [ 41.175253][ T795] option from the mount to silence this warning. [ 41.175253][ T795] ======================================================= [ 41.175255][ T36] audit: type=1400 audit(1776012887.380:327): avc: denied { mounton } for pid=791 comm="syz.1.100" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.225371][ T551] Memory cgroup stats for [ 41.247833][ T308] playstation 0003:054C:0BA0.0008: unknown main item tag 0x6 [ 41.260169][ T308] playstation 0003:054C:0BA0.0008: item fetching failed at offset 6/7 [ 41.272394][ T308] playstation 0003:054C:0BA0.0008: Parse failed [ 41.278889][ T308] playstation 0003:054C:0BA0.0008: probe with driver playstation failed with error -22 [ 41.326734][ T551] /syz1: [ 41.326868][ T551] cache 313761792 [ 41.333374][ T551] rss 196608 [ 41.336597][ T551] rss_huge 0 [ 41.341980][ T775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.350469][ T775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.359070][ T775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.368296][ T775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.398690][ T551] shmem 307363840 [ 41.402359][ T551] mapped_file 5918720 [ 41.406362][ T551] dirty 0 [ 41.411328][ T308] r8152-cfgselector 3-1: USB disconnect, device number 17 [ 41.486722][ T551] writeback 8192 [ 41.510655][ T551] workingset_refault_anon 30 [ 41.546824][ T401] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 41.551165][ T551] workingset_refault_file 21061 [ 41.554885][ T10] usb 1-1: USB disconnect, device number 12 [ 41.641163][ T551] swap 127971328 [ 41.665007][ T551] swapcached 16384 [ 41.689042][ T551] pgpgin 155057 [ 41.705383][ T551] pgpgout 78325 [ 41.718005][ T401] usb 4-1: config 1 has an invalid descriptor of length 233, skipping remainder of the config [ 41.725657][ T551] pgfault 11512 [ 41.728544][ T401] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 41.744764][ T401] usb 4-1: New USB device found, idVendor=13e5, idProduct=0011, bcdDevice= 0.40 [ 41.753916][ T401] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.761958][ T401] usb 4-1: Product: syz [ 41.766139][ T401] usb 4-1: Manufacturer: syz [ 41.770793][ T401] usb 4-1: SerialNumber: syz [ 41.776013][ T551] pgmajfault 419 [ 41.786748][ T308] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 41.803010][ T551] inactive_anon 126947328 [ 41.838719][ T551] active_anon 180629504 [ 41.882512][ T551] inactive_file 851968 [ 41.926096][ T551] active_file 4157440 [ 41.967813][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 64 [ 41.968654][ T551] unevictable 0 [ 41.980131][ T308] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 41.992770][ T308] usb 3-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 42.002035][ T308] usb 3-1: Manufacturer: syz [ 42.007239][ T401] usb 4-1: BAAD MICROPHONE c_chmask mismatch [ 42.015446][ T401] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 42.016363][ T551] hierarchical_memory_limit 314572800 [ 42.024853][ T308] usb 3-1: config 0 descriptor?? [ 42.043821][ T401] usb 4-1: USB disconnect, device number 9 [ 42.049758][ T805] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 42.059728][ T551] hierarchical_memsw_limit 9223372036854771712 [ 42.065920][ T551] total_cache 313761792 [ 42.070885][ T551] total_rss 196608 [ 42.072877][ T426] udevd[426]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.074660][ T551] total_rss_huge 0 [ 42.107095][ T551] total_shmem 307363840 [ 42.115085][ T551] total_mapped_file 5918720 [ 42.122287][ T551] total_dirty 0 [ 42.125874][ T551] total_writeback 8192 [ 42.129985][ T551] total_workingset_refault_anon 30 [ 42.142598][ T551] total_workingset_refault_file 21061 [ 42.148294][ T551] total_swap 127971328 [ 42.152388][ T551] total_swapcached 16384 [ 42.156638][ T551] total_pgpgin 155057 [ 42.162969][ T551] total_pgpgout 78325 [ 42.167206][ T551] total_pgfault 11512 [ 42.171200][ T551] total_pgmajfault 419 [ 42.175276][ T551] total_inactive_anon 126947328 [ 42.180388][ T551] total_active_anon 180629504 [ 42.186187][ T551] total_inactive_file 851968 [ 42.190981][ T551] total_active_file 4157440 [ 42.195600][ T551] total_unevictable 0 [ 42.199695][ T551] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.58,pid=537,uid=0 [ 42.214459][ T551] Memory cgroup out of memory: Killed process 537 (syz.1.58) total-vm:90372kB, anon-rss:1228kB, file-rss:22020kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 42.260440][ T805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.274032][ T805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.361511][ T546] syz.1.58 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 42.426733][ T546] CPU: 1 UID: 0 PID: 546 Comm: syz.1.58 Not tainted syzkaller #0 c4f271c1f416af74072d306bc5476bac4a1aadeb [ 42.426766][ T546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 42.426782][ T546] Call Trace: [ 42.426789][ T546] [ 42.426797][ T546] __dump_stack+0x21/0x30 [ 42.426827][ T546] dump_stack_lvl+0x140/0x1c0 [ 42.426853][ T546] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.426879][ T546] ? ___ratelimit+0x40e/0x5b0 [ 42.426901][ T546] dump_stack+0x19/0x20 [ 42.426925][ T546] dump_header+0xd6/0x490 [ 42.426948][ T546] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 42.426972][ T546] oom_kill_process+0x35d/0x640 [ 42.426992][ T546] out_of_memory+0x624/0xa30 [ 42.427022][ T546] ? __cfi_out_of_memory+0x10/0x10 [ 42.427051][ T546] ? mutex_lock_killable+0x97/0x1d0 [ 42.427075][ T546] ? __cfi_mutex_lock_killable+0x10/0x10 [ 42.427101][ T546] mem_cgroup_out_of_memory+0x2c8/0x390 [ 42.427130][ T546] ? css_next_descendant_pre+0x202/0x230 [ 42.427152][ T546] ? drain_obj_stock+0xed0/0xed0 [ 42.427181][ T546] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 42.427209][ T546] try_charge_memcg+0x91c/0xe10 [ 42.427232][ T546] ? finish_fault+0xe63/0x1140 [ 42.427262][ T546] ? __cfi_try_charge_memcg+0x10/0x10 [ 42.427294][ T546] ? __alloc_pages_noprof+0x35f/0x7e0 [ 42.427319][ T546] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 42.427343][ T546] __mem_cgroup_charge+0xfc/0x420 [ 42.427369][ T546] ? do_pte_missing+0x3859/0x4410 [ 42.427389][ T546] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 42.427416][ T546] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 42.427439][ T546] ? put_swap_device+0x130/0x130 [ 42.427458][ T546] ? shmem_huge_global_enabled+0x2da/0x360 [ 42.427489][ T546] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 42.427518][ T546] ? __kasan_check_write+0x18/0x20 [ 42.427545][ T546] ? _raw_spin_lock+0x92/0x120 [ 42.427579][ T546] shmem_get_folio_gfp+0x607/0x1390 [ 42.427611][ T546] ? shmem_get_folio+0xc0/0xc0 [ 42.427639][ T546] ? __kasan_check_write+0x18/0x20 [ 42.427664][ T546] ? inode_to_bdi+0x6d/0x100 [ 42.427688][ T546] shmem_write_begin+0xf4/0x270 [ 42.427708][ T546] generic_perform_write+0x32b/0x970 [ 42.427731][ T546] ? inode_update_timestamps+0x4f0/0x700 [ 42.427756][ T546] ? __cfi_generic_perform_write+0x10/0x10 [ 42.427778][ T546] ? down_write+0xee/0x2b0 [ 42.427802][ T546] ? mnt_get_write_access_file+0x1af/0x3b0 [ 42.427825][ T546] ? mnt_put_write_access_file+0xc2/0x100 [ 42.427848][ T546] ? file_update_time+0x1de/0x210 [ 42.427871][ T546] shmem_file_write_iter+0x105/0x130 [ 42.427894][ T546] __kernel_write_iter+0x42c/0x8a0 [ 42.427922][ T546] ? __cfi___kernel_write_iter+0x10/0x10 [ 42.427948][ T546] ? get_dump_page+0x165/0x220 [ 42.427970][ T546] ? __asan_memset+0x39/0x50 [ 42.427995][ T546] ? iov_iter_bvec+0xc0/0x180 [ 42.428013][ T546] dump_user_range+0xb8b/0xe60 [ 42.428043][ T546] ? __cfi_dump_user_range+0x10/0x10 [ 42.428070][ T546] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 42.428100][ T546] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 42.428128][ T546] ? elf_core_dump+0x24c0/0x3960 [ 42.428149][ T546] elf_core_dump+0x2e7e/0x3960 [ 42.428172][ T546] ? __cfi_elf_core_dump+0x10/0x10 [ 42.428198][ T546] ? dump_interrupted+0xf0/0xf0 [ 42.428224][ T546] ? filp_open+0x199/0x1f0 [ 42.428245][ T546] ? 0xffffffffff600000 [ 42.428262][ T546] do_coredump+0x208a/0x2fe0 [ 42.428297][ T546] ? __cfi_do_coredump+0x10/0x10 [ 42.428323][ T546] ? asm_exc_page_fault+0x2b/0x30 [ 42.428364][ T546] ? __kasan_slab_free+0x6a/0x80 [ 42.428383][ T546] ? kmem_cache_free+0x1bd/0x4f0 [ 42.428410][ T546] ? get_signal+0xa74/0x14e0 [ 42.428435][ T546] get_signal+0x11f8/0x14e0 [ 42.428460][ T546] arch_do_signal_or_restart+0xbc/0x760 [ 42.428490][ T546] ? fixup_vdso_exception+0x20d/0x310 [ 42.428520][ T546] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 42.428553][ T546] irqentry_exit_to_user_mode+0x4d/0xb0 [ 42.428586][ T546] irqentry_exit+0x16/0x60 [ 42.428610][ T546] exc_page_fault+0x65/0xc0 [ 42.428634][ T546] asm_exc_page_fault+0x2b/0x30 [ 42.428663][ T546] RIP: 0033:0x7f868259c821 [ 42.428679][ T546] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 42.428696][ T546] RSP: 002b:ffffffffffffff90 EFLAGS: 00010217 [ 42.428715][ T546] RAX: 0000000000000000 RBX: 00007f8682816090 RCX: 00007f868259c819 [ 42.428729][ T546] RDX: 0000000000000000 RSI: ffffffffffffff90 RDI: 0000000000020000 [ 42.428743][ T546] RBP: 00007f8682632c91 R08: 0000000000000000 R09: 0000000000000000 [ 42.428757][ T546] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 42.428769][ T546] R13: 00007f8682816128 R14: 00007f8682816090 R15: 00007ffc12217368 [ 42.428805][ T546] [ 42.428904][ T546] memory: usage 301452kB, limit 307200kB, failcnt 36207 [ 42.486487][ T308] hid-generic 0003:04F3:0755.0009: unknown main item tag 0x0 [ 42.573428][ T546] memory+swap: usage 420952kB, limit 9007199254740988kB, failcnt 0 [ 42.627122][ T308] hid-generic 0003:04F3:0755.0009: unknown main item tag 0x0 [ 42.645945][ T837] fuse: Unknown parameter '00000000000000000008' [ 42.647041][ T36] audit: type=1400 audit(1776012888.850:328): avc: denied { read } for pid=836 comm="syz.3.112" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.653632][ T837] fuse: Unknown parameter 'smackfsroot' [ 42.657078][ T36] audit: type=1400 audit(1776012888.850:329): avc: denied { open } for pid=836 comm="syz.3.112" path="/32/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.700068][ T546] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 42.714071][ T308] hid-generic 0003:04F3:0755.0009: unknown main item tag 0x0 [ 42.839824][ T546] Memory cgroup stats for [ 42.857067][ T36] audit: type=1400 audit(1776012888.850:330): avc: denied { ioctl } for pid=836 comm="syz.3.112" path="/32/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.896328][ T546] /syz1 [ 42.907058][ T36] audit: type=1400 audit(1776012888.860:331): avc: denied { setattr } for pid=836 comm="syz.3.112" name="/" dev="incremental-fs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.972125][ T546] : [ 42.987324][ T308] hid-generic 0003:04F3:0755.0009: unknown main item tag 0x0 [ 43.066947][ T308] hid-generic 0003:04F3:0755.0009: unknown main item tag 0x0 [ 43.074661][ T546] cache 281538560 [ 43.090644][ T546] rss 69632 [ 43.114830][ T546] rss_huge 0 [ 43.118299][ T546] shmem 280346624 [ 43.124896][ T546] mapped_file 942080 [ 43.137712][ T308] hid-generic 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [syz] on usb-dummy_hcd.2-1/input0 [ 43.146815][ T546] dirty 0 [ 43.149035][ T36] audit: type=1400 audit(1776012889.350:332): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 43.154721][ T546] writeback 0 [ 43.219963][ T546] workingset_refault_anon 30 [ 43.224582][ T546] workingset_refault_file 24443 [ 43.229501][ T546] swap 127987712 [ 43.239133][ T546] swapcached 0 [ 43.242618][ T546] pgpgin 160470 [ 43.246091][ T546] pgpgout 91718 [ 43.249702][ T546] pgfault 11954 [ 43.253180][ T546] pgmajfault 501 [ 43.256777][ T546] inactive_anon 82395136 [ 43.261027][ T546] active_anon 197234688 [ 43.265190][ T546] inactive_file 0 [ 43.275476][ T546] active_file 1191936 [ 43.301226][ T546] unevictable 0 [ 43.306717][ T546] hierarchical_memory_limit 314572800 [ 43.312264][ T546] hierarchical_memsw_limit 9223372036854771712 [ 43.356727][ T546] total_cache 281538560 [ 43.371281][ T546] total_rss 69632 [ 43.375045][ T546] total_rss_huge 0 [ 43.380476][ T546] total_shmem 280346624 [ 43.389073][ T546] total_mapped_file 942080 [ 43.397862][ T546] total_dirty 0 [ 43.403248][ T546] total_writeback 0 [ 43.407325][ T546] total_workingset_refault_anon 30 [ 43.415739][ T546] total_workingset_refault_file 24443 [ 43.426650][ T546] total_swap 127987712 [ 43.435191][ T546] total_swapcached 0 [ 43.439166][ T31] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 43.451442][ T546] total_pgpgin 160470 [ 43.459815][ T546] total_pgpgout 91718 [ 43.468278][ T546] total_pgfault 11954 [ 43.476622][ T546] total_pgmajfault 501 [ 43.485215][ T546] total_inactive_anon 82395136 [ 43.495497][ T546] total_active_anon 197234688 [ 43.504555][ T546] total_inactive_file 0 [ 43.508777][ T65] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 43.522115][ T546] total_active_file 1191936 [ 43.531260][ T546] total_unevictable 0 [ 43.539616][ T546] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.58,pid=548,uid=0 [ 43.581762][ T546] Memory cgroup out of memory: Killed process 548 (syz.1.58) total-vm:90372kB, anon-rss:1228kB, file-rss:21964kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 43.599544][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 43.608055][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.618419][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 43.630676][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1023 [ 43.648151][ T31] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 43.657655][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.665704][ T31] usb 4-1: Product: syz [ 43.670094][ T31] usb 4-1: Manufacturer: syz [ 43.675843][ T31] usb 4-1: SerialNumber: syz [ 43.680555][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 43.686952][ T65] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.698033][ T65] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.711591][ T65] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 43.728880][ T65] usb 1-1: config 0 interface 0 has no altsetting 0 [ 43.736673][ T65] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 43.749159][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.758523][ T65] usb 1-1: config 0 descriptor?? [ 43.912871][ T31] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 43.921925][ T31] usb 4-1: 1:1 : unsupported format bits 0x200c [ 43.928456][ T31] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 43.938949][ T31] usb 4-1: 0:2 : does not exist [ 43.943943][ T31] usb 4-1: unit 1 not found! [ 43.950801][ T31] usb 4-1: unit 130 not found! [ 43.963048][ T31] usb 4-1: USB disconnect, device number 10 [ 43.981581][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.176995][ T65] hid (null): report_id 55080 is invalid [ 44.186094][ T65] hid (null): unknown global tag 0xe [ 44.193695][ T65] hid (null): unknown global tag 0xc [ 44.202375][ T65] hid (null): unknown global tag 0xc [ 44.209916][ T65] hid (null): unknown global tag 0xe [ 44.370548][ T849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.379446][ T849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.411176][ T10] usb 1-1: USB disconnect, device number 13 [ 44.728997][ T36] audit: type=1400 audit(1776012890.940:333): avc: denied { mounton } for pid=858 comm="syz.1.118" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 44.729005][ T873] tmpfs: Unknown parameter 'nr_' [ 44.830118][ T36] audit: type=1400 audit(1776012891.040:334): avc: denied { bind } for pid=874 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.860035][ T36] audit: type=1400 audit(1776012891.060:335): avc: denied { connect } for pid=874 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.880560][ T544] syz.1.58 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 44.896930][ T36] audit: type=1400 audit(1776012891.060:336): avc: denied { accept } for pid=874 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.916403][ T36] audit: type=1400 audit(1776012891.070:337): avc: denied { write } for pid=874 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.936736][ T307] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 44.945781][ T544] CPU: 0 UID: 0 PID: 544 Comm: syz.1.58 Not tainted syzkaller #0 c4f271c1f416af74072d306bc5476bac4a1aadeb [ 44.945812][ T544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 44.945843][ T544] Call Trace: [ 44.945850][ T544] [ 44.945871][ T544] __dump_stack+0x21/0x30 [ 44.945901][ T544] dump_stack_lvl+0x140/0x1c0 [ 44.945927][ T544] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.945953][ T544] ? ___ratelimit+0x40e/0x5b0 [ 44.945994][ T544] dump_stack+0x19/0x20 [ 44.946020][ T544] dump_header+0xd6/0x490 [ 44.946044][ T544] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 44.946070][ T544] oom_kill_process+0x35d/0x640 [ 44.946090][ T544] out_of_memory+0x624/0xa30 [ 44.946121][ T544] ? __cfi_out_of_memory+0x10/0x10 [ 44.946152][ T544] ? mutex_lock_killable+0x97/0x1d0 [ 44.946178][ T544] ? __cfi_mutex_lock_killable+0x10/0x10 [ 44.946205][ T544] mem_cgroup_out_of_memory+0x2c8/0x390 [ 44.946236][ T544] ? css_next_descendant_pre+0x202/0x230 [ 44.946260][ T544] ? drain_obj_stock+0xed0/0xed0 [ 44.946291][ T544] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 44.946322][ T544] try_charge_memcg+0x91c/0xe10 [ 44.946353][ T544] ? finish_fault+0xe63/0x1140 [ 44.946385][ T544] ? __cfi_try_charge_memcg+0x10/0x10 [ 44.946411][ T544] ? __alloc_pages_noprof+0x35f/0x7e0 [ 44.946437][ T544] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 44.946464][ T544] __mem_cgroup_charge+0xfc/0x420 [ 44.946492][ T544] ? do_pte_missing+0x3859/0x4410 [ 44.946514][ T544] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 44.946544][ T544] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 44.946568][ T544] ? put_swap_device+0x130/0x130 [ 44.946588][ T544] ? shmem_huge_global_enabled+0x2da/0x360 [ 44.946619][ T544] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 44.946650][ T544] ? __kasan_check_write+0x18/0x20 [ 44.946678][ T544] ? _raw_spin_lock+0x92/0x120 [ 44.946714][ T544] shmem_get_folio_gfp+0x607/0x1390 [ 44.946748][ T544] ? shmem_get_folio+0xc0/0xc0 [ 44.946776][ T544] ? __kasan_check_write+0x18/0x20 [ 44.946804][ T544] ? inode_to_bdi+0x6d/0x100 [ 44.946829][ T544] shmem_write_begin+0xf4/0x270 [ 44.946850][ T544] generic_perform_write+0x32b/0x970 [ 44.946874][ T544] ? inode_update_timestamps+0x4f0/0x700 [ 44.946901][ T544] ? __cfi_generic_perform_write+0x10/0x10 [ 44.946924][ T544] ? down_write+0xee/0x2b0 [ 44.946949][ T544] ? mnt_get_write_access_file+0x1af/0x3b0 [ 44.946973][ T544] ? mnt_put_write_access_file+0xc2/0x100 [ 44.946998][ T544] ? file_update_time+0x1de/0x210 [ 44.947023][ T544] shmem_file_write_iter+0x105/0x130 [ 44.947048][ T544] __kernel_write_iter+0x42c/0x8a0 [ 44.947078][ T544] ? __cfi___kernel_write_iter+0x10/0x10 [ 44.947106][ T544] ? get_dump_page+0x165/0x220 [ 44.947129][ T544] ? __asan_memset+0x39/0x50 [ 44.947155][ T544] ? iov_iter_bvec+0xc0/0x180 [ 44.947175][ T544] dump_user_range+0xb8b/0xe60 [ 44.947217][ T544] ? __cfi_dump_user_range+0x10/0x10 [ 44.947245][ T544] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 44.947274][ T544] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 44.947302][ T544] ? elf_core_dump+0x24c0/0x3960 [ 44.947324][ T544] elf_core_dump+0x2e7e/0x3960 [ 44.947352][ T544] ? __cfi_elf_core_dump+0x10/0x10 [ 44.947380][ T544] ? dump_interrupted+0xf0/0xf0 [ 44.947404][ T544] ? filp_open+0x199/0x1f0 [ 44.947426][ T544] ? 0xffffffffff600000 [ 44.947442][ T544] do_coredump+0x208a/0x2fe0 [ 44.947471][ T544] ? __cfi_do_coredump+0x10/0x10 [ 44.947495][ T544] ? asm_exc_page_fault+0x2b/0x30 [ 44.947532][ T544] ? __kasan_slab_free+0x6a/0x80 [ 44.947550][ T544] ? kmem_cache_free+0x1bd/0x4f0 [ 44.947578][ T544] ? get_signal+0xa74/0x14e0 [ 44.947621][ T544] get_signal+0x11f8/0x14e0 [ 44.947649][ T544] arch_do_signal_or_restart+0xbc/0x760 [ 44.947679][ T544] ? fixup_vdso_exception+0x20d/0x310 [ 44.947712][ T544] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 44.947746][ T544] irqentry_exit_to_user_mode+0x4d/0xb0 [ 44.947774][ T544] irqentry_exit+0x16/0x60 [ 44.947799][ T544] exc_page_fault+0x65/0xc0 [ 44.947824][ T544] asm_exc_page_fault+0x2b/0x30 [ 44.947855][ T544] RIP: 0033:0x7f868259c821 [ 44.947872][ T544] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 44.947891][ T544] RSP: 002b:ffffffffffffff90 EFLAGS: 00010217 [ 44.947910][ T544] RAX: 0000000000000000 RBX: 00007f8682816090 RCX: 00007f868259c819 [ 44.947927][ T544] RDX: 0000000000000000 RSI: ffffffffffffff90 RDI: 0000000000020000 [ 44.947941][ T544] RBP: 00007f8682632c91 R08: 0000000000000000 R09: 0000000000000000 [ 44.947955][ T544] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 44.947969][ T544] R13: 00007f8682816128 R14: 00007f8682816090 R15: 00007ffc12217368 [ 44.947988][ T544] [ 45.208417][ T307] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.222699][ T816] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 45.284256][ T307] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.289865][ T544] memory: usage 307200kB, limit 307200kB, failcnt 42886 [ 45.296960][ T65] usb 3-1: USB disconnect, device number 18 [ 45.297830][ T544] memory+swap: usage 432188kB, limit 9007199254740988kB, failcnt 0 [ 45.317155][ T307] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.318002][ T544] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 45.329393][ T307] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 45.334589][ T544] Memory cgroup stats for [ 45.356824][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.369582][ T544] /syz1 [ 45.502989][ T816] usb 1-1: device descriptor read/64, error -71 [ 45.526907][ T307] usb 4-1: config 0 descriptor?? [ 45.528819][ T881] Unsupported ieee802154 address type: 0 [ 45.567007][ T544] : [ 45.567163][ T544] cache 314458112 [ 45.573278][ T544] rss 102400 [ 45.576523][ T544] rss_huge 0 [ 45.579790][ T544] shmem 314216448 [ 45.583439][ T544] mapped_file 49152 [ 45.589818][ T544] dirty 0 [ 45.592820][ T544] writeback 0 [ 45.596118][ T544] workingset_refault_anon 30 [ 45.600778][ T544] workingset_refault_file 37623 [ 45.618199][ T544] swap 127987712 [ 45.621831][ T544] swapcached 0 [ 45.625969][ T544] pgpgin 186856 [ 45.630414][ T544] pgpgout 110056 [ 45.650781][ T544] pgfault 13705 [ 45.655274][ T544] pgmajfault 739 [ 45.667253][ T544] inactive_anon 274325504 [ 45.671664][ T544] active_anon 39743488 [ 45.675778][ T544] inactive_file 24576 [ 45.679796][ T544] active_file 0 [ 45.683311][ T544] unevictable 0 [ 45.687070][ T544] hierarchical_memory_limit 314572800 [ 45.692517][ T544] hierarchical_memsw_limit 9223372036854771712 [ 45.698770][ T544] total_cache 314458112 [ 45.702955][ T544] total_rss 102400 [ 45.706757][ T544] total_rss_huge 0 [ 45.710576][ T544] total_shmem 314216448 [ 45.714755][ T544] total_mapped_file 49152 [ 45.746191][ T307] usb 4-1: string descriptor 0 read error: -71 [ 45.746886][ T816] usb 1-1: device descriptor read/64, error -71 [ 45.760628][ T307] usb 4-1: USB disconnect, device number 11 [ 45.791657][ T544] total_dirty 0 [ 45.795140][ T544] total_writeback 0 [ 45.804208][ T544] total_workingset_refault_anon 30 [ 45.817418][ T544] total_workingset_refault_file 37623 [ 45.828769][ T544] total_swap 127987712 [ 45.849188][ T544] total_swapcached 0 [ 45.861385][ T544] total_pgpgin 186856 [ 45.870011][ T544] total_pgpgout 110056 [ 45.875568][ T544] total_pgfault 13705 [ 45.879612][ T544] total_pgmajfault 739 [ 45.883689][ T544] total_inactive_anon 274325504 [ 45.888723][ T544] total_active_anon 39743488 [ 45.893358][ T544] total_inactive_file 24576 [ 45.898051][ T544] total_active_file 0 [ 45.902119][ T544] total_unevictable 0 [ 45.906113][ T544] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.58,pid=543,uid=0 [ 45.920898][ T544] Memory cgroup out of memory: Killed process 543 (syz.1.58) total-vm:90372kB, anon-rss:1228kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 46.016756][ T816] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 46.136927][ T554] syz.1.58 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 46.146734][ T816] usb 1-1: device descriptor read/64, error -71 [ 46.173711][ T554] CPU: 0 UID: 0 PID: 554 Comm: syz.1.58 Not tainted syzkaller #0 c4f271c1f416af74072d306bc5476bac4a1aadeb [ 46.173742][ T554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 46.173756][ T554] Call Trace: [ 46.173763][ T554] [ 46.173770][ T554] __dump_stack+0x21/0x30 [ 46.173801][ T554] dump_stack_lvl+0x140/0x1c0 [ 46.173827][ T554] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.173853][ T554] ? ___ratelimit+0x40e/0x5b0 [ 46.173875][ T554] dump_stack+0x19/0x20 [ 46.173899][ T554] dump_header+0xd6/0x490 [ 46.173922][ T554] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 46.173945][ T554] oom_kill_process+0x35d/0x640 [ 46.173964][ T554] out_of_memory+0x624/0xa30 [ 46.173995][ T554] ? __cfi_out_of_memory+0x10/0x10 [ 46.174024][ T554] ? mutex_lock_killable+0x97/0x1d0 [ 46.174048][ T554] ? __cfi_mutex_lock_killable+0x10/0x10 [ 46.174073][ T554] mem_cgroup_out_of_memory+0x2c8/0x390 [ 46.174102][ T554] ? css_next_descendant_pre+0x202/0x230 [ 46.174124][ T554] ? drain_obj_stock+0xed0/0xed0 [ 46.174154][ T554] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 46.174182][ T554] try_charge_memcg+0x91c/0xe10 [ 46.174205][ T554] ? finish_fault+0xe63/0x1140 [ 46.174235][ T554] ? __cfi_try_charge_memcg+0x10/0x10 [ 46.174259][ T554] ? __alloc_pages_noprof+0x35f/0x7e0 [ 46.174289][ T554] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 46.174314][ T554] __mem_cgroup_charge+0xfc/0x420 [ 46.174339][ T554] ? do_pte_missing+0x3859/0x4410 [ 46.174359][ T554] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 46.174385][ T554] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 46.174407][ T554] ? put_swap_device+0x130/0x130 [ 46.174426][ T554] ? shmem_huge_global_enabled+0x2da/0x360 [ 46.174457][ T554] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 46.174486][ T554] ? __kasan_check_write+0x18/0x20 [ 46.174513][ T554] ? _raw_spin_lock+0x92/0x120 [ 46.174542][ T554] shmem_get_folio_gfp+0x607/0x1390 [ 46.174573][ T554] ? shmem_get_folio+0xc0/0xc0 [ 46.174601][ T554] ? __kasan_check_write+0x18/0x20 [ 46.174628][ T554] ? inode_to_bdi+0x6d/0x100 [ 46.174652][ T554] shmem_write_begin+0xf4/0x270 [ 46.174672][ T554] generic_perform_write+0x32b/0x970 [ 46.174695][ T554] ? inode_update_timestamps+0x4f0/0x700 [ 46.174720][ T554] ? __cfi_generic_perform_write+0x10/0x10 [ 46.174740][ T554] ? down_write+0xee/0x2b0 [ 46.174764][ T554] ? mnt_get_write_access_file+0x1af/0x3b0 [ 46.174787][ T554] ? mnt_put_write_access_file+0xc2/0x100 [ 46.174810][ T554] ? file_update_time+0x1de/0x210 [ 46.174834][ T554] shmem_file_write_iter+0x105/0x130 [ 46.174857][ T554] __kernel_write_iter+0x42c/0x8a0 [ 46.174886][ T554] ? __cfi___kernel_write_iter+0x10/0x10 [ 46.174912][ T554] ? get_dump_page+0x165/0x220 [ 46.174934][ T554] ? __asan_memset+0x39/0x50 [ 46.174961][ T554] ? iov_iter_bvec+0xc0/0x180 [ 46.174979][ T554] dump_user_range+0xb8b/0xe60 [ 46.175009][ T554] ? __cfi_dump_user_range+0x10/0x10 [ 46.175037][ T554] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 46.175067][ T554] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 46.175096][ T554] ? elf_core_dump+0x24c0/0x3960 [ 46.175117][ T554] elf_core_dump+0x2e7e/0x3960 [ 46.175141][ T554] ? __cfi_elf_core_dump+0x10/0x10 [ 46.175167][ T554] ? dump_interrupted+0xf0/0xf0 [ 46.175193][ T554] ? filp_open+0x199/0x1f0 [ 46.175215][ T554] ? 0xffffffffff600000 [ 46.175232][ T554] do_coredump+0x208a/0x2fe0 [ 46.175262][ T554] ? __cfi_do_coredump+0x10/0x10 [ 46.175294][ T554] ? asm_exc_page_fault+0x2b/0x30 [ 46.175332][ T554] ? __kasan_slab_free+0x6a/0x80 [ 46.175351][ T554] ? kmem_cache_free+0x1bd/0x4f0 [ 46.175379][ T554] ? get_signal+0xa74/0x14e0 [ 46.175405][ T554] get_signal+0x11f8/0x14e0 [ 46.175432][ T554] arch_do_signal_or_restart+0xbc/0x760 [ 46.175461][ T554] ? fixup_vdso_exception+0x20d/0x310 [ 46.175493][ T554] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 46.175525][ T554] irqentry_exit_to_user_mode+0x4d/0xb0 [ 46.175552][ T554] irqentry_exit+0x16/0x60 [ 46.175575][ T554] exc_page_fault+0x65/0xc0 [ 46.175599][ T554] asm_exc_page_fault+0x2b/0x30 [ 46.175628][ T554] RIP: 0033:0x7f868259c821 [ 46.175645][ T554] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 46.175663][ T554] RSP: 002b:ffffffffffffff90 EFLAGS: 00010217 [ 46.175682][ T554] RAX: 0000000000000000 RBX: 00007f8682816090 RCX: 00007f868259c819 [ 46.175697][ T554] RDX: 0000000000000000 RSI: ffffffffffffff90 RDI: 0000000000020000 [ 46.175711][ T554] RBP: 00007f8682632c91 R08: 0000000000000000 R09: 0000000000000000 [ 46.175724][ T554] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 46.175737][ T554] R13: 00007f8682816128 R14: 00007f8682816090 R15: 00007ffc12217368 [ 46.175755][ T554] [ 46.175763][ T554] memory: usage 307008kB, limit 307200kB, failcnt 45349 [ 46.636784][ T307] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 46.641667][ T10] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 46.675144][ T554] memory+swap: usage 416924kB, limit 9007199254740988kB, failcnt 0 [ 46.713410][ T554] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 46.750696][ T554] Memory cgroup stats for /syz1: [ 46.750862][ T554] cache 314023936 [ 46.786106][ T554] rss 102400 [ 46.796731][ T307] usb 4-1: Using ep0 maxpacket: 16 [ 46.796830][ T816] usb 1-1: device descriptor read/64, error -71 [ 46.803543][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.819353][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.829421][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 46.835847][ T307] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 46.837663][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 46.850632][ T554] rss_huge 0 [ 46.858689][ T10] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 46.861330][ T307] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 46.871716][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 46.886758][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.897819][ T307] usb 4-1: config 0 descriptor?? [ 46.897902][ T10] usb 3-1: string descriptor 0 read error: -22 [ 46.909058][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.40 [ 46.918237][ T816] usb usb1-port1: attempt power cycle [ 46.923674][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.925704][ T554] shmem 301998080 [ 46.937883][ T890] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 46.965954][ T554] mapped_file 11681792 [ 46.976032][ T554] dirty 0 [ 46.979126][ T554] writeback 167936 [ 46.982895][ T554] workingset_refault_anon 30 [ 47.016075][ T554] workingset_refault_file 40920 [ 47.026750][ T554] swap 127651840 [ 47.030332][ T554] swapcached 200704 [ 47.054407][ T554] pgpgin 194571 [ 47.064430][ T554] pgpgout 117800 [ 47.074521][ T554] pgfault 14080 [ 47.084603][ T554] pgmajfault 769 [ 47.096703][ T554] inactive_anon 56176640 [ 47.106868][ T554] active_anon 246136832 [ 47.123198][ T554] inactive_file 9793536 [ 47.136732][ T554] active_file 1576960 [ 47.146563][ T895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.156490][ T895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.175145][ T554] unevictable 0 [ 47.189227][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 47.195197][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 47.203732][ T554] hierarchical_memory_limit 314572800 [ 47.210665][ T10] usb 3-1: USB disconnect, device number 19 [ 47.226741][ T554] hierarchical_memsw_limit 9223372036854771712 [ 47.241410][ T554] total_cache 314023936 [ 47.253781][ T554] total_rss 102400 [ 47.261983][ T554] total_rss_huge 0 [ 47.266853][ T816] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 47.281538][ T554] total_shmem 301998080 [ 47.285789][ T554] total_mapped_file 11681792 [ 47.288099][ T816] usb 1-1: device descriptor read/8, error -71 [ 47.307262][ T554] total_dirty 0 [ 47.315206][ T554] total_writeback 167936 [ 47.329743][ T307] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 47.344143][ T307] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 47.359699][ T554] total_workingset_refault_anon 30 [ 47.364830][ T554] total_workingset_refault_file 40920 [ 47.370596][ T307] microsoft 0003:045E:07DA.000B: no inputs found [ 47.377082][ T307] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 47.393926][ T554] total_swap 127651840 [ 47.404889][ T554] total_swapcached 200704 [ 47.409295][ T554] total_pgpgin 194571 [ 47.413286][ T554] total_pgpgout 117800 [ 47.418069][ T554] total_pgfault 14080 [ 47.422105][ T554] total_pgmajfault 769 [ 47.426171][ T554] total_inactive_anon 56176640 [ 47.431080][ T554] total_active_anon 246136832 [ 47.435875][ T554] total_inactive_file 9793536 [ 47.440676][ T554] total_active_file 1576960 [ 47.445258][ T554] total_unevictable 0 [ 47.449419][ T554] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.58,pid=549,uid=0 [ 47.449781][ T816] usb 1-1: device descriptor read/8, error -71 [ 47.467192][ T554] Memory cgroup out of memory: Killed process 549 (syz.1.58) total-vm:90372kB, anon-rss:1228kB, file-rss:22380kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 47.544174][ T401] usb 4-1: USB disconnect, device number 12 [ 47.615926][ T547] syz.1.58 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 47.629871][ T547] CPU: 1 UID: 0 PID: 547 Comm: syz.1.58 Not tainted syzkaller #0 c4f271c1f416af74072d306bc5476bac4a1aadeb [ 47.629901][ T547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 47.629916][ T547] Call Trace: [ 47.629923][ T547] [ 47.629930][ T547] __dump_stack+0x21/0x30 [ 47.629961][ T547] dump_stack_lvl+0x140/0x1c0 [ 47.629986][ T547] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.630012][ T547] ? ___ratelimit+0x40e/0x5b0 [ 47.630034][ T547] dump_stack+0x19/0x20 [ 47.630058][ T547] dump_header+0xd6/0x490 [ 47.630080][ T547] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 47.630103][ T547] oom_kill_process+0x35d/0x640 [ 47.630123][ T547] out_of_memory+0x624/0xa30 [ 47.630158][ T547] ? __cfi_out_of_memory+0x10/0x10 [ 47.630187][ T547] ? mutex_lock_killable+0x97/0x1d0 [ 47.630211][ T547] ? __cfi_mutex_lock_killable+0x10/0x10 [ 47.630236][ T547] mem_cgroup_out_of_memory+0x2c8/0x390 [ 47.630265][ T547] ? css_next_descendant_pre+0x202/0x230 [ 47.630287][ T547] ? drain_obj_stock+0xed0/0xed0 [ 47.630316][ T547] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 47.630344][ T547] try_charge_memcg+0x91c/0xe10 [ 47.630367][ T547] ? finish_fault+0xe63/0x1140 [ 47.630396][ T547] ? __cfi_try_charge_memcg+0x10/0x10 [ 47.630419][ T547] ? __alloc_pages_noprof+0x35f/0x7e0 [ 47.630443][ T547] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 47.630466][ T547] __mem_cgroup_charge+0xfc/0x420 [ 47.630492][ T547] ? do_pte_missing+0x3859/0x4410 [ 47.630512][ T547] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 47.630539][ T547] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 47.630561][ T547] ? put_swap_device+0x130/0x130 [ 47.630580][ T547] ? shmem_huge_global_enabled+0x2da/0x360 [ 47.630611][ T547] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 47.630640][ T547] ? __kasan_check_write+0x18/0x20 [ 47.630666][ T547] ? _raw_spin_lock+0x92/0x120 [ 47.630695][ T547] shmem_get_folio_gfp+0x607/0x1390 [ 47.630726][ T547] ? shmem_get_folio+0xc0/0xc0 [ 47.630754][ T547] ? __kasan_check_write+0x18/0x20 [ 47.630780][ T547] ? inode_to_bdi+0x6d/0x100 [ 47.630803][ T547] shmem_write_begin+0xf4/0x270 [ 47.630822][ T547] generic_perform_write+0x32b/0x970 [ 47.630845][ T547] ? inode_update_timestamps+0x4f0/0x700 [ 47.630871][ T547] ? __cfi_generic_perform_write+0x10/0x10 [ 47.630893][ T547] ? down_write+0xee/0x2b0 [ 47.630917][ T547] ? mnt_get_write_access_file+0x1af/0x3b0 [ 47.630940][ T547] ? mnt_put_write_access_file+0xc2/0x100 [ 47.630962][ T547] ? file_update_time+0x1de/0x210 [ 47.630985][ T547] shmem_file_write_iter+0x105/0x130 [ 47.631007][ T547] __kernel_write_iter+0x42c/0x8a0 [ 47.631035][ T547] ? __cfi___kernel_write_iter+0x10/0x10 [ 47.631061][ T547] ? get_dump_page+0x165/0x220 [ 47.631082][ T547] ? __asan_memset+0x39/0x50 [ 47.631106][ T547] ? iov_iter_bvec+0xc0/0x180 [ 47.631125][ T547] dump_user_range+0xb8b/0xe60 [ 47.631159][ T547] ? __cfi_dump_user_range+0x10/0x10 [ 47.631186][ T547] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 47.631215][ T547] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 47.631242][ T547] ? elf_core_dump+0x24c0/0x3960 [ 47.631263][ T547] elf_core_dump+0x2e7e/0x3960 [ 47.631285][ T547] ? __cfi_elf_core_dump+0x10/0x10 [ 47.631312][ T547] ? dump_interrupted+0xf0/0xf0 [ 47.631337][ T547] ? filp_open+0x199/0x1f0 [ 47.631359][ T547] ? 0xffffffffff600000 [ 47.631375][ T547] do_coredump+0x208a/0x2fe0 [ 47.631404][ T547] ? __cfi_do_coredump+0x10/0x10 [ 47.631428][ T547] ? asm_exc_page_fault+0x2b/0x30 [ 47.631465][ T547] ? __kasan_slab_free+0x6a/0x80 [ 47.631484][ T547] ? kmem_cache_free+0x1bd/0x4f0 [ 47.631511][ T547] ? get_signal+0xa74/0x14e0 [ 47.631536][ T547] get_signal+0x11f8/0x14e0 [ 47.631562][ T547] arch_do_signal_or_restart+0xbc/0x760 [ 47.631590][ T547] ? fixup_vdso_exception+0x20d/0x310 [ 47.631619][ T547] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 47.631649][ T547] irqentry_exit_to_user_mode+0x4d/0xb0 [ 47.631675][ T547] irqentry_exit+0x16/0x60 [ 47.631697][ T547] exc_page_fault+0x65/0xc0 [ 47.631719][ T547] asm_exc_page_fault+0x2b/0x30 [ 47.631746][ T547] RIP: 0033:0x7f868259c821 [ 47.631773][ T547] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 47.631792][ T547] RSP: 002b:ffffffffffffff90 EFLAGS: 00010217 [ 47.631810][ T547] RAX: 0000000000000000 RBX: 00007f8682816090 RCX: 00007f868259c819 [ 47.631825][ T547] RDX: 0000000000000000 RSI: ffffffffffffff90 RDI: 0000000000020000 [ 47.631839][ T547] RBP: 00007f8682632c91 R08: 0000000000000000 R09: 0000000000000000 [ 47.631852][ T547] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 47.631863][ T547] R13: 00007f8682816128 R14: 00007f8682816090 R15: 00007ffc12217368 [ 47.631880][ T547] [ 47.631887][ T547] memory: usage 307200kB, limit 307200kB, failcnt 48632 [ 47.717496][ T816] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 47.760502][ T547] memory+swap: usage 431952kB, limit 9007199254740988kB, failcnt 0 [ 47.973959][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 47.974004][ T36] audit: type=1400 audit(1776012894.180:340): avc: denied { call } for pid=913 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 47.978059][ T916] rust_binder: Error while translating object. [ 47.983241][ T36] audit: type=1400 audit(1776012894.190:341): avc: denied { transfer } for pid=913 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 47.986542][ C1] BUG: TASK stack guard page was hit at ffffc9000f6afeb8 (stack is ffffc9000f6b0000..ffffc9000f6b8000) [ 47.986623][ C1] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 47.986679][ C1] CPU: 1 UID: 0 PID: 916 Comm: syz.0.135 Not tainted syzkaller #0 c4f271c1f416af74072d306bc5476bac4a1aadeb [ 47.986740][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 47.986770][ C1] RIP: 0010:get_page_from_freelist+0x1f/0x4a20 [ 47.986845][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 02 00 00 49 89 cf <89> bc 24 a0 00 00 00 65 48 8b 04 25 28 00 00 00 48 89 84 24 80 02 [ 47.986877][ C1] RSP: 0018:ffffc9000f6afec0 EFLAGS: 00010286 [ 47.986918][ C1] RAX: 0000000000000100 RBX: 0000000000000002 RCX: ffffc9000f6b0230 [ 47.986949][ C1] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 47.986979][ C1] RBP: ffffc9000f6b0190 R08: ffffffff876aade3 R09: 1ffffffff0ed55bc [ 47.987018][ C1] R10: dffffc0000000000 R11: fffffbfff0ed55bd R12: 0000000000000680 [ 47.987048][ C1] R13: dffffc0000000000 R14: 1ffff92001ed6038 R15: ffffc9000f6b0230 [ 47.987079][ C1] FS: 00007f3bba8ab6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 47.987119][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.987164][ C1] CR2: ffffc9000f6afeb8 CR3: 000000012e806000 CR4: 00000000003526b0 [ 47.987199][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.987227][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 47.987257][ C1] Call Trace: [ 47.987276][ C1] [ 47.987301][ C1] ? __kasan_check_read+0x15/0x20 [ 47.987366][ C1] ? static_key_count+0x45/0x70 [ 47.987408][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 47.987471][ C1] ? __cfi_gfp_zone+0x10/0x10 [ 47.987539][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 47.987593][ C1] ? unwind_next_frame+0x3c1/0x750 [ 47.987648][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 47.987701][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 47.987777][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 47.987852][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 47.987917][ C1] ? stack_depot_save_flags+0x672/0x800 [ 47.987981][ C1] ? stack_depot_save+0x12/0x20 [ 47.988036][ C1] ? save_stack+0x133/0x240 [ 47.988080][ C1] ? free_contig_range+0x260/0x260 [ 47.988160][ C1] ? __reset_page_owner+0x450/0x450 [ 47.988219][ C1] ? zone_page_state_add+0x43/0x90 [ 47.988283][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 47.988333][ C1] ? prep_new_page+0x20/0x120 [ 47.988374][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 47.988429][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 47.988477][ C1] ? stack_depot_save_flags+0x672/0x800 [ 47.988535][ C1] ? kasan_save_track+0x4f/0x80 [ 47.988599][ C1] ? kasan_save_free_info+0x4a/0x60 [ 47.988654][ C1] ? __kasan_slab_free+0x5f/0x80 [ 47.988693][ C1] ? kfree+0x158/0x440 [ 47.988754][ C1] ? krealloc_noprof+0xfa/0x130 [ 47.988811][ C1] ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850 [ 47.988955][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1706/0x2660 [ 47.989038][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 47.989121][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 47.989262][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 47.989342][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 47.989400][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 47.989454][ C1] ? sched_clock_noinstr+0xd/0x30 [ 47.989508][ C1] ? __set_page_owner+0x8e/0x600 [ 47.989553][ C1] ? __zone_watermark_ok+0x134/0x630 [ 47.989602][ C1] ? __cfi___set_page_owner+0x10/0x10 [ 47.989648][ C1] ? kasan_unpoison+0x4a/0x70 [ 47.989711][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 47.989757][ C1] ? __cfi_post_alloc_hook+0x10/0x10 [ 47.989803][ C1] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 47.989866][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 47.989925][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 47.989989][ C1] ? prep_new_page+0x20/0x120 [ 47.990036][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 47.990103][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 47.990167][ C1] ? static_key_count+0x45/0x70 [ 47.990208][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 47.990274][ C1] ? lruvec_init+0x1a1/0x280 [ 47.990341][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 47.990406][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 47.990454][ C1] ? unwind_get_return_address+0x51/0x90 [ 47.990504][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 47.990584][ C1] ? arch_stack_walk+0x10a/0x170 [ 47.990653][ C1] ? stack_trace_save+0xaa/0x100 [ 47.990702][ C1] ? stack_depot_save_flags+0x672/0x800 [ 47.990775][ C1] ? kasan_save_track+0x4f/0x80 [ 47.990816][ C1] ? kasan_save_track+0x3e/0x80 [ 47.990850][ C1] ? kasan_save_free_info+0x4a/0x60 [ 47.990920][ C1] ? __kasan_slab_free+0x5f/0x80 [ 47.990967][ C1] ? kfree+0x158/0x440 [ 47.991038][ C1] ? krealloc_noprof+0xfa/0x130 [ 47.991104][ C1] ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850 [ 47.991229][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1706/0x2660 [ 47.991314][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 47.991404][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 47.991495][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 47.991580][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 47.991647][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xb22/0x1290 [ 47.991735][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x15b0/0xaf80 [ 47.991817][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 47.991860][ C1] ? __se_sys_ioctl+0x132/0x1b0 [ 47.991899][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 47.991931][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 47.992005][ C1] ? do_syscall_64+0x57/0xf0 [ 47.992092][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.992181][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 47.992254][ C1] ? kasan_save_free_info+0x4a/0x60 [ 47.992352][ C1] ? __kasan_slab_free+0x5f/0x80 [ 47.992408][ C1] ? kfree+0x158/0x440 [ 47.992481][ C1] ? krealloc_noprof+0xfa/0x130 [ 47.992544][ C1] ? krealloc_noprof+0xfa/0x130 [ 47.992613][ C1] ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850 [ 47.992728][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 47.992791][ C1] ? __cfi__RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x10/0x10 [ 47.992905][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 47.993026][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 47.993150][ C1] ? __kasan_check_write+0x18/0x20 [ 47.993216][ C1] ? _raw_spin_lock+0x92/0x120 [ 47.993283][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 47.993352][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1706/0x2660 [ 47.993442][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x10/0x10 [ 47.993547][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 47.993643][ C1] ? __asan_memcpy+0x5a/0x80 [ 47.993721][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 47.993825][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 47.993906][ C1] ? __kasan_check_write+0x18/0x20 [ 47.993966][ C1] ? _raw_spin_lock+0x92/0x120 [ 47.994043][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 47.994106][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70 [ 47.994205][ C1] ? __asan_memcpy+0x5a/0x80 [ 47.994262][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70 [ 47.994353][ C1] ? __cfi__RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 47.994446][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 47.994526][ C1] ? __asan_memcpy+0x5a/0x80 [ 47.994582][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 47.994656][ C1] ? __kasan_check_write+0x18/0x20 [ 47.994705][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 47.994787][ C1] ? __kasan_check_write+0x18/0x20 [ 47.994842][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 47.994908][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x308/0x5c60 [ 47.994993][ C1] ? __asan_memcpy+0x5a/0x80 [ 47.995054][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 47.995212][ C1] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 47.995309][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16insert_node_info+0x3e0/0x500 [ 47.995407][ C1] ? __cfi__RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 47.995519][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 47.995656][ C1] ? __kasan_check_write+0x18/0x20 [ 47.995729][ C1] ? mutex_unlock+0x90/0x240 [ 47.995790][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 47.995860][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 47.995928][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x1930/0x32e0 [ 47.996042][ C1] ? put_dec_trunc8+0x229/0x380 [ 47.996122][ C1] ? put_dec+0xd7/0xf0 [ 47.996203][ C1] ? __asan_memset+0x39/0x50 [ 47.996275][ C1] ? move_right+0x8e/0xb0 [ 47.996355][ C1] ? format_decode+0x1bb/0x1610 [ 47.996394][ C1] ? vsnprintf+0x7b4/0x1ad0 [ 47.996491][ C1] ? __asan_memcpy+0x5a/0x80 [ 47.996587][ C1] ? vsnprintf+0x19ef/0x1ad0 [ 47.996661][ C1] ? sprintf+0xe8/0x140 [ 47.996721][ C1] ? __cfi_sprintf+0x10/0x10 [ 47.996791][ C1] ? desc_read+0x202/0x3e0 [ 47.996836][ C1] ? info_print_prefix+0x269/0x4a0 [ 47.996887][ C1] ? trace_raw_output_console+0xf0/0xf0 [ 47.996949][ C1] ? _prb_read_valid+0xa71/0xa80 [ 47.996993][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 47.997039][ C1] ? __asan_memcpy+0x5a/0x80 [ 47.997095][ C1] ? __kasan_check_read+0x15/0x20 [ 47.997157][ C1] ? resched_curr+0xb0/0x440 [ 47.997214][ C1] ? __cfi_resched_curr+0x10/0x10 [ 47.997295][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 47.997354][ C1] ? __kasan_check_read+0x15/0x20 [ 47.997413][ C1] ? __perf_event_task_sched_in+0x1190/0x1370 [ 47.997465][ C1] ? __kasan_check_write+0x18/0x20 [ 47.997524][ C1] ? __switch_to+0xc4f/0x1300 [ 47.997590][ C1] ? __perf_event_task_sched_out+0x1d9/0xb90 [ 47.997637][ C1] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 47.997685][ C1] ? __cfi___switch_to+0x10/0x10 [ 47.997745][ C1] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 47.997792][ C1] ? psi_task_switch+0xad/0xa10 [ 47.997856][ C1] ? __kasan_check_write+0x18/0x20 [ 47.997936][ C1] ? finish_task_switch+0x1d9/0x760 [ 47.997998][ C1] ? __switch_to_asm+0x3d/0x70 [ 47.998065][ C1] ? __schedule+0x13a1/0x1fa0 [ 47.998114][ C1] ? console_flush_all+0xa12/0xac0 [ 47.998179][ C1] ? __sched_text_start+0x10/0x10 [ 47.998227][ C1] ? __console_rewind_all+0x170/0x170 [ 47.998286][ C1] ? __kasan_check_write+0x18/0x20 [ 47.998352][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 47.998421][ C1] ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10 [ 47.998498][ C1] ? __cfi_llist_add_batch+0x10/0x10 [ 47.998555][ C1] ? preempt_schedule_common+0x2d/0x60 [ 47.998614][ C1] ? preempt_schedule+0xc5/0xe0 [ 47.998659][ C1] ? __cfi_preempt_schedule+0x10/0x10 [ 47.998704][ C1] ? krealloc_noprof+0xfa/0x130 [ 47.998767][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 47.998838][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x396/0x820 [ 47.998933][ C1] ? irq_work_queue+0xc2/0x160 [ 47.998992][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 47.999098][ C1] ? vprintk_emit+0x3e3/0x650 [ 47.999164][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 47.999214][ C1] ? _RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x47c/0x760 [ 47.999326][ C1] ? __cfi__RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x10/0x10 [ 47.999428][ C1] ? vprintk_default+0x2a/0x40 [ 47.999485][ C1] ? vprintk+0x93/0xa0 [ 47.999543][ C1] ? _printk+0xde/0x140 [ 47.999592][ C1] ? __cfi___check_object_size+0x10/0x10 [ 47.999665][ C1] ? __cfi__printk+0x10/0x10 [ 47.999715][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 47.999811][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a48/0x9130 [ 47.999899][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 48.000015][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 48.000283][ C1] ? __asan_memset+0x39/0x50 [ 48.000343][ C1] ? __update_load_avg_se+0x5bf/0xec0 [ 48.000411][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 48.000457][ C1] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 48.000522][ C1] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 48.000567][ C1] ? __cgroup_account_cputime+0xa5/0xd0 [ 48.000638][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 48.000716][ C1] ? kernel_text_address+0xa9/0xe0 [ 48.000771][ C1] ? __kasan_check_write+0x18/0x20 [ 48.000842][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 48.000902][ C1] ? krealloc_noprof+0x8d/0x130 [ 48.000964][ C1] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x124/0x850 [ 48.001090][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xa2f/0x1290 [ 48.001191][ C1] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 48.001261][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 48.001316][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 48.001353][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 48.001407][ C1] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x124/0x850 [ 48.001537][ C1] ? __asan_memset+0x39/0x50 [ 48.001592][ C1] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x2ff/0x850 [ 48.001718][ C1] ? __cfi_slow_avc_audit+0x10/0x10 [ 48.001763][ C1] ? __cfi__RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x10/0x10 [ 48.001914][ C1] ? avc_has_perm_noaudit+0x2bd/0x360 [ 48.001985][ C1] ? avc_has_perm+0x1ec/0x240 [ 48.002047][ C1] ? avc_has_perm+0x211/0x240 [ 48.002110][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 48.002174][ C1] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 48.002235][ C1] ? __kasan_check_write+0x18/0x20 [ 48.002291][ C1] ? _raw_spin_lock+0x92/0x120 [ 48.002355][ C1] ? selinux_binder_transaction+0x165/0x1d0 [ 48.002403][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xb22/0x1290 [ 48.002500][ C1] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x10/0x10 [ 48.002587][ C1] ? __kasan_check_write+0x18/0x20 [ 48.002643][ C1] ? _raw_spin_lock+0x92/0x120 [ 48.002706][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 48.002763][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x155c/0xaf80 [ 48.002835][ C1] ? __asan_memcpy+0x5a/0x80 [ 48.002900][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x15b0/0xaf80 [ 48.003001][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 48.003251][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 48.003324][ C1] ? kernel_text_address+0xa9/0xe0 [ 48.003400][ C1] ? __kasan_check_write+0x18/0x20 [ 48.003460][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 48.003534][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 48.003609][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 48.003669][ C1] ? kernel_text_address+0xa9/0xe0 [ 48.003729][ C1] ? __kasan_check_write+0x18/0x20 [ 48.003790][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 48.003866][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 48.003942][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 48.004012][ C1] ? stack_depot_save_flags+0x399/0x800 [ 48.004075][ C1] ? kasan_save_track+0x4f/0x80 [ 48.004148][ C1] ? kasan_save_track+0x3e/0x80 [ 48.004216][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 48.004273][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 48.004313][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 48.004381][ C1] ? krealloc_noprof+0x8d/0x130 [ 48.004448][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x84c/0x1d80 [ 48.004523][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x3e3/0x5c20 [ 48.004582][ C1] ? __se_sys_ioctl+0x132/0x1b0 [ 48.004636][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 48.004694][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 48.004788][ C1] ? do_syscall_64+0x57/0xf0 [ 48.004851][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.004929][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 48.005029][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 48.005113][ C1] ? __kasan_check_write+0x18/0x20 [ 48.005174][ C1] ? _raw_spin_lock+0x92/0x120 [ 48.005230][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 48.005295][ C1] ? _raw_spin_unlock+0x45/0x60 [ 48.005358][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 48.005406][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80 [ 48.005486][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 48.005567][ C1] ? __kasan_check_write+0x18/0x20 [ 48.005622][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0 [ 48.005730][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 48.005793][ C1] ? kernel_text_address+0xa9/0xe0 [ 48.005845][ C1] ? __kernel_text_address+0x11/0x40 [ 48.005893][ C1] ? unwind_get_return_address+0x51/0x90 [ 48.005947][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 48.006034][ C1] ? arch_stack_walk+0x10a/0x170 [ 48.006135][ C1] ? stack_trace_save+0xaa/0x100 [ 48.006188][ C1] ? stack_depot_save_flags+0x38/0x800 [ 48.006255][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20 [ 48.006318][ C1] ? __asan_memcpy+0x5a/0x80 [ 48.006377][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 48.006435][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 48.006512][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 48.006580][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 48.006639][ C1] ? kernel_text_address+0xa9/0xe0 [ 48.006699][ C1] ? __kasan_check_write+0x18/0x20 [ 48.006754][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 48.006824][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 48.006898][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 48.006962][ C1] ? stack_depot_save_flags+0x399/0x800 [ 48.007024][ C1] ? kasan_save_track+0x4f/0x80 [ 48.007088][ C1] ? kasan_save_track+0x3e/0x80 [ 48.007140][ C1] ? kasan_save_free_info+0x4a/0x60 [ 48.007193][ C1] ? __kasan_slab_free+0x5f/0x80 [ 48.007236][ C1] ? kfree+0x158/0x440 [ 48.007289][ C1] ? krealloc_noprof+0xfa/0x130 [ 48.007344][ C1] ? kvrealloc_noprof+0x59/0x120 [ 48.007418][ C1] ? _RNvMs0_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kvecINtB5_3VecINtNtNtB9_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main7process7ProcessENtNtB7_9allocator8KVmallocE7reserveB1g_+0x35f/0x700 [ 48.007515][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main16rust_binder_open+0xcf4/0x1af0 [ 48.007569][ C1] ? do_dentry_open+0x97b/0x1510 [ 48.007614][ C1] ? vfs_open+0x86/0x240 [ 48.007658][ C1] ? path_openat+0x2bb1/0x34f0 [ 48.007702][ C1] ? do_filp_open+0x1f5/0x440 [ 48.007746][ C1] ? do_sys_openat2+0x134/0x1d0 [ 48.007798][ C1] ? __x64_sys_openat+0x13a/0x170 [ 48.007850][ C1] ? x64_sys_call+0xe69/0x2ee0 [ 48.007912][ C1] ? do_syscall_64+0x57/0xf0 [ 48.007970][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.008081][ C1] ? __kasan_slab_free+0x6a/0x80 [ 48.008134][ C1] ? kfree+0x158/0x440 [ 48.008187][ C1] ? krealloc_noprof+0xfa/0x130 [ 48.008250][ C1] ? krealloc_noprof+0xfa/0x130 [ 48.008313][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 48.008367][ C1] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 48.008406][ C1] ? __cfi__RNvMs0_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kvecINtB5_3VecINtNtNtB9_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main7process7ProcessENtNtB7_9allocator8KVmallocE30push_within_capacity_uncheckedB1g_+0x10/0x10 [ 48.008511][ C1] ? __cfi__RNvMs0_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kvecINtB5_3VecINtNtNtB9_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main7process7ProcessENtNtB7_9allocator8KVmallocE7reserveB1g_+0x10/0x10 [ 48.008607][ C1] ? __cgroup_account_cputime+0xa5/0xd0 [ 48.008652][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 48.008706][ C1] ? update_curr+0x50c/0x9e0 [ 48.008771][ C1] ? update_load_avg+0x506/0x1990 [ 48.008834][ C1] ? __calc_delta+0x280/0x280 [ 48.008919][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 48.008998][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 48.009065][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 48.009114][ C1] ? place_entity+0x4e9/0x620 [ 48.009189][ C1] ? reweight_entity+0x9e0/0x9e0 [ 48.009272][ C1] ? update_entity_lag+0x28f/0x2c0 [ 48.009335][ C1] ? reweight_entity+0x595/0x9e0 [ 48.009423][ C1] ? assign_cfs_rq_runtime+0x350/0x350 [ 48.009517][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 48.009568][ C1] ? sched_clock_noinstr+0xd/0x30 [ 48.009609][ C1] ? __kasan_check_read+0x15/0x20 [ 48.009670][ C1] ? psi_group_change+0xaae/0x1090 [ 48.009731][ C1] ? avc_has_extended_perms+0x80b/0xe70 [ 48.009795][ C1] ? __asan_memcpy+0x5a/0x80 [ 48.009852][ C1] ? avc_has_extended_perms+0x969/0xe70 [ 48.009914][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 48.009968][ C1] ? do_vfs_ioctl+0x182d/0x2010 [ 48.010009][ C1] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 48.010057][ C1] ? __cfi_check_preempt_wakeup_fair+0x10/0x10 [ 48.010131][ C1] ? __kasan_check_read+0x15/0x20 [ 48.010184][ C1] ? ioctl_has_perm+0x39a/0x500 [ 48.010253][ C1] ? has_cap_mac_admin+0xd0/0xd0 [ 48.010313][ C1] ? __kasan_check_write+0x18/0x20 [ 48.010368][ C1] ? _raw_spin_lock_irq+0x93/0x120 [ 48.010441][ C1] ? selinux_file_ioctl+0x732/0x1480 [ 48.010503][ C1] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 48.010564][ C1] ? read_tsc+0xd/0x20 [ 48.010618][ C1] ? ktime_get+0x1df/0x210 [ 48.010687][ C1] ? lapic_next_event+0x15/0x20 [ 48.010754][ C1] ? clockevents_program_event+0x254/0x350 [ 48.010854][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 48.010926][ C1] ? sched_clock_noinstr+0xd/0x30 [ 48.010982][ C1] ? __fget_files+0x2c5/0x340 [ 48.011029][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 48.011077][ C1] ? security_file_ioctl+0x3e/0x110 [ 48.011142][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 48.011206][ C1] ? __se_sys_ioctl+0x132/0x1b0 [ 48.011283][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 48.011329][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 48.011414][ C1] ? do_syscall_64+0x57/0xf0 [ 48.011476][ C1] ? clear_bhb_loop+0x50/0xa0 [ 48.011515][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.011586][ C1] [ 48.011603][ C1] Modules linked in: [ 48.011638][ C1] ---[ end trace 0000000000000000 ]--- [ 48.011665][ C1] RIP: 0010:get_page_from_freelist+0x1f/0x4a20 [ 48.011723][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 02 00 00 49 89 cf <89> bc 24 a0 00 00 00 65 48 8b 04 25 28 00 00 00 48 89 84 24 80 02 [ 48.011764][ C1] RSP: 0018:ffffc9000f6afec0 EFLAGS: 00010286 [ 48.011802][ C1] RAX: 0000000000000100 RBX: 0000000000000002 RCX: ffffc9000f6b0230 [ 48.011835][ C1] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 48.011862][ C1] RBP: ffffc9000f6b0190 R08: ffffffff876aade3 R09: 1ffffffff0ed55bc [ 48.011892][ C1] R10: dffffc0000000000 R11: fffffbfff0ed55bd R12: 0000000000000680 [ 48.011926][ C1] R13: dffffc0000000000 R14: 1ffff92001ed6038 R15: ffffc9000f6b0230 [ 48.011961][ C1] FS: 00007f3bba8ab6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 48.011999][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.012033][ C1] CR2: ffffc9000f6afeb8 CR3: 000000012e806000 CR4: 00000000003526b0 [ 48.012074][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.012100][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 48.012150][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 48.013986][ C1] Kernel Offset: disabled