last executing test programs: 3.468870649s ago: executing program 2 (id=1511): pipe2(0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES32], 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}], 0x20}, 0x24008004) prctl$PR_GET_KEEPCAPS(0x7) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000002280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x5}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002500)={'caif0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f0000005c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) r3 = getuid() setreuid(0xee00, r3) syz_clone3(&(0x7f0000007580)={0x40200400, &(0x7f0000006440), &(0x7f0000006480), &(0x7f00000064c0), {0x33}, &(0x7f0000006500)=""/4096, 0x1000, &(0x7f0000007500)=""/13, &(0x7f0000007540)=[0x0], 0x1}, 0x58) syz_clone(0x248000, &(0x7f0000008f00)="4b256d88e2baf0c8f35d7b300e815756cfada95eefd70047242e648a3514b6950ebf1449833037d9438dfa1d5eab84f271e81006245ceed9ce684169335257ac690faad18988cfcbb97f94230421a7b78799f8afe0b3a25b038333b07dc515eb85394882261496edab519e9ab7dacce132e7ad7b651a8542293d0f20e8f5e1f077108f3348d995376da1a65b4e7d076920d51ab4bc32d3bbfbbf21019a4b7d8875d90b1534bab4c2f38d77319ee97cf061a1f6227ee87d95befcad59d37def5d1437057da3e2938570f0279d2ff919c9782cf315bb6e142bf60e54a17b7bcc43df21033bc65e9536339493d8edac", 0xee, &(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)="0ba5215edc0afd4bf7d3f066c02beadc4dce75982c274ed27d0becebcd88d0d8d65b029eafd86cc2b11ae2b099db24a798c67c577ec69bfbbf3fbc62783bc268fea0f7a0662fdfbbd7c3dcda7cfb8ce43cc34b3dd668e51a7e32bce3e1ff4e4ae33782e8487e00dc81f782e7336e96d0bffc12522a52ed6e7a0cb50c12274ec2a00aa7a643bf910f264158e08922f1f8327940114b2e6e503dd407a9788b064d8f91ad7311ba880fa461764a8b1ffb971f") getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000009140)={{{@in=@broadcast, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000009240)=0xe8) getegid() 1.441347747s ago: executing program 3 (id=1526): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001281204120003a60c6eec00be00442ffffe8000000000001200000000000000aaff020000000000000000000000000001"], 0xfdef) 1.417285702s ago: executing program 3 (id=1528): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff8, 0x4002, 0x248, 0x9b99}, 0x3d, [0xfffffff8, 0x8, 0x5, 0x9, 0x80, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x4, 0x7, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x8, 0xa, 0x4, 0x10, 0x6, 0x8, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x206, 0x10000, 0x0, 0x8f, 0x4, 0x4, 0x16, 0x1, 0x5, 0x401, 0x3, 0x405, 0x200000a7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000063, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x889, 0x4, 0xa6, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x100, 0xab00060, 0x6, 0x6, 0x5, 0x5, 0x3ff, 0x202, 0x1, 0x7, 0x1, 0x1cb, 0x1, 0x2, 0x6, 0x400438, 0x2, 0x9, 0x95, 0x7fffffff, 0x404, 0xfffffff9, 0x1, 0x1000, 0xe, 0x5], [0x2, 0xfffffffe, 0xf, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x18, 0x491, 0x8d3, 0x200006, 0x800a, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x6, 0x10000, 0x3fc, 0x3e55, 0x4, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x5fc, 0x101, 0xdd80, 0x60a0, 0x7b, 0x9d26, 0xffff, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10002, 0xdffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x3, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x0, 0x3, 0x9d86, 0xd, 0x9, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x80, 0x100, 0xd8d2, 0x7fffffff, 0x9, 0xc, 0x32d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x0, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="4b3bdf58587a274c29b0930f2ccb3659", 0x10, 0x40100c0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x70}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000a480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="a47c13", 0x3}], 0x1}}], 0x1, 0x24044c45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.176073591s ago: executing program 3 (id=1529): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff8, 0x4002, 0x248, 0x9b99}, 0x3d, [0xfffffff8, 0x8, 0x5, 0x9, 0x80, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x4, 0x7, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x8, 0xa, 0x4, 0x10, 0x6, 0x8, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x206, 0x10000, 0x0, 0x8f, 0x4, 0x4, 0x16, 0x1, 0x5, 0x401, 0x3, 0x405, 0x200000a7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000063, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x889, 0x4, 0xa6, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x100, 0xab00060, 0x6, 0x6, 0x5, 0x5, 0x3ff, 0x202, 0x1, 0x7, 0x1, 0x1cb, 0x1, 0x2, 0x6, 0x400438, 0x2, 0x9, 0x95, 0x7fffffff, 0x404, 0xfffffff9, 0x1, 0x1000, 0xe, 0x5], [0x2, 0xfffffffe, 0xf, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x18, 0x491, 0x8d3, 0x200006, 0x800a, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x6, 0x10000, 0x3fc, 0x3e55, 0x4, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x5fc, 0x101, 0xdd80, 0x60a0, 0x7b, 0x9d26, 0xffff, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10002, 0xdffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x3, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x0, 0x3, 0x9d86, 0xd, 0x9, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x80, 0x100, 0xd8d2, 0x7fffffff, 0x9, 0xc, 0x32d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x0, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="4b3bdf58587a274c29b0930f", 0xc, 0x40100c0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000a480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="a47c13", 0x3}], 0x1}}], 0x1, 0x24044c45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 937.37965ms ago: executing program 3 (id=1530): keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='enc=oaep ha'], 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x2e00) 871.129066ms ago: executing program 3 (id=1531): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000afffb0040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) 801.266391ms ago: executing program 3 (id=1533): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x315, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000001c80)={0x40, 0x0, 0x100, {0xfffffffffffffc93, 0x0, "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"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 64) syz_usb_connect(0x4, 0x963, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x62, 0x14, 0xd3, 0x179f666e2a72998a, 0x45e, 0x406, 0xd891, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x951, 0x4, 0x3, 0x3, 0x10, 0x3, [{{0x9, 0x4, 0xf, 0x6, 0x5, 0x92, 0x49, 0xf0, 0x3, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xf8e, 0xf3, 0xf18b, 0x72}, {0x6, 0x24, 0x1a, 0x0, 0x1a}, [@mdlm={0x15, 0x24, 0x12, 0x1f}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0xff, 0x7, 0x7}, {0x6, 0x24, 0x1a, 0x64, 0x10}, [@obex={0x5, 0x24, 0x15, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x400, 0x0, 0x8}, @obex={0x5}, @obex={0x5, 0x24, 0x15, 0x6c4}]}], [{{0x9, 0x5, 0x5, 0xc, 0x7a7, 0x0, 0x1, 0x98, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x1, 0x400}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x7, 0xad, 0x6, [@generic={0xb5, 0x7, "b9ce6e41d8b2ee9702f4063fb852a788d8f7e34364b4bcfca9d93dc106f2aaecfa170a21664069b55a56e2e21f1c9b8a3e1357dc37217755d47176222e893e81ccd62cf7b8f22b0c1779bd5bc0e2f836941b678a3fbae474415687c6868d10ed9838ad01676086c6f56910c7138d5e76a8d0aa2ef03ba2b7831b6bf47e2ba9a91445c68a8fe095d5d36f2a5167a28d5d40b373a3d474b8d447671dd007551068112fd3650f2cf5f871bcc6918d90709b77ca6a"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x0, 0x40, 0x4, [@generic={0x33, 0x21, "39a2f0e34465c96d7d3bd3f0559e84d87bd4c3c0865db43b0e27ac3bc430d3dc9c8fd127abc5a2cc7999afb07326c55d1a"}, @generic={0x6a, 0x23, "9a3a416fa0d471acd83839c799298385648082ba4e3ac56a025829d1d6be04cc82ad6680dadb34611f0095a9cd4693a6db198aec78bc398d04a06eede1aae51b1084d7feb3764abc9d93e5f6d3eb2d6eb17fc72f9ea9cad367d7e07c2149a056b8bf7f72f48c0d97"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x1, 0x1, 0xa6}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0x0, 0x0, 0x9}}]}}, {{0x9, 0x4, 0x4, 0xfb, 0x6, 0xa7, 0x47, 0x6e, 0x7, [@generic={0x78, 0xc, "abb7c11b6303ee6e23e35939c45f9521913e1a4923209e08e2f434785f24c9baec0b204b6213a07cb4c8a0053f0440d8c0919e1a7ed9c2e858004b770c8e41c1fbf735e5164ea5b96a2d082085b1b735e3f7c4f44bf3db1e6b9deca299d6fe629abfdefaceba8fe7955e0eb5f3a1d9b60a16afdec1cf"}], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0x88, 0x4, 0x0, [@generic={0xbc, 0x23, "0cc28f3dd2f0ebf54fd5f2e87c89f58cadf284726bba34a17d8eda36d446650230c53cbc2ab741f2ffb8be86726e97bebe45c229cf35a6ad5d695b41a880a1ea06f1c0f2322be7de99e2225ea227c2879d358bc334621c9fce74ec2808c1d39f5006fe95e9ddd55b8692d3cbbd48d29ca511883708f7748f06d76226f82ac1579567eb31f94f4a1c882fcbfddb65f13ef0b15a2b8883ebb5ad01a1a9389089a4fcf95d6d3cd6b9ba35c26d74be879a89f0035253e6d309bac7f6"}, @uac_iso={0x7, 0x25, 0x1, 0x102, 0xe, 0x7e}]}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0x5, 0xd9, 0x7, [@generic={0x2c, 0x4, "2f022ee64c87bdc25d83005ad3ca2863c134e1a819398c45fc57d6fc737159cf58ad37b74f5f8e061c56"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xa}]}}, {{0x9, 0x5, 0x8, 0x1f, 0x20, 0xfa, 0x58, 0x7}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x10, 0x1b, 0x40}}, {{0x9, 0x5, 0xc, 0x8, 0x240, 0x85, 0x9, 0x7f, [@generic={0x43, 0xe, "6babe2d730da446f9aae091402360ca8351aec87cd900e8682cfb9075a3e164bcc0decd1bc1239a5f6b4edc74bea5f17854148dd3921eb71a0252bdc8249c5aed1"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x1, 0x7f, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x401}]}}]}}, {{0x9, 0x4, 0xb1, 0x3, 0x6, 0xff, 0x7e, 0xf7, 0x1, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xb3, 0xff, 0x5}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}, @mdlm_detail={0xad, 0x24, 0x13, 0x7, "e48ee5686a997f7e6b9c3f00795e69fb29088ba5b3211346711d4a6ae0aac80881a700bead2518d9d848c818a376931cf1e4535c5ba0350d3c17767e2204d22c594e8136682aa9cd8056f7d2b70189913de40b5c12174824257671b4c9095177c64516c9e952c3fb02ebff213c70b3019761b82f7ad866de1de4cf0e6201953d7e881b45923e490caabb632f70524cb69e73c4368329ba3fce3cb9e0b66f3da16af29de31311355f7d"}, @mbim_extended={0x8, 0x24, 0x1c, 0xff, 0x10, 0x9}]}, @uac_control={{0xa, 0x24, 0x1, 0xfffe, 0x4}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x1, 0x0, 0x3, 0x7, 0x7}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x0, 0xc, "811a42acf58c"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x200, 0x6, 0x0, 0xd, 0x7, 0xae}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x304, 0x6, 0x1, 0xd2}, @feature_unit={0xf, 0x24, 0x6, 0x4, 0x1, 0x4, [0x4, 0x8, 0x3, 0x2], 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x302, 0x5, 0x1, 0x9}]}], [{{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x1, 0x6, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x1a7c}]}}, {{0x9, 0x5, 0xd, 0xc, 0x60, 0x7, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x9}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x4, 0x7, 0x10}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x48, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x4}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x1, 0x66, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x1}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0xfe, 0x6, 0x8, [@generic={0x94, 0xa, "c5f5028ecb8441fade602ea06d209c28c7909ae47317216ecd03c73c6a30a1c90775df3f3705d67c398774990400e9db78cb265a0495a778112bc743188878a2c0b0d7735e22defff337c53fdeec71291fa0e144875fc0831f4bb168bab4161e23de8622ec84408c233f1403f25a89730ee67bc10de4da1f26c54405a42976d28e44fc725b2e2fd4c16c6b1acb2cc342042b"}]}}]}}, {{0x9, 0x4, 0x27, 0x74, 0xa, 0x37, 0x74, 0x63, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x98}, [@mixer_unit={0x8, 0x24, 0x4, 0x2, 0x3, "d65758"}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x3, 0x6, [0x5, 0x1, 0x9, 0x0, 0xa, 0x3], 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x306, 0x4, 0x1, 0x1}]}], [{{0x9, 0x5, 0x3, 0x10, 0x20, 0x80, 0x6, 0x7}}, {{0x9, 0x5, 0x1, 0xc, 0x5b7, 0x2, 0xc}}, {{0x9, 0x5, 0xd, 0x4, 0x3ff, 0x1, 0x3a, 0x5, [@generic={0xdc, 0x23, "977debef2d1441044e08249d036e83488c1cd310ee598d291b782f12f9b50257798d50377053a3e053276b614322960b3af6fbded2f2debaa9c2f5a1dad1ccbb180bca52da8bfa0cb60e292b030637fde07486e416b1d6bd2224c88858bf6530ccd4b88250621fe757f983b4e93df5ded5ec514380e8e05469b797f531da17fc1b7ce56be027a51a144bc5b1a987d64bc80b1d1ae55e638360fd37ee4781c69e8b153644a4f32bc789b2bcef0d985fde6a406663486014ac27312811afcfe5dfc53f0f1d8468c2f8c7e00d3380e8525a3ace6e04efb4a25b3691"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x9, 0x7, 0x7, [@generic={0x6, 0xf, "973679dc"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xfb, 0x6}]}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0x0, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xa}]}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x1, 0x1d, 0x7, [@generic={0x83, 0x4, "a9afe157bf06a71034263d9ce792f4941b07e965f419d3205c96c06e6c6a1f927191fc80df2f48016af8204ae978b4e3a431205f9a41e4ceb393a751dc18b66f7dc3ba18e3e721524d54ddabce0ed6e033a44290459e324a3e9819bc6b61745ced1cdc1fe0a5411880edd55dd4a68c7e961dbc5d0a8e44ac761bfd66e63293296c"}, @generic={0x33, 0x6, "7924ecf79d67fa3de12db4a782f60033900477cf4af4b54afb4a6d11c1d6283d8d09b3359987c2a943ed3fdc777bfe4121"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x0, 0x7f, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xc8b9}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x4cc}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0xf9, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0xfbff}]}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0x0, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0xb2, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xda, 0x7}, @generic={0xed, 0x4, "9dc84c8f452c2d41ac0e6b2bc410644bd41e32e042d0a3f3d66f532fab145e39eeda660063a4c1522faa99b8f1ed401ec9029cd0d369754c24733a68895956b6bc91e19a2f7e07cf79cbe80f7533bf934c1bbcc8724722a29420d082c8679fa428d86cd7ca84a19504baa7fc09efb34712324bbb158a5219991e51501bd131591e8fc2a1f275a9ebccdd4c1e8d1712f070fabe9d89b1f7c5308e3199dc0f1f19f2f0ec3b0977a49e9a189570bbe905bec1b79eca0899d4692450f4cbe075bfca7373608177ad768c2c28f5121ecb0b1783e2b3aa1a5854b035b1941848f58d3d38c4e064580f976dea41e4"}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x2, 0xea, 0xfc, 0x20, 0x7}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "ae49cd1193f6d31af5c54bf89c04646e"}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1407}}]}) 551.985358ms ago: executing program 1 (id=1536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="547d1317", @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a31000000002c0004001400010002004e22ac1414aa00000000000000001400020002004e23e00000020000000000000000"], 0x54}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000c}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x6e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) 551.848108ms ago: executing program 1 (id=1537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000600)={0x79, 0x0, 0x949}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757812"], 0x65) (async, rerun: 32) unshare(0x62040200) (rerun: 32) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000240), 0x2, 0x0) (async) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000500, r6, &(0x7f0000000180)) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000031c0)=ANY=[@ANYBLOB="2c0000002c000305000000000000000008000200", @ANYRES32=r7, @ANYBLOB="0b000280976b640868603000080001800400ea80"], 0x2c}], 0x1}, 0xcc000) 471.960861ms ago: executing program 1 (id=1538): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff8, 0x4002, 0x248, 0x9b99}, 0x3d, [0xfffffff8, 0x8, 0x5, 0x9, 0x80, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x4, 0x7, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x8, 0xa, 0x4, 0x10, 0x6, 0x8, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x206, 0x10000, 0x0, 0x8f, 0x4, 0x4, 0x16, 0x1, 0x5, 0x401, 0x3, 0x405, 0x200000a7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000063, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x889, 0x4, 0xa6, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x100, 0xab00060, 0x6, 0x6, 0x5, 0x5, 0x3ff, 0x202, 0x1, 0x7, 0x1, 0x1cb, 0x1, 0x2, 0x6, 0x400438, 0x2, 0x9, 0x95, 0x7fffffff, 0x404, 0xfffffff9, 0x1, 0x1000, 0xe, 0x5], [0x2, 0xfffffffe, 0xf, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x18, 0x491, 0x8d3, 0x200006, 0x800a, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x6, 0x10000, 0x3fc, 0x3e55, 0x4, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x5fc, 0x101, 0xdd80, 0x60a0, 0x7b, 0x9d26, 0xffff, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10002, 0xdffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x3, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x0, 0x3, 0x9d86, 0xd, 0x9, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x80, 0x100, 0xd8d2, 0x7fffffff, 0x9, 0xc, 0x32d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x0, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="4b3bdf58587a274c29b0930f", 0xc, 0x40100c0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000a480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="a47c13", 0x3}], 0x1}}], 0x1, 0x24044c45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 455.396527ms ago: executing program 2 (id=1539): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "451825db4ecb99ccd1648f25e0fcea64a23b5b7693f608d1ec74fb146e9da38889bd6811788aa11cc6c35a42f8eed29d48176b140be2351997ed0e8296744f8a", 0x34}, 0x48, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x0}, r0) keyctl$set_timeout(0xf, r0, 0x2fbb) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000180)='cifs.spnego\x00', &(0x7f00000001c0)='id_legacy\x00') keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)='cifs.spnego\x00') keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000280)='fscrypt:', &(0x7f00000002c0)) r1 = request_key(&(0x7f00000017c0)='syzkaller\x00', &(0x7f0000001800)={'syz', 0x3}, &(0x7f0000001840)='asymmetric\x00', r0) keyctl$instantiate_iov(0x14, r0, &(0x7f0000001740)=[{&(0x7f0000000300)="2b4c5d41552cdc1c7373d106588d182895585df2731ad3c75bf87122075c8da52421f6ddc78cdb8c4d0bad68da05a47534d4dae1864d9f21c7c5ec4e51abe8584b38c65c284b851baaa43f15717d33c7297bc8bc20b9", 0x56}, {&(0x7f0000000380)="557babab058cba5c927ae8d665741ed19753fbdefb60ccd571708fd57e16369705b9644d9a9fe5c5122ec7", 0x2b}, {&(0x7f00000003c0)="764f8dbb6880cdc71ac838240f4e82d75a70e98c4beac0db10606d3e526f625b9d68a817e2cbae3eba860dd1bee8054eea820b064c80655800d500bd2a3d2432b0a2867e23036637724b2ba532789763c3555cdba24478075558b22a7ba15c74d32a51217f31d59ae85219871747abd23d7b8b5604b2306da15c05447de065778dda", 0x82}, {&(0x7f0000000480)="7415c4d90d79f63064f521ebc08f99a1ad93cfe3d76edfd388db8deb6ac7301ed76dda670000190a8760ccd5cac5f63d946e1496da9b440cde54c4a0ae57a70ca701785e42dc2d1bb259e8d9f14f6ecafd140b5d6d08a3a86b6c450d6580ed53684fed798e3120b81e7829c46bfd262a128dda1e702e2a2cfca6dc515a507579df510967d6f0e10c35fdbbefd113e637a9eef795874d808c9359bdd17f821265c5fe0ce5bfde71a28c75d572257d5b63c67a9857ca1149eb55a3907ada3af84b64a641a7cb6ecd8e8ecd4a13ad8dea205f5fddcb6853fc91a774abd261f9e4655fad897fe0f9cef13efc9e6dc1fdef69969ceaa6ca87", 0xf6}, {&(0x7f0000000580)="552d69b2ca", 0x5}, {&(0x7f00000005c0)="de5f8f23504cb50306aca6ea20efcd19ee175ea9410b79b97afc6f50acc85f5ce5ce17d3cb87c10f89fbdf5c8a1d916d8dfad538eb4e885a038426782542531410a27bae1175846384a6ca807d249a31f558a4aaa01e82488e755c4dc356c658153ca0b6cbfa16c23f33a005d7a3f4b0f6f5119b840ee844fa0477d019660030b7030ef34b0fb17a9bc8a417469fc725c7aa54", 0x93}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="2c7a1b928dcd8324ecf5aef438979ede97aea61c57143761011b0691ef0a9662b8776ff254570c82acdfb955de0b09c700bfbc610c0b693589a6f8ddfcab3edccc95134d20f1faa9e5dde48f178dfd786edb206c348de8e067ff5e34f8869c4d40d17284373ed2bc910b524446e3bd60355c059730e69627daa793b6bedca6252c7d9fbeddbfb7ad5655601817f5db6f3296d1f7b0c9be34", 0x98}], 0x8, r1) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000018c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f00000019c0)=0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a00)={0x1ec, 0x30, 0x200, 0x70bd2d, 0x25dfdbfb, {0xc}, [@generic="70fb05ad0b011fc517c08a4105043aa301608d26d85f0b381488f64deeb40099a210", @typed={0x8, 0x12b, 0x0, 0x0, @uid=r3}, @generic="ba99c111b4c4b63b3d0af39b775f2444f39734d64ab461f41d58b3f42523046bcc636a9998f16803bfcc80e0fda61fc710553a47d21a5170db797ed2fac1c33c9d42d70959bd9243520b5dd721c684fc0d8b98743c76efbafae5b3980ff7b8960450d26bdc6b2863eca88bdba7b8715bb8e6b1c94173b0320562bddc67910ebc26ca05d232e80fd07d9674af234fd396db75d592cf34783af1f1b40dce90dcbc57f94a9ac8a981a65b1c5534972fccd00b6e8bac6647ed80ffcac91eb7b7b8cefdaeaae81fffe16866e383387bb134c0ebce24ed431a690cb1726a", @generic="21a749f92d49096e3550f25453376cedfe047836ebd5a651f5e746f281370af19af509119fc4072372", @generic="bd90f9a738b1da06dd13851d4954c69ae2a0ee98f1c36c6fa53a6939eefddd260898d2f9d598d892a203c6130dfa918d", @nested={0x78, 0x110, 0x0, 0x1, [@typed={0x8, 0x134, 0x0, 0x0, @pid}, @typed={0x4, 0x6a, 0x0, 0x0, @binary}, @generic="74fc3251c6064fe821b5f09592b08eae37727f7683dea335c1859c007245e429381d941d67934b9e4366f043b5ad675213035a9307bb6831412ea218dcbe3236c72b3a106bd887dce87623927b33a06fc7454840831bd4038bec90e5e8014afa", @typed={0x8, 0x5c, 0x0, 0x0, @ipv4=@private=0xa010101}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40000}, 0x20000045) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001c80), 0x101100, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001cc0)={0x3b, 0x7, '\x00', [@generic={0x7, 0x23, "b56e9495cc356a9cfac6fec89b911e188958ec56262709794ea32ad8f465f2281e3988"}, @enc_lim={0x4, 0x1, 0xfc}, @generic={0x3, 0x8, "c70990a14b2568f4"}, @ra={0x5, 0x2, 0xcddc}, @ra={0x5, 0x2, 0xa000}]}, 0x48) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000001d40)={'ip_vti0\x00', 0x800}) r6 = open_tree(r4, &(0x7f0000001e00)='./file0\x00', 0x1001) fstat(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0), 0x802801, &(0x7f0000001ec0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x7}}, {@blksize={'blksize', 0x3d, 0x800}}], [{@obj_role={'obj_role', 0x3d, '%@\xf8/{/'}}]}}) keyctl$get_persistent(0x16, r3, r1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000001fc0)={0xaa, 0x28}) add_key$fscrypt_provisioning(&(0x7f0000002000), &(0x7f0000002040)={'syz', 0x0}, &(0x7f0000002080)={0x2, 0x0, @b}, 0x48, r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000002180)={'ip6gre0\x00', &(0x7f0000002100)={'syztnl0\x00', r2, 0x4, 0x5, 0x9, 0x6, 0x4, @empty, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x10, 0x1, 0x2, 0xb8ee}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000002240)={'syztnl0\x00', &(0x7f00000021c0)={'syztnl0\x00', r8, 0x29, 0x7, 0xe, 0xbba, 0x18, @remote, @mcast1, 0x8000, 0x7, 0xb, 0x5}}) getpeername(r5, &(0x7f0000002280)=@nl=@proc, &(0x7f0000002300)=0x80) open$dir(&(0x7f0000002340)='./file0\x00', 0x4000, 0x1b0) r9 = request_key(&(0x7f0000002380)='.dead\x00', &(0x7f00000023c0)={'syz', 0x1}, &(0x7f0000002400)='*\'\x00', 0x0) keyctl$link(0x8, r1, r9) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) add_key$user(&(0x7f0000002440), &(0x7f0000002480)={'syz', 0x2}, &(0x7f00000024c0)="b2265b8fe3698f0b25aaf22eedb930962c325480a558c0bbdeb207b603413b3600fc8eba306a0aaf59692d9a1b896523b66619e91ac8033523f92d7ca582ca5b43a649097277518c74bb8924edc5b711a2df34c508d7453e3c53f1fb9e47714aa89602c26e0a02cd6a44f43fb4764ca84abdefedc4f19da9ba6b9d4684becfea1116ba17eb7e5c30b32636b913b96d812e", 0x91, 0xfffffffffffffff8) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000002580), &(0x7f00000025c0), 0x2, 0x2) 401.447435ms ago: executing program 2 (id=1540): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001281204120003a60c6eec00be00442ffffe8000000000eb2200000000000000aaff020000000000000000000000000001"], 0xfdef) 377.252ms ago: executing program 2 (id=1541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109500, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000f5ff00", @ANYRESDEC], 0xffdd) 277.788959ms ago: executing program 2 (id=1542): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff8, 0x4002, 0x248, 0x9b99}, 0x3d, [0xfffffff8, 0x8, 0x5, 0x9, 0x80, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x4, 0x7, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x8, 0xa, 0x4, 0x10, 0x6, 0x8, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x206, 0x10000, 0x0, 0x8f, 0x4, 0x4, 0x16, 0x1, 0x5, 0x401, 0x3, 0x405, 0x200000a7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000063, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x889, 0x4, 0xa6, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x100, 0xab00060, 0x6, 0x6, 0x5, 0x5, 0x3ff, 0x202, 0x1, 0x7, 0x1, 0x1cb, 0x1, 0x2, 0x6, 0x400438, 0x2, 0x9, 0x95, 0x7fffffff, 0x404, 0xfffffff9, 0x1, 0x1000, 0xe, 0x5], [0x2, 0xfffffffe, 0xf, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x18, 0x491, 0x8d3, 0x200006, 0x800a, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x6, 0x10000, 0x3fc, 0x3e55, 0x4, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x5fc, 0x101, 0xdd80, 0x60a0, 0x7b, 0x9d26, 0xffff, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10002, 0xdffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x3, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x0, 0x3, 0x9d86, 0xd, 0x9, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x80, 0x100, 0xd8d2, 0x7fffffff, 0x9, 0xc, 0x32d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x0, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000a480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="a47c13", 0x3}], 0x1}}], 0x1, 0x24044c45) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 213.280886ms ago: executing program 1 (id=1543): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000240)) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad0002000000ffffff81040000000000000000", 0x39}], 0x1) 213.052446ms ago: executing program 1 (id=1544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r1, &(0x7f00000007c0)=[{{&(0x7f0000000040)={0x2, 0x4e01, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="3400000000000000000100000700000044240d", @ANYRES8=r0], 0x38}}], 0x1, 0x46000) 212.004365ms ago: executing program 1 (id=1545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x18ba00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd(0x7) lseek(r2, 0x6, 0x1) dup(r1) fsopen(&(0x7f0000000000)='exofs\x00', 0x0) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000200)) io_setup(0x7, &(0x7f0000000080)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7400000000010104000000000000000002000000240001801400018008000100ac14143308000200e00000020c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000100006800c000380060001004e220000886557d0994645f57dc58a8b0cbba48e7a2c6f753be8f2910e8085f9df672c1a6eee93d8d81748b9208f54012db65d6e7181c8114dcab80f48e30ce6757b09137c5b592e05b64e1b4e3aa6623068cb81fc8344e9c16bd8afc6e9541a83aaf72f826c214399bf25208ac5c92325e6e16ea793183b18080f8a06edc47aa515c230d68e61a203003e89c9f934015fb4d9"], 0x74}}, 0x0) io_pgetevents(r4, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r3, 0x20}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x234440, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r6, @ANYBLOB='\a'], 0x0) 116.000495ms ago: executing program 2 (id=1547): pipe2(0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES32], 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}], 0x20}, 0x24008004) prctl$PR_GET_KEEPCAPS(0x7) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000002280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x5}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002500)={'caif0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f0000005c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) r3 = getuid() setreuid(0xee00, r3) syz_clone3(&(0x7f0000007580)={0x40200400, &(0x7f0000006440), &(0x7f0000006480), &(0x7f00000064c0), {0x33}, &(0x7f0000006500)=""/4096, 0x1000, &(0x7f0000007500)=""/13, &(0x7f0000007540)=[0x0], 0x1}, 0x58) syz_clone(0x248000, &(0x7f0000008f00)="4b256d88e2baf0c8f35d7b300e815756cfada95eefd70047242e648a3514b6950ebf1449833037d9438dfa1d5eab84f271e81006245ceed9ce684169335257ac690faad18988cfcbb97f94230421a7b78799f8afe0b3a25b038333b07dc515eb85394882261496edab519e9ab7dacce132e7ad7b651a8542293d0f20e8f5e1f077108f3348d995376da1a65b4e7d076920d51ab4bc32d3bbfbbf21019a4b7d8875d90b1534bab4c2f38d77319ee97cf061a1f6227ee87d95befcad59d37def5d1437057da3e2938570f0279d2ff919c9782cf315bb6e142bf60e54a17b7bcc43df21033bc65e9536339493d8edac", 0xee, &(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080)="0ba5215edc0afd4bf7d3f066c02beadc4dce75982c274ed27d0becebcd88d0d8d65b029eafd86cc2b11ae2b099db24a798c67c577ec69bfbbf3fbc62783bc268fea0f7a0662fdfbbd7c3dcda7cfb8ce43cc34b3dd668e51a7e32bce3e1ff4e4ae33782e8487e00dc81f782e7336e96d0bffc12522a52ed6e7a0cb50c12274ec2a00aa7a643bf910f264158e08922f1f8327940114b2e6e503dd407a9788b064d8f91ad7311ba880fa461764a8b1ffb971f") getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000009140)={{{@in=@broadcast, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000009240)=0xe8) getegid() 73.125916ms ago: executing program 0 (id=1549): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a80ff0040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) 71.910186ms ago: executing program 0 (id=1550): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x70000001}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}, 0x1, 0x38000}, 0x0) 71.722455ms ago: executing program 0 (id=1551): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff8, 0x4002, 0x248, 0x9b99}, 0x3d, [0xfffffff8, 0x8, 0x5, 0x9, 0x80, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x4, 0x7, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x8, 0xa, 0x4, 0x10, 0x6, 0x8, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x206, 0x10000, 0x0, 0x8f, 0x4, 0x4, 0x16, 0x1, 0x5, 0x401, 0x3, 0x405, 0x200000a7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000063, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x889, 0x4, 0xa6, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x100, 0xab00060, 0x6, 0x6, 0x5, 0x5, 0x3ff, 0x202, 0x1, 0x7, 0x1, 0x1cb, 0x1, 0x2, 0x6, 0x400438, 0x2, 0x9, 0x95, 0x7fffffff, 0x404, 0xfffffff9, 0x1, 0x1000, 0xe, 0x5], [0x2, 0xfffffffe, 0xf, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x18, 0x491, 0x8d3, 0x200006, 0x800a, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x6, 0x10000, 0x3fc, 0x3e55, 0x4, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x5fc, 0x101, 0xdd80, 0x60a0, 0x7b, 0x9d26, 0xffff, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10002, 0xdffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x3, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x0, 0x3, 0x9d86, 0xd, 0x9, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x80, 0x100, 0xd8d2, 0x7fffffff, 0x9, 0xc, 0x32d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x0, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="4b3bdf58587a274c29b0930f", 0xc, 0x40100c0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000a480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="a47c13", 0x3}], 0x1}}], 0x1, 0x24044c45) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 71.465625ms ago: executing program 0 (id=1552): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000004c0)=""/12, 0xc, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r2, 0x5206, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x2}, {0x0}, {&(0x7f0000000240)=""/133, 0x85}], 0x3) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000000901020000000000000000070000030800034000000aa808000540000000070800054000000e14080003400000000908000340000000060c0004800800014000000002080005400000001e0c000480080001407fffffff"], 0x5c}, 0x1, 0x0, 0x0, 0x4088004}, 0x4000) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.pending_reads\x00', 0x111400, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000b40)={0x21c8, 0x3d, 0x1, 0x70bd2b, 0x25dfdbfd, {0x13}, [@nested={0x10bf, 0x74, 0x0, 0x1, [@generic="8c3044d1aa30b72fe5b534c26771cf71c1bce1589df56c194afa722f4a679f761a345623d8d36bc9d9580f4f284e8c8b76a84649779937d6240bdc4356f64e4664b5e4ff2d09013b199ed77c278bc8349b125c889ad93ab3d2a4203453072186a4708198e57d31817cdb99", @typed={0x4d, 0x85, 0x0, 0x0, @binary="f6259b8a1c3bb0fda39f5121b85a746c2e0fb482f31ce028b16267ee502ec009d5335071a2ac847f9e521e3c4ecc0051ab8163621ffb6162126bf1c1fd1ed46d8beb8b26320f272f94"}, @generic="e0802d1570c1341bc04b3f988d24946e9d0f3d8f4d63859995f4a16345baafac918434edd24552dc6645c70443c82b77e7b301489514b5a95542bdf8007759ae7e00861a25a36977e036cd769c7d2b489964040bf9aadefe71e19b01c2cc48382aa50dea0d594759dfd6b1d9402feb56d6fc2fad1d37f13c714ed2dd917de175283297cf3e1f7473b9784c2a402aabe6bc86617e4d44770ad0dcb3912338e950620a80bf12fb196e949937137a6757ebff8bb767f2cf987b1c04176e519433b41fbdc479c1fc91f72ef97ab087a6521a73eb06f6a4f46ec037a11377abac78368f394e7daf0ede967919f8e9c88ed3455e2590ef74d66de567616275de53792f09cdc7062fc24df61236f661deefd983b45b5b143c98d4ba9aa7a66ca3a45b3a61c1024b8ee7a21e3423550b75bfda3f041777bb5f1ba242f4f9465beac91c338333b0e25b3cd3b168ec134e970820b06aa19458b4210c5e136b33ea22fdfa423757b04a8365eb91435761af9766f3812aafe00db41ab708973f9e368ea03af1ee1d31066fbb1a49866b163ac32c9606016e20cd35d222f7df46a990fbea5b6215a23c9640b4b5477c919895eac12d566aac04f3ee5d63b8e4aece8e36533bc3b5d8e4c6b61a1e250792ac5eb7c82d6a8a44c8a1bd18f3df3d92af5fafb4af53558c89dd73cc8036f4d3b46f004586b3ea62dd6fb20315001d1e8a7a82ae0c04c7da002aa1ce902b6e57ddef5097dfc2252f6852226b724b99b1871819396345b2c410dd085979fc6bfc0f95bcd1656410951273ed3a6b21bd8642925942bf2cea867bd9da5b7d05555feb0858099e89be6fbfd7146a640245cd507c266e15013197b6041ae83ccda95203c00fb66b985175e6feae08fe8185e4baa769461384065f9cb25206f71e4e5f43e2ffb91721a4ef65c71a2564708b436416b11cdb1506878945719e4a022dadbc460d2632f4c61aad35401fb3262818935a6232f958fb7797114c36b7438e96870fbd22a911c0e58602fea7578f73da703edb993e569c211306c0318cac5889bcef8a5a9b6cdab60ad722ebd75012a865d8a8e996e8bd6b22ef6bcb71aa99543104e2da990c907e41f3f9394aac3086c62e83834bff80eaa92a4eb362a04414610ebe6c53d730b9bbb5d27619b19d7f74bb413507f49d5f12c182ccd1e53bb56f0b212c871d517b75efb04840e466b8d5c95cd239a7578576ef9a626176383c2e2f6cfff2c95d8cacf39deea3d77450bea7656af1cd5954c074e6502633a5dbef30664486189c7e1afccef549eb1895ba2eac1bec9b5555d1c103eed7cd5c9f91fb1fd1cd45b69be03d677efc5d6e6097de4408696a4b7764309b2cb0f67d8ac72bc155b42407db844b2c043e4e822ccc16aff713982ff2ebf6bd18f1ddfb8a14336a719f3fc5bdef49d9e3296bf2021ab8dae5bcb10e164d4b8cd73353e2ab3d4f99d63f0094c25e104dcf83555868e368571d9d4ee47444f70e175f523edce47df7b0eed643488b664341939f33f47411c36ebfa864ba972e8152ad0e8452ef7400c7e9f2577acec4c597ccee03c530f2b92d314ef752a517be4073ae3b43a726613b955ed7c0d7995a0cadfa28bf544868cf45a58e6d6ab44c17ea0fd484e57b78cace01636bc8aeaf5172e4bae76e48722671719e1858f5574bfa9e4b039d13384aa5ab0a142de62c68f01d9bad1bb76a34d2fedd6c9ffa26a44ba6b07221a694afa0bbdf317613399aad36da38313072d4dabb83a38ed75223228daec60ecccfc619b88895b9061b22887d215fa0c5504686a6c74e0360e723e65618ae4828de0cda83cbbc4c8d6a3ffd5b6b7606a081932e3b782cd4aa47041211ece077a08a012e5d336b77429f65a7d22caf1bbf1736078bf7574f4c97d0edec29f0e4fe6b5eda9a5f6e92b91a58a2c0b6e92a975e97b0a65d796a3a8f3642664335c912cc5239c1cc39459f5109eca43401722aaaac3a154980eb264dbcadf20f89ce13b4bca7755e49223d2a65c8888e483f27b180bf6c61752d4a7a8036ad9a2af28f74f943c2ec1408083d972f605721cdfae671f2fd308104c7488dde295ac9dd88b75cfe2f8b895f3de8ca7bc0f66f198610867dfa0fa0a65c6460cd5211c9689875f8ec77399da05dcc9b0f3a2268f5bae7bc616e0e5a56bdf4f2efe51cb25bbf971d8c3d41a78c6adee48054b7af8d8c31477725fa30ece8ba1a357be632a1c8f536b73517fd7800ae8553953db8f626989e995d501e61345b9043a35c41e28531b676cc48e6a0282fc03be0ee43a8bee4280fe8b1acb91e904dac846cf439c36d9e974468bb8ab809138c9ace269e212f6aa11e36103053b7b05b2b80197f6adb98827e5ed4e62e67e15be1e6849a918174640b30f578a38fd8744ddb7dbd40ef9a7216e72f3af2e2476e3a73ca1cabbda6483b15922bc649b1466ba4ff472e357bcfc9bd081a5ed4f68807e8ae124558fc018c9df63eac55d3da5044dceb9250de88e065d74f55aed644883a8012dbbee66a8b8f9192f8a8c63a5b3ec07c2d058d676c833c408325e5108a93386ac5f36a1c69a9e1a1b30f298b31c6d956223cd102575771432682685110b31863139dd0f13ad9a5d4ca24d112015c4c84c6edb25721f309247d56e40d6402fd0732cbb85d3d1b4b47884b1617548f366c87cbbeabdba4fd3a245e8ea917fa7295bb579bda10713d65d1bd1c24787b46c729225dc7d48aad53d0b95e8388da9cd996a1e3237ad5ad207efe55cd85d2ca8306f05c0fc47ac2ae93fc32982b3705141cd79f41d090526aca2924adb2703cdce8fef76714745a317ccf35557b6d1629f2db7091184aa82e681a82e89890b7c2c702ff725fd6bf3368121d5c689884049c130f4be9569322cad5e584deb22c0f87d502a9569f989ad090d827917c0bba629ef88a98ed87048910040e6a5470c02221f299a7f3091e8a7d8bea82a0e05f66a8bacb12f8fdcda8864fba63da1cb0d80c8a482ad87902a066330c356a51066c824e21667b49c6197046ca2a175dbc9e5058f59ee4a7b6256dcc6bcf041cc29dcf42e4a60b91e5f43e93098f4a9c3b8bf10ed0f10de93d145710b16131716c60c8bbbb18f3ece2af61fd01dfc9bd210a4d17af6c6176d5503e3a36bbc87b88672fff44c07034e13fe0a8b7041f70c982ba6fe4aa8b1b0a74ddb5bf7cd90e5d0b529f169e25a5aee82c2b61d694ec81058a5eeeefed30d796497663cf1c2b48433c660aa3554f63c340866b37e656c4f3378626321991860411441ff7a8ced8cc2d1d3dbee9cb5ee381d644cb90c43aefdd6ec248a008e6d87f990bf71966b6181e237f369e31b5745e57db2f5f8b72af45309b31ea47537b7ecad8f5e3ecf76fbf7715d8bc6a71ab67a08e4af5e77e0cf9eabba5a3bccdebfe80d05e628223b0086cc19f7f865ac54ff9fd31a85a3eff6fd1993b174fb7675c90a4bda7adb0d85be249a996e2b361e66a120dadb6385a1320ddae21176938936f6204ddd0efedc3aa54cab7a8fe2166568fc5f135025326dadae9bdab583fcd89c0b277b52b201d947f55e7f1ecc790022e3ac2a0387f681a74a04c79756847b0b33b726d8322e9aed8c49c0eaed6eb16fb36999f32389f4b2a846503e260f5d9b1a23dfb729c937856b684835caf29bef6903484b7d6c49531b1191a472e19d652b1e2bab615606f870cf1ce70005a68319baedb2eb817918355f6d199c792bac073b3632885bf9019f2c50d11286003a88a21f273cc7169cdb470563a01848e320b56af491d048482a82da746ddef0cea24ce22a445a2a214b4a89e10d850397b9e1207c0e6b93be49238e5f73eb717f37ed95886bc62a30d212399821995f29f7d5fb422bba9348659f8e730da7f5e997962996f3f45b84839726ece6cedd12693e1b4d2d1960a81e67ba3a097d3d7190a4eb2401c2eee868d3e240644d842635fac2e01003b2432678c2e28d766488f7df99478d039981a3a3a725eed1122d1c4b122076138e40b9bb84643c209acddd113067d2d0b7722e1d18ff73a65e83acf9e918f0a75da345756c802745a7aade79e63c041734e5e743cc865b977be374ec7f71f6a1f2234d8a45994da4dfdf2a6ca78575f0be5c232834b11236d80fa5159f9bfa1e9ae28b780ce39bcd8c859c3cf919f278bc6cc22b11380c677fa04048b853ac26821d8b2e55e126e302c69da2984b70517546ccfd98b6075088f0cd66ad1c84633777cc98c9545eaba243d9464ddc01ca564d92a15c5d22f5a4fbcfbfb854a77ac0757c8bfcd341d65eb03cfee20b342a330469935330bfd277795c1b8fe8a9bff78981d6ff286ecaeeb501115e488142018d2537ff667bc46c84d6d4de8823b7b8e63d2e33993c544a0e7c3fab4762e3c13cec8471086104cc95f55863f279bc28bcd09d3be56883c9422fd70d711f824e97a80d0cb3149240db61f552186a9ef4c12fb82ea9f51d073f5d1eefa2fbfb54aa79adc86ba8ab3ffa02fa23c14ead7619b47b5e0fb3ae164102ed510cf83361b5f42d1c8fd52932a7a3b7e86a6ff9612d2bdf12114db2ea896b2dfba3e5254ec77cf847f26a429f0a01c3e510a7696304632dcebb4c179b11a2ec8de9d39af012cec20c697c978ec2f9444aefbc4a0280d07d15ca3c23c45748b1da0cbed1ac1bc0066cfa58557e08915d6ae076d7d88c27e7e2c71c3151af56f193fbbec3f0c99bbb6f20c1bde4e68afc6389f3148a771cb3bafd1e61adf42af06bc28c8f4c3c8d641b1a581976a34c877cd860d39bdf9496ce7a759e865d4ad07c65c568948180c2ed9022fcaa0f4cf2b71d74c1c575107aff9a29792b48bafb4cdf1c0420a864d6de1d8b073a137a7f3f65b68a3c0e65fe01f49c33791d0b336206a2062f9436dd6ad1a61231c33afc0651a455e6a72b60ad43c57cd4011189f3ec7194ef5870e8657db8b9a65f65ea9fe245e7488c51b29195a74a11b976a9595b0165c5863ca7eed0e214173027327887f87e8d8b9acbb5a836f92d2b0ff25e4d5868b6d4bbe1a52221abd404900115862340ef374a25f793ed5b1c0bbb39a8eb41ec2ea579c0adfa27a5321f06040e185ef64bbd62551fbdcc63f1ce2cd8d8654459622d187900edf2c36d6db3e355034d5cf4c8c87a375cf0a6d9b3922e82b0f2a3d7f562e7c77e4cfd07d278dac92625bce216587ffb5c5b01b1bb10ab4b486f865efaad0fe16b5e95fe021d89836096c4fa6dc698601a71c515a64315b6a24977b72892d706730958d96e656f35dbb2cac3003162b2d3657f54619a486d15d3f2fd9eb43813b1e61658360663926e8b76561f009f925a8abfe8f36e458d9bed9a81b22a2a2e3a30e73424b3aa7aa808878f7a019aa7928f08552a2d884f70cb6a2481a8a74b8ad169a0d0e2e86cbe46c985d2a3ce02f2d50c254f229ba4faab62086c2f821861d67c651ddfa05a4054b4f081c3388bfa01b2c6d50b93edd1b35f191a7f6ece8c555b36fb0277b884bf56da329a3e334d01b71aa62f9de003d4e968c4cf25748fa26ebf7b110d1ef998cb200fed55bee3afae9c6ec40cc687fa16867dc1c790bd0a4fe84ca774253e6ce9fd6bae680cffdd0c9a2902895c0fffd30177c1e1b2b823e868523dcfee2775d5575bbf51518c019fb6143ee1c4fb34474c43c32f02d5c01f7ea1545165d1e7a9680e19a3c24d2b016f03214342be62bc1ecaf5eebd1d61b4d36362adab342629a8e7b03c2eba6dba044f6825a11cae382bb6476c6c5db4c0db901623d9f3d6a2115fe24"]}, @typed={0x8, 0xe5, 0x0, 0x0, @fd=r2}, @generic="6af3813371879ae9e0153d761385d290a3fd1cd192275e88349bdf6d440c5880607c1376fdb6125fd455044a95522966d63b67b956ec9e0b76e6b85639618844ceb68a6e01cf97621c113e325944cb7e144a8767343107666f4e75064d2835b21bfd85f2653591f5a0f0bda7348df54273235711e24ee465c2fcf855d204044f3289fde4fcc4a1b0f0a4d15d64933e25c8541894fb6c93650a3e88497505357916ddab84807009cde0498c06201b15427fc47a6dde099ebfc6b7182d5b96aff6688d1121e78bd079fba19abfb6db81ff27a7f4d1578463bc58ff2013e942f5c647b85addfbe720361de16bf6", @generic="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"]}, 0x21c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r4, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000480), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) setuid(0xee00) r8 = socket$unix(0x1, 0x1, 0x0) io_setup(0x7, &(0x7f0000000100)=0x0) r10 = eventfd(0x5a21) io_submit(r9, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x3899, r8, 0x0, 0x0, 0x4, 0x0, 0x3, r10}]) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140000006a002957"], 0x14}], 0x1}, 0x4000080) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') close(r3) 9.394832ms ago: executing program 0 (id=1553): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff8, 0x4002, 0x248, 0x9b99}, 0x3d, [0xfffffff8, 0x8, 0x5, 0x9, 0x80, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x4, 0x7, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x8, 0xa, 0x4, 0x10, 0x6, 0x8, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x206, 0x10000, 0x0, 0x8f, 0x4, 0x4, 0x16, 0x1, 0x5, 0x401, 0x3, 0x405, 0x200000a7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000063, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x889, 0x4, 0xa6, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x100, 0xab00060, 0x6, 0x6, 0x5, 0x5, 0x3ff, 0x202, 0x1, 0x7, 0x1, 0x1cb, 0x1, 0x2, 0x6, 0x400438, 0x2, 0x9, 0x95, 0x7fffffff, 0x404, 0xfffffff9, 0x1, 0x1000, 0xe, 0x5], [0x2, 0xfffffffe, 0xf, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x18, 0x491, 0x8d3, 0x200006, 0x800a, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x6, 0x10000, 0x3fc, 0x3e55, 0x4, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x5fc, 0x101, 0xdd80, 0x60a0, 0x7b, 0x9d26, 0xffff, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10002, 0xdffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x3, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x0, 0x3, 0x9d86, 0xd, 0x9, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x80, 0x100, 0xd8d2, 0x7fffffff, 0x9, 0xc, 0x32d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x0, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0x80}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000a480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="a47c", 0x2}], 0x1}}], 0x1, 0x24044c45) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1b) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f0000000100)={0xeeef0000}) r8 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_VM_TYPES(r4, 0x4068aea3, &(0x7f00000002c0)={0xeb, 0x0, 0x8}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 0s ago: executing program 0 (id=1554): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xc0010001, 0x0, 0x4}]}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x20000, 0xf3) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000010ac054102000000000001090224000100"], 0x0) syz_clone3(0x0, 0x0) read$FUSE(r6, 0x0, 0x0) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): b 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 167.496208][ T524] usb 2-1: Product: syz [ 167.502029][ T524] usb 2-1: Manufacturer: syz [ 167.506738][ T524] usb 2-1: SerialNumber: syz [ 167.513292][ T524] usb 2-1: config 0 descriptor?? [ 167.520927][ T524] hub 2-1:0.0: bad descriptor, ignoring hub [ 167.531954][ T524] hub 2-1:0.0: probe with driver hub failed with error -5 [ 167.546033][ T524] usb 2-1: selecting invalid altsetting 0 [ 167.723276][ T3717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.779923][ T3717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.099901][ T45] usb 2-1: USB disconnect, device number 47 [ 168.220708][ T3730] fuse: Bad value for 'fd' [ 168.505119][ T36] audit: type=1400 audit(1772029999.891:501): avc: denied { shutdown } for pid=3739 comm="syz.1.1194" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.057093][ T3745] netlink: 'syz.1.1196': attribute type 4 has an invalid length. [ 169.073537][ T3745] netlink: 'syz.1.1196': attribute type 17 has an invalid length. [ 169.117998][ T36] audit: type=1400 audit(1772030000.501:502): avc: denied { create } for pid=3746 comm="syz.1.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 169.740069][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 169.880061][ T10] usb 2-1: device descriptor read/64, error -71 [ 170.220080][ T10] usb 2-1: device descriptor read/64, error -71 [ 170.481047][ T3772] tipc: Cannot configure node identity twice [ 170.499783][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 170.681367][ T45] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 170.700879][ T10] usb 2-1: device descriptor read/64, error -71 [ 170.841515][ T45] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 170.852515][ T45] usb 3-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 170.874171][ T45] usb 3-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 170.901096][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 170.917571][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.926951][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.935309][ T45] usb 3-1: Product: ˝憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓ꊐݜㄿ↦裌莡ꉳ咆纥㉸從ழ讧걿⨔亓뉭얄슀葋䤝빗馿㞘톷注栴享◗◧報ꓨ莏藷⢞덥ﯕ좢떸枱嘯떦摵﹧겥鈐ᜇ䤬漳 [ 170.957673][ T45] usb 3-1: SerialNumber: syz [ 170.963105][ T10] usb 2-1: device descriptor read/64, error -71 [ 171.071839][ T10] usb usb2-port1: attempt power cycle [ 171.169739][ T3770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.190254][ T3770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.216139][ T3788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.230477][ T3788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.253452][ T45] cdc_ether 3-1:1.0: skipping garbage [ 171.269729][ T45] cdc_ether 3-1:1.0: skipping garbage [ 171.282041][ T45] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 171.291198][ T3792] rust_binder: 753: no such ref 0 [ 171.296462][ T3792] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 171.303547][ T45] usb 3-1: USB disconnect, device number 50 [ 171.409892][ T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 171.452653][ T10] usb 2-1: device descriptor read/8, error -71 [ 171.581776][ T10] usb 2-1: device descriptor read/8, error -71 [ 171.819766][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 171.862410][ T10] usb 2-1: device descriptor read/8, error -71 [ 171.995213][ T10] usb 2-1: device descriptor read/8, error -71 [ 172.110669][ T10] usb usb2-port1: unable to enumerate USB device [ 172.299769][ T45] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 172.449785][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 172.456190][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.467432][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 172.478281][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.487629][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 172.495848][ T45] usb 3-1: SerialNumber: syz [ 172.601918][ T3816] capability: warning: `syz.3.1221' uses deprecated v2 capabilities in a way that may be insecure [ 172.707837][ T45] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 172.720323][ T45] usb 3-1: USB disconnect, device number 51 [ 173.469748][ T45] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 173.619772][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 173.627925][ T45] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 173.636221][ T45] usb 3-1: config 0 has no interface number 0 [ 173.647224][ T45] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 173.666315][ T45] usb 3-1: config 0 interface 196 has no altsetting 0 [ 173.683003][ T45] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 173.694591][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.709738][ T45] usb 3-1: Product: syz [ 173.713926][ T45] usb 3-1: Manufacturer: syz [ 173.720681][ T45] usb 3-1: SerialNumber: syz [ 173.729839][ T45] usb 3-1: config 0 descriptor?? [ 173.735218][ T3825] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 173.813038][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 173.835005][ T3842] netlink: 'syz.0.1229': attribute type 4 has an invalid length. [ 173.969746][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 173.976054][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.986464][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 173.995628][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 174.004906][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.014016][ T10] usb 2-1: config 0 descriptor?? [ 174.145622][ T45] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 174.153167][ T45] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 174.163416][ T45] usb 3-1: USB disconnect, device number 52 [ 174.769759][ T45] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 174.920927][ T45] usb 4-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 174.932142][ T45] usb 4-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 174.945270][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.952033][ T45] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 174.961288][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.971537][ T45] usb 4-1: config 0 descriptor?? [ 174.979341][ T3858] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.392684][ T45] wacom 0003:056A:00D0.0012: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 175.403274][ T45] wacom 0003:056A:00D0.0012: hidraw0: USB HID v0.04 Device [HID 056a:00d0] on usb-dummy_hcd.3-1/input0 [ 175.420519][ T45] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D0.0012/input/input9 [ 175.590234][ T9] usb 4-1: USB disconnect, device number 50 [ 176.102363][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 176.108845][ T12] Bluetooth: hci0: Frame reassembly failed (-90) [ 176.190089][ T3874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.199244][ T3874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.349784][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 176.429799][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 176.499769][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 176.506333][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.517317][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.523637][ T45] usb 2-1: USB disconnect, device number 52 [ 176.527084][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 176.542070][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.550854][ T9] usb 4-1: config 0 descriptor?? [ 176.580949][ T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 176.591124][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.604648][ T10] usb 3-1: config 0 descriptor?? [ 176.812597][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 176.818648][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 176.829856][ T10] usb 3-1: USB disconnect, device number 53 [ 176.958000][ T9] apple 0003:05AC:024B.0013: unknown global tag 0xe [ 176.964676][ T9] apple 0003:05AC:024B.0013: item 0 1 1 14 parsing failed [ 176.972410][ T9] apple 0003:05AC:024B.0013: parse failed [ 176.978377][ T9] apple 0003:05AC:024B.0013: probe with driver apple failed with error -22 [ 177.164428][ T524] usb 4-1: USB disconnect, device number 51 [ 177.344762][ T36] audit: type=1400 audit(1772030008.731:503): avc: denied { remount } for pid=3888 comm="syz.0.1249" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 177.679792][ T524] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 177.829782][ T524] usb 3-1: Using ep0 maxpacket: 16 [ 177.836028][ T524] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.846204][ T524] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 177.855378][ T524] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 177.864429][ T524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.872923][ T524] usb 3-1: config 0 descriptor?? [ 177.889792][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 178.040922][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.051244][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.064301][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 178.073528][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 178.081605][ T10] usb 2-1: SerialNumber: syz [ 178.099241][ T3911] netlink: 'syz.0.1257': attribute type 12 has an invalid length. [ 178.108259][ T3911] netlink: 'syz.0.1257': attribute type 39 has an invalid length. [ 178.135929][ T3915] netlink: 'syz.0.1259': attribute type 4 has an invalid length. [ 178.145800][ T3915] netlink: 'syz.0.1259': attribute type 17 has an invalid length. [ 178.154520][ T673] Bluetooth: hci0: command 0x1003 tx timeout [ 178.160676][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 178.180506][ T36] audit: type=1400 audit(1772030009.571:504): avc: denied { read } for pid=3916 comm="syz.0.1260" path="socket:[44597]" dev="sockfs" ino=44597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.989770][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 179.119789][ T9] usb 4-1: device descriptor read/64, error -71 [ 179.359750][ T9] usb 4-1: device descriptor read/64, error -71 [ 179.599753][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 179.729771][ T9] usb 4-1: device descriptor read/64, error -71 [ 179.969764][ T9] usb 4-1: device descriptor read/64, error -71 [ 180.079828][ T9] usb usb4-port1: attempt power cycle [ 180.393866][ T439] usb 3-1: USB disconnect, device number 54 [ 180.419790][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 180.445262][ T9] usb 4-1: device descriptor read/8, error -71 [ 180.580837][ T9] usb 4-1: device descriptor read/8, error -71 [ 180.645371][ T36] audit: type=1400 audit(1772030012.031:505): avc: denied { write } for pid=3934 comm="syz.2.1265" dev="proc" ino=4026532493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 180.673862][ T10] usb 2-1: 0:2 : does not exist [ 180.682038][ T10] usb 2-1: unit 5 not found! [ 180.688960][ T10] usb 2-1: USB disconnect, device number 53 [ 180.697563][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 180.819807][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 180.840919][ T9] usb 4-1: device descriptor read/8, error -71 [ 180.889770][ T524] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 180.970896][ T9] usb 4-1: device descriptor read/8, error -71 [ 181.040944][ T524] usb 3-1: config 4 has an invalid interface number: 121 but max is 0 [ 181.049130][ T524] usb 3-1: config 4 has no interface number 0 [ 181.055257][ T524] usb 3-1: config 4 interface 121 has no altsetting 0 [ 181.063410][ T524] usb 3-1: New USB device found, idVendor=6b86, idProduct=c211, bcdDevice=25.ca [ 181.072483][ T524] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.080489][ T524] usb 3-1: Product: syz [ 181.084625][ T524] usb 3-1: Manufacturer: syz [ 181.089205][ T524] usb 3-1: SerialNumber: syz [ 181.089854][ T9] usb usb4-port1: unable to enumerate USB device [ 181.303318][ T524] usb 3-1: USB disconnect, device number 55 [ 182.049775][ T524] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 182.200889][ T524] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.211079][ T524] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.220941][ T524] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 182.230251][ T524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 182.238320][ T524] usb 3-1: SerialNumber: syz [ 183.071662][ T36] audit: type=1400 audit(1772030014.461:506): avc: denied { mount } for pid=3993 comm="syz.1.1285" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 183.099749][ T36] audit: type=1400 audit(1772030014.461:507): avc: denied { create } for pid=3993 comm="syz.1.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 183.268689][ T36] audit: type=1400 audit(1772030014.651:508): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 184.273915][ T36] audit: type=1400 audit(1772030015.661:509): avc: denied { accept } for pid=4027 comm="syz.0.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 184.334528][ T4035] tipc: Cannot configure node identity twice [ 184.755646][ T36] audit: type=1400 audit(1772030016.141:510): avc: denied { connect } for pid=4060 comm="syz.1.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 184.831952][ T524] usb 3-1: 0:2 : does not exist [ 184.836954][ T524] usb 3-1: unit 5 not found! [ 184.844020][ T524] usb 3-1: USB disconnect, device number 56 [ 184.856243][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 184.860897][ T4066] FAULT_INJECTION: forcing a failure. [ 184.860897][ T4066] name failslab, interval 1, probability 0, space 0, times 0 [ 184.884561][ T4066] CPU: 0 UID: 0 PID: 4066 Comm: syz.2.1310 Not tainted syzkaller #0 779e51c580eeebda7e507de47dcd3aa9ed4d0736 [ 184.884593][ T4066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.884604][ T4066] Call Trace: [ 184.884609][ T4066] [ 184.884617][ T4066] __dump_stack+0x21/0x30 [ 184.884655][ T4066] dump_stack_lvl+0x140/0x1c0 [ 184.884677][ T4066] ? __cfi_dump_stack_lvl+0x10/0x10 [ 184.884699][ T4066] ? __kasan_check_write+0x18/0x20 [ 184.884722][ T4066] ? copy_mm+0x2d2/0x1cf0 [ 184.884742][ T4066] dump_stack+0x19/0x20 [ 184.884763][ T4066] should_fail_ex+0x3d7/0x530 [ 184.884784][ T4066] should_failslab+0xac/0x100 [ 184.884809][ T4066] kmem_cache_alloc_noprof+0x42/0x410 [ 184.884832][ T4066] ? alloc_pid+0xa5/0xba0 [ 184.884850][ T4066] ? __asan_memcpy+0x5a/0x80 [ 184.884871][ T4066] alloc_pid+0xa5/0xba0 [ 184.884889][ T4066] copy_process+0x1409/0x3220 [ 184.884912][ T4066] ? __cfi_copy_process+0x10/0x10 [ 184.884932][ T4066] ? __kmalloc_cache_noprof+0x23c/0x470 [ 184.884955][ T4066] ? __kasan_check_write+0x18/0x20 [ 184.884977][ T4066] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 184.885006][ T4066] vhost_task_create+0x1f7/0x400 [ 184.885032][ T4066] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 184.885062][ T4066] ? __cfi_vhost_task_create+0x10/0x10 [ 184.885087][ T4066] ? __cfi_vhost_task_fn+0x10/0x10 [ 184.885113][ T4066] ? __kasan_check_write+0x18/0x20 [ 184.885140][ T4066] ? mutex_lock+0x97/0x1d0 [ 184.885162][ T4066] ? __cfi_mutex_lock+0x10/0x10 [ 184.885183][ T4066] ? kernel_text_address+0xa9/0xe0 [ 184.885205][ T4066] kvm_mmu_post_init_vm+0x161/0x300 [ 184.885228][ T4066] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 184.885247][ T4066] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 184.885268][ T4066] ? kstrtoull+0x13b/0x1e0 [ 184.885286][ T4066] ? kstrtouint+0x78/0xf0 [ 184.885300][ T4066] ? ioctl_has_perm+0x1bc/0x500 [ 184.885318][ T4066] ? __asan_memcpy+0x5a/0x80 [ 184.885339][ T4066] ? ioctl_has_perm+0x408/0x500 [ 184.885358][ T4066] ? has_cap_mac_admin+0xd0/0xd0 [ 184.885375][ T4066] ? __kasan_check_write+0x18/0x20 [ 184.885395][ T4066] ? mutex_lock_killable+0x97/0x1d0 [ 184.885414][ T4066] ? __cfi_mutex_lock_killable+0x10/0x10 [ 184.885434][ T4066] ? proc_fail_nth_write+0x184/0x220 [ 184.885451][ T4066] kvm_vcpu_ioctl+0xa48/0x1000 [ 184.885474][ T4066] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 184.885496][ T4066] ? __cfi_vfs_write+0x10/0x10 [ 184.885517][ T4066] ? __kasan_check_write+0x18/0x20 [ 184.885537][ T4066] ? mutex_unlock+0x90/0x240 [ 184.885556][ T4066] ? __cfi_mutex_unlock+0x10/0x10 [ 184.885577][ T4066] ? __fget_files+0x2c5/0x340 [ 184.885603][ T4066] ? __fget_files+0x2c5/0x340 [ 184.885628][ T4066] ? bpf_lsm_file_ioctl+0xd/0x20 [ 184.885646][ T4066] ? security_file_ioctl+0x3e/0x110 [ 184.885665][ T4066] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 184.885690][ T4066] __se_sys_ioctl+0x135/0x1b0 [ 184.885716][ T4066] __x64_sys_ioctl+0x7f/0xa0 [ 184.885741][ T4066] x64_sys_call+0x1878/0x2ee0 [ 184.885765][ T4066] do_syscall_64+0x57/0xf0 [ 184.885782][ T4066] ? clear_bhb_loop+0x50/0xa0 [ 184.885801][ T4066] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 184.885829][ T4066] RIP: 0033:0x7ff5f879c629 [ 184.885853][ T4066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.885868][ T4066] RSP: 002b:00007ff5f96d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.885897][ T4066] RAX: ffffffffffffffda RBX: 00007ff5f8a15fa0 RCX: 00007ff5f879c629 [ 184.885911][ T4066] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 184.885924][ T4066] RBP: 00007ff5f96d3090 R08: 0000000000000000 R09: 0000000000000000 [ 184.885936][ T4066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.885947][ T4066] R13: 00007ff5f8a16038 R14: 00007ff5f8a15fa0 R15: 00007fffe95283e8 [ 184.885963][ T4066] [ 185.249764][ T31] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 185.324941][ T4080] cgroup: fork rejected by pids controller in /syz0 [ 185.420773][ T31] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 185.443378][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.460463][ T31] usb 2-1: config 0 descriptor?? [ 185.669794][ T45] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 185.689752][ T439] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 185.840117][ T439] usb 3-1: no configurations [ 185.844742][ T439] usb 3-1: can't read configurations, error -22 [ 185.850799][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.861323][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.872112][ T45] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 185.881248][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 185.893542][ T31] itetech 0003:06CB:73F4.0014: hidraw0: USB HID v0.02 Device [HID 06cb:73f4] on usb-dummy_hcd.1-1/input0 [ 185.909736][ T45] usb 4-1: SerialNumber: syz [ 185.979799][ T439] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 186.094085][ T31] usb 2-1: USB disconnect, device number 54 [ 186.130162][ T439] usb 3-1: no configurations [ 186.134794][ T439] usb 3-1: can't read configurations, error -22 [ 186.141518][ T439] usb usb3-port1: attempt power cycle [ 186.479768][ T439] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 186.510469][ T439] usb 3-1: no configurations [ 186.515099][ T439] usb 3-1: can't read configurations, error -22 [ 186.649771][ T439] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 186.680439][ T439] usb 3-1: no configurations [ 186.685067][ T439] usb 3-1: can't read configurations, error -22 [ 186.693478][ T439] usb usb3-port1: unable to enumerate USB device [ 187.029828][ T31] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 187.181552][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 187.189739][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 187.198390][ T31] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.211450][ T31] usb 2-1: config 1 interface 0 has no altsetting 0 [ 187.224608][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 187.233799][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.241862][ T31] usb 2-1: Manufacturer: 탈ᖩ쒸阡翀⎇碭밨񦅡 [ 187.250883][ T31] usb 2-1: SerialNumber: syz [ 187.458589][ T4100] syz.0.1316 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 187.471016][ T31] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 187.483268][ T31] usb 2-1: USB disconnect, device number 55 [ 187.501336][ T31] usblp0: removed [ 187.506278][ T4100] CPU: 0 UID: 0 PID: 4100 Comm: syz.0.1316 Not tainted syzkaller #0 779e51c580eeebda7e507de47dcd3aa9ed4d0736 [ 187.506309][ T4100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.506320][ T4100] Call Trace: [ 187.506326][ T4100] [ 187.506333][ T4100] __dump_stack+0x21/0x30 [ 187.506362][ T4100] dump_stack_lvl+0x140/0x1c0 [ 187.506383][ T4100] ? __cfi_dump_stack_lvl+0x10/0x10 [ 187.506405][ T4100] ? ___ratelimit+0x40e/0x5b0 [ 187.506427][ T4100] dump_stack+0x19/0x20 [ 187.506448][ T4100] dump_header+0xd6/0x490 [ 187.506467][ T4100] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 187.506486][ T4100] oom_kill_process+0x35d/0x640 [ 187.506511][ T4100] out_of_memory+0x624/0xa30 [ 187.506533][ T4100] ? __cfi_out_of_memory+0x10/0x10 [ 187.506557][ T4100] ? mutex_lock_killable+0x97/0x1d0 [ 187.506580][ T4100] ? __cfi_mutex_lock_killable+0x10/0x10 [ 187.506602][ T4100] mem_cgroup_out_of_memory+0x2c8/0x390 [ 187.506625][ T4100] ? css_next_descendant_pre+0x202/0x230 [ 187.506645][ T4100] ? drain_obj_stock+0xed0/0xed0 [ 187.506666][ T4100] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 187.506688][ T4100] try_charge_memcg+0x91c/0xe10 [ 187.506708][ T4100] ? __cfi_try_charge_memcg+0x10/0x10 [ 187.506726][ T4100] ? __alloc_pages_noprof+0x35f/0x7e0 [ 187.506746][ T4100] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 187.506765][ T4100] __mem_cgroup_charge+0xfc/0x420 [ 187.506787][ T4100] ? folio_add_lru+0x116/0x400 [ 187.506814][ T4100] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 187.506835][ T4100] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 187.506862][ T4100] ? put_swap_device+0x130/0x130 [ 187.506886][ T4100] ? shmem_huge_global_enabled+0x2da/0x360 [ 187.506910][ T4100] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 187.506933][ T4100] ? __kasan_check_write+0x18/0x20 [ 187.506954][ T4100] ? _raw_spin_lock+0x92/0x120 [ 187.506971][ T4100] shmem_get_folio_gfp+0x607/0x1390 [ 187.506997][ T4100] ? shmem_get_folio+0xc0/0xc0 [ 187.507019][ T4100] ? follow_page_pte+0x90f/0xbc0 [ 187.507037][ T4100] ? inode_to_bdi+0x6d/0x100 [ 187.507058][ T4100] shmem_write_begin+0xf4/0x270 [ 187.507083][ T4100] generic_perform_write+0x328/0x970 [ 187.507113][ T4100] ? __cfi_generic_perform_write+0x10/0x10 [ 187.507130][ T4100] ? down_write+0xee/0x2b0 [ 187.507154][ T4100] ? file_update_time+0xa3/0x210 [ 187.507173][ T4100] shmem_file_write_iter+0x105/0x130 [ 187.507192][ T4100] __kernel_write_iter+0x42c/0x8a0 [ 187.507215][ T4100] ? __cfi___kernel_write_iter+0x10/0x10 [ 187.507237][ T4100] ? get_dump_page+0x165/0x220 [ 187.507253][ T4100] ? __asan_memset+0x39/0x50 [ 187.507273][ T4100] ? iov_iter_bvec+0xc0/0x180 [ 187.507294][ T4100] dump_user_range+0xb8b/0xe60 [ 187.507319][ T4100] ? __cfi_dump_user_range+0x10/0x10 [ 187.507342][ T4100] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 187.507367][ T4100] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 187.507391][ T4100] ? elf_core_dump+0x24c0/0x3960 [ 187.507418][ T4100] elf_core_dump+0x2e7e/0x3960 [ 187.507445][ T4100] ? __cfi_elf_core_dump+0x10/0x10 [ 187.507476][ T4100] ? dump_interrupted+0xf0/0xf0 [ 187.507496][ T4100] ? filp_open+0x199/0x1f0 [ 187.507512][ T4100] ? 0xffffffffff600000 [ 187.507527][ T4100] do_coredump+0x208d/0x2fe0 [ 187.507550][ T4100] ? __cfi_do_coredump+0x10/0x10 [ 187.507571][ T4100] ? asm_exc_page_fault+0x2b/0x30 [ 187.507595][ T4100] ? __kasan_slab_free+0x6a/0x80 [ 187.507619][ T4100] ? kmem_cache_free+0x1bd/0x4f0 [ 187.507641][ T4100] ? get_signal+0xa74/0x14e0 [ 187.507662][ T4100] get_signal+0x11f8/0x14e0 [ 187.507684][ T4100] arch_do_signal_or_restart+0xbc/0x760 [ 187.507710][ T4100] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 187.507736][ T4100] ? __kasan_check_write+0x18/0x20 [ 187.507757][ T4100] irqentry_exit_to_user_mode+0x4d/0xb0 [ 187.507781][ T4100] irqentry_exit+0x16/0x60 [ 187.507802][ T4100] exc_page_fault+0x65/0xc0 [ 187.507825][ T4100] asm_exc_page_fault+0x2b/0x30 [ 187.507842][ T4100] RIP: 0033:0x7fa3ac59c629 [ 187.507862][ T4100] Code: Unable to access opcode bytes at 0x7fa3ac59c5ff. [ 187.507873][ T4100] RSP: 002b:00007fa3aafc1fd8 EFLAGS: 00010206 [ 187.507891][ T4100] RAX: 0000000000000000 RBX: 00007fa3ac816090 RCX: 00007fa3ac59c629 [ 187.507905][ T4100] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000200 [ 187.507917][ T4100] RBP: 00007fa3ac632b39 R08: 0000000000000000 R09: 0000000000000000 [ 187.507928][ T4100] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 187.507939][ T4100] R13: 00007fa3ac816128 R14: 00007fa3ac816090 R15: 00007ffc3864fde8 [ 187.507956][ T4100] [ 187.507963][ T4100] memory: usage 307200kB, limit 307200kB, failcnt 19314 [ 187.946974][ T4100] memory+swap: usage 431600kB, limit 9007199254740988kB, failcnt 0 [ 187.954979][ T4100] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 187.961883][ T4100] Memory cgroup stats for /syz0: [ 187.962011][ T4100] cache 314056704 [ 187.970587][ T4100] rss 4096 [ 187.973601][ T4100] rss_huge 0 [ 187.976793][ T4100] shmem 314040320 [ 187.980515][ T4100] mapped_file 0 [ 187.984164][ T4100] dirty 0 [ 187.987437][ T4100] writeback 0 [ 187.991145][ T4100] workingset_refault_anon 2334 [ 187.995963][ T4100] workingset_refault_file 714 [ 188.000680][ T4100] swap 127385600 [ 188.004225][ T4100] swapcached 512000 [ 188.008054][ T4100] pgpgin 210751 [ 188.011605][ T4100] pgpgout 133951 [ 188.015156][ T4100] pgfault 104341 [ 188.018700][ T4100] pgmajfault 511 [ 188.022288][ T4100] inactive_anon 231063552 [ 188.026606][ T4100] active_anon 83492864 [ 188.030727][ T4100] inactive_file 8192 [ 188.034617][ T4100] active_file 0 [ 188.038104][ T4100] unevictable 8192 [ 188.041869][ T4100] hierarchical_memory_limit 314572800 [ 188.047258][ T4100] hierarchical_memsw_limit 9223372036854771712 [ 188.053550][ T4100] total_cache 314056704 [ 188.057723][ T4100] total_rss 4096 [ 188.061298][ T4100] total_rss_huge 0 [ 188.065042][ T4100] total_shmem 314040320 [ 188.069210][ T4100] total_mapped_file 0 [ 188.073231][ T4100] total_dirty 0 [ 188.076699][ T4100] total_writeback 0 [ 188.080535][ T4100] total_workingset_refault_anon 2334 [ 188.085845][ T4100] total_workingset_refault_file 714 [ 188.091097][ T4100] total_swap 127385600 [ 188.095154][ T4100] total_swapcached 512000 [ 188.099498][ T4100] total_pgpgin 210751 [ 188.103517][ T4100] total_pgpgout 133951 [ 188.107604][ T4100] total_pgfault 104341 [ 188.111730][ T4100] total_pgmajfault 511 [ 188.115870][ T4100] total_inactive_anon 231063552 [ 188.120749][ T4100] total_active_anon 83492864 [ 188.125366][ T4100] total_inactive_file 8192 [ 188.129840][ T4100] total_active_file 0 [ 188.133833][ T4100] total_unevictable 8192 [ 188.138084][ T4100] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.593,pid=2073,uid=0 [ 188.153026][ T4100] Memory cgroup out of memory: Killed process 2073 (syz.0.593) total-vm:94076kB, anon-rss:1264kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 188.203915][ T4097] syz.0.1316 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 188.270619][ T4097] CPU: 1 UID: 0 PID: 4097 Comm: syz.0.1316 Not tainted syzkaller #0 779e51c580eeebda7e507de47dcd3aa9ed4d0736 [ 188.270651][ T4097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 188.270663][ T4097] Call Trace: [ 188.270669][ T4097] [ 188.270676][ T4097] __dump_stack+0x21/0x30 [ 188.270702][ T4097] dump_stack_lvl+0x140/0x1c0 [ 188.270722][ T4097] ? __cfi_dump_stack_lvl+0x10/0x10 [ 188.270747][ T4097] ? ___ratelimit+0x40e/0x5b0 [ 188.270767][ T4097] dump_stack+0x19/0x20 [ 188.270784][ T4097] dump_header+0xd6/0x490 [ 188.270800][ T4097] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 188.270818][ T4097] oom_kill_process+0x35d/0x640 [ 188.270843][ T4097] out_of_memory+0x624/0xa30 [ 188.270866][ T4097] ? __cfi_out_of_memory+0x10/0x10 [ 188.270888][ T4097] ? mutex_lock_killable+0x97/0x1d0 [ 188.270910][ T4097] ? __cfi_mutex_lock_killable+0x10/0x10 [ 188.270932][ T4097] mem_cgroup_out_of_memory+0x2c8/0x390 [ 188.270953][ T4097] ? css_next_descendant_pre+0x202/0x230 [ 188.270972][ T4097] ? drain_obj_stock+0xed0/0xed0 [ 188.270994][ T4097] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 188.271026][ T4097] try_charge_memcg+0x91c/0xe10 [ 188.271045][ T4097] ? __cfi_try_charge_memcg+0x10/0x10 [ 188.271062][ T4097] ? __alloc_pages_noprof+0x35f/0x7e0 [ 188.271081][ T4097] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 188.271099][ T4097] __mem_cgroup_charge+0xfc/0x420 [ 188.271119][ T4097] ? folio_add_lru+0x116/0x400 [ 188.271143][ T4097] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 188.271164][ T4097] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 188.271191][ T4097] ? put_swap_device+0x130/0x130 [ 188.271215][ T4097] ? shmem_huge_global_enabled+0x2da/0x360 [ 188.271238][ T4097] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 188.271261][ T4097] ? __kasan_check_write+0x18/0x20 [ 188.271281][ T4097] ? _raw_spin_lock+0x92/0x120 [ 188.271297][ T4097] shmem_get_folio_gfp+0x607/0x1390 [ 188.271322][ T4097] ? shmem_get_folio+0xc0/0xc0 [ 188.271344][ T4097] ? follow_page_pte+0x90f/0xbc0 [ 188.271362][ T4097] ? inode_to_bdi+0x6d/0x100 [ 188.271381][ T4097] shmem_write_begin+0xf4/0x270 [ 188.271405][ T4097] generic_perform_write+0x328/0x970 [ 188.271425][ T4097] ? __cfi_generic_perform_write+0x10/0x10 [ 188.271442][ T4097] ? down_write+0xee/0x2b0 [ 188.271464][ T4097] ? file_update_time+0xa3/0x210 [ 188.271482][ T4097] shmem_file_write_iter+0x105/0x130 [ 188.271500][ T4097] __kernel_write_iter+0x42c/0x8a0 [ 188.271521][ T4097] ? __cfi___kernel_write_iter+0x10/0x10 [ 188.271541][ T4097] ? get_dump_page+0x165/0x220 [ 188.271557][ T4097] ? __asan_memset+0x39/0x50 [ 188.271576][ T4097] ? iov_iter_bvec+0xc0/0x180 [ 188.271598][ T4097] dump_user_range+0xb8b/0xe60 [ 188.271621][ T4097] ? __cfi_dump_user_range+0x10/0x10 [ 188.271642][ T4097] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 188.271666][ T4097] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 188.271689][ T4097] ? elf_core_dump+0x24c0/0x3960 [ 188.271713][ T4097] elf_core_dump+0x2e7e/0x3960 [ 188.271740][ T4097] ? __cfi_elf_core_dump+0x10/0x10 [ 188.271769][ T4097] ? dump_interrupted+0xf0/0xf0 [ 188.271788][ T4097] ? filp_open+0x199/0x1f0 [ 188.271804][ T4097] ? 0xffffffffff600000 [ 188.271819][ T4097] do_coredump+0x208d/0x2fe0 [ 188.271842][ T4097] ? __cfi_do_coredump+0x10/0x10 [ 188.271861][ T4097] ? asm_exc_page_fault+0x2b/0x30 [ 188.271882][ T4097] ? __kasan_slab_free+0x6a/0x80 [ 188.271905][ T4097] ? kmem_cache_free+0x1bd/0x4f0 [ 188.271926][ T4097] ? get_signal+0xa74/0x14e0 [ 188.271947][ T4097] get_signal+0x11f8/0x14e0 [ 188.271968][ T4097] arch_do_signal_or_restart+0xbc/0x760 [ 188.271992][ T4097] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 188.272022][ T4097] ? __kasan_check_write+0x18/0x20 [ 188.272043][ T4097] irqentry_exit_to_user_mode+0x4d/0xb0 [ 188.272066][ T4097] irqentry_exit+0x16/0x60 [ 188.272088][ T4097] exc_page_fault+0x65/0xc0 [ 188.272109][ T4097] asm_exc_page_fault+0x2b/0x30 [ 188.272124][ T4097] RIP: 0033:0x7fa3ac59c629 [ 188.272145][ T4097] Code: Unable to access opcode bytes at 0x7fa3ac59c5ff. [ 188.272154][ T4097] RSP: 002b:00007fa3aafc1fd8 EFLAGS: 00010206 [ 188.272171][ T4097] RAX: 0000000000000000 RBX: 00007fa3ac816090 RCX: 00007fa3ac59c629 [ 188.272185][ T4097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000200 [ 188.272196][ T4097] RBP: 00007fa3ac632b39 R08: 0000000000000000 R09: 0000000000000000 [ 188.272208][ T4097] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 188.272220][ T4097] R13: 00007fa3ac816128 R14: 00007fa3ac816090 R15: 00007ffc3864fde8 [ 188.272236][ T4097] [ 188.272290][ T4097] memory: usage 307200kB, limit 307200kB, failcnt 19850 [ 188.720478][ T45] usb 4-1: 0:2 : does not exist [ 188.725388][ T45] usb 4-1: unit 5 not found! [ 188.739728][ T4097] memory+swap: usage 432172kB, limit 9007199254740988kB, failcnt 0 [ 188.747643][ T4097] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 188.756924][ T45] usb 4-1: USB disconnect, device number 56 [ 188.767690][ T4097] Memory cgroup stats for /syz0: [ 188.767824][ T4097] cache 314544128 [ 188.777939][ T4097] rss 4096 [ 188.778503][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 188.781000][ T4097] rss_huge 0 [ 188.781015][ T4097] shmem 314527744 [ 188.803596][ T4097] mapped_file 0 [ 188.807054][ T4097] dirty 0 [ 188.810012][ T4097] writeback 0 [ 188.813300][ T4097] workingset_refault_anon 2334 [ 188.818053][ T4097] workingset_refault_file 714 [ 188.822789][ T4097] swap 127971328 [ 188.826329][ T4097] swapcached 24576 [ 188.830074][ T4097] pgpgin 210939 [ 188.833529][ T4097] pgpgout 134139 [ 188.837073][ T4097] pgfault 104354 [ 188.842595][ T4097] pgmajfault 511 [ 188.846152][ T4097] inactive_anon 192446464 [ 188.850509][ T4097] active_anon 122109952 [ 188.854663][ T4097] inactive_file 8192 [ 188.858580][ T4097] active_file 0 [ 188.862068][ T4097] unevictable 8192 [ 188.865791][ T4097] hierarchical_memory_limit 314572800 [ 188.871196][ T4097] hierarchical_memsw_limit 9223372036854771712 [ 188.877346][ T4097] total_cache 314544128 [ 188.883165][ T4097] total_rss 4096 [ 188.886726][ T4097] total_rss_huge 0 [ 188.897037][ T4097] total_shmem 314527744 [ 188.901394][ T4097] total_mapped_file 0 [ 188.905373][ T4097] total_dirty 0 [ 188.908816][ T4097] total_writeback 0 [ 188.912920][ T4097] total_workingset_refault_anon 2334 [ 188.918208][ T4097] total_workingset_refault_file 714 [ 188.923897][ T4097] total_swap 127971328 [ 188.927971][ T4097] total_swapcached 24576 [ 188.934110][ T4097] total_pgpgin 210939 [ 188.938102][ T4097] total_pgpgout 134139 [ 188.944658][ T4097] total_pgfault 104354 [ 188.948774][ T4097] total_pgmajfault 511 [ 188.953108][ T4097] total_inactive_anon 192446464 [ 188.958017][ T4097] total_active_anon 122109952 [ 188.962931][ T4097] total_inactive_file 8192 [ 188.967384][ T4097] total_active_file 0 [ 188.971655][ T4097] total_unevictable 8192 [ 188.975943][ T4097] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.390,pid=1476,uid=0 [ 188.990979][ T4097] Memory cgroup out of memory: Killed process 1476 (syz.0.390) total-vm:94076kB, anon-rss:1380kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 189.038006][ T4097] syz.0.1316 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 189.049740][ T4097] CPU: 1 UID: 0 PID: 4097 Comm: syz.0.1316 Not tainted syzkaller #0 779e51c580eeebda7e507de47dcd3aa9ed4d0736 [ 189.049778][ T4097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.049795][ T4097] Call Trace: [ 189.049803][ T4097] [ 189.049812][ T4097] __dump_stack+0x21/0x30 [ 189.049843][ T4097] dump_stack_lvl+0x140/0x1c0 [ 189.049868][ T4097] ? __cfi_dump_stack_lvl+0x10/0x10 [ 189.049892][ T4097] ? ___ratelimit+0x40e/0x5b0 [ 189.049917][ T4097] dump_stack+0x19/0x20 [ 189.049939][ T4097] dump_header+0xd6/0x490 [ 189.049962][ T4097] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 189.049983][ T4097] oom_kill_process+0x35d/0x640 [ 189.050013][ T4097] out_of_memory+0x624/0xa30 [ 189.050047][ T4097] ? __cfi_out_of_memory+0x10/0x10 [ 189.050074][ T4097] ? mutex_lock_killable+0x115/0x1d0 [ 189.050101][ T4097] ? __cfi_mutex_lock_killable+0x10/0x10 [ 189.050128][ T4097] mem_cgroup_out_of_memory+0x2c8/0x390 [ 189.050153][ T4097] ? css_next_descendant_pre+0x202/0x230 [ 189.050175][ T4097] ? drain_obj_stock+0xed0/0xed0 [ 189.050201][ T4097] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 189.050227][ T4097] try_charge_memcg+0x91c/0xe10 [ 189.050249][ T4097] ? __cfi_try_charge_memcg+0x10/0x10 [ 189.050271][ T4097] ? __alloc_pages_noprof+0x35f/0x7e0 [ 189.050291][ T4097] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 189.050311][ T4097] __mem_cgroup_charge+0xfc/0x420 [ 189.050332][ T4097] ? folio_add_lru+0x116/0x400 [ 189.050359][ T4097] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 189.050383][ T4097] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 189.050413][ T4097] ? put_swap_device+0x130/0x130 [ 189.050439][ T4097] ? shmem_huge_global_enabled+0x2da/0x360 [ 189.050465][ T4097] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 189.050492][ T4097] ? __kasan_check_write+0x18/0x20 [ 189.050514][ T4097] ? _raw_spin_lock+0x92/0x120 [ 189.050533][ T4097] shmem_get_folio_gfp+0x607/0x1390 [ 189.050561][ T4097] ? shmem_get_folio+0xc0/0xc0 [ 189.050584][ T4097] ? follow_page_pte+0x90f/0xbc0 [ 189.050604][ T4097] ? inode_to_bdi+0x6d/0x100 [ 189.050625][ T4097] shmem_write_begin+0xf4/0x270 [ 189.050653][ T4097] generic_perform_write+0x328/0x970 [ 189.050673][ T4097] ? __cfi_generic_perform_write+0x10/0x10 [ 189.050693][ T4097] ? down_write+0xee/0x2b0 [ 189.050718][ T4097] ? file_update_time+0xa3/0x210 [ 189.050740][ T4097] shmem_file_write_iter+0x105/0x130 [ 189.050761][ T4097] __kernel_write_iter+0x42c/0x8a0 [ 189.050788][ T4097] ? __cfi___kernel_write_iter+0x10/0x10 [ 189.050810][ T4097] ? get_dump_page+0x165/0x220 [ 189.050831][ T4097] ? __asan_memset+0x39/0x50 [ 189.050854][ T4097] ? iov_iter_bvec+0xc0/0x180 [ 189.050881][ T4097] dump_user_range+0xb8b/0xe60 [ 189.050908][ T4097] ? __cfi_dump_user_range+0x10/0x10 [ 189.050933][ T4097] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 189.050962][ T4097] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 189.050989][ T4097] ? elf_core_dump+0x24c0/0x3960 [ 189.051019][ T4097] elf_core_dump+0x2e7e/0x3960 [ 189.051058][ T4097] ? __cfi_elf_core_dump+0x10/0x10 [ 189.051093][ T4097] ? dump_interrupted+0xf0/0xf0 [ 189.051116][ T4097] ? filp_open+0x199/0x1f0 [ 189.051137][ T4097] ? 0xffffffffff600000 [ 189.051154][ T4097] do_coredump+0x208d/0x2fe0 [ 189.051181][ T4097] ? __cfi_do_coredump+0x10/0x10 [ 189.051203][ T4097] ? asm_exc_page_fault+0x2b/0x30 [ 189.051229][ T4097] ? __kasan_slab_free+0x6a/0x80 [ 189.051257][ T4097] ? kmem_cache_free+0x1bd/0x4f0 [ 189.051283][ T4097] ? get_signal+0xa74/0x14e0 [ 189.051306][ T4097] get_signal+0x11f8/0x14e0 [ 189.051333][ T4097] arch_do_signal_or_restart+0xbc/0x760 [ 189.051361][ T4097] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 189.051386][ T4097] ? __kasan_check_write+0x18/0x20 [ 189.051407][ T4097] irqentry_exit_to_user_mode+0x4d/0xb0 [ 189.051433][ T4097] irqentry_exit+0x16/0x60 [ 189.051457][ T4097] exc_page_fault+0x65/0xc0 [ 189.051480][ T4097] asm_exc_page_fault+0x2b/0x30 [ 189.051497][ T4097] RIP: 0033:0x7fa3ac59c629 [ 189.051518][ T4097] Code: Unable to access opcode bytes at 0x7fa3ac59c5ff. [ 189.051529][ T4097] RSP: 002b:00007fa3aafc1fd8 EFLAGS: 00010206 [ 189.051548][ T4097] RAX: 0000000000000000 RBX: 00007fa3ac816090 RCX: 00007fa3ac59c629 [ 189.051564][ T4097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000200 [ 189.051577][ T4097] RBP: 00007fa3ac632b39 R08: 0000000000000000 R09: 0000000000000000 [ 189.051591][ T4097] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 189.051604][ T4097] R13: 00007fa3ac816128 R14: 00007fa3ac816090 R15: 00007ffc3864fde8 [ 189.051621][ T4097] [ 189.052756][ T4097] memory: usage 307200kB, limit 307200kB, failcnt 19979 [ 189.492205][ T4097] memory+swap: usage 431996kB, limit 9007199254740988kB, failcnt 0 [ 189.500136][ T4097] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 189.506977][ T4097] Memory cgroup stats for /syz0: [ 189.507131][ T4097] cache 314544128 [ 189.515719][ T4097] rss 4096 [ 189.518741][ T4097] rss_huge 0 [ 189.521962][ T4097] shmem 314535936 [ 189.525587][ T4097] mapped_file 0 [ 189.529042][ T4097] dirty 0 [ 189.532002][ T4097] writeback 0 [ 189.535286][ T4097] workingset_refault_anon 2334 [ 189.540083][ T4097] workingset_refault_file 714 [ 189.544750][ T4097] swap 127791104 [ 189.548293][ T4097] swapcached 24576 [ 189.552043][ T4097] pgpgin 210941 [ 189.555491][ T4097] pgpgout 134141 [ 189.559033][ T4097] pgfault 104354 [ 189.562605][ T4097] pgmajfault 511 [ 189.566143][ T4097] inactive_anon 192446464 [ 189.570499][ T4097] active_anon 122118144 [ 189.574645][ T4097] inactive_file 8192 [ 189.578534][ T4097] active_file 0 [ 189.582093][ T4097] unevictable 0 [ 189.585547][ T4097] hierarchical_memory_limit 314572800 [ 189.590955][ T4097] hierarchical_memsw_limit 9223372036854771712 [ 189.603723][ T4097] total_cache 314544128 [ 189.607917][ T4097] total_rss 4096 [ 189.611492][ T4097] total_rss_huge 0 [ 189.615202][ T4097] total_shmem 314535936 [ 189.619340][ T4097] total_mapped_file 0 [ 189.623328][ T4097] total_dirty 0 [ 189.626776][ T4097] total_writeback 0 [ 189.630587][ T4097] total_workingset_refault_anon 2334 [ 189.635859][ T4097] total_workingset_refault_file 714 [ 189.641071][ T4097] total_swap 127791104 [ 189.645128][ T4097] total_swapcached 24576 [ 189.649345][ T4097] total_pgpgin 210941 [ 189.653326][ T4097] total_pgpgout 134141 [ 189.657383][ T4097] total_pgfault 104354 [ 189.661462][ T4097] total_pgmajfault 511 [ 189.665517][ T4097] total_inactive_anon 192446464 [ 189.670375][ T4097] total_active_anon 122118144 [ 189.675057][ T4097] total_inactive_file 8192 [ 189.679457][ T4097] total_active_file 0 [ 189.683454][ T4097] total_unevictable 0 [ 189.687420][ T4097] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1316,pid=4083,uid=0 [ 189.702240][ T4097] Memory cgroup out of memory: Killed process 4083 (syz.0.1316) total-vm:49268kB, anon-rss:0kB, file-rss:33024kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:0 [ 189.742017][ T4103] syz.0.1316 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 189.768721][ T4103] CPU: 1 UID: 0 PID: 4103 Comm: syz.0.1316 Not tainted syzkaller #0 779e51c580eeebda7e507de47dcd3aa9ed4d0736 [ 189.768757][ T4103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.768770][ T4103] Call Trace: [ 189.768778][ T4103] [ 189.768786][ T4103] __dump_stack+0x21/0x30 [ 189.768815][ T4103] dump_stack_lvl+0x140/0x1c0 [ 189.768839][ T4103] ? __cfi_dump_stack_lvl+0x10/0x10 [ 189.768863][ T4103] ? ___ratelimit+0x40e/0x5b0 [ 189.768886][ T4103] dump_stack+0x19/0x20 [ 189.768908][ T4103] dump_header+0xd6/0x490 [ 189.768929][ T4103] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 189.768949][ T4103] oom_kill_process+0x35d/0x640 [ 189.768977][ T4103] out_of_memory+0x624/0xa30 [ 189.769002][ T4103] ? __cfi_out_of_memory+0x10/0x10 [ 189.769027][ T4103] ? mutex_lock_killable+0x115/0x1d0 [ 189.769052][ T4103] ? __cfi_mutex_lock_killable+0x10/0x10 [ 189.769077][ T4103] mem_cgroup_out_of_memory+0x2c8/0x390 [ 189.769103][ T4103] ? css_next_descendant_pre+0x202/0x230 [ 189.769124][ T4103] ? drain_obj_stock+0xed0/0xed0 [ 189.769148][ T4103] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 189.769179][ T4103] try_charge_memcg+0x91c/0xe10 [ 189.769200][ T4103] ? __cfi_try_charge_memcg+0x10/0x10 [ 189.769220][ T4103] ? __alloc_pages_noprof+0x35f/0x7e0 [ 189.769241][ T4103] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 189.769263][ T4103] __mem_cgroup_charge+0xfc/0x420 [ 189.769285][ T4103] ? folio_add_lru+0x116/0x400 [ 189.769313][ T4103] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 189.769335][ T4103] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 189.769361][ T4103] ? put_swap_device+0x130/0x130 [ 189.769388][ T4103] ? shmem_huge_global_enabled+0x2da/0x360 [ 189.769415][ T4103] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 189.769441][ T4103] ? __kasan_check_write+0x18/0x20 [ 189.769464][ T4103] ? _raw_spin_lock+0x92/0x120 [ 189.769483][ T4103] shmem_get_folio_gfp+0x607/0x1390 [ 189.769512][ T4103] ? shmem_get_folio+0xc0/0xc0 [ 189.769556][ T4103] ? __kasan_check_write+0x18/0x20 [ 189.769578][ T4103] ? inode_to_bdi+0x6d/0x100 [ 189.769599][ T4103] shmem_write_begin+0xf4/0x270 [ 189.769627][ T4103] generic_perform_write+0x328/0x970 [ 189.769647][ T4103] ? inode_update_timestamps+0x4f0/0x700 [ 189.769678][ T4103] ? __cfi_generic_perform_write+0x10/0x10 [ 189.769702][ T4103] ? down_write+0xee/0x2b0 [ 189.769724][ T4103] ? mnt_get_write_access_file+0x1af/0x3b0 [ 189.769743][ T4103] ? mnt_put_write_access_file+0xc2/0x100 [ 189.769763][ T4103] ? file_update_time+0x1de/0x210 [ 189.769783][ T4103] shmem_file_write_iter+0x105/0x130 [ 189.769804][ T4103] __kernel_write_iter+0x42c/0x8a0 [ 189.769829][ T4103] ? __cfi___kernel_write_iter+0x10/0x10 [ 189.769852][ T4103] ? get_dump_page+0x165/0x220 [ 189.769871][ T4103] ? __asan_memset+0x39/0x50 [ 189.769892][ T4103] ? iov_iter_bvec+0xc0/0x180 [ 189.769917][ T4103] dump_user_range+0xb8b/0xe60 [ 189.769943][ T4103] ? __cfi_dump_user_range+0x10/0x10 [ 189.769967][ T4103] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 189.769995][ T4103] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 189.770021][ T4103] ? elf_core_dump+0x24c0/0x3960 [ 189.770061][ T4103] elf_core_dump+0x2e7e/0x3960 [ 189.770090][ T4103] ? __cfi_elf_core_dump+0x10/0x10 [ 189.770123][ T4103] ? dump_interrupted+0xf0/0xf0 [ 189.770144][ T4103] ? filp_open+0x199/0x1f0 [ 189.770164][ T4103] ? 0xffffffffff600000 [ 189.770181][ T4103] do_coredump+0x208d/0x2fe0 [ 189.770206][ T4103] ? __cfi_do_coredump+0x10/0x10 [ 189.770227][ T4103] ? asm_exc_page_fault+0x2b/0x30 [ 189.770254][ T4103] ? __kasan_slab_free+0x6a/0x80 [ 189.770280][ T4103] ? kmem_cache_free+0x1bd/0x4f0 [ 189.770304][ T4103] ? get_signal+0xa74/0x14e0 [ 189.770327][ T4103] get_signal+0x11f8/0x14e0 [ 189.770352][ T4103] arch_do_signal_or_restart+0xbc/0x760 [ 189.770379][ T4103] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 189.770408][ T4103] ? __kasan_check_write+0x18/0x20 [ 189.770432][ T4103] irqentry_exit_to_user_mode+0x4d/0xb0 [ 189.770459][ T4103] irqentry_exit+0x16/0x60 [ 189.770484][ T4103] exc_page_fault+0x65/0xc0 [ 189.770508][ T4103] asm_exc_page_fault+0x2b/0x30 [ 189.770526][ T4103] RIP: 0033:0x7fa3ac59c629 [ 189.770547][ T4103] Code: Unable to access opcode bytes at 0x7fa3ac59c5ff. [ 189.770558][ T4103] RSP: 002b:00007fa3aafc1fd8 EFLAGS: 00010206 [ 189.770577][ T4103] RAX: 0000000000000000 RBX: 00007fa3ac816090 RCX: 00007fa3ac59c629 [ 189.770593][ T4103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000200 [ 189.770607][ T4103] RBP: 00007fa3ac632b39 R08: 0000000000000000 R09: 0000000000000000 [ 189.770621][ T4103] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 189.770635][ T4103] R13: 00007fa3ac816128 R14: 00007fa3ac816090 R15: 00007ffc3864fde8 [ 189.770653][ T4103] [ 190.221427][ T4103] memory: usage 299496kB, limit 307200kB, failcnt 20125 [ 190.228503][ T4103] memory+swap: usage 423172kB, limit 9007199254740988kB, failcnt 0 [ 190.236437][ T4103] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 190.243314][ T4103] Memory cgroup stats for /syz0: [ 190.243442][ T4103] cache 305496064 [ 190.257650][ T4103] rss 4096 [ 190.263854][ T4103] rss_huge 0 [ 190.275322][ T4103] shmem 305426432 [ 190.275930][ T4304] tipc: Cannot configure node identity twice [ 190.278966][ T4103] mapped_file 0 [ 190.278976][ T4103] dirty 0 [ 190.278983][ T4103] writeback 81920 [ 190.278990][ T4103] workingset_refault_anon 2334 [ 190.278997][ T4103] workingset_refault_file 730 [ 190.304445][ T4103] swap 127696896 [ 190.308009][ T4103] swapcached 131072 [ 190.310025][ T439] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 190.311833][ T4103] pgpgin 217201 [ 190.322738][ T4103] pgpgout 142584 [ 190.326280][ T4103] pgfault 104744 [ 190.329892][ T4103] pgmajfault 512 [ 190.333436][ T4103] inactive_anon 230027264 [ 190.337763][ T4103] active_anon 75362304 [ 190.343232][ T4103] inactive_file 0 [ 190.346867][ T4103] active_file 69632 [ 190.350707][ T4103] unevictable 0 [ 190.354163][ T4103] hierarchical_memory_limit 314572800 [ 190.359601][ T4103] hierarchical_memsw_limit 9223372036854771712 [ 190.365815][ T4103] total_cache 305496064 [ 190.369988][ T4103] total_rss 4096 [ 190.373653][ T4103] total_rss_huge 0 [ 190.377367][ T4103] total_shmem 305426432 [ 190.381574][ T4103] total_mapped_file 0 [ 190.385608][ T4103] total_dirty 0 [ 190.389064][ T4103] total_writeback 81920 [ 190.393264][ T4103] total_workingset_refault_anon 2334 [ 190.398554][ T4103] total_workingset_refault_file 730 [ 190.403785][ T4103] total_swap 127696896 [ 190.407862][ T4103] total_swapcached 131072 [ 190.412219][ T4103] total_pgpgin 217201 [ 190.416199][ T4103] total_pgpgout 142584 [ 190.420288][ T4103] total_pgfault 104744 [ 190.424348][ T4103] total_pgmajfault 512 [ 190.428410][ T4103] total_inactive_anon 230027264 [ 190.433276][ T4103] total_active_anon 75362304 [ 190.437857][ T4103] total_inactive_file 0 [ 190.442031][ T4103] total_active_file 69632 [ 190.446350][ T4103] total_unevictable 0 [ 190.450357][ T4103] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1316,pid=4082,uid=0 [ 190.465230][ T4103] Memory cgroup out of memory: Killed process 4082 (syz.0.1316) total-vm:49268kB, anon-rss:0kB, file-rss:32960kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:0 [ 190.659747][ T439] usb 3-1: device descriptor read/64, error -71 [ 190.820001][ T4103] syz.0.1316 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 190.899799][ T9] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 190.909747][ T439] usb 3-1: device descriptor read/64, error -71 [ 190.948172][ T4103] CPU: 0 UID: 0 PID: 4103 Comm: syz.0.1316 Not tainted syzkaller #0 779e51c580eeebda7e507de47dcd3aa9ed4d0736 [ 190.948208][ T4103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 190.948220][ T4103] Call Trace: [ 190.948227][ T4103] [ 190.948238][ T4103] __dump_stack+0x21/0x30 [ 190.948268][ T4103] dump_stack_lvl+0x140/0x1c0 [ 190.948288][ T4103] ? __cfi_dump_stack_lvl+0x10/0x10 [ 190.948310][ T4103] ? ___ratelimit+0x40e/0x5b0 [ 190.948332][ T4103] dump_stack+0x19/0x20 [ 190.948352][ T4103] dump_header+0xd6/0x490 [ 190.948372][ T4103] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 190.948391][ T4103] oom_kill_process+0x35d/0x640 [ 190.948418][ T4103] out_of_memory+0x624/0xa30 [ 190.948444][ T4103] ? __cfi_out_of_memory+0x10/0x10 [ 190.948469][ T4103] ? mutex_lock_killable+0x115/0x1d0 [ 190.948493][ T4103] ? __cfi_mutex_lock_killable+0x10/0x10 [ 190.948518][ T4103] mem_cgroup_out_of_memory+0x2c8/0x390 [ 190.948543][ T4103] ? css_next_descendant_pre+0x202/0x230 [ 190.948564][ T4103] ? drain_obj_stock+0xed0/0xed0 [ 190.948588][ T4103] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 190.948612][ T4103] try_charge_memcg+0x91c/0xe10 [ 190.948632][ T4103] ? _raw_spin_lock+0x92/0x120 [ 190.948651][ T4103] ? __cfi_try_charge_memcg+0x10/0x10 [ 190.948669][ T4103] ? __alloc_pages_noprof+0x35f/0x7e0 [ 190.948691][ T4103] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 190.948712][ T4103] __mem_cgroup_charge+0xfc/0x420 [ 190.948734][ T4103] ? folio_add_lru+0x116/0x400 [ 190.948760][ T4103] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 190.948781][ T4103] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 190.948810][ T4103] ? put_swap_device+0x130/0x130 [ 190.948837][ T4103] ? shmem_huge_global_enabled+0x2da/0x360 [ 190.948863][ T4103] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 190.948888][ T4103] ? __kasan_check_write+0x18/0x20 [ 190.948917][ T4103] ? _raw_spin_lock+0x92/0x120 [ 190.948936][ T4103] shmem_get_folio_gfp+0x607/0x1390 [ 190.948963][ T4103] ? shmem_get_folio+0xc0/0xc0 [ 190.948986][ T4103] ? follow_page_pte+0x90f/0xbc0 [ 190.949007][ T4103] ? inode_to_bdi+0x6d/0x100 [ 190.949028][ T4103] shmem_write_begin+0xf4/0x270 [ 190.949056][ T4103] generic_perform_write+0x328/0x970 [ 190.949079][ T4103] ? __cfi_generic_perform_write+0x10/0x10 [ 190.949100][ T4103] ? down_write+0xee/0x2b0 [ 190.949125][ T4103] ? file_update_time+0xa3/0x210 [ 190.949146][ T4103] shmem_file_write_iter+0x105/0x130 [ 190.949167][ T4103] __kernel_write_iter+0x42c/0x8a0 [ 190.949192][ T4103] ? __cfi___kernel_write_iter+0x10/0x10 [ 190.949215][ T4103] ? get_dump_page+0x165/0x220 [ 190.949235][ T4103] ? __asan_memset+0x39/0x50 [ 190.949257][ T4103] ? iov_iter_bvec+0xc0/0x180 [ 190.949282][ T4103] dump_user_range+0xb8b/0xe60 [ 190.949313][ T4103] ? __cfi_dump_user_range+0x10/0x10 [ 190.949336][ T4103] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 190.949363][ T4103] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 190.949390][ T4103] ? elf_core_dump+0x24c0/0x3960 [ 190.949418][ T4103] elf_core_dump+0x2e7e/0x3960 [ 190.949463][ T4103] ? __cfi_elf_core_dump+0x10/0x10 [ 190.949497][ T4103] ? dump_interrupted+0xf0/0xf0 [ 190.949519][ T4103] ? filp_open+0x199/0x1f0 [ 190.949538][ T4103] ? 0xffffffffff600000 [ 190.949555][ T4103] do_coredump+0x208d/0x2fe0 [ 190.949581][ T4103] ? __cfi_do_coredump+0x10/0x10 [ 190.949603][ T4103] ? asm_exc_page_fault+0x2b/0x30 [ 190.949630][ T4103] ? __kasan_slab_free+0x6a/0x80 [ 190.949656][ T4103] ? kmem_cache_free+0x1bd/0x4f0 [ 190.949680][ T4103] ? get_signal+0xa74/0x14e0 [ 190.949703][ T4103] get_signal+0x11f8/0x14e0 [ 190.949727][ T4103] arch_do_signal_or_restart+0xbc/0x760 [ 190.949751][ T4103] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 190.949774][ T4103] ? __kasan_check_write+0x18/0x20 [ 190.949796][ T4103] irqentry_exit_to_user_mode+0x4d/0xb0 [ 190.949823][ T4103] irqentry_exit+0x16/0x60 [ 190.949847][ T4103] exc_page_fault+0x65/0xc0 [ 190.949871][ T4103] asm_exc_page_fault+0x2b/0x30 [ 190.949888][ T4103] RIP: 0033:0x7fa3ac59c629 [ 190.949917][ T4103] Code: Unable to access opcode bytes at 0x7fa3ac59c5ff. [ 190.949928][ T4103] RSP: 002b:00007fa3aafc1fd8 EFLAGS: 00010206 [ 190.949948][ T4103] RAX: 0000000000000000 RBX: 00007fa3ac816090 RCX: 00007fa3ac59c629 [ 190.949963][ T4103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000200 [ 190.949977][ T4103] RBP: 00007fa3ac632b39 R08: 0000000000000000 R09: 0000000000000000 [ 190.949991][ T4103] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 190.950004][ T4103] R13: 00007fa3ac816128 R14: 00007fa3ac816090 R15: 00007ffc3864fde8 [ 190.950022][ T4103] [ 191.432907][ T4103] memory: usage 307200kB, limit 307200kB, failcnt 24108 [ 191.439907][ T4103] memory+swap: usage 431704kB, limit 9007199254740988kB, failcnt 0 [ 191.447868][ T4103] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 191.454760][ T4103] Memory cgroup stats for /syz0: [ 191.454930][ T4103] cache 314195968 [ 191.463568][ T4103] rss 192512 [ 191.466785][ T4103] rss_huge 0 [ 191.470014][ T4103] shmem 314089472 [ 191.473695][ T4103] mapped_file 4096 [ 191.477421][ T4103] dirty 4096 [ 191.480639][ T4103] writeback 0 [ 191.483968][ T4103] workingset_refault_anon 2345 [ 191.488738][ T4103] workingset_refault_file 1874 [ 191.493524][ T4103] swap 127492096 [ 191.497120][ T4103] swapcached 192512 [ 191.500949][ T4103] pgpgin 238070 [ 191.504412][ T4103] pgpgout 161270 [ 191.508015][ T4103] pgfault 106085 [ 191.511581][ T4103] pgmajfault 523 [ 191.515145][ T4103] inactive_anon 220823552 [ 191.519517][ T4103] active_anon 91185152 [ 191.523616][ T4103] inactive_file 106496 [ 191.527692][ T4103] active_file 0 [ 191.531231][ T4103] unevictable 0 [ 191.534732][ T4103] hierarchical_memory_limit 314572800 [ 191.540124][ T4103] hierarchical_memsw_limit 9223372036854771712 [ 191.546320][ T4103] total_cache 314195968 [ 191.550493][ T4103] total_rss 192512 [ 191.554225][ T4103] total_rss_huge 0 [ 191.557994][ T4103] total_shmem 314089472 [ 191.562166][ T4103] total_mapped_file 4096 [ 191.566418][ T4103] total_dirty 4096 [ 191.570188][ T4103] total_writeback 0 [ 191.573998][ T4103] total_workingset_refault_anon 2345 [ 191.579289][ T4103] total_workingset_refault_file 1874 [ 191.584654][ T4103] total_swap 127492096 [ 191.588737][ T4103] total_swapcached 192512 [ 191.593096][ T4103] total_pgpgin 238070 [ 191.597125][ T4103] total_pgpgout 161270 [ 191.601213][ T4103] total_pgfault 106085 [ 191.605289][ T4103] total_pgmajfault 523 [ 191.609425][ T4103] total_inactive_anon 220823552 [ 191.614299][ T4103] total_active_anon 91185152 [ 191.618895][ T4103] total_inactive_file 106496 [ 191.623539][ T4103] total_active_file 0 [ 191.627530][ T4103] total_unevictable 0 [ 191.631529][ T4103] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1316,pid=4087,uid=0 [ 191.646460][ T4103] Memory cgroup out of memory: Killed process 4087 (syz.0.1316) total-vm:49268kB, anon-rss:0kB, file-rss:32896kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 191.899741][ T439] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 191.957553][ T4089] syz.0.1316 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 191.979754][ T9] usb 4-1: device descriptor read/64, error -71 [ 191.999926][ T36] audit: type=1400 audit(1772030023.391:511): avc: denied { connect } for pid=4325 comm="syz.1.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 192.029751][ T439] usb 3-1: device descriptor read/64, error -71 [ 192.082724][ T4089] CPU: 0 UID: 0 PID: 4089 Comm: syz.0.1316 Not tainted syzkaller #0 779e51c580eeebda7e507de47dcd3aa9ed4d0736 [ 192.082758][ T4089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.082771][ T4089] Call Trace: [ 192.082778][ T4089] [ 192.082796][ T4089] __dump_stack+0x21/0x30 [ 192.082825][ T4089] dump_stack_lvl+0x140/0x1c0 [ 192.082848][ T4089] ? __cfi_dump_stack_lvl+0x10/0x10 [ 192.082870][ T4089] ? ___ratelimit+0x40e/0x5b0 [ 192.082893][ T4089] dump_stack+0x19/0x20 [ 192.082914][ T4089] dump_header+0xd6/0x490 [ 192.082934][ T4089] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 192.082953][ T4089] oom_kill_process+0x35d/0x640 [ 192.082980][ T4089] out_of_memory+0x624/0xa30 [ 192.083004][ T4089] ? __cfi_out_of_memory+0x10/0x10 [ 192.083029][ T4089] ? mutex_lock_killable+0x97/0x1d0 [ 192.083048][ T4089] ? __cfi_mutex_lock_killable+0x10/0x10 [ 192.083069][ T4089] mem_cgroup_out_of_memory+0x2c8/0x390 [ 192.083090][ T4089] ? css_next_descendant_pre+0x202/0x230 [ 192.083110][ T4089] ? drain_obj_stock+0xed0/0xed0 [ 192.083133][ T4089] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 192.083156][ T4089] try_charge_memcg+0x91c/0xe10 [ 192.083176][ T4089] ? __cfi_try_charge_memcg+0x10/0x10 [ 192.083195][ T4089] ? __alloc_pages_noprof+0x35f/0x7e0 [ 192.083216][ T4089] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 192.083237][ T4089] __mem_cgroup_charge+0xfc/0x420 [ 192.083258][ T4089] ? folio_add_lru+0x116/0x400 [ 192.083285][ T4089] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 192.083307][ T4089] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 192.083337][ T4089] ? put_swap_device+0x130/0x130 [ 192.083364][ T4089] ? shmem_huge_global_enabled+0x2da/0x360 [ 192.083401][ T4089] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 192.083427][ T4089] ? __kasan_check_write+0x18/0x20 [ 192.083448][ T4089] ? _raw_spin_lock+0x92/0x120 [ 192.083467][ T4089] shmem_get_folio_gfp+0x607/0x1390 [ 192.083493][ T4089] ? shmem_get_folio+0xc0/0xc0 [ 192.083516][ T4089] ? follow_page_pte+0x90f/0xbc0 [ 192.083534][ T4089] ? inode_to_bdi+0x6d/0x100 [ 192.083554][ T4089] shmem_write_begin+0xf4/0x270 [ 192.083580][ T4089] generic_perform_write+0x328/0x970 [ 192.083601][ T4089] ? __cfi_generic_perform_write+0x10/0x10 [ 192.083619][ T4089] ? down_write+0xee/0x2b0 [ 192.083643][ T4089] ? file_update_time+0xa3/0x210 [ 192.083663][ T4089] shmem_file_write_iter+0x105/0x130 [ 192.083680][ T4089] __kernel_write_iter+0x42c/0x8a0 [ 192.083702][ T4089] ? __cfi___kernel_write_iter+0x10/0x10 [ 192.083725][ T4089] ? get_dump_page+0x165/0x220 [ 192.083742][ T4089] ? __asan_memset+0x39/0x50 [ 192.083763][ T4089] ? iov_iter_bvec+0xc0/0x180 [ 192.083794][ T4089] dump_user_range+0xb8b/0xe60 [ 192.083819][ T4089] ? __cfi_dump_user_range+0x10/0x10 [ 192.083839][ T4089] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 192.083865][ T4089] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 192.083888][ T4089] ? elf_core_dump+0x24c0/0x3960 [ 192.083915][ T4089] elf_core_dump+0x2e7e/0x3960 [ 192.083942][ T4089] ? __cfi_elf_core_dump+0x10/0x10 [ 192.083974][ T4089] ? dump_interrupted+0xf0/0xf0 [ 192.083995][ T4089] ? filp_open+0x199/0x1f0 [ 192.084014][ T4089] ? 0xffffffffff600000 [ 192.084031][ T4089] do_coredump+0x208d/0x2fe0 [ 192.084056][ T4089] ? __cfi_do_coredump+0x10/0x10 [ 192.084076][ T4089] ? asm_exc_page_fault+0x2b/0x30 [ 192.084102][ T4089] ? __kasan_slab_free+0x6a/0x80 [ 192.084129][ T4089] ? kmem_cache_free+0x1bd/0x4f0 [ 192.084153][ T4089] ? get_signal+0xa74/0x14e0 [ 192.084219][ T4089] get_signal+0x11f8/0x14e0 [ 192.084247][ T4089] arch_do_signal_or_restart+0xbc/0x760 [ 192.084273][ T4089] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 192.084302][ T4089] ? __kasan_check_write+0x18/0x20 [ 192.084326][ T4089] irqentry_exit_to_user_mode+0x4d/0xb0 [ 192.084352][ T4089] irqentry_exit+0x16/0x60 [ 192.084376][ T4089] exc_page_fault+0x65/0xc0 [ 192.084398][ T4089] asm_exc_page_fault+0x2b/0x30 [ 192.084414][ T4089] RIP: 0033:0x7fa3ac59c629 [ 192.084434][ T4089] Code: Unable to access opcode bytes at 0x7fa3ac59c5ff. [ 192.084445][ T4089] RSP: 002b:00007fa3aafc1fd8 EFLAGS: 00010206 [ 192.084462][ T4089] RAX: 0000000000000000 RBX: 00007fa3ac816090 RCX: 00007fa3ac59c629 [ 192.084475][ T4089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000200 [ 192.084486][ T4089] RBP: 00007fa3ac632b39 R08: 0000000000000000 R09: 0000000000000000 [ 192.084497][ T4089] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 192.084508][ T4089] R13: 00007fa3ac816128 R14: 00007fa3ac816090 R15: 00007ffc3864fde8 [ 192.084524][ T4089] [ 192.179759][ T4089] memory: usage 300648kB, limit 307200kB, failcnt 26633 [ 192.319743][ T439] usb 3-1: device descriptor read/64, error -71 [ 192.356510][ T4089] memory+swap: usage 432076kB, limit 9007199254740988kB, failcnt 0 [ 192.479860][ T439] usb usb3-port1: attempt power cycle [ 192.480172][ T4089] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 192.489879][ T9] usb 4-1: device descriptor read/64, error -71 [ 192.496228][ T4089] Memory cgroup stats for /syz0: [ 192.562736][ T4089] cache 314417152 [ 192.571330][ T4089] rss 40960 [ 192.574448][ T4089] rss_huge 0 [ 192.577661][ T4089] shmem 314417152 [ 192.581310][ T4089] mapped_file 0 [ 192.584759][ T4089] dirty 0 [ 192.587760][ T4089] writeback 0 [ 192.591056][ T4089] workingset_refault_anon 2345 [ 192.595806][ T4089] workingset_refault_file 1875 [ 192.600574][ T4089] swap 127873024 [ 192.604106][ T4089] swapcached 122880 [ 192.607885][ T4089] pgpgin 247262 [ 192.611352][ T4089] pgpgout 170462 [ 192.614896][ T4089] pgfault 106676 [ 192.618414][ T4089] pgmajfault 524 [ 192.621966][ T4089] inactive_anon 311939072 [ 192.626285][ T4089] active_anon 2633728 [ 192.630278][ T4089] inactive_file 0 [ 192.633897][ T4089] active_file 0 [ 192.637331][ T4089] unevictable 0 [ 192.640791][ T4089] hierarchical_memory_limit 314572800 [ 192.646150][ T4089] hierarchical_memsw_limit 9223372036854771712 [ 192.652308][ T4089] total_cache 314417152 [ 192.656449][ T4089] total_rss 40960 [ 192.660087][ T4089] total_rss_huge 0 [ 192.663794][ T4089] total_shmem 314417152 [ 192.667919][ T4089] total_mapped_file 0 [ 192.671906][ T4089] total_dirty 0 [ 192.675351][ T4089] total_writeback 0 [ 192.679131][ T4089] total_workingset_refault_anon 2345 [ 192.684413][ T4089] total_workingset_refault_file 1875 [ 192.689682][ T4089] total_swap 127873024 [ 192.693781][ T4089] total_swapcached 122880 [ 192.698080][ T4089] total_pgpgin 247262 [ 192.702059][ T4089] total_pgpgout 170462 [ 192.706115][ T4089] total_pgfault 106676 [ 192.710208][ T4089] total_pgmajfault 524 [ 192.714607][ T4089] total_inactive_anon 311939072 [ 192.719452][ T4089] total_active_anon 2633728 [ 192.723993][ T4089] total_inactive_file 0 [ 192.728141][ T4089] total_active_file 0 [ 192.732137][ T4089] total_unevictable 0 [ 192.736108][ T4089] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1316,pid=4085,uid=0 [ 192.751018][ T4089] Memory cgroup out of memory: Killed process 4085 (syz.0.1316) total-vm:49268kB, anon-rss:0kB, file-rss:31488kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 192.767682][ T9] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 192.839777][ T439] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 192.880256][ T439] usb 3-1: device descriptor read/8, error -71 [ 192.919741][ T9] usb 4-1: device descriptor read/64, error -71 [ 192.972492][ T4094] syz.0.1316 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 193.010282][ T439] usb 3-1: device descriptor read/8, error -71 [ 193.019764][ T45] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 193.078594][ T4094] CPU: 1 UID: 0 PID: 4094 Comm: syz.0.1316 Not tainted syzkaller #0 779e51c580eeebda7e507de47dcd3aa9ed4d0736 [ 193.078633][ T4094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.078647][ T4094] Call Trace: [ 193.078656][ T4094] [ 193.078671][ T4094] __dump_stack+0x21/0x30 [ 193.078703][ T4094] dump_stack_lvl+0x140/0x1c0 [ 193.078727][ T4094] ? __cfi_dump_stack_lvl+0x10/0x10 [ 193.078752][ T4094] ? ___ratelimit+0x40e/0x5b0 [ 193.078776][ T4094] dump_stack+0x19/0x20 [ 193.078800][ T4094] dump_header+0xd6/0x490 [ 193.078820][ T4094] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 193.078840][ T4094] oom_kill_process+0x35d/0x640 [ 193.078870][ T4094] out_of_memory+0x624/0xa30 [ 193.078897][ T4094] ? __cfi_out_of_memory+0x10/0x10 [ 193.078923][ T4094] ? mutex_lock_killable+0x97/0x1d0 [ 193.078949][ T4094] ? __cfi_mutex_lock_killable+0x10/0x10 [ 193.078975][ T4094] mem_cgroup_out_of_memory+0x2c8/0x390 [ 193.079001][ T4094] ? css_next_descendant_pre+0x202/0x230 [ 193.079022][ T4094] ? drain_obj_stock+0xed0/0xed0 [ 193.079048][ T4094] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 193.079072][ T4094] try_charge_memcg+0x91c/0xe10 [ 193.079094][ T4094] ? __cfi_try_charge_memcg+0x10/0x10 [ 193.079114][ T4094] ? __alloc_pages_noprof+0x35f/0x7e0 [ 193.079137][ T4094] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 193.079159][ T4094] __mem_cgroup_charge+0xfc/0x420 [ 193.079182][ T4094] ? folio_add_lru+0x116/0x400 [ 193.079210][ T4094] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 193.079234][ T4094] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 193.079266][ T4094] ? put_swap_device+0x130/0x130 [ 193.079293][ T4094] ? shmem_huge_global_enabled+0x2da/0x360 [ 193.079321][ T4094] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 193.079347][ T4094] ? __kasan_check_write+0x18/0x20 [ 193.079371][ T4094] ? _raw_spin_lock+0x92/0x120 [ 193.079390][ T4094] shmem_get_folio_gfp+0x607/0x1390 [ 193.079419][ T4094] ? shmem_get_folio+0xc0/0xc0 [ 193.079443][ T4094] ? follow_page_pte+0x90f/0xbc0 [ 193.079465][ T4094] ? inode_to_bdi+0x6d/0x100 [ 193.079486][ T4094] shmem_write_begin+0xf4/0x270 [ 193.079515][ T4094] generic_perform_write+0x328/0x970 [ 193.079537][ T4094] ? __cfi_generic_perform_write+0x10/0x10 [ 193.079559][ T4094] ? down_write+0xee/0x2b0 [ 193.079584][ T4094] ? file_update_time+0xa3/0x210 [ 193.079606][ T4094] shmem_file_write_iter+0x105/0x130 [ 193.079632][ T4094] __kernel_write_iter+0x42c/0x8a0 [ 193.079657][ T4094] ? __cfi___kernel_write_iter+0x10/0x10 [ 193.079690][ T4094] ? get_dump_page+0x165/0x220 [ 193.079706][ T4094] ? __asan_memset+0x39/0x50 [ 193.079725][ T4094] ? iov_iter_bvec+0xc0/0x180 [ 193.079745][ T4094] dump_user_range+0xb8b/0xe60 [ 193.079767][ T4094] ? __cfi_dump_user_range+0x10/0x10 [ 193.079787][ T4094] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 193.079813][ T4094] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 193.079840][ T4094] ? elf_core_dump+0x24c0/0x3960 [ 193.079868][ T4094] elf_core_dump+0x2e7e/0x3960 [ 193.079898][ T4094] ? __cfi_elf_core_dump+0x10/0x10 [ 193.079931][ T4094] ? dump_interrupted+0xf0/0xf0 [ 193.079953][ T4094] ? filp_open+0x199/0x1f0 [ 193.079972][ T4094] ? 0xffffffffff600000 [ 193.079990][ T4094] do_coredump+0x208d/0x2fe0 [ 193.080015][ T4094] ? __cfi_do_coredump+0x10/0x10 [ 193.080037][ T4094] ? asm_exc_page_fault+0x2b/0x30 [ 193.080063][ T4094] ? __kasan_slab_free+0x6a/0x80 [ 193.080089][ T4094] ? kmem_cache_free+0x1bd/0x4f0 [ 193.080113][ T4094] ? get_signal+0xa74/0x14e0 [ 193.080136][ T4094] get_signal+0x11f8/0x14e0 [ 193.080162][ T4094] arch_do_signal_or_restart+0xbc/0x760 [ 193.080190][ T4094] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 193.080218][ T4094] ? __kasan_check_write+0x18/0x20 [ 193.080242][ T4094] irqentry_exit_to_user_mode+0x4d/0xb0 [ 193.080268][ T4094] irqentry_exit+0x16/0x60 [ 193.080293][ T4094] exc_page_fault+0x65/0xc0 [ 193.080318][ T4094] asm_exc_page_fault+0x2b/0x30 [ 193.080336][ T4094] RIP: 0033:0x7fa3ac59c629 [ 193.080356][ T4094] Code: Unable to access opcode bytes at 0x7fa3ac59c5ff. [ 193.080367][ T4094] RSP: 002b:00007fa3aafc1fd8 EFLAGS: 00010206 [ 193.080387][ T4094] RAX: 0000000000000000 RBX: 00007fa3ac816090 RCX: 00007fa3ac59c629 [ 193.080403][ T4094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000200 [ 193.080415][ T4094] RBP: 00007fa3ac632b39 R08: 0000000000000000 R09: 0000000000000000 [ 193.080429][ T4094] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 193.080443][ T4094] R13: 00007fa3ac816128 R14: 00007fa3ac816090 R15: 00007ffc3864fde8 [ 193.080461][ T4094] [ 193.239922][ T9] usb 4-1: device descriptor read/64, error -71 [ 193.319740][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 193.606119][ T45] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 193.614363][ T45] usb 2-1: config 2 has no interface number 0 [ 193.621858][ T45] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 193.632019][ T45] usb 2-1: config 2 interface 88 has no altsetting 0 [ 193.640272][ T45] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 193.649434][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.657471][ T45] usb 2-1: Product: syz [ 193.669751][ T45] usb 2-1: Manufacturer: syz [ 193.674423][ T45] usb 2-1: SerialNumber: syz [ 193.679982][ T4094] memory: usage 298280kB, limit 307200kB, failcnt 29889 [ 193.687065][ T4334] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 193.694346][ T4094] memory+swap: usage 423768kB, limit 9007199254740988kB, failcnt 0 [ 193.702700][ T36] audit: type=1400 audit(1772030025.081:512): avc: denied { write } for pid=4348 comm="syz.3.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 193.723067][ T36] audit: type=1400 audit(1772030025.081:513): avc: denied { ioctl } for pid=4348 comm="syz.3.1353" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 193.734196][ T4094] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 193.769849][ T9] usb usb4-port1: attempt power cycle [ 193.839813][ T4094] Memory cgroup stats for /syz0: [ 193.839960][ T4094] cache 314470400 [ 193.848571][ T4094] rss 94208 [ 193.852617][ T4094] rss_huge 0 [ 193.855842][ T4094] shmem 314470400 [ 193.859507][ T4094] mapped_file 0 [ 193.865004][ T4094] dirty 0 [ 193.867944][ T4094] writeback 0 [ 193.881041][ T4094] workingset_refault_anon 2345 [ 193.886088][ T4094] workingset_refault_file 1875 [ 193.891089][ T4094] swap 127979520 [ 193.894758][ T4094] swapcached 16384 [ 193.898535][ T4094] pgpgin 255153 [ 193.902165][ T4094] pgpgout 178353 [ 193.906041][ T4334] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 193.921125][ T45] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 193.924291][ T4094] pgfault 107201 [ 193.931507][ T45] asix 2-1:2.88: probe with driver asix failed with error -71 [ 193.941947][ T4094] pgmajfault 524 [ 193.947265][ T45] usb 2-1: USB disconnect, device number 56 [ 193.968231][ T4094] inactive_anon 105025536 [ 193.975171][ T4094] active_anon 208760832 [ 193.979343][ T4094] inactive_file 0 [ 193.983045][ T4094] active_file 0 [ 193.987109][ T4094] unevictable 0 [ 193.992192][ T4094] hierarchical_memory_limit 314572800 [ 193.997606][ T4094] hierarchical_memsw_limit 9223372036854771712 [ 193.999176][ T4365] tipc: Cannot configure node identity twice [ 194.003998][ T4094] total_cache 314470400 [ 194.022341][ T4094] total_rss 94208 [ 194.025994][ T4094] total_rss_huge 0 [ 194.028839][ T4369] overlayfs: failed to resolve './file0': -2 [ 194.030000][ T4094] total_shmem 314470400 [ 194.039993][ T4094] total_mapped_file 0 [ 194.043974][ T4094] total_dirty 0 [ 194.047429][ T4094] total_writeback 0 [ 194.051284][ T4094] total_workingset_refault_anon 2345 [ 194.056559][ T4094] total_workingset_refault_file 1875 [ 194.061961][ T4094] total_swap 127979520 [ 194.066031][ T4094] total_swapcached 16384 [ 194.066540][ T4372] netlink: 'syz.1.1360': attribute type 4 has an invalid length. [ 194.070301][ T4094] total_pgpgin 255153 [ 194.070313][ T4094] total_pgpgout 178353 [ 194.070320][ T4094] total_pgfault 107201 [ 194.070326][ T4094] total_pgmajfault 524 [ 194.070332][ T4094] total_inactive_anon 105025536 [ 194.070339][ T4094] total_active_anon 208760832 [ 194.070347][ T4094] total_inactive_file 0 [ 194.107969][ T4094] total_active_file 0 [ 194.110482][ T4372] netlink: 'syz.1.1360': attribute type 17 has an invalid length. [ 194.111971][ T4094] total_unevictable 0 [ 194.123780][ T4094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1316,pid=4094,uid=0 [ 194.138646][ T4094] Memory cgroup out of memory: Killed process 4094 (syz.0.1316) total-vm:49268kB, anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 [ 194.239738][ T439] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 194.261067][ T439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.272963][ T439] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 194.287550][ T439] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.304477][ T439] usb 3-1: config 0 descriptor?? [ 194.318326][ T4097] syz.0.1316 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 194.350745][ T4097] CPU: 0 UID: 0 PID: 4097 Comm: syz.0.1316 Not tainted syzkaller #0 779e51c580eeebda7e507de47dcd3aa9ed4d0736 [ 194.350784][ T4097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.350797][ T4097] Call Trace: [ 194.350805][ T4097] [ 194.350813][ T4097] __dump_stack+0x21/0x30 [ 194.350841][ T4097] dump_stack_lvl+0x140/0x1c0 [ 194.350863][ T4097] ? __cfi_dump_stack_lvl+0x10/0x10 [ 194.350885][ T4097] ? ___ratelimit+0x40e/0x5b0 [ 194.350910][ T4097] dump_stack+0x19/0x20 [ 194.350931][ T4097] dump_header+0xd6/0x490 [ 194.350951][ T4097] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 194.350972][ T4097] oom_kill_process+0x35d/0x640 [ 194.351000][ T4097] out_of_memory+0x624/0xa30 [ 194.351024][ T4097] ? __cfi_out_of_memory+0x10/0x10 [ 194.351049][ T4097] ? mutex_lock_killable+0x115/0x1d0 [ 194.351074][ T4097] ? __cfi_mutex_lock_killable+0x10/0x10 [ 194.351098][ T4097] mem_cgroup_out_of_memory+0x2c8/0x390 [ 194.351122][ T4097] ? css_next_descendant_pre+0x202/0x230 [ 194.351143][ T4097] ? drain_obj_stock+0xed0/0xed0 [ 194.351167][ T4097] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 194.351190][ T4097] try_charge_memcg+0x91c/0xe10 [ 194.351211][ T4097] ? __cfi_try_charge_memcg+0x10/0x10 [ 194.351231][ T4097] ? __alloc_pages_noprof+0x35f/0x7e0 [ 194.351253][ T4097] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 194.351272][ T4097] __mem_cgroup_charge+0xfc/0x420 [ 194.351291][ T4097] ? folio_add_lru+0x116/0x400 [ 194.351317][ T4097] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 194.351341][ T4097] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 194.351380][ T4097] ? put_swap_device+0x130/0x130 [ 194.351407][ T4097] ? shmem_huge_global_enabled+0x2da/0x360 [ 194.351433][ T4097] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 194.351459][ T4097] ? __kasan_check_write+0x18/0x20 [ 194.351482][ T4097] ? _raw_spin_lock+0x92/0x120 [ 194.351501][ T4097] shmem_get_folio_gfp+0x607/0x1390 [ 194.351528][ T4097] ? shmem_get_folio+0xc0/0xc0 [ 194.351552][ T4097] ? follow_page_pte+0x90f/0xbc0 [ 194.351572][ T4097] ? inode_to_bdi+0x6d/0x100 [ 194.351592][ T4097] shmem_write_begin+0xf4/0x270 [ 194.351617][ T4097] generic_perform_write+0x328/0x970 [ 194.351637][ T4097] ? __cfi_generic_perform_write+0x10/0x10 [ 194.351656][ T4097] ? down_write+0xee/0x2b0 [ 194.351681][ T4097] ? file_update_time+0xa3/0x210 [ 194.351701][ T4097] shmem_file_write_iter+0x105/0x130 [ 194.351721][ T4097] __kernel_write_iter+0x42c/0x8a0 [ 194.351746][ T4097] ? __cfi___kernel_write_iter+0x10/0x10 [ 194.351769][ T4097] ? get_dump_page+0x165/0x220 [ 194.351787][ T4097] ? __asan_memset+0x39/0x50 [ 194.351809][ T4097] ? iov_iter_bvec+0xc0/0x180 [ 194.351833][ T4097] dump_user_range+0xb8b/0xe60 [ 194.351859][ T4097] ? __cfi_dump_user_range+0x10/0x10 [ 194.351882][ T4097] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 194.351909][ T4097] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 194.351934][ T4097] ? elf_core_dump+0x24c0/0x3960 [ 194.351962][ T4097] elf_core_dump+0x2e7e/0x3960 [ 194.351992][ T4097] ? __cfi_elf_core_dump+0x10/0x10 [ 194.352024][ T4097] ? dump_interrupted+0xf0/0xf0 [ 194.352046][ T4097] ? filp_open+0x199/0x1f0 [ 194.352064][ T4097] ? 0xffffffffff600000 [ 194.352081][ T4097] do_coredump+0x208d/0x2fe0 [ 194.352106][ T4097] ? __cfi_do_coredump+0x10/0x10 [ 194.352127][ T4097] ? asm_exc_page_fault+0x2b/0x30 [ 194.352152][ T4097] ? __kasan_slab_free+0x6a/0x80 [ 194.352178][ T4097] ? kmem_cache_free+0x1bd/0x4f0 [ 194.352202][ T4097] ? get_signal+0xa74/0x14e0 [ 194.352224][ T4097] get_signal+0x11f8/0x14e0 [ 194.352249][ T4097] arch_do_signal_or_restart+0xbc/0x760 [ 194.352276][ T4097] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 194.352305][ T4097] ? __kasan_check_write+0x18/0x20 [ 194.352328][ T4097] irqentry_exit_to_user_mode+0x4d/0xb0 [ 194.352354][ T4097] irqentry_exit+0x16/0x60 [ 194.352391][ T4097] exc_page_fault+0x65/0xc0 [ 194.352415][ T4097] asm_exc_page_fault+0x2b/0x30 [ 194.352431][ T4097] RIP: 0033:0x7fa3ac59c629 [ 194.352453][ T4097] Code: Unable to access opcode bytes at 0x7fa3ac59c5ff. [ 194.352463][ T4097] RSP: 002b:00007fa3aafc1fd8 EFLAGS: 00010206 [ 194.352481][ T4097] RAX: 0000000000000000 RBX: 00007fa3ac816090 RCX: 00007fa3ac59c629 [ 194.352496][ T4097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000200 [ 194.352510][ T4097] RBP: 00007fa3ac632b39 R08: 0000000000000000 R09: 0000000000000000 [ 194.352523][ T4097] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 194.352536][ T4097] R13: 00007fa3ac816128 R14: 00007fa3ac816090 R15: 00007ffc3864fde8 [ 194.352554][ T4097] [ 194.398958][ T4097] memory: usage 306112kB, limit 307200kB, failcnt 32130 [ 194.722344][ T439] thrustmaster 0003:044F:B653.0015: unknown main item tag 0x0 [ 194.728169][ T4097] memory+swap: usage 420684kB, limit 9007199254740988kB, failcnt 0 [ 194.745950][ T439] thrustmaster 0003:044F:B653.0015: unknown main item tag 0x0 [ 194.747404][ T4097] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 194.762592][ T439] thrustmaster 0003:044F:B653.0015: unknown main item tag 0x0 [ 194.776831][ T4097] Memory cgroup stats for [ 195.177541][ T439] thrustmaster 0003:044F:B653.0015: unknown main item tag 0x0 [ 195.181192][ T4097] /syz0 [ 195.186383][ T439] thrustmaster 0003:044F:B653.0015: unknown main item tag 0x0 [ 195.189838][ T4097] : [ 195.200092][ T4097] cache 314073088 [ 195.200498][ T439] thrustmaster 0003:044F:B653.0015: hidraw0: USB HID v0.01 Device [HID 044f:b653] on usb-dummy_hcd.2-1/input0 [ 195.219769][ T4097] rss 126976 [ 195.223169][ T4097] rss_huge 0 [ 195.226630][ T4097] shmem 314064896 [ 195.232432][ T4097] mapped_file 0 [ 195.235118][ T439] thrustmaster 0003:044F:B653.0015: no inputs found [ 195.238851][ T4097] dirty 0 [ 195.245762][ T4097] writeback 0 [ 195.249119][ T4097] workingset_refault_anon 2345 [ 195.256440][ T439] usb 3-1: USB disconnect, device number 64 [ 195.258802][ T4097] workingset_refault_file 2872 [ 195.267479][ T4097] swap 127614976 [ 195.271324][ T4097] swapcached 380928 [ 195.277796][ T4097] pgpgin 264247 [ 195.283337][ T4097] pgpgout 187447 [ 195.286952][ T4097] pgfault 107789 [ 195.290815][ T4097] pgmajfault 534 [ 195.294422][ T4097] inactive_anon 102375424 [ 195.298746][ T4097] active_anon 212160512 [ 195.312529][ T4097] inactive_file 8192 [ 195.316507][ T4097] active_file 0 [ 195.320191][ T4097] unevictable 0 [ 195.323657][ T4097] hierarchical_memory_limit 314572800 [ 195.329365][ T4097] hierarchical_memsw_limit 9223372036854771712 [ 195.337221][ T4097] total_cache 314073088 [ 195.347794][ T4097] total_rss 126976 [ 195.351938][ T4097] total_rss_huge 0 [ 195.355662][ T4097] total_shmem 314064896 [ 195.360041][ T4097] total_mapped_file 0 [ 195.364096][ T4097] total_dirty 0 [ 195.367599][ T4097] total_writeback 0 [ 195.371675][ T4097] total_workingset_refault_anon 2345 [ 195.377130][ T4097] total_workingset_refault_file 2872 [ 195.382621][ T4097] total_swap 127614976 [ 195.386703][ T4097] total_swapcached 380928 [ 195.391323][ T4097] total_pgpgin 264247 [ 195.395300][ T4097] total_pgpgout 187447 [ 195.399363][ T4097] total_pgfault 107789 [ 195.403786][ T4097] total_pgmajfault 534 [ 195.407849][ T4097] total_inactive_anon 102375424 [ 195.412934][ T4097] total_active_anon 212160512 [ 195.417678][ T4097] total_inactive_file 8192 [ 195.422321][ T4097] total_active_file 0 [ 195.426311][ T4097] total_unevictable 0 [ 195.430503][ T4097] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1316,pid=4091,uid=0 [ 195.445561][ T4097] Memory cgroup out of memory: Killed process 4091 (syz.0.1316) total-vm:49268kB, anon-rss:0kB, file-rss:32896kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:0 [ 195.602506][ T4093] syz.0.1316 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 195.654672][ T36] audit: type=1400 audit(1772030027.041:514): avc: denied { shutdown } for pid=4396 comm="syz.2.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 195.711378][ T36] audit: type=1400 audit(1772030027.101:515): avc: denied { create } for pid=4396 comm="syz.2.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 195.759749][ T439] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 195.769460][ T4093] CPU: 1 UID: 0 PID: 4093 Comm: syz.0.1316 Not tainted syzkaller #0 779e51c580eeebda7e507de47dcd3aa9ed4d0736 [ 195.769493][ T4093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.769505][ T4093] Call Trace: [ 195.769511][ T4093] [ 195.769519][ T4093] __dump_stack+0x21/0x30 [ 195.769547][ T4093] dump_stack_lvl+0x140/0x1c0 [ 195.769568][ T4093] ? __cfi_dump_stack_lvl+0x10/0x10 [ 195.769589][ T4093] ? ___ratelimit+0x40e/0x5b0 [ 195.769611][ T4093] dump_stack+0x19/0x20 [ 195.769632][ T4093] dump_header+0xd6/0x490 [ 195.769652][ T4093] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 195.769672][ T4093] oom_kill_process+0x35d/0x640 [ 195.769702][ T4093] out_of_memory+0x624/0xa30 [ 195.769724][ T4093] ? __cfi_out_of_memory+0x10/0x10 [ 195.769749][ T4093] ? mutex_lock_killable+0x115/0x1d0 [ 195.769775][ T4093] ? __cfi_mutex_lock_killable+0x10/0x10 [ 195.769801][ T4093] mem_cgroup_out_of_memory+0x2c8/0x390 [ 195.769827][ T4093] ? css_next_descendant_pre+0x202/0x230 [ 195.769848][ T4093] ? drain_obj_stock+0xed0/0xed0 [ 195.769874][ T4093] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 195.769893][ T4093] try_charge_memcg+0x91c/0xe10 [ 195.769911][ T4093] ? __cfi_try_charge_memcg+0x10/0x10 [ 195.769927][ T4093] ? __alloc_pages_noprof+0x35f/0x7e0 [ 195.769945][ T4093] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 195.769962][ T4093] __mem_cgroup_charge+0xfc/0x420 [ 195.769981][ T4093] ? folio_add_lru+0x116/0x400 [ 195.770007][ T4093] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 195.770030][ T4093] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 195.770060][ T4093] ? put_swap_device+0x130/0x130 [ 195.770086][ T4093] ? shmem_huge_global_enabled+0x2da/0x360 [ 195.770111][ T4093] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 195.770137][ T4093] ? __kasan_check_write+0x18/0x20 [ 195.770159][ T4093] ? _raw_spin_lock+0x92/0x120 [ 195.770177][ T4093] shmem_get_folio_gfp+0x607/0x1390 [ 195.770204][ T4093] ? shmem_get_folio+0xc0/0xc0 [ 195.770229][ T4093] ? __kasan_check_write+0x18/0x20 [ 195.770259][ T4093] ? inode_to_bdi+0x6d/0x100 [ 195.770279][ T4093] shmem_write_begin+0xf4/0x270 [ 195.770306][ T4093] generic_perform_write+0x328/0x970 [ 195.770325][ T4093] ? inode_update_timestamps+0x4f0/0x700 [ 195.770347][ T4093] ? __cfi_generic_perform_write+0x10/0x10 [ 195.770366][ T4093] ? down_write+0xee/0x2b0 [ 195.770389][ T4093] ? mnt_get_write_access_file+0x1af/0x3b0 [ 195.770408][ T4093] ? mnt_put_write_access_file+0xc2/0x100 [ 195.770427][ T4093] ? file_update_time+0x1de/0x210 [ 195.770446][ T4093] shmem_file_write_iter+0x105/0x130 [ 195.770466][ T4093] __kernel_write_iter+0x42c/0x8a0 [ 195.770490][ T4093] ? __cfi___kernel_write_iter+0x10/0x10 [ 195.770511][ T4093] ? get_dump_page+0x165/0x220 [ 195.770530][ T4093] ? __asan_memset+0x39/0x50 [ 195.770551][ T4093] ? iov_iter_bvec+0xc0/0x180 [ 195.770575][ T4093] dump_user_range+0xb8b/0xe60 [ 195.770600][ T4093] ? __cfi_dump_user_range+0x10/0x10 [ 195.770622][ T4093] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 195.770649][ T4093] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 195.770675][ T4093] ? elf_core_dump+0x24c0/0x3960 [ 195.770704][ T4093] elf_core_dump+0x2e7e/0x3960 [ 195.770734][ T4093] ? __cfi_elf_core_dump+0x10/0x10 [ 195.770768][ T4093] ? dump_interrupted+0xf0/0xf0 [ 195.770790][ T4093] ? filp_open+0x199/0x1f0 [ 195.770808][ T4093] ? 0xffffffffff600000 [ 195.770823][ T4093] do_coredump+0x208d/0x2fe0 [ 195.770848][ T4093] ? __cfi_do_coredump+0x10/0x10 [ 195.770869][ T4093] ? asm_exc_page_fault+0x2b/0x30 [ 195.770893][ T4093] ? __kasan_slab_free+0x6a/0x80 [ 195.770918][ T4093] ? kmem_cache_free+0x1bd/0x4f0 [ 195.770942][ T4093] ? get_signal+0xa74/0x14e0 [ 195.770965][ T4093] get_signal+0x11f8/0x14e0 [ 195.770989][ T4093] arch_do_signal_or_restart+0xbc/0x760 [ 195.771015][ T4093] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 195.771042][ T4093] ? __kasan_check_write+0x18/0x20 [ 195.771065][ T4093] irqentry_exit_to_user_mode+0x4d/0xb0 [ 195.771092][ T4093] irqentry_exit+0x16/0x60 [ 195.771115][ T4093] exc_page_fault+0x65/0xc0 [ 195.771138][ T4093] asm_exc_page_fault+0x2b/0x30 [ 195.771155][ T4093] RIP: 0033:0x7fa3ac59c629 [ 195.771175][ T4093] Code: Unable to access opcode bytes at 0x7fa3ac59c5ff. [ 195.771186][ T4093] RSP: 002b:00007fa3aafc1fd8 EFLAGS: 00010206 [ 195.771203][ T4093] RAX: 0000000000000000 RBX: 00007fa3ac816090 RCX: 00007fa3ac59c629 [ 195.771217][ T4093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000200 [ 195.771230][ T4093] RBP: 00007fa3ac632b39 R08: 0000000000000000 R09: 0000000000000000 [ 195.771250][ T4093] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 195.771263][ T4093] R13: 00007fa3ac816128 R14: 00007fa3ac816090 R15: 00007ffc3864fde8 [ 195.771280][ T4093] [ 195.979774][ T439] usb 2-1: Using ep0 maxpacket: 16 [ 196.023312][ T4093] memory: usage 307200kB, limit 307200kB, failcnt 34936 [ 196.080827][ T439] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.082708][ T4093] memory+swap: usage 428060kB, limit 9007199254740988kB, failcnt 0 [ 196.086714][ T439] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.139790][ T45] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 196.141620][ T4093] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 196.274555][ T4093] Memory cgroup stats for /syz0: [ 196.274753][ T4093] cache 310366208 [ 196.283457][ T4093] rss 126976 [ 196.286720][ T4093] rss_huge 0 [ 196.290049][ T4093] shmem 310358016 [ 196.291232][ T45] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 196.293743][ T4093] mapped_file 0 [ 196.304053][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.307522][ T4093] dirty 0 [ 196.319272][ T4093] writeback 0 [ 196.322647][ T439] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.331810][ T439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.339863][ T439] usb 2-1: Product: syz [ 196.340069][ T45] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 196.344116][ T4093] workingset_refault_anon 2345 [ 196.357843][ T439] usb 2-1: Manufacturer: syz [ 196.362462][ T439] usb 2-1: SerialNumber: syz [ 196.367480][ T4093] workingset_refault_file 2888 [ 196.367641][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 196.374154][ T4093] swap 127483904 [ 196.383872][ T4093] swapcached 364544 [ 196.387688][ T4093] pgpgin 272236 [ 196.391215][ T4093] pgpgout 196345 [ 196.394803][ T4093] pgfault 108345 [ 196.398357][ T4093] pgmajfault 535 [ 196.399734][ T45] usb 3-1: SerialNumber: syz [ 196.401921][ T4093] inactive_anon 130646016 [ 196.411336][ T4093] active_anon 180195328 [ 196.415526][ T4093] inactive_file 8192 [ 196.419429][ T4093] active_file 0 [ 196.422970][ T4093] unevictable 0 [ 196.426435][ T4093] hierarchical_memory_limit 314572800 [ 196.431839][ T4093] hierarchical_memsw_limit 9223372036854771712 [ 196.438035][ T4093] total_cache 310366208 [ 196.442219][ T4093] total_rss 126976 [ 196.445940][ T4093] total_rss_huge 0 [ 196.449845][ T4093] total_shmem 310358016 [ 196.454006][ T4093] total_mapped_file 0 [ 196.457987][ T4093] total_dirty 0 [ 196.461660][ T4093] total_writeback 0 [ 196.465477][ T4093] total_workingset_refault_anon 2345 [ 196.470920][ T4093] total_workingset_refault_file 2888 [ 196.476258][ T4093] total_swap 127483904 [ 196.480486][ T4093] total_swapcached 364544 [ 196.484823][ T4093] total_pgpgin 272236 [ 196.488852][ T4093] total_pgpgout 196345 [ 196.493104][ T4093] total_pgfault 108345 [ 196.497177][ T4093] total_pgmajfault 535 [ 196.501437][ T4093] total_inactive_anon 130646016 [ 196.506294][ T4093] total_active_anon 180195328 [ 196.511157][ T4093] total_inactive_file 8192 [ 196.515631][ T4093] total_active_file 0 [ 196.519618][ T4093] total_unevictable 0 [ 196.523774][ T4093] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1316,pid=4090,uid=0 [ 196.538900][ T4093] Memory cgroup out of memory: Killed process 4090 (syz.0.1316) total-vm:49268kB, anon-rss:0kB, file-rss:32904kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:0 [ 196.612706][ T4398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.621350][ T4398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.676736][ T4101] syz.0.1316 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 196.770399][ T4101] CPU: 0 UID: 0 PID: 4101 Comm: syz.0.1316 Not tainted syzkaller #0 779e51c580eeebda7e507de47dcd3aa9ed4d0736 [ 196.770442][ T4101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 196.770458][ T4101] Call Trace: [ 196.770465][ T4101] [ 196.770474][ T4101] __dump_stack+0x21/0x30 [ 196.770504][ T4101] dump_stack_lvl+0x140/0x1c0 [ 196.770529][ T4101] ? __cfi_dump_stack_lvl+0x10/0x10 [ 196.770552][ T4101] ? ___ratelimit+0x40e/0x5b0 [ 196.770578][ T4101] dump_stack+0x19/0x20 [ 196.770600][ T4101] dump_header+0xd6/0x490 [ 196.770622][ T4101] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 196.770644][ T4101] oom_kill_process+0x35d/0x640 [ 196.770673][ T4101] out_of_memory+0x624/0xa30 [ 196.770700][ T4101] ? __cfi_out_of_memory+0x10/0x10 [ 196.770727][ T4101] ? mutex_lock_killable+0x97/0x1d0 [ 196.770753][ T4101] ? __cfi_mutex_lock_killable+0x10/0x10 [ 196.770780][ T4101] mem_cgroup_out_of_memory+0x2c8/0x390 [ 196.770805][ T4101] ? css_next_descendant_pre+0x202/0x230 [ 196.770828][ T4101] ? drain_obj_stock+0xed0/0xed0 [ 196.770853][ T4101] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 196.770878][ T4101] try_charge_memcg+0x91c/0xe10 [ 196.770900][ T4101] ? __cfi_try_charge_memcg+0x10/0x10 [ 196.770922][ T4101] ? __alloc_pages_noprof+0x35f/0x7e0 [ 196.770944][ T4101] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 196.770967][ T4101] __mem_cgroup_charge+0xfc/0x420 [ 196.770990][ T4101] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 196.771013][ T4101] ? do_pte_missing+0x1937/0x44f0 [ 196.771043][ T4101] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 196.771075][ T4101] ? put_swap_device+0x130/0x130 [ 196.771103][ T4101] ? shmem_huge_global_enabled+0x2da/0x360 [ 196.771131][ T4101] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 196.771158][ T4101] ? __kasan_check_write+0x18/0x20 [ 196.771182][ T4101] ? _raw_spin_lock+0x92/0x120 [ 196.771201][ T4101] shmem_get_folio_gfp+0x607/0x1390 [ 196.771230][ T4101] ? shmem_get_folio+0xc0/0xc0 [ 196.771263][ T4101] ? __kasan_check_write+0x18/0x20 [ 196.771287][ T4101] ? inode_to_bdi+0x6d/0x100 [ 196.771309][ T4101] shmem_write_begin+0xf4/0x270 [ 196.771337][ T4101] generic_perform_write+0x328/0x970 [ 196.771357][ T4101] ? inode_update_timestamps+0x4f0/0x700 [ 196.771381][ T4101] ? __cfi_generic_perform_write+0x10/0x10 [ 196.771401][ T4101] ? down_write+0xee/0x2b0 [ 196.771428][ T4101] ? mnt_get_write_access_file+0x1af/0x3b0 [ 196.771447][ T4101] ? mnt_put_write_access_file+0xc2/0x100 [ 196.771468][ T4101] ? file_update_time+0x1de/0x210 [ 196.771488][ T4101] shmem_file_write_iter+0x105/0x130 [ 196.771509][ T4101] __kernel_write_iter+0x42c/0x8a0 [ 196.771535][ T4101] ? __cfi___kernel_write_iter+0x10/0x10 [ 196.771558][ T4101] ? get_dump_page+0x165/0x220 [ 196.771578][ T4101] ? __asan_memset+0x39/0x50 [ 196.771600][ T4101] ? iov_iter_bvec+0xc0/0x180 [ 196.771626][ T4101] dump_user_range+0xb8b/0xe60 [ 196.771653][ T4101] ? __cfi_dump_user_range+0x10/0x10 [ 196.771678][ T4101] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 196.771704][ T4101] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 196.771732][ T4101] ? elf_core_dump+0x24c0/0x3960 [ 196.771759][ T4101] elf_core_dump+0x2e7e/0x3960 [ 196.771790][ T4101] ? __cfi_elf_core_dump+0x10/0x10 [ 196.771825][ T4101] ? dump_interrupted+0xf0/0xf0 [ 196.771847][ T4101] ? filp_open+0x199/0x1f0 [ 196.771867][ T4101] ? 0xffffffffff600000 [ 196.771883][ T4101] do_coredump+0x208d/0x2fe0 [ 196.771908][ T4101] ? __cfi_do_coredump+0x10/0x10 [ 196.771931][ T4101] ? asm_exc_page_fault+0x2b/0x30 [ 196.771956][ T4101] ? __kasan_slab_free+0x6a/0x80 [ 196.771985][ T4101] ? kmem_cache_free+0x1bd/0x4f0 [ 196.772010][ T4101] ? get_signal+0xa74/0x14e0 [ 196.772033][ T4101] get_signal+0x11f8/0x14e0 [ 196.772058][ T4101] arch_do_signal_or_restart+0xbc/0x760 [ 196.772088][ T4101] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 196.772117][ T4101] ? __kasan_check_write+0x18/0x20 [ 196.772141][ T4101] irqentry_exit_to_user_mode+0x4d/0xb0 [ 196.772169][ T4101] irqentry_exit+0x16/0x60 [ 196.772194][ T4101] exc_page_fault+0x65/0xc0 [ 196.772220][ T4101] asm_exc_page_fault+0x2b/0x30 [ 196.772238][ T4101] RIP: 0033:0x7fa3ac59c629 [ 196.772267][ T4101] Code: Unable to access opcode bytes at 0x7fa3ac59c5ff. [ 196.772279][ T4101] RSP: 002b:00007fa3aafc1fd8 EFLAGS: 00010206 [ 196.772299][ T4101] RAX: 0000000000000000 RBX: 00007fa3ac816090 RCX: 00007fa3ac59c629 [ 196.772316][ T4101] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000200 [ 196.772329][ T4101] RBP: 00007fa3ac632b39 R08: 0000000000000000 R09: 0000000000000000 [ 196.772343][ T4101] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 196.772356][ T4101] R13: 00007fa3ac816128 R14: 00007fa3ac816090 R15: 00007ffc3864fde8 [ 196.772375][ T4101] [ 197.239837][ T4101] memory: usage 284200kB, limit 307200kB, failcnt 35540 [ 197.278089][ T4101] memory+swap: usage 407460kB, limit 9007199254740988kB, failcnt 0 [ 197.418106][ T4101] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 197.437791][ T439] usb 2-1: 0:2 : does not exist [ 197.445349][ T439] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 197.457085][ T439] usb 2-1: USB disconnect, device number 57 [ 197.467875][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 197.541794][ T4101] Memory cgroup stats for /syz0: [ 197.541945][ T4101] cache 270311424 [ 197.550553][ T4101] rss 151552 [ 197.553746][ T4101] rss_huge 0 [ 197.556934][ T4101] shmem 268529664 [ 197.560621][ T4101] mapped_file 0 [ 197.564074][ T4101] dirty 0 [ 197.567048][ T4101] writeback 0 [ 197.570385][ T4101] workingset_refault_anon 2345 [ 197.575145][ T4101] workingset_refault_file 3943 [ 197.580025][ T4101] swap 127856640 [ 197.583574][ T4101] swapcached 139264 [ 197.587371][ T4101] pgpgin 279192 [ 197.590868][ T4101] pgpgout 213100 [ 197.594405][ T4101] pgfault 108732 [ 197.597944][ T4101] pgmajfault 536 [ 197.601510][ T4101] inactive_anon 166748160 [ 197.605863][ T4101] active_anon 101126144 [ 197.610252][ T4101] inactive_file 0 [ 197.614081][ T4101] active_file 1527808 [ 197.619495][ T4101] unevictable 0 [ 197.623222][ T4101] hierarchical_memory_limit 314572800 [ 197.628635][ T4101] hierarchical_memsw_limit 9223372036854771712 [ 197.637548][ T4101] total_cache 270311424 [ 197.641771][ T4101] total_rss 151552 [ 197.645485][ T4101] total_rss_huge 0 [ 197.649200][ T4101] total_shmem 268529664 [ 197.653377][ T4101] total_mapped_file 0 [ 197.657357][ T4101] total_dirty 0 [ 197.660868][ T4101] total_writeback 0 [ 197.664704][ T4101] total_workingset_refault_anon 2345 [ 197.670032][ T4101] total_workingset_refault_file 3943 [ 197.675372][ T4101] total_swap 127856640 [ 197.679485][ T4101] total_swapcached 139264 [ 197.683889][ T4101] total_pgpgin 279192 [ 197.687907][ T4101] total_pgpgout 213100 [ 197.692039][ T4101] total_pgfault 108732 [ 197.696181][ T4101] total_pgmajfault 536 [ 197.700297][ T4101] total_inactive_anon 166748160 [ 197.705209][ T4101] total_active_anon 101126144 [ 197.709950][ T4101] total_inactive_file 0 [ 197.714212][ T4101] total_active_file 1527808 [ 197.718743][ T4101] total_unevictable 0 [ 197.740448][ T4101] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1316,pid=4088,uid=0 [ 197.789792][ T4101] Memory cgroup out of memory: OOM victim 4088 (syz.0.1316) is already exiting. Skip killing the task [ 198.059761][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 198.067472][ T439] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 198.199821][ T10] usb 4-1: device descriptor read/64, error -71 [ 198.219990][ T439] usb 2-1: Using ep0 maxpacket: 32 [ 198.226253][ T439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.237360][ T439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.247283][ T439] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 198.259729][ T439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.278634][ T439] usb 2-1: config 0 descriptor?? [ 198.439752][ T10] usb 4-1: device descriptor read/64, error -71 [ 198.676994][ T45] usb 3-1: 0:2 : does not exist [ 198.688616][ T45] usb 3-1: unit 5 not found! [ 198.693447][ T10] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 198.703069][ T439] savu 0003:1E7D:2D5A.0016: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 198.710015][ T45] usb 3-1: USB disconnect, device number 65 [ 198.839744][ T10] usb 4-1: device descriptor read/64, error -71 [ 198.942488][ T439] usb 2-1: USB disconnect, device number 58 [ 199.079802][ T10] usb 4-1: device descriptor read/64, error -71 [ 199.189886][ T10] usb usb4-port1: attempt power cycle [ 199.317724][ T4418] tipc: Cannot configure node identity twice [ 199.529766][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 199.550847][ T10] usb 4-1: device descriptor read/8, error -71 [ 199.690870][ T10] usb 4-1: device descriptor read/8, error -71 [ 199.930304][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 199.960909][ T10] usb 4-1: device descriptor read/8, error -71 [ 200.090895][ T10] usb 4-1: device descriptor read/8, error -71 [ 200.188363][ T4439] usb usb7: usbfs: interface 0 claimed by hub while 'syz.1.1386' sets config #0 [ 200.209878][ T10] usb usb4-port1: unable to enumerate USB device [ 200.310324][ T4443] tipc: Cannot configure node identity twice [ 200.315298][ T36] audit: type=1400 audit(1772030031.701:516): avc: denied { execheap } for pid=4441 comm="syz.2.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 200.456095][ T36] audit: type=1400 audit(1772030031.841:517): avc: denied { mount } for pid=4449 comm="syz.2.1391" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 200.456564][ T4452] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 200.489891][ T36] audit: type=1400 audit(1772030031.841:518): avc: denied { mounton } for pid=4449 comm="syz.2.1391" path="/289/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 200.498258][ T4452] overlayfs: failed to look up (tracing) for ino (-66) [ 200.526730][ T36] audit: type=1400 audit(1772030031.911:519): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 200.569766][ T45] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 200.720971][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.730784][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 200.739868][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.748433][ T45] usb 2-1: config 0 descriptor?? [ 200.831191][ T524] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 200.840738][ T4467] tipc: Cannot configure node identity twice [ 200.913206][ T36] audit: type=1400 audit(1772030032.301:520): avc: denied { create } for pid=4474 comm="syz.3.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.956733][ T45] wacom 0003:056A:0309.0017: unknown main item tag 0x3 [ 200.965323][ T45] wacom 0003:056A:0309.0017: hidraw0: USB HID v0.07 Device [HID 056a:0309] on usb-dummy_hcd.1-1/input0 [ 200.971542][ T4482] netlink: 'syz.1.1403': attribute type 4 has an invalid length. [ 200.979745][ T524] usb 3-1: Using ep0 maxpacket: 16 [ 200.999664][ T4482] netlink: 'syz.1.1403': attribute type 17 has an invalid length. [ 201.001059][ T45] usb 2-1: USB disconnect, device number 59 [ 201.019948][ T524] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.044500][ T524] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.055804][ T524] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 201.065170][ T524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.078402][ T524] usb 3-1: config 0 descriptor?? [ 201.281811][ T4503] overlayfs: failed to clone upperpath [ 202.019333][ T36] audit: type=1400 audit(1772030033.401:521): avc: denied { mounton } for pid=4518 comm="syz.1.1416" path="/proc/831/task" dev="proc" ino=50272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 202.074742][ T4526] netlink: 'syz.3.1419': attribute type 1 has an invalid length. [ 202.218384][ T4537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 202.310324][ T4549] netlink: 'syz.0.1429': attribute type 1 has an invalid length. [ 203.028226][ T36] audit: type=1400 audit(1772030034.411:522): avc: denied { setattr } for pid=4569 comm="syz.3.1438" name="" dev="pipefs" ino=49986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 203.557329][ T439] usb 3-1: USB disconnect, device number 66 [ 204.020371][ T4607] tipc: Cannot configure node identity twice [ 204.173963][ T36] audit: type=1400 audit(1772030035.561:523): avc: denied { accept } for pid=4615 comm="syz.3.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.869964][ T524] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 205.029797][ T524] usb 3-1: Using ep0 maxpacket: 16 [ 205.051473][ T524] usb 3-1: config 0 has an invalid interface number: 13 but max is 0 [ 205.059724][ T524] usb 3-1: config 0 has no interface number 0 [ 205.065870][ T524] usb 3-1: config 0 interface 13 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.077209][ T524] usb 3-1: config 0 interface 13 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.087370][ T524] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 205.096599][ T524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.118064][ T524] usb 3-1: config 0 descriptor?? [ 205.212617][ T4630] FAULT_INJECTION: forcing a failure. [ 205.212617][ T4630] name failslab, interval 1, probability 0, space 0, times 0 [ 205.225793][ T4630] CPU: 1 UID: 0 PID: 4630 Comm: syz.3.1460 Not tainted syzkaller #0 779e51c580eeebda7e507de47dcd3aa9ed4d0736 [ 205.225827][ T4630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.225840][ T4630] Call Trace: [ 205.225847][ T4630] [ 205.225856][ T4630] __dump_stack+0x21/0x30 [ 205.225884][ T4630] dump_stack_lvl+0x140/0x1c0 [ 205.225907][ T4630] ? __cfi_dump_stack_lvl+0x10/0x10 [ 205.225934][ T4630] ? __kasan_check_write+0x18/0x20 [ 205.225957][ T4630] ? copy_mm+0x2d2/0x1cf0 [ 205.225978][ T4630] dump_stack+0x19/0x20 [ 205.226000][ T4630] should_fail_ex+0x3d7/0x530 [ 205.226022][ T4630] should_failslab+0xac/0x100 [ 205.226048][ T4630] kmem_cache_alloc_noprof+0x42/0x410 [ 205.226071][ T4630] ? alloc_pid+0xa5/0xba0 [ 205.226089][ T4630] ? __asan_memcpy+0x5a/0x80 [ 205.226111][ T4630] alloc_pid+0xa5/0xba0 [ 205.226130][ T4630] copy_process+0x1409/0x3220 [ 205.226154][ T4630] ? __cfi_copy_process+0x10/0x10 [ 205.226175][ T4630] ? __kmalloc_cache_noprof+0x23c/0x470 [ 205.226198][ T4630] ? sched_clock_noinstr+0xd/0x30 [ 205.226222][ T4630] ? __kasan_check_write+0x18/0x20 [ 205.226244][ T4630] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 205.226274][ T4630] vhost_task_create+0x1f7/0x400 [ 205.226301][ T4630] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 205.226332][ T4630] ? __cfi_vhost_task_create+0x10/0x10 [ 205.226360][ T4630] ? __cfi_vhost_task_fn+0x10/0x10 [ 205.226388][ T4630] ? __kasan_check_write+0x18/0x20 [ 205.226410][ T4630] ? mutex_lock+0x97/0x1d0 [ 205.226433][ T4630] ? __cfi_mutex_lock+0x10/0x10 [ 205.226456][ T4630] ? __cfi_resched_curr+0x10/0x10 [ 205.226482][ T4630] kvm_mmu_post_init_vm+0x161/0x300 [ 205.226507][ T4630] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 205.226533][ T4630] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 205.226556][ T4630] ? kstrtoull+0x13b/0x1e0 [ 205.226576][ T4630] ? kstrtouint+0x78/0xf0 [ 205.226594][ T4630] ? ioctl_has_perm+0x1bc/0x500 [ 205.226614][ T4630] ? __asan_memcpy+0x5a/0x80 [ 205.226637][ T4630] ? ioctl_has_perm+0x408/0x500 [ 205.226664][ T4630] ? has_cap_mac_admin+0xd0/0xd0 [ 205.226693][ T4630] ? __kasan_check_write+0x18/0x20 [ 205.226716][ T4630] ? mutex_lock_killable+0x97/0x1d0 [ 205.226739][ T4630] ? __cfi_mutex_lock_killable+0x10/0x10 [ 205.226763][ T4630] ? proc_fail_nth_write+0x184/0x220 [ 205.226785][ T4630] kvm_vcpu_ioctl+0xa48/0x1000 [ 205.226812][ T4630] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 205.226838][ T4630] ? __switch_to_asm+0x3d/0x70 [ 205.226864][ T4630] ? __cfi_vfs_write+0x10/0x10 [ 205.226887][ T4630] ? __kasan_check_write+0x18/0x20 [ 205.226909][ T4630] ? mutex_unlock+0x90/0x240 [ 205.226931][ T4630] ? __cfi_mutex_unlock+0x10/0x10 [ 205.226954][ T4630] ? __fget_files+0x2c5/0x340 [ 205.226981][ T4630] ? __fget_files+0x2c5/0x340 [ 205.227007][ T4630] ? bpf_lsm_file_ioctl+0xd/0x20 [ 205.227026][ T4630] ? security_file_ioctl+0x3e/0x110 [ 205.227046][ T4630] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 205.227071][ T4630] __se_sys_ioctl+0x135/0x1b0 [ 205.227099][ T4630] __x64_sys_ioctl+0x7f/0xa0 [ 205.227124][ T4630] x64_sys_call+0x1878/0x2ee0 [ 205.227150][ T4630] do_syscall_64+0x57/0xf0 [ 205.227169][ T4630] ? clear_bhb_loop+0x50/0xa0 [ 205.227189][ T4630] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 205.227218][ T4630] RIP: 0033:0x7f7b7779c629 [ 205.227235][ T4630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.227253][ T4630] RSP: 002b:00007f7b7866a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.227275][ T4630] RAX: ffffffffffffffda RBX: 00007f7b77a15fa0 RCX: 00007f7b7779c629 [ 205.227292][ T4630] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 205.227306][ T4630] RBP: 00007f7b7866a090 R08: 0000000000000000 R09: 0000000000000000 [ 205.227320][ T4630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.227332][ T4630] R13: 00007f7b77a16038 R14: 00007f7b77a15fa0 R15: 00007ffd2f2ea1a8 [ 205.227350][ T4630] [ 205.817217][ T524] uclogic 0003:5543:0781.0018: unknown main item tag 0x0 [ 205.824373][ T524] uclogic 0003:5543:0781.0018: unknown main item tag 0x0 [ 205.831474][ T524] uclogic 0003:5543:0781.0018: unknown main item tag 0x0 [ 205.838526][ T524] uclogic 0003:5543:0781.0018: unknown main item tag 0x0 [ 205.845596][ T524] uclogic 0003:5543:0781.0018: unknown main item tag 0x0 [ 205.852903][ T524] uclogic 0003:5543:0781.0018: No inputs registered, leaving [ 205.861025][ T524] uclogic 0003:5543:0781.0018: hidraw0: USB HID v0.40 Device [HID 5543:0781] on usb-dummy_hcd.2-1/input13 [ 206.579747][ T439] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 206.740810][ T439] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.751119][ T439] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.761017][ T439] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 206.770344][ T439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 206.778390][ T439] usb 2-1: SerialNumber: syz [ 206.986705][ T439] usb 2-1: 0:2 : does not exist [ 206.998068][ T439] usb 2-1: USB disconnect, device number 61 [ 207.006056][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 207.540144][ T36] audit: type=1400 audit(1772030038.931:524): avc: denied { connect } for pid=4660 comm="syz.3.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 207.544682][ T4661] fuse: Bad value for 'fd' [ 207.559789][ T36] audit: type=1400 audit(1772030038.931:525): avc: denied { create } for pid=4660 comm="syz.3.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 207.591890][ T4663] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1471'. [ 207.702729][ T64] usb 3-1: USB disconnect, device number 67 [ 207.749760][ T524] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 207.900950][ T524] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.911194][ T524] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.922400][ T524] usb 2-1: too many endpoints for config 1 interface 1 altsetting 138: 250, using maximum allowed: 30 [ 207.933471][ T524] usb 2-1: config 1 interface 1 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 250 [ 207.946716][ T524] usb 2-1: config 1 interface 1 has no altsetting 0 [ 207.960973][ T524] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.970065][ T524] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.978059][ T524] usb 2-1: Product: syz [ 207.982315][ T524] usb 2-1: Manufacturer: syz [ 207.986915][ T524] usb 2-1: SerialNumber: syz [ 207.993306][ T524] usb 2-1: selecting invalid altsetting 0 [ 207.999101][ T524] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 208.049762][ T45] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 208.199772][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 208.206082][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.216422][ T45] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 208.225477][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 208.234659][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.243164][ T45] usb 4-1: config 0 descriptor?? [ 208.252293][ T10] usb 2-1: USB disconnect, device number 62 [ 208.880238][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1491'. [ 208.893981][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 209.588806][ T4744] netlink: 'syz.0.1502': attribute type 4 has an invalid length. [ 209.600996][ T4744] netlink: 'syz.0.1502': attribute type 17 has an invalid length. [ 210.757000][ T10] usb 4-1: USB disconnect, device number 64 [ 210.939787][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 210.939799][ T673] Bluetooth: hci0: command 0x1003 tx timeout [ 210.960598][ T45] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 211.111208][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.121409][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.129815][ T10] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 211.133881][ T45] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 211.146925][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 211.154924][ T45] usb 3-1: SerialNumber: syz [ 211.279784][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 211.286014][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.296309][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 13 [ 211.307860][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.317037][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.325166][ T10] usb 4-1: Product: syz [ 211.329331][ T10] usb 4-1: Manufacturer: syz [ 211.333950][ T10] usb 4-1: SerialNumber: syz [ 211.339439][ T4769] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.379754][ T439] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 211.530964][ T439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.541909][ T439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.548855][ T4769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.551872][ T439] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 211.561051][ T4769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.570022][ T439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.585595][ T439] usb 2-1: config 0 descriptor?? [ 211.994831][ T439] usbhid 2-1:0.0: can't add hid device: -71 [ 212.000900][ T439] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 212.011048][ T439] usb 2-1: USB disconnect, device number 63 [ 212.185723][ T10] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 212.191544][ T10] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 212.207581][ T10] cdc_ncm 4-1:1.0: bind() failure [ 212.213547][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 212.220390][ T10] cdc_ncm 4-1:1.1: bind() failure [ 212.229432][ T10] usb 4-1: USB disconnect, device number 65 [ 212.498304][ T36] audit: type=1400 audit(1772030043.881:526): avc: denied { read } for pid=4796 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK [ 212.712819][ T36] audit: type=1326 audit(1772030044.101:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.1.1525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f662d19c629 code=0x0 Stopping crond: stopped /usr/sbin/crond (pid 194) OK [ 212.796370][ T36] audit: type=1400 audit(1772030044.181:528): avc: denied { read write } for pid=4818 comm="syz.1.1527" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Stopping dhcpcd... [ 212.826831][ T36] audit: type=1400 audit(1772030044.181:529): avc: denied { open } for pid=4818 comm="syz.1.1527" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 stopped /sbin/dhcpcd (pid 148) Stopping network: [ 212.969764][ T36] audit: type=1400 audit(1772030044.351:530): avc: denied { read write } for pid=4837 comm="ip" path="/dev/console" dev="rootfs" ino=42 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 213.016179][ T36] audit: type=1400 audit(1772030044.361:531): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 OK Stopping iptables: [ 213.074892][ T36] audit: type=1400 audit(1772030044.461:532): avc: denied { read write } for pid=4844 comm="iptables" path="/dev/console" dev="rootfs" ino=42 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK [ 213.098875][ T36] audit: type=1400 audit(1772030044.471:533): avc: denied { search } for pid=4844 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system message bus: [ 213.123796][ T36] audit: type=1400 audit(1772030044.471:534): avc: denied { write } for pid=4844 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.145525][ T36] audit: type=1400 audit(1772030044.471:535): avc: denied { add_name } for pid=4844 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.166964][ T36] audit: type=1400 audit(1772030044.471:536): avc: denied { create } for pid=4844 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 done killall: can't kill pid 409: No such process killall: can't kill pid 817: No such process Stopping klogd: OK Stopping acpid: [ 213.599781][ T524] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 213.633138][ T4878] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 213.640950][ T4878] SELinux: failed to load policy [ 213.646280][ T4878] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 213.653923][ T4878] SELinux: failed to load policy [ 213.739023][ T45] usb 3-1: 0:2 : does not exist [ 213.744110][ T45] usb 3-1: unit 5 not found! [ 213.749746][ T524] usb 4-1: Using ep0 maxpacket: 8 [ 213.755641][ T45] usb 3-1: USB disconnect, device number 68 [ 213.762911][ T524] usb 4-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 213.780695][ T524] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.792190][ T524] usb 4-1: config 0 descriptor?? [ 213.942077][ T4895] netlink: 'syz.1.1543': attribute type 4 has an invalid length. [ 213.952723][ T4895] netlink: 'syz.1.1543': attribute type 17 has an invalid length. [ 214.002161][ T524] wacom 0003:056A:0315.0019: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 214.012176][ T524] wacom 0003:056A:0315.0019: hidraw0: USB HID v0.00 Device [HID 056a:0315] on usb-dummy_hcd.3-1/input0 [ 214.023694][ T524] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0315.0019/input/input16 [ 214.086055][ T4909] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1548'. [ 214.319782][ T524] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 214.329770][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK [ 214.470861][ T524] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.479753][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 214.481063][ T524] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.487402][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.496276][ T524] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 214.505276][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.514824][ T524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 214.524645][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.531200][ T524] usb 3-1: SerialNumber: syz [ 214.540329][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.552848][ T10] usb 2-1: Product: syz [ 214.557018][ T10] usb 2-1: Manufacturer: syz [ 214.561629][ T10] usb 2-1: SerialNumber: syz umount: can't remount debugfs read-only Connection to 10.128.0.145 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 215.722195][ T12] bridge_slave_1: left allmulticast mode [ 215.727892][ T12] bridge_slave_1: left promiscuous mode [ 215.749816][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.769117][ T12] bridge_slave_0: left allmulticast mode [ 215.779746][ T12] bridge_slave_0: left promiscuous mode [ 215.785378][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.042350][ T45] usb 4-1: USB disconnect, device number 66 [ 216.051596][ T12] tipc: Left network mode [ 216.056046][ T10] usb 2-1: 0:2 : does not exist [ 216.061981][ T12] veth1_macvtap: left promiscuous mode [ 216.067536][ T12] veth0_vlan: left promiscuous mode [ 216.074195][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 216.085261][ T524] usb 3-1: 0:2 : does not exist [ 216.101135][ T524] usb 3-1: unit 5 not found! [ 216.101302][ T10] usb 2-1: USB disconnect, device number 64 [ 216.138271][ T12] vcan0 (unregistering): left allmulticast mode [ 216.139850][ T524] usb 3-1: USB disconnect, device number 69 [ 216.371277][ T12] ------------[ cut here ]------------ [ 216.376753][ T12] WARNING: CPU: 0 PID: 12 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 216.386702][ T12] Modules linked in: [ 216.390630][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 779e51c580eeebda7e507de47dcd3aa9ed4d0736 [ 216.402176][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.412241][ T12] Workqueue: netns cleanup_net [ 216.416998][ T12] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 216.422981][ T12] Code: e8 71 61 db fc 4b 83 3c 3e 00 75 19 e8 45 7f 83 fc 49 81 ff f8 07 00 00 74 1b e8 37 7f 83 fc 49 83 c7 08 eb c9 e8 2c 7f 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 216.442622][ T12] RSP: 0018:ffffc900000c7b90 EFLAGS: 00010293 [ 216.448680][ T12] RAX: ffffffff85041cf4 RBX: ffff88812edb8000 RCX: ffff888102653900 [ 216.456685][ T12] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881076f0000 [ 216.464689][ T12] RBP: ffffc900000c7bb0 R08: 0000000000000003 R09: 0000000000000004 [ 216.472685][ T12] R10: dffffc0000000000 R11: fffff52000018f04 R12: dffffc0000000000 [ 216.480669][ T12] R13: dffffc0000000000 R14: ffff8881076f0000 R15: 0000000000000000 [ 216.488635][ T12] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 216.497599][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.504204][ T12] CR2: 00007f5883f92e9c CR3: 00000000074a8000 CR4: 00000000003526b0 [ 216.512187][ T12] Call Trace: [ 216.515452][ T12] [ 216.518367][ T12] cleanup_net+0x6bd/0xc90 [ 216.522831][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 216.527847][ T12] ? __schedule+0x1357/0x1ea0 [ 216.532534][ T12] ? kick_pool+0xb9/0x550 [ 216.536852][ T12] process_scheduled_works+0x7d4/0x1020 [ 216.542405][ T12] worker_thread+0xc70/0x10b0 [ 216.547074][ T12] kthread+0x2c9/0x370 [ 216.551141][ T12] ? __cfi_worker_thread+0x10/0x10 [ 216.556248][ T12] ? __cfi_kthread+0x10/0x10 [ 216.560857][ T12] ret_from_fork+0x64/0xa0 [ 216.565263][ T12] ? __cfi_kthread+0x10/0x10 [ 216.569859][ T12] ret_from_fork_asm+0x1a/0x30 [ 216.574618][ T12] [ 216.577614][ T12] ---[ end trace 0000000000000000 ]--- [ 216.583406][ T12] ------------[ cut here ]------------ [ 216.588845][ T12] WARNING: CPU: 1 PID: 12 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 216.598857][ T12] Modules linked in: [ 216.602763][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 779e51c580eeebda7e507de47dcd3aa9ed4d0736 [ 216.615777][ T12] Tainted: [W]=WARN [ 216.619558][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.629637][ T12] Workqueue: netns cleanup_net [ 216.634422][ T12] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 216.640504][ T12] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 f0 7e 83 fc 49 81 ff f8 07 00 00 74 1b e8 e2 7e 83 fc 49 83 c7 08 eb c5 e8 d7 7e 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 c7 7e 83 fc 5b 41 5c 41 5e 41 [ 216.660130][ T12] RSP: 0018:ffffc900000c7b90 EFLAGS: 00010293 Sent SIGKILL to[ 216.666339][ T12] RAX: ffffffff85041d49 RBX: ffff8881076f0800 RCX: ffff888102653900 all processes [ 216.675834][ T12] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881076f0810 [ 216.684963][ T12] RBP: ffffc900000c7bb0 R08: 0000000000000003 R09: 0000000000000004 [ 216.692952][ T12] R10: dffffc0000000000 R11: fffff52000018f04 R12: dffffc0000000000 [ 216.700947][ T12] R13: dffffc0000000000 R14: ffff8881076f0000 R15: 0000000000000010 [ 216.708909][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 216.717847][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.724440][ T12] CR2: 00007ff5f89e82f8 CR3: 00000000074a8000 CR4: 00000000003526b0 [ 216.732421][ T12] Call Trace: [ 216.735688][ T12] [ 216.738600][ T12] cleanup_net+0x6bd/0xc90 [ 216.743025][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 216.747953][ T12] ? __schedule+0x1357/0x1ea0 [ 216.752628][ T12] ? kick_pool+0xb9/0x550 [ 216.756948][ T12] process_scheduled_works+0x7d4/0x1020 [ 216.762538][ T12] worker_thread+0xc70/0x10b0 [ 216.767227][ T12] kthread+0x2c9/0x370 [ 216.771346][ T12] ? __cfi_worker_thread+0x10/0x10 [ 216.776464][ T12] ? __cfi_kthread+0x10/0x10 [ 216.781054][ T12] ret_from_fork+0x64/0xa0 [ 216.785462][ T12] ? __cfi_kthread+0x10/0x10 [ 216.790060][ T12] ret_from_fork_asm+0x1a/0x30 [ 216.794997][ T12] [ 216.797999][ T12] ---[ end trace 0000000000000000 ]--- [ 216.805704][ T12] ------------[ cut here ]------------ [ 216.811221][ T12] WARNING: CPU: 0 PID: 12 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 216.820600][ T12] Modules linked in: [ 216.824479][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 779e51c580eeebda7e507de47dcd3aa9ed4d0736 [ 216.837515][ T12] Tainted: [W]=WARN [ 216.841344][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 Requesting syst[ 216.851435][ T12] Workqueue: netns cleanup_net em poweroff [ 216.857564][ T12] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 216.864258][ T12] Code: 3c 20 00 74 08 48 89 df e8 1f 2b f6 fc 48 8b 3b e8 b7 65 e1 fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 e2 48 9e fc <0f> 0b e9 b0 fd ff ff e8 d6 48 9e fc 0f 0b e9 18 fe ff ff e8 ca 48 [ 216.883887][ T12] RSP: 0018:ffffc900000c7b70 EFLAGS: 00010293 [ 216.889974][ T12] RAX: ffffffff84e9533e RBX: ffff88812edb8000 RCX: ffff888102653900 [ 216.897926][ T12] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888102653900 [ 216.905888][ T12] RBP: ffffc900000c7b98 R08: ffffffff87d358c7 R09: 1ffffffff0fa6b18 [ 216.913868][ T12] R10: dffffc0000000000 R11: fffffbfff0fa6b19 R12: 1ffffffff0fa6868 [ 216.921851][ T12] R13: dffffc0000000000 R14: ffff88812edb8c00 R15: dffffc0000000000 [ 216.929819][ T12] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 216.938922][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.945521][ T12] CR2: 00007f5883f92e9c CR3: 000000010b368000 CR4: 00000000003526b0 [ 216.953484][ T12] Call Trace: [ 216.956739][ T12] [ 216.959670][ T12] xfrm_net_exit+0x31/0x80 [ 216.964144][ T12] cleanup_net+0x6bd/0xc90 [ 216.968546][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 216.973582][ T12] ? __schedule+0x1357/0x1ea0 [ 216.978244][ T12] ? kick_pool+0xb9/0x550 [ 216.982581][ T12] process_scheduled_works+0x7d4/0x1020 [ 216.988112][ T12] worker_thread+0xc70/0x10b0 [ 216.992794][ T12] kthread+0x2c9/0x370 [ 216.996839][ T12] ? __cfi_worker_thread+0x10/0x10 [ 217.001954][ T12] ? __cfi_kthread+0x10/0x10 [ 217.006517][ T12] ret_from_fork+0x64/0xa0 [ 217.010944][ T12] ? __cfi_kthread+0x10/0x10 [ 217.015527][ T12] ret_from_fork_asm+0x1a/0x30 [ 217.020291][ T12] [ 217.023297][ T12] ---[ end trace 0000000000000000 ]--- [ 217.081457][ T12] bridge_slave_1: left allmulticast mode [ 217.087098][ T12] bridge_slave_1: left promiscuous mode [ 217.092736][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.100103][ T12] bridge_slave_0: left allmulticast mode [ 217.105719][ T12] bridge_slave_0: left promiscuous mode [ 217.111380][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.118871][ T12] bridge_slave_1: left allmulticast mode [ 217.124541][ T12] bridge_slave_1: left promiscuous mode [ 217.130127][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.137436][ T12] bridge_slave_0: left allmulticast mode [ 217.143082][ T12] bridge_slave_0: left promiscuous mode [ 217.148642][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.156175][ T12] bridge_slave_1: left allmulticast mode [ 217.161830][ T12] bridge_slave_1: left promiscuous mode [ 217.167387][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.174708][ T12] bridge_slave_0: left allmulticast mode [ 217.180492][ T12] bridge_slave_0: left promiscuous mode [ 217.186079][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.412589][ T12] tipc: Left network mode [ 217.417016][ T12] tipc: Left network mode [ 217.421755][ T12] tipc: Left network mode [ 217.428427][ T12] veth1_macvtap: left promiscuous mode [ 217.433973][ T12] veth0_vlan: left promiscuous mode [ 217.439464][ T12] veth1_macvtap: left promiscuous mode [ 217.445008][ T12] veth0_vlan: left promiscuous mode [ 217.450557][ T12] veth1_macvtap: left promiscuous mode [ 217.456034][ T12] veth0_vlan: left promiscuous mode [ 217.867979][ T4933] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 217.874883][ T4933] ACPI: PM: Preparing to enter system sleep state S5 [ 217.881870][ T4933] kvm: exiting hardware virtualization [ 217.887397][ T4933] reboot: Power down serialport: VM disconnected.