last executing test programs: 29.620784993s ago: executing program 3 (id=53): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = openat(r1, &(0x7f0000000540)='./file0\x00', 0x8000, 0x4) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)={0x2, 0x10, 0x8, 0x3, 0x46, 0x0, 0x70bd27, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d4}, @sadb_x_sec_ctx={0x14, 0x18, 0x1f, 0x9, 0x96, "ef4420d221c903e5b66a2fcdace0a6b7e027d5e47a9594cb36c920aed4c36f9e81c7cd1cf6aed80fcc06ebc5c60a95fd3f8cdb97f1ee598152ad97dadb7362155bb8b0b3c87a74cc2509127c855b56cd48097e99f7cb5ff9c254250d1ff7e7b62279ce41b02759cddb118ffac48c300f8cad16c534b67579771f3a68b8e8d1f1e7bc93a5dd5f8a542743340e12dcad28e5c96368689a"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x6c}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd25}, @sadb_x_filter={0x5, 0x1a, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, 0xf}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0xfab, 0x8, {0x6, 0xff, 0x4, 0x7, 0x0, 0x9, 0x0, @in=@local, @in6=@loopback}}, @sadb_x_sec_ctx={0x16, 0x18, 0x9, 0x8, 0xa4, "826fc35118d24b92ada9ac0cb9e2a3529bb82be5abb2d76bd8515c4418b51f8c58dc777601adac67470606b85c976e62a366d5b9824042031ceebc3f1852fdce4446b2e0243b1df581013a970f3dc96fca467f018762a23c5b072befeb13ae5c220eac1c9aa5783e128250e5b8e67db7a33f4d9175d8c4c37a8d58c07aed210fd73cbd1babaf2dd02cef48d3f7bae35003777bfa52d5a96f8615c24b02381e9f83726c8b"}]}, 0x230}}, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x700, 0x10, 0x2, 0x1000, {{0x32, 0x4, 0x1, 0x18, 0xc8, 0x68, 0x0, 0xe0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@lsrr={0x83, 0x17, 0x28, [@loopback, @empty, @multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x2b, 0xb5, [@multicast2, @private=0x4, @empty, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @broadcast, @broadcast, @empty]}, @timestamp={0x44, 0xc, 0x6c, 0x0, 0x7, [0x6, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0xa8, 0x3, 0x4, [{@broadcast, 0xfffff5d9}, {@remote, 0x101}, {@multicast1, 0x7}, {@multicast1, 0x1000}, {@multicast1, 0x400}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xfffffff3}, {@multicast2, 0x1ff}]}, @ssrr={0x89, 0x7, 0x80, [@private=0xa010102]}, @lsrr={0x83, 0xb, 0x10, [@local, @multicast2]}, @rr={0x7, 0x17, 0xa6, [@dev={0xac, 0x14, 0x14, 0x29}, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2, @rand_addr=0x64010100]}]}}}}}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x802, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000a80)={0x400000100002f}) write$uinput_user_dev(r5, &(0x7f0000000ac0)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x80000002, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x0, 0x0, 0x4946, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xfff, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0xffffffe2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x80000, 0x0, 0xfffffffb, 0x4, 0x8, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0xb, 0x1, 0x3fffffe, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x2000000, 0xfffff676, 0x0, 0x0, 0x0, 0x0, 0x800, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@empty, @in6=@private0, 0x4e22, 0x5, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x84, r4, r6}, {0x5, 0x1aa, 0x2, 0x9, 0x9360, 0x6, 0xff, 0x200}, {0x3, 0x0, 0x40, 0x5}, 0x0, 0x6e6bbd, 0x2, 0x0, 0x2}, {{@in=@private=0xa010100, 0x4d2, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x3500, 0x4, 0x2, 0x8, 0x5, 0xff, 0x8001}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./file1\x00', 0x100) mkdir(&(0x7f0000000f40)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x8, &(0x7f0000000980)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) lsetxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0/file1\x00', &(0x7f0000000a00), 0x0, 0x0, 0x3) sendfile(r3, r1, &(0x7f0000000200)=0xd, 0x8) sendmsg$key(r0, &(0x7f0000000000)={0x4000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xf, 0x4, 0x0, 0x11, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x4e23, 0x8b, @loopback, 0x7cff}}, @sadb_address={0x5, 0x5, 0x33, 0x230f6f596deb1429, 0x0, @in6={0xa, 0x4e20, 0xfffffff8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffff}}, @sadb_address={0x5, 0x6, 0x32, 0x80, 0x0, @in6={0xa, 0x4e1d, 0xcb, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}}]}, 0x88}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x280000, 0x0) 29.598383255s ago: executing program 3 (id=54): socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x5a, 0x20000845, &(0x7f0000b63fe4), 0xfffffd6d) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x8fe15bceaa37f5c3) open$dir(&(0x7f0000000400)='./mnt\x00', 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x20040, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000008c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000900)=0x0) r4 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000940)={0x0, 0xcfab, 0x2000, 0x0, 0x118}, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r3, &(0x7f0000000d00)={0x0, 0xd17, 0x10, 0x1, 0x80, 0x0, r4}, &(0x7f0000000d80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe702, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x542b, 0x2, 0x4, 0x1bf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bffc, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000280)=0x3) 28.203815057s ago: executing program 3 (id=63): timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f00000000c0)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(0x0, 0xf, &(0x7f0000000240)={0xa, 0xfffffffffeffffff}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x0) socket$inet6(0xa, 0x3, 0xff) io_setup(0x77248621, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000400)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x6}) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000440)={0xaa, 0x100}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000480)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r3 = socket$inet_udp(0x2, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={[0xfffff7feffff7ffc]}, 0x0, 0x8) r4 = gettid() tkill(r4, 0x12) io_setup(0x2, &(0x7f0000000180)=0x0) io_pgetevents(r5, 0x10000, 0x3, &(0x7f0000000380)=[{}, {}, {}], &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000340)={[0x2368e8ff]}, 0x8}) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000000140), 0x800001d, 0x0) userfaultfd(0x801) add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 28.022637326s ago: executing program 3 (id=64): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0xfffffffe, 0x4) 27.962071001s ago: executing program 3 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0xfd, 0x1000000}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) (rerun: 32) pread64(r3, &(0x7f00000003c0)=""/4096, 0x1000, 0x7) (async) syz_clone(0x0, &(0x7f0000000200)="5c5b9a7b7c269de671284d25ef82f19bceceb0d7c83f90b116bdac8c6adafb3df69f07442c798e9ca1678a8d044e0985259661c7aa577749fe75c265cf210ed38faa742dd2843572a58382d6225558f6d7f1015562316ad78b33d3783ab0a38d21dfaa22dd2614b0e45d0fadf34f754d9937b9e5f8f53d681d11ca87545c49c799d1f65f8a444bfe2624607c8dd599a9213e74f7d5571078023537426b76be536ff8540397da08c768afa8daf64e1f95b168ceb5e7f7dd5dd2dd6b24190730aed2aca8af19912eeb43a0651560d991bf32d867aade5d092ecaf81fa9df2772", 0xdf, &(0x7f0000000300), &(0x7f0000001500), &(0x7f0000001540)="0e74a0af9032386d7a64389bb871c84c2842678dd8378280de4c06095408de6378ce2a6807a65fce2480f2dfc10f11973b5e43fd7b3ab089bf0167a8af780093b6e4efacc62d5cad4d18f0d336bed938c3d948f6cbe6087b1e2840fdc33daf481f1f50376c90276d052beb4792175b515ae430dbc6bbeab2639a41cb1ce327e842bef713c9fe66003ef02f0c8f041d5ea4cf1fa7b234e1496df3351ed0f5386506aa") (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000013c0)='./sys\x00', 0x1ff) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x68, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) (async, rerun: 32) mount(0x0, &(0x7f0000001400)='./sys\x00', &(0x7f0000001440)='sysfs\x00', 0x0, 0x0) (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000001480)='./sys\x00', 0x82800, 0x0) write(r5, &(0x7f00000014c0)='1', 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.859833683s ago: executing program 3 (id=72): openat2(0xffffffffffffffff, 0x0, 0x0, 0xfffffe16) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000f00)='keyring\x00', &(0x7f0000000f40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key(&(0x7f0000000f80)='asymmetric\x00', 0x0, &(0x7f0000000fc0)="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", 0x559, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001540)={r1, 0x141}, 0x0, &(0x7f0000001580)="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", 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000000)) 11.867734425s ago: executing program 32 (id=72): openat2(0xffffffffffffffff, 0x0, 0x0, 0xfffffe16) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000f00)='keyring\x00', &(0x7f0000000f40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key(&(0x7f0000000f80)='asymmetric\x00', 0x0, &(0x7f0000000fc0)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001540)={r1, 0x141}, 0x0, &(0x7f0000001580)="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", 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000000)) 10.907657143s ago: executing program 4 (id=134): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000005c0)='blkio.reset_stats\x00', 0x2, 0x0) (async) r1 = openat$cgroup_int(r0, &(0x7f00000005c0)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x88, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x0, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x3, 0xffffffffffffffff}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@binder={0x73622a85, 0x0, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x2, 0x2}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2, 0x2}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}]}) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000a40)={0x0, &(0x7f0000000a80)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro_nat=0x6400, 0x0, 0x6}}], 0x68}) (async) r7 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000a40)={0x0, &(0x7f0000000a80)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro_nat=0x6400, 0x0, 0x6}}], 0x68}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0xc201}) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', 0x1}) write$tun(r8, &(0x7f0000000640)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x0, 0x4, 0x16}, @ipv4=@tipc={{0x33, 0x4, 0x3, 0x6, 0x110, 0x66, 0x0, 0x0, 0x6, 0x0, @remote, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x44, 0x6f, 0x3, 0x1, [{@multicast2, 0x4}, {@private=0xa010100, 0x6}, {@multicast2, 0x100}, {@empty, 0x1000}, {@loopback}, {@private=0xa010100, 0xab}, {@empty, 0x7}, {@broadcast, 0x6}]}, @timestamp_prespec={0x44, 0x4c, 0xb9, 0x3, 0xc, [{@rand_addr=0x64010100, 0x9}, {@multicast2, 0x3}, {@empty, 0x5}, {@rand_addr=0x64010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x5}, {@multicast1, 0xdf5e}, {@broadcast, 0x5}, {@empty, 0x9}, {@multicast1, 0x400}]}, @noop, @timestamp_prespec={0x44, 0xc, 0xd5, 0x3, 0x5, [{@private=0xa010101, 0x8}]}, @timestamp={0x44, 0x10, 0x66, 0x0, 0xe, [0x8000, 0x3ff, 0x7f]}, @end, @noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}, @name_distributor={{0x44, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x2, 0x0, 0x0, 0xfffd, 0xff47, 0x3, 0x4e21, 0x4e22, 0x0, 0x2}, [{0xf, 0xffffff00, 0x347, 0xfff, 0xffff0000, 0x1, 0xf, 0x7f}]}}}, 0x11e) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000455000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="ba210066b80a00000066ef818195fd00500fae2765f30f083e0f59b10f00ba420066b880fc000066ef6766c7442400008000006766c7442402da0000006766c744240600000000670f011424f30fc73766b9f20b000066b80700000066ba000000000f300f0fb50080b4", 0x6a}], 0x1, 0x9, &(0x7f0000000140), 0x0) (async) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000455000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="ba210066b80a00000066ef818195fd00500fae2765f30f083e0f59b10f00ba420066b880fc000066ef6766c7442400008000006766c7442402da0000006766c744240600000000670f011424f30fc73766b9f20b000066b80700000066ba000000000f300f0fb50080b4", 0x6a}], 0x1, 0x9, &(0x7f0000000140), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) lseek(r10, 0x289e0cb5, 0x0) 10.291459085s ago: executing program 4 (id=141): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, 0x0, 0xf04, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xe4}, 0x1, 0x0, 0x0, 0xc054}, 0x10840) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x81000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r1, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0xa}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x600, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x810) r3 = signalfd4(r0, &(0x7f00000004c0)={[0x9]}, 0x8, 0x80800) r4 = getpgrp(0xffffffffffffffff) r5 = syz_open_procfs(r4, &(0x7f0000000500)='children\x00') r6 = syz_clone(0x400, &(0x7f0000000540)="c0232d52549aa21355a8b120b3a03d3a8eafa2b121a8ac53570719762d03f9653d09d9d44093085a13bd0a1c630d8aa30e4a621cee96df7020ae8eb2cf4b30c5e309e24b", 0x44, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="15362e1fdcb641b1c102a552de2a149c11a25a0746a18d6f34386084f9966d818bfa04f6b68e2b2893cef510516b6f8b613ea08a45d83b17d3931dd7743b55ec07a448446767d822c49f744f7e738f705fef7ef9466ebf984a430fe18cc3ec6ad7a6c90c5f5fb4be3b34a9ba30886f7da79706bcc203e0bfb82251bc5e6ff9ddfc66dd825ebbe89600f8f2618b2e102503f457da9da53e99de8b") r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r5) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x1c0, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf2e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x855}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x42}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x19ce}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x80}, 0x2400c011) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r8, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x30}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "24b0e6c0aefd1cec", "647f611acbb4cdd36c68b490715df72a", "1e982174", "b8fbe3aad5451f36"}, 0x28) recvmsg(r3, &(0x7f0000001040)={&(0x7f0000000b40)=@ax25={{0x3, @bcast}, [@netrom, @null, @rose, @default, @netrom, @bcast, @default]}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000bc0)}, {&(0x7f0000000c00)=""/240, 0xf0}, {&(0x7f0000000d00)=""/41, 0x29}, {&(0x7f0000000d40)=""/152, 0x98}, {&(0x7f0000000e00)=""/30, 0x1e}, {&(0x7f0000000e40)=""/68, 0x44}], 0x6, &(0x7f0000000f40)=""/255, 0xff}, 0x20000062) r10 = syz_clone(0x8820000, &(0x7f0000001080)="298891ea1d2e04f685ef05ab7a16490e88bdc03c037de585643edf58a7faae4d9577f69076403b40711e9a90cb66083f6a5842a07015f9a4f6683704338f240e7c0dad4177784542c4aedf07da2f826f141750fbeb48bdc92ad458b0d6dac49fad5c0316f0e1d99dbc65e129952611e355e9f7d8b9b23facb46d55768d4b46957d3b7081290904c67cc273d40a48ae57c7b79729a067ae8a2784c1ea09c5c2921b8ddb4806e3d6436a4871a996b1583f970dc03f2121debbfa721188dc703a8f39a4995f6e9274f2f6c560", 0xcb, &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200)="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") kcmp(r6, r10, 0x5, r9, r5) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000002200)=0x2) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000002240)={0x43, 0x12d, 0xbd6a4c9c0a5d6edd}, 0x10) signalfd4(r9, &(0x7f0000002280)={[0x68d0]}, 0x8, 0x80800) ptrace$ARCH_SET_GS(0x1e, r10, &(0x7f00000022c0), 0x1001) bind$tipc(r0, 0x0, 0x0) ioctl$int_out(r5, 0x5460, &(0x7f0000002300)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r5, 0x8010671f, &(0x7f0000002400)={&(0x7f0000002340)=""/173, 0xad}) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000002440)=@dstopts={0x2f, 0xa, '\x00', [@ra={0x5, 0x2, 0x7fff}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x40, {0x2, 0xe, 0x7, 0xaa90, [0x5, 0x7, 0x2, 0x8, 0x9, 0x8000, 0x2]}}]}, 0x58) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x40, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048800}, 0x20000005) ioctl$XFS_IOC_OPEN_BY_HANDLE(r5, 0xc038586b, &(0x7f00000026c0)={r0, &(0x7f00000025c0)='geneve0\x00', 0x48000, &(0x7f0000002600)={@_ha_fsid={[0x8000, 0x7]}, {0x6, 0x9, 0x5, 0x8}}, 0x6, &(0x7f0000002640)={@_ha_fsid}, &(0x7f0000002680)=0x8}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x4020890, r9, 0x1fc64000) 10.098205894s ago: executing program 4 (id=143): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000180)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f00000001c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) unshare(0x6020400) r0 = socket(0x2, 0x3, 0x306e7b8a) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8922, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) mount$bind(&(0x7f0000000180)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f00000001c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) (async) unshare(0x6020400) (async) socket(0x2, 0x3, 0x306e7b8a) (async) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8922, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) (async) 10.021327092s ago: executing program 4 (id=144): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/sda\x00', 0x101042, 0x5) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0102000040003900afc3000000000100000008000800ac1e1c1604f4f092cac8c3ef0839d49736a8874d16f8cbaf2169b21961c87e7203cd125bffff43bbc918a453448ad37b58ac887accc4ab2d"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000680)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f00000006c0)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r1, &(0x7f0000002e00)=[{&(0x7f0000000300)="48ee71665dd18ab2083e98c7bcc4d15d95e7e2b56307c91308fe11c156cacda759ce1cd6ddc437985d4e4a69a4dd3a0ad541e3f6c0c94a0ec19217e8e8d563f3450155238b328149d95fafe88d39ab5c245e860bc30721b0bc5ae8639a0901f5895ce2ffb527eb396acc342442a94fd0981b3b6e380135fa808880166e3a137cc64dc00911a9ccbc0f0c3ac7eeca28d6c909be2ada15fea871bd3c68ad491df4dde00c63dc2035b312b837541f6a57ed47818fd0713874dd0da9cbc022806778e6", 0xc1}, {&(0x7f0000000400)="359e2ae8f66dd1a462dc43912ad33905ec614db033fb732665c274d2c388a9e57ed28ac3befb53d093060e3b6650a716addd5b62259d336064d71ff8fc23341b2be37dde57a5da863c6236fc386808ead8074be0bdc290f1c56adb9c1ad08add2aa59b234c2a2a7f5735aa2e354b2ebc1c779fb066aaf171aed54493caf5", 0x7e}, {&(0x7f0000000d00)="d82d60b53862a442a80634fd23b75bec3de2073011e7380f70eefc75ad04c2b71de623ae9ae0f5c0fc8dc419ae5039a0f87a60cf35899662dccc0d7c6fd4045b7e23f9df8312229722ffbb10cd939dfbc02bc89c20790a266d2282a1e9cc1ad8712e6fe726a89e5b06ec2219be97b68702cc6625134b236b9a7959c81d9d6e76153b96aa11626be007c1c8d784f39eaf89f2878d50d6259522b1cc5408288d43cd486f39d2e0f05154b574eba5d954268c3b2e191ac9196b6e3707b14dccc9feb5e3da06bee3ed19c9f1c9b174213f3545c9dd8842c2ecb171367ee827eca45b997fb2ec1f8bacbaf24a55e3e8b992ea52076d461c7e017978d4af87e4e577f84282a4c94cbccbdfab4400569860a849a872e18c28cd8801e56a4f226e89152d77efeb46c8d9a4fce0ce84e3576368ca8130ef22c05c37c08ea4e69236852dfdd890d7af1a9e2e739de6a14f606595cda68de48cf76cfbf8fa1645bc65f01fd07d0a04284b090643d2c947e028f58f21f922ebc9cf8a42a85dfb757ffbbe4ddd733b363259378dccba6b1174048bd56fab0fbc1e2a27d1a6f3838716978d04487c460293c717c4f0bdf97bd5133202a34276b92c763b8e3a6e489354f808b6755c404de7516fe984c25c7e88401e3e027292f183d27f066e8141d89c0ff356de5f2ec04b5ae624c8f5026151222cd906a949b3ad6046f16e2fc40ddd8ccd38647416c66999ec110787b33a002ffa925553a4a741fcac20a3ffa341238ab38b8bc686c98767af0aeb38e1a3b72a59621c7857adadd7ba9f0fd77de8546d358e0d65a57c1a4d3fb36d6abcd931c1f2a1a59c88f682a18b4c03b831b197baa3c66dfa07431dee9baea4fe2e136974c1dd5cb2843a161083187632ce3ff4e5ebadac071dd085a9c54b3f35211524cf345e4558d40b6bbbf09a6a98c8e7804908e75493a5ef40314dbef3a6af9455a93589c57444e2220cd13d32123f9a64a22d0b73d1b15ee0d414979426916152ecae90b841c265603274da83fd1c259c26ae95533d083d02e53d600d2f4a185d90ada3e0d1e7bb11217f7c477ac1576a79b06fa74e1883868e51974624a3b0b3b7e1f4c59fa32fe033b358803e8f6588ccf8f948392daa6525eac6ea94c855b645cae8d155a30f0b4953607c22b6cacaa4cfb4fb9c2b44cd39837591592c60d10dff20e015d3eb98984eb92c421a44be1739eae3274151433e6c6bf847b88749f763ec6edfdc936bea779d940e4d5182f28aee554c9ecb03f0b480f844b6b197584db52eddf74090e1e185d9e31cb44ba9fd3236d62f83250ae96338513a1748e6ded58de17831e6ac2d45b90aec6bfa46c90506d0786c2e2b131510fb5920c35a324e0595bd7a2d6a17bcf4909c115d10398c03f478f4bf98c04194ee0f902928fb1e4162fa27672ab6e45491b760b0ea95f61f26d37a8228e56f3940f5976b9d7c53b11d0744f9c11c8b068eb7f8a8bb6d575006ed8a804f1c381bdcbd18a5a70bfa6bda2ab07ce52b58482c6d6564a99ca848ff16ee69f26e1c567f8408ecf77ed55d4550d8a5132bf1a456670aed9e466494f7db3c8585a95640e07d1a73b9a98e3e88ce824ef05f106a9c89dc12fd82efb2f5a963fa1af563d675b1057cdb54a767acf94ca2be8fc358762d0a1ecce65b1bd459118dd0954eef96bd4e753e4ba3cfbfcdb224b057ed1c6a03d2d2ebac4cd095249520825bd143e71e55e0bb2426b88b0b8f7cb2448a47de3b4e05ae07df5622664224f3b556f216a5c0e0926e7fe4d7ffe4b0af332ada5cd690da320f50b1e7523a59b5e8aa8b03250c0ae6735a6a6309f6875466188279db5a3998a8ef25637be7190e59b1b298f00ae4574c2698126c4dbdf529a0353701593e533c5e3874172d96ba4539879245caf5124c7c7930bb2710e96eb59717d6ee829d66252476c8d667f7ab711548071ac2ce930c033827bc6f39dd2995d04505e76cb2f1c86c3334a838b749a533f13f21dce554445604b4ac4e7b71868c407ba94b90504392f1c6852533211c84d6fe181eecc770efbff2a9db89c1900ada7b65ae282eca101110f0911c4f35d5f24cc935d71b2bac2890809820efdf9138a0486aaa797257560f7f30323dcffd8fd2a7526436bc4d63f72305788e3a0fcaf16adec4a555145b24ee9a136c7c14741e76b9079d31291838e686fba2b5776f1f53d4ec7a2ae3d037229a697614dc999eb56be7ad85e2dda95131ca4d414ea94e1a1ee4501a10072be67d36be8e45c82b823a727ec1329c7f574d9f99cb3ff3f5b58a096ba34daa3e4ff658a8f58cae418bfef018432bbbc2988382b200cd40b0d63025e312f0c2a80b8c71f80652e9eaadf2671dccf31db019d490ff76129956e8bd852e545b456ea71b6bd1f00a952d722721ee95936b96dab117d777848fc39d5e8281be4c2b45775232caa20d244e340f3d67b7999360014fa187ecbeb1054a4c248a10d40f23ab75fcf6659096b47c9c1112266ba3f9cd0ef48ab3fc08ae9e8dad7f0a155ef0c7b9546825f75e3f2fb581936423c67fd546872fd77fe6460a2305d83256bf39bb42573f89d3cd4fdb77faa50535724cea6625b1544f2a9e4cbc4a3dd0eb24019c0688bd64e70f8ae1899ec82819f5b7da1aa8101b65d6a25d918a2465136cf63440f82b9df14cfddc28e573cfad433293b60edb21d1e7e8da33ed157bbe13d4d1f234354af1d725072356bef67e3e809d352ca73008ac273eea509f92e320b36a5f0e1892bbdd8f68353afe5e0f82555715d002e9c7f817cad94d45645e6ad28d86222c207e9e5192316b86b9e5089b7f557cc79be7130bbbe60105d3eacd3b98b89946baddfdd2e22fa069e01589bc7126e78283a50c40000cec55a51732281e002f110f8afb20cc8b551e6eca0707cc517ae4720073c4ee58e44ca47633b710f196bc04c9ccb07be23e30845be63fd2dc3137d0c27415ba86f06cfc5c45f27d1ca4f4afe421d1f1b0f3078b33e248071595c2cc2ed87a68a52ef4dd833ee351ee8624248f844d5b652fbc4e7e4c537c30e2ada20c119fd1c8a310579fe465ccfd2d22b7ba6f9c54c1e072f8596865069c407684f340f144ec7371cffeaa24fdd3f3baedf8332e62b16811d22f6378010af9d95886b1921971a1dd4b094ed24bb0bdc68f98098315baf290711f210356103823fa612e7582b8147e767c8d1427f14d821984d2c1fe2204cef9f09ae61029b80f585434e690675ef4c4258330d7ddf8d88c18d27f6821fb82e910ae0dd935d8a7959f4d997f4e0d146b9a107f5aff1c1df2974ea7d32bbf9be537d63507b178827ab6cf16fda06c4f05947e91b5ced297c86777f1b2cb9916d89f55120071a757f1b792c05f9f30fe1ce924aa015b7dbbba2b6e072fea399317a302132ad81e5da30bd58e70613d61130db70796d46f6c81705cec16cc6da846c9ecceccf1ae8171e259bc599effb15e1c5a046b8e59a45d947e217ae3b49c8bc4b6853ea5e30f20c39b91c0edd5cd243f2598b8f93596caa4838dbbffe5708b8f3be188598bdf987680e3b703d06e4e84f4f2f58b458314d2873698d9770bfdb5fd2b4954997d8ac6ac10ab4fc297b219a405461e424bcb35e39c1bca66bd04477bdb46a8dfe19f852f9d59b5675fe053e33b93fc62f82634f1e0caebd4c7f9743690d4d6c6b80406a30a8ed5319286b2726feea1f733607889b1469d0a4d648f51f0b89c51553cd5a778fe9f213e2d0bc773123082b6e2ecd85f4cb4be9fc924f1f1fb7c40f0bb2def5c5f1436dd094b5b1305c09522276fbc5070af92c2bdf94d8ae3c80b3f2ff6851673063869048bbc6aeb70e65d6693b44a6d4ca58ae44065611a015126d2360ee7c6a9d7921fc9a80773c5c9089ea411f6f7efa9234b7193a1c89ba7d8a2db4355555e0f3c106ff408deb57c439a0713d4a59876c8c7b6e9fb8e3501ca7754c3cc220c4a460aa7dafafe3d0f8675bef40ec1136094c61592a50f3ff79ad17cc8fd0ebca8b1c65219c78c036f6f79a90945584b45d87f0157394ccc1f5c5a54a97398df694b4487885e812158e03cd6c7a12c93a42a8320998298a7b15087945f1918a492cf73e8bf28cdb075dd6e0f540f99f9210a4fdb18a1a9ebd818552f8657ad59c8293ad9a34bf0189932870ad5c3881fb01c14e08062c57d420fd9f685b9f1dcfe97563b8b0259b65fd4a6a6e737e20c1d1108599dbddc92c8d715f95413ea9e4bc27309ea67bd97bd0b51413e3ed1003def3522ddd2e091236d14733281573551bc310378297637072848ffc85921c3065606fd3ec0fa8d37ee25f3c46c73a449d4e522bb5589e8d95f5ef5753eafd7a9d60bc02c19a0e24c2f4a104fb5fb96e085d3ecad4b9f45d5c23e550a83fcf42d33410233a12018e207e5fa8cc04928ba945c74f44cc5924f342ee18b424c10eb660141b3d2b21a9fe2a6e9e672f0ee2b56442725dfa1dbf27c866b317be47e619716eec405d1ad9214629dadadc40059025e3217ac9e0be4fe4c461051428220c29e70697821b6d09e392a146498bab136ce874f6f03bdb1a38862a8cb56fb296326a72c439faa0c9ca94e1ee6d7034b4b1cd0cdb0ed5f49aac4ed58a0c8a83d14e765fae6e3fd887839409e9e5308de463a9136e29376b44adcd0c4a331e9f70eb67e8d5cf18277371fce153c605a2c0be1c2682a31e0ea9e81d93e32b9192e2e154b84d557da0fac956ddc3ce88769c8a0b3c8a0de6aeaead35b0747a4a5ba2cf6668e76e6461d789e81ab60e10c313ea3350a12579d5b7d0ff8cf3259bff1814b456f8382c65cc689f2adad4f9756f50edb3cb110c1a115a09bf7a8855183f26bd6cd351f9975c4f94f6940388d3028e92fb55009411c0cbd6be305f90ad8d903b56c6378be683e52f6baa930acce654a27cfea9a7a970d7400cb41f83ce53556680ae816b40d3937e77cc070e9ca9c4ce6d0faf414887aacfd5db8dff80d9a273472779bc5779eda4a4505f991d277ed8bb0ebfe7d300f830e0327bd0324f327bbf3fb60d6858d416289b58030814e4a4181e61350561ddd0706f8497e6b34657f7f44bdf9b80097d6ed28d004dba237ffb2416d14e661eed3abad3d25769feb7d86a93101d7fe5e05dd5f7cf562eb2f6f8f04adee6f667767dbcd23e863383be2f6059f8f8b8070d46542d6a294d7a4079bf96c5c26babcff315d85f86d62b53af4dc935cf0eb26f050f33f66d756de19226c7af45bb41903d2653465c1712a1dd1d668ec4902064a2c2c2eb49e354df80231f6c8f29720de3906b91b12cfa6fdfa8105395c3df75b73bc2f23932a5c7c47acc3083094a46862613fd281e18b10eca2a78629ea1859ab21b939fa6ccd3ee1108280c3c3e5ea9b88881a5470e85703d2a2cf1b693a97729ce16f3af37b762af7b811790ef0e92ee0b1a993a8f6768421911fecff6bfcedddfb94c98705332f6da306a37ceeef76b6d00e18c30732e5963ff68c1fa28c71feb61c6cb0302160191fe64cb4ce23a90e4974041869bdcc808624258f348da33c274ff444fba40d28e58a2d0d5aaf061e5c04d0a92328ddf2d47b08bb27983b1ae4eec10e167ddbd3477e47c4462e37f499f992cebd6c8f08b3976cf936c464b47265a464a735302873c36958fbd67c85ec2036ea7bbd7b84f8528f7c8ace8b889d101120abe2af0a43a64ffdd8ef03f90db215ff012ab1664538cc2ae30da89aee6ffa6b114161f5e3c492e756fb5ea52c9212fe2139a259cfebbe16ba9f93cc34577f9f98", 0x1000}, {&(0x7f0000001d00)="4c39dd8f6a06d96bd9c7a4905b865e40abc64ab0f66daa9ec97c46e08fc6707836199a98fdc9b5cdd6092ff0bc77aacb331aa57ec633f57048a385064eb71de4136f060f2ea6b32f02db0f936c241cc0f0a5748e1758d9293ecbc24e5aeba4dfd1dd4203963a85ecbb938459c47ae8ca219d8ac4e348d8d62237a708a8d66a4b06baddf68fd346793f5b8dad8b9c260dd51f7da6ca238db4eafbe5c23e4d703df723fee4601291879cd59ee0479e3acfb8ff44da2c6018532880f8daf116b6e8e01e0d4b7bbc2b10810b72c65ba0bf4367349175ed29e2435fe409f41823972b5ba0ede62eb673dd00b0e12589e217c9e22cc7993283278c59cac760f7246b9822c283dff4f3a64de84626269d923947d7a976d4ebdec2088e6cf1010da3322149dc5bee1958cee9714b5dd2f07b6818ff5f03b2f1a8eb6e06d075fc2f9d882d4bf7de8b6862bb7d8a9d136e5d518ac0b42fd940a7a142959e3cce8a09961bd5d169b3657745388ad3d273b8c5de0c35ffbedcae0083188081841b898df4e88cd0c51a79b35affa8e43bfbae3a8e6ca94193da7f8301d2fc95ab0bbeceecb645f322d44cc97332d728ef144f7f0acdf7621cb23271044eb9d6901a998454c62059e50d9f89327f7458f9291b03ce088a63e9da35e3b7d610ff43198844367407c1aff8d8a3251e7c3df2b3c660a82c4bc3c89a23ab926ae643a415895bb90b8b8d4b85c270af0813ac8fb4431d72a963ebb13e0dad807c435df967d2084c9c7dee26a64fc3efd7d0bba46bf32bbe09775a15063efcc2f3bd596cb66e1351714cdd92475aad504e170019cf9735d2f757180a0e982afc2ff0d40a3cab26a0eed6f992bf4447800c1c5d42cd291168d6c69b1c1aa9d222e402071ab2027f3657424e9956da77b551ee89b075d80137bf1ca77643e1aca8ca484b6a4149665873801947a208253730d5d7a43f77e2ebada6ea67b0eba4a29c70a2eb3e6e3a23ea9fd4a420486df6f10a4d5beade146c1fe8bee4a9f1e86109a2acff01d2f16d190f4441e06a082930156b8df0a5256a4349263e55c2fc31da097722b4f113d1e6236ec1acfb353c1907bce1845c279588c38bd226b22388023094a46aa659d35b8a82f8fdb9c9d991fe4fcfc0c272c88f04b27f9b9479a63237b5c5988416c3ea651848fc34f56fa0f46d3b923f512a1b5379a42c79ddd5dca7e1c879c6bba16b1a1a9be9028cd0491736fb30da3d60e8c5807067aa230a899a884f43dacc438a20a3f60b3402a00b564d64eca37ee84f57a2524b4883622458beffaca57589640b138501ac43682555e55fd99f9af01828b0f3884aa968ccce11a62f480efdc17f109ecd2831dc2d6f4315a3044d4659ea5db15320cc8577728f68e477d2fcf9f0aed85d5c4be70aeedda8ae3c615e175ba21fc0636bdb26c5c1774bbf92dcb0366bfa8b1f352e0802f88b7133fbe1c9484020f41e0084f6f097d67a09b1eeb6e2a89872b0e4a2fd5b29bebf6d74625dbf735c2de070a0e99041695804f8e6cf51b3aa583fba97226f29688cf92d420eae2db36ba7c75f56e39982c4edf85db6a99efe669c29e6e88937960b9739640456cb58a997830814a7119dcd3926daddd6ec26c02a99fada453ff4426e99d6bae536a93507f6f65e65c203d3fff5ef342ce9e9adf998d17925718e96e2786de17d15211e2ba87358fa5f220bff3f89c711ba6f38cfcab6842910dfcf40b1e5c45c9b2a479f4a15de3489f518223aa589a783b48bcbd61d7301220540e6af9218a066f2b90a04153056581ff11494d5de31a24427e59a9cb1fe6a00ef2eaa3f839a9e1ce52fc2d29fabee37faac57e6819ded60686114f18e434b82b58e75d0d775c7528a5a11ee44aa5a2b91b1db8e71a20054c7360aa1b5551d310e7e6e3c30f690096d547194a09a92dd599fca13657c70daafa0e4e06612c51edfeb838120417bc5b089252c177d2da13c656a94ef874ec812737014066476d1604001b6de8f5688bb39d1cc32900ad7795931843bd32d32de2a7797ebcba05442252a1042add016638ace75795bedeb545283e387fb19ff24aafcf28a8ff690fc495f284f478121195bda54500d7953ba9c843b056753a65e4a3f556b2c997699960b8afc2bfacffc0e2dfa763200cfaab66f139d2c26689efd732a6a15b631bf8b05acfd8e242b8fd14e676ac2a59a49fd2c6bbe93396b44170cef41e3c1913b47f3b0d0de4f408135e78c631dac30fa888b6ec0854d25aed5421cdc22520867f20ff2e913c2c0b83212316677cc69f0a05a1f739cf01b29a3837a97992604115581935ca69c64f8af25dad1fee9402790da3964c9daee75952c2387413bed0fb1c7c85363e47ca983135aa447cdcfd55927d107923aaec776d0f33c5bf996d0a69b3f32698698d9a58acd7b844d64413b82e1bae1ac37b28c71b7feb1f2f9828eb788395353c296a7b211999b2dc4c923233dfe3b6e414cb356b5998f02bbc253733e213b1189ad55409dbb2e2f6d758e853fb6e614a7c895e0a71fe7c097b123245091b34d44944770cc25ca38c131ff15cdbeb8fe5dfb5a87d2917ba274dbfae3f0c859bd800b8e2deb24cbd9d9b476ec7c585492da0b57535a8d8622ed16a91ba40f2778072fb3eb72733541441dfbc8ee248c58eaa653cec330d177bc979be0deba12b8d64aeb75232585d020b0683c0231490605c60da0b31e1c819fcf9d61b1ae2b1b6448878470cde16ccc9fea40386b53b7abb2b424c9afc279dc4d449557c7979ba803390a718dce3953369bba01bca2443539bd86f0df40a32c50c4bca32235a65cc1d7b888342c522e5eed23a60f881c663607bbb975106d8d04cbd902cd54c32a7b1d7f8845a4677b14f4d7af124e6defb325ec2b695b827292a09ec8ed87fc7832970a59030dd315ea3506ab4caab371ef903afb5b1b5a350a9127641540da17b8d5aed8e00acf5c115f36e8571c001cca4be49917bd417270bf00e9a752248fe93951c98d8e55cda386bdb9d0358f1704a3de5688296700d022a8c67d49b8e8bbf4ba3986d56bc0bac3079e71f37efced56dbb706e6170b67a3190de1808a873aad9a04d1cb4d7b275b0c2237fc50ca3a8ba3609320ead3bfaedd2a4c2d1470ddc5e68a407c2b6a7da86309f3b8b3c44b87b3a20bb3d34aa8b72f16a758073de45e9857efc981cabd2afe206cfd241bf2edfa3fc9701962e025b67609f304c6e94961600143df43e72b9ce19408038ba04b11bbe33f3a3822b0340a1898e747953df267b0b7bfc4ad158158a999beae04a34e090af50656a4a2bd3fffa06d4a19a2a2d39688e024582ece25a0848226cb0e8b4868e2c691b0849e572468a5ae710be89fc7462ab700f5ffb6cfbcf9ed25cae170b14d2507f0c7d74f6d1e79235f756f0420c0eb98ffe5f0667e7ba6b34243c74cb4284a46bb9db4d0f82f73898b1a41ff83dfbfcc8154207161745b96df8d08278af4b8642543ff1b49b003807d25fd1796d46407cf879d01b6a517bac3ac88165cb738c3065d871e1bac8efdb0c1abd828dbd484b3e5ba6060ae5dcd4b8512b774706850671edcad4c87626ca2765ec821353cb94c205e22cac19fb77a0d1211237a1f2d877d8363792fb007c4abbd9f8a1c9271d3dcb1f0ac5dce20051b2ed2a853e410896ab8a48e50f67f86bd2b83355d246443c748cdc81b06a351d55b17e30416e4ef32309c7a64aefd444a96d0ecd05eda868833b0a6915859d35d3752fa4ab9bd579ebeec3ecc342b843023e47e8463103df77323f9209069b49970ca207bf5f529264a05a658935f89f01ca75783855ba6f2850becf84b3ed46fb359bdc451308c823dc7c3860445d0305795b5e0c25beae3fcd050d9c708245c7b8540fdd5352a784e1a4a6f8dd3af7ee50eebc778f2870efcf81199a87c548b79b1be3fe73b28ccf29be1ea36987be589e382c1ec90ab744014a99d529df746d7f1e90c09fc67294aab4fde317d7c6098538d4fe59cd6eb86771c2cf4fb8e784ec8535d673a2902f35949b49ab27f9d731d9b291ea13b888b24a2b26be86d81fdf4f34fbf048af93e52c1cce1efedb3355c5ac347fe108c13c4a47def4f4956067a102708808aba924c498dd9ee97c6c5e809ba0e67d2d9f76786fc7a39cfd3392eda84da07b2fa3772c3676aa90b566c0753009f4e23f84cea89297f5e6d1439848a1d1536e0444aaa7491a7bd4abd0e7b9fe87c51258b390d83bd73290fb1a108e3dbe8b223c13269eecafc267d93609c462b96d51a1bdecc95f022cf1776cb9a37350e348f3bdef42885223497968bfc917e0b6990483d53103c811526830c14d83b2511d3ab8f8ac5ad1ecfc2f55d6dc54e13d984052b01506799f5290576f40ac512ebfa5d0aa223aa29a4bc395076a427e21a20e4635307a681e5379155e78e037986c01735d8ac041f0e5fcb491f2a30080c25e91b091460845cfd00c459d77af1cf7b94ef8cf45484b4fb06f69097a298dc5c3cab3fa917aede0ac5986d3cedca98d18b7d86b77c7c01f6fa576e8cfee91ecffbc7ff8ec90bbc7e666e500b6ae58e805494c64e3826c4a904e52654e8f89bbf14f5f03ccdeb7a1b820f09c559a5d3f0e47877d9b8e8f85a33961f8d46ec25aa97e42c8a7e33b1bfed5e80173c21c0fb64208525294facc0331e221ebd91b5261547cbed74c3f7a34bef49c1e3ae97ebce1000da148251467d19c2f59a960ff5d07be0638cb6422c3e7b9e6b9b833e51d21f7570de3b49730f1462bc83b89af9f6561b3bcc277e3035eb0fb58c630ae71280443e3d3ffdcbc175d8a87a9325fa012cdf75fea1175436bc332b332c703670956be745dd01bd965352a8bc16c8bb020b0cb8e84f132d49cf49eeffddc2de5096f4f344c92d7c7de334965a8f05205db01f392365e982f4ef4abe4b0374180d4d89cc70b9f870b4c3c8145269f51a931838433e886f1aaf7ff54d5d68825651603e7e15bb8241e06a18c4d4c078ade84bfe7454f1b8cb936171a4674e9e20e10aa793f5283f072cf4b281b78a45b8484faaaea587bdc1f9b8a83f33f371f971bfbb5d95310eb4b2c68f313d35d42325db94bd4d3e9102e785fc9edd4dbad1273969aa60b333d68cdbc1ca02709d59309fb56693ad52bf3eaa4b98cbb848d5d8eb7fa05e00be15bc327d8ec1f6f45324659080bf536581d8d54e13ce8c67d08a8bf18c94ce640cb2a482813f0cb0756171e5d3813a0706348a5e18bba81026c5a42fb6e28d0c4c7ec07471d01afda642a49e9b752a01bfd164713810e14f1d55355c245932c4b4cc13197ac658295d341662e950cdb7f9350d9a420522e4890a1f0d8cc8f3837610401697e639c5bf01910a552cf3c547d94da6068e6c92042a6f037bf055e8b22302ed6f8d851d99e8e098719eb1a6a6757c001d66460a994c0e9de3d56931c2a71f0d9037cfb285ee61fb88480f4d90c3bb8be9d71125b89b9cb54ca64598c4990712428b03f751b553c4e8de117321340df3fdebc26c027ab5c5deb6406e86dd60c8082980df5d1ca3d9f36455a4090505f3603c59e2c2632540a4021099e29a9bcae8aade81374b6aef7e43d6fba38751101d057d5e8295d6e2c30ecaae171a9647e2d055a1067de0e0fbdd60be42388d7601d4db010f2686e2dcda73f5c335a90deccc35db504a35ab5bc67086fb71ff3e4da7368e99f39ffea8c6518a4d4c87b55759cedde79516d8f6dbdb20cd455a2f1575a8181555f5854f1f5a6f422b0ee40195948cefb44aa927e1", 0x1000}, {&(0x7f0000002d00)="a26dc03973019e2be771ac092b97225a693e9153865b619db28552dc6b4484e1419c6d6bf8ba2504e62de01043ca512dfadc805fa950be0e049910093e5f112b260aab7a912923d85c5de7b9111d199f16e78eaa88317bb45125646a667401673f86a0fcfc9b7a501dd8006e25720a56cf95363195117c079ef7e38de3941381679639a83564afa871b514503176ac877e491b128ea3d78e224a3d7671618aecc1662e139a182b79f2fc813efc9c767a74b51b37f7c92e2675b607a22f3ff4cd9883bcdc78330666dc3cc13f2a2a7d399ff4817e5a57acef0bd87380e3", 0xdd}], 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x101000, 0x1d6) write(r2, &(0x7f0000000140)='e:mygroup/myevent sched.sched_switch', 0x24) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='!:mygroup/myevent', 0x11) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) socket$netlink(0x10, 0x3, 0x5) socketpair$unix(0x1, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000540)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000580)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf1e, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xecd0, 0x0, 0x40000003, 0x60}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8f4a, 0x1, 0x1, 0xfffffffe}}], 0x1, 0x0, 0x0) 3.699159154s ago: executing program 0 (id=178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$setlease(r0, 0x400, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) r2 = gettid() timer_create(0x1, &(0x7f00000001c0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f00000004c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000500)={0x0, 0x0, 0x3ed3, 0x5}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000735, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000540), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000580)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000005c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000000004, 0x0, 0x0, 0x100bff, 0x1e, 0x0, 0x1, 0x5f}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000100)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0d1, 0x40, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x905b, 0x800, 0x0, 0x8003aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x400, 0x40040001, 0x3cc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x0, 0xfffffffb}}], 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x101800, 0x0) 3.415866433s ago: executing program 0 (id=181): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100181acd840f60d56004bd20102030109022400017f00500f09043900e87afa712c"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000140)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="00006a0000001498e6d5b724231654361cfdf492b28b93ec19e7cd70cb212f4fc3962cbbd22eb6285cb5a5e497d9569160be3d5dc88056ad08d1bba06754994a87bf6744b0480b7c7e5191e20f1c34a44d6d6f0d33f54d6b085e92f19d02504d980870705153b219076997cc187de731"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) r2 = openat$cgroup_int(r0, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x31) 3.239703091s ago: executing program 2 (id=184): close(0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f00000004c0)=[@request_freeze={0x400c6313, 0x0, 0x3}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000680)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000006c0)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x3ff8, 0x1ffe, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x6d}, {0xdddebff8, 0xffff, 0x0, 0x3, 0x3, 0x3, 0x0, 0x1, 0x0, 0x0, 0xfe}, {0x0, 0xffff, 0x9, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x8000000, 0xffff}, 0xc0000021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4]}) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000800), 0x109102, 0x0) writev(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000080)="3506e20360647b84da5da67a66fec99eaaf16984f4ef7f6a3cf410afae0be6f5a895150f4fb5d74cc3e1b08d22aef0eee2850ab3d5b959d4853654d5", 0x3c}, {&(0x7f0000000180)="d841f2349c223382461ac7877bab44bd8d3b3c2959e0b1874fa879408ddb0cff32992d2169ab397a0b0ba19a459ba9c537480d85de7dffae60374162dddb6b0b5f1a7a0a30d6bc3d1393062acac61eb84ac500", 0x53}, {&(0x7f0000000500)="2f76324a9323a2715cc7e2b3540d6981a135b69da12f1747fbdf6d9443eae4afceeb09a453289c6f7908553a209cbe", 0x2f}, {&(0x7f0000000540)="4686326105f24dfac242891b3f1c85f0dc91e0a26792006ffbce9d48d75e7c0f1113a3cd8adea47b79124ba9cd6d6f29b319ca70135d49571ab0e6f8ee48995d204c0e7dc22af84bb5194684088338b39da41ade583df3d6e565ec7c8cfe2c8e1c79318a6d2fb27fc6a13d83c8dd45f378f3deb4958f03df943caf88b57379f80fbe80611b32ccf79e4b6f411c1e8e8d82e6df6e3875d72a07bb01aff744b56cc6cf2b826b01ee1b62167dbfaca9cd3ffa4cc12f9a2ee5539a6c9a1ceef1de470c93faf6e660efc3f18c6000e673bf7d137ab493eb0c33f0cb6f568d", 0xdc}, {&(0x7f0000000a00)="594fb1b91c5fdffb0fc2ecd5863ca1b76c4611335ca2356f39e4a6bbed67b98a86c170a9013874e49f45fe922c0294eb8d081cf9e559af223ccc449269b50b32e74437bb6d38981931e22f6d7119f2df3d46a96f2656e342546cd767a95eb6fc309a28669c715342fd0d7aa5953e98be77f5d4e23a655811e1347094d2d48cfc551ea47cd345809f61f7fa3c359d4d85f522647f138dce932d04a1ffe4fe", 0x9e}], 0x5) recvmmsg(r6, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000900)}, 0xf6}], 0x1, 0x40002001, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000980)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) fallocate(0xffffffffffffffff, 0x21, 0xbc, 0x3) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20a02, 0x0) ioctl$TIOCMSET(r10, 0x5418, &(0x7f0000000040)=0x800) ioctl$TIOCSSOFTCAR(r10, 0x5453, 0x0) socket(0x28, 0x5, 0x0) 3.174414557s ago: executing program 2 (id=185): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1f0, 0x18, "", [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xc52, 0x1, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x20, 0xd, 0xf3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="400f080000000811110041c9ded1"], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) (async) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8913, &(0x7f0000000040)={'veth0\x00'}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001900010000000000fbdbdf250a010900100012800400f88008001e0000000000140004"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000001c0)=[@cr4={0x1, 0x40002}], 0x1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x52}], 0x1, 0x41, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.025962934s ago: executing program 0 (id=186): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) socket$pptp(0x18, 0x1, 0x2) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x0, 0x2, 0x7fffffffffffffff, 0x4}) 1.96786236s ago: executing program 0 (id=187): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000340)={0x0, 0xa211, 0x10500, 0x1, 0x359}, &(0x7f0000000080), &(0x7f0000ff4000), 0x0) 1.708034686s ago: executing program 2 (id=188): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x10001}}, 0x30) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfe000/0x400000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sync_file_range(r4, 0x2, 0x1, 0x7) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x56b) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000000c0)) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000640)=[@text32={0x20, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write$P9_RCLUNK(r7, &(0x7f0000000040)={0x4d, 0x79, 0x7ffe}, 0x7) 1.554408292s ago: executing program 2 (id=189): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8949, &(0x7f0000000480)={'vlan0\x00', @random="0600002000"}) r2 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r2, &(0x7f0000000540)=""/228, 0xe4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @local}, {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x8, 0xfffffffffffffff8, 0xfffffffffffffffe}, {0xfffffffff7ffffff, 0x5, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x3, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3801000018000100fefffffd00010000ac1e010100000000000000000000000000000000000000000000ffffe0000001000107174e2000050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000000000000000000000000000000000000000109201000000000010ffff000000000000030000000000000005000000000000fcffffffffffffff678f782d850000000000000000ffffffffffffffff00000000000000001100000000000000fefffffffffffffffeffffff09000000000000002dbd7080053500000200010120008a4797f90000480003006465666c6174650000000000000000000000000000000000000000000000000200"/231], 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0x12, 0x4) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001020000102505a1a440000102020109025c000201a225550904000001020d0000052406000105240000000d240f0100000000000000000006241a000000090581030000000000090401"], 0xfffffffffffffffc) 1.155809082s ago: executing program 1 (id=190): r0 = timerfd_create(0x0, 0x0) clock_settime(0x0, &(0x7f0000000d80)={0x6553f100, 0x3b023380}) timerfd_settime(r0, 0x1, &(0x7f0000000dc0)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) read(r0, &(0x7f0000000e00)=""/8, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x2) ioctl$TCFLSH(r2, 0x40087101, 0x20001100) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$netlink(0x10, 0x3, 0x0) write(r4, &(0x7f00000001c0)="3000000024000106010000000000000000000000040000000000fffff1ffffff000000000c000100696e677265737300", 0x30) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x8003}, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) clock_adjtime(0x0, &(0x7f0000000e40)={0x12, 0x0, 0xffffffffffffffff, 0x2, 0x200, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0xd2, 0x1, 0x0, 0x0, 0x0, 0x80, 0xd4, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100000000}) 1.155400472s ago: executing program 1 (id=191): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000002280)=0x8, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$can_bcm(r1, &(0x7f0000002580)={&(0x7f00000025c0), 0x6, &(0x7f0000002600)={&(0x7f0000002640)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="010000800100000001000000440300001c85128a6dc5838fccdcf876f17902b597ff963282d93746dce3b253c761316002f00ed9163e63029a73ca60276523bb8b95a71a50684440c09dfcd058047fd4"], 0x80}, 0x1, 0x0, 0x0, 0x44}, 0xa4) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='squashfs\x00', 0x8000000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) getsockopt$inet6_int(r2, 0x29, 0x3e, 0x0, &(0x7f0000002540)) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000022c0), 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x7, 0xc22, 0x81f3, {r3, r4/1000+60000}, {r5, r6/1000+10000}, {0x3, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "9a06b486c9fd4659"}}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x20040010) mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000002380)='./tracing\x00', &(0x7f00000023c0)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r7, &(0x7f0000002440)='e:my_read_msr1 msr/read_msr', 0x1b) openat(0xffffffffffffff9c, &(0x7f0000002480)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) 1.138905454s ago: executing program 1 (id=192): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000200)="76657468303a30000000000000000000020000000a0000010000000000000000") ioctl(r0, 0x8914, &(0x7f0000000300)="76657468303a300000000000000000000100"/32) ioctl(r0, 0x890b, &(0x7f0000000000)="0000000000000000020000000a00000100000000000000000200000000000000000000000000000002000000ffffffff000000000000000005000000000000000000000000000000000000000000000000020000007f00"/106) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x2) close(0x3) socket$key(0xf, 0x3, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="f3420f21e8c481895fddf30fe69600000000f3420f09660fdb9c51000000000f01c9f3ab0f01d1f3420fc774130f2e4a0fc79a00470000", 0x37}], 0x1, 0x61, &(0x7f0000000240)=[@cr4={0x1, 0x10bea}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000280)={0x2, 0x1, 0x16}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0xfffffff8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0xffffffffffffffff, {[0x7, 0x2, 0x9, 0x5696, 0x0, 0x3, 0xd3f7, 0x1]}}, 0x5c) 1.117240546s ago: executing program 0 (id=193): clock_gettime(0x3, &(0x7f0000000000)) nanosleep(&(0x7f0000000040)={0x0, 0x3938700}, 0x0) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x0) bind$tipc(r0, 0x0, 0x0) timer_create(0x4, &(0x7f00000002c0)={0x0, 0x14, 0x1, @thr={&(0x7f0000000100)="a45530f8e391ef7401be2d4b38d4987596eab3785824b1a776c1e7fbf26fa32d604eb71f156163ab757c0ce4b290e2d3d3bba42b00cdbf68c771fb58340cc6b2697cc88e71b909ecc737a513a38d4c43004a2d7fd59d646db9df48a540e66c85a9c9d6c4835b51a19bd54e826da2a4d58b647d81ec0320e5db725e67753a79e1a03e4cfa84dc7f0fe3c69040fc49358179d23eaf82362014360e41a14b1c1e78f31b022b3fcab19898e7e069b8158b94f3bb55442eec2a65ac58ed7ceaf05ce0c54154f6293bc4da11deb272", &(0x7f0000000200)="a0fe57fc9abcf6d65cdc77b7fb445096db168d1cd174ae2f5603a4de49bee2840b2f4bd652b4262c4f2e3fbb542d290b82177c68dcdf7c2d197870a80b01ff58349bf4abc09e973acfe1fb6d0aef29f80e467d006846a2e536302b9418fba1a38f97dc020df8c0e8af30a2a13c4318f869e23517b6b926b8b25566ce7c9d4bcf4b63034a4836fc641f48b5a1792a4476c451778dc624029c1a4396f4fd9267bc7a19abf6c33eaea4cd8c3c23950515252010c85f2b502d616b"}}, &(0x7f0000000300)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000380)={{r2, r3+60000000}}, &(0x7f00000003c0)) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x0, [0x8001, 0x0, 0x3]}, &(0x7f0000000480)=0x44) clock_adjtime(0x5, &(0x7f00000004c0)={0x1, 0xff, 0x7, 0x7, 0x6, 0x8, 0x1, 0xffffffff, 0x80, 0x2, 0x3, 0x1, 0x3, 0x8d0f, 0x0, 0x8, 0xffffffffffff9b50, 0x8, 0x10001, 0x9, 0x4, 0x6, 0x97, 0x3, 0x1, 0xbb80}) r5 = open(&(0x7f00000005c0)='./file0\x00', 0x4200, 0x189) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) getpgid(r6) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r8 = geteuid() quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000900, r8, &(0x7f0000000680)) timer_delete(r1) listen(r5, 0x5) ftruncate(r7, 0x4) write$UHID_INPUT2(r5, &(0x7f0000000700)={0xc, {0x79, "3602ba3254821c703b7405998d5718d751db6203faae2683a3c1f4bd07cabe86b4dc7ebc79748b07e7042881cd7f0fd336702bd1fb4d656a073212e1acb2ec421d43e44977285f64e80764d0ed593c26915a7fe3b07b8db1061717e47975b58a0e8ef7866a4f854fe0df5388be5c57709417e211931226eb7a"}}, 0x7f) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000780)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r5) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000840)) timer_create(0x0, &(0x7f0000000a00)={0x0, 0x30, 0x0, @thr={&(0x7f0000000880)="222f18a4f816f287473cf100952942bf497adb9b61717a51db8eb3c310ff41733a1ca0475e2155deaac7ba174e48cb31841719b1c40567cc7766db7b2a9332a8d1b166ff3b07b9237894057ef66817009bb39631b7e584503899242099913d3686fa08470510f5", &(0x7f0000000900)="b8d99ceb028b967c368dda30c10cee3fdf7a0fe7a62731855a320a630a1dcfe1e28a54bbe466f276dc8076a3b3cee71a8926c59c47b5f08e79b8bc85e066f0fc6d4da07a09c410d0648c5ed13e67a41eaf7d9586462c979c6a7ea1685602c154347d040160b9fe04ed95c0e6c1b9e33857fbf0a163ff64ecdeac30d30675244251163ef39e867a2c34c6c842579b9e07fd3d490a1be95c4c545aa6ffe9241b86b94856ed7dcf48be1fd1d83b41ba74215df9e483da419c35d517c66690c3051f1fb74101ef437d25f808aa74faf5f0fa09c360569060297d0be51e4e3184b941"}}, &(0x7f0000000a40)=0x0) ioctl$X86_IOC_RDMSR_REGS(r5, 0xc02063a0, &(0x7f0000000a80)=[0x3db4, 0x9, 0x101, 0x6, 0x516e, 0x8, 0x9, 0x12]) sendmsg$tipc(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000b00)="f628070fd45c3241530068fbc7fdac85058e6b561c57f24323db29f2208d2d31c01d37feb13b8c73ec", 0x29}], 0x1, &(0x7f0000000b80)="6c67ec11e69a47ac28dffdc882cf234f064b07c9bccb066dfa97cfa3250191cca5a49d9110ae3b7dcd6529958e678dcf59fcc9b0d512b7fd6f7e3bfd974d5a7cd9f80cc54eba4aab16a85143f7eb0ab699854ec09e30bb380f9443e98e45d4bb9283d520ecd67e064a", 0x69, 0x91}, 0x48000) setsockopt$packet_int(r4, 0x107, 0x1a, &(0x7f0000000c40)=0x5744, 0x4) io_setup(0xf8b8, &(0x7f0000000c80)=0x0) io_getevents(r10, 0x8, 0x7, &(0x7f0000000cc0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000dc0)) timer_settime(r9, 0x0, &(0x7f0000000e00), &(0x7f0000000e40)) 907.736567ms ago: executing program 0 (id=194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) syz_usb_connect(0x1, 0x1c9, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6e, 0x19, 0x1b, 0x1520f51166657dac, 0x557, 0x2022, 0x1155, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b7, 0x1, 0x5, 0xfa, 0x40, 0xd, "", [{{0x9, 0x4, 0xf0, 0xa, 0x5, 0x47, 0x4d, 0x2f, 0x3, [@hid_hid={0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x4e9}}], [{{0x9, 0x5, 0x7, 0x0, 0x20, 0x7f, 0x7f, 0x9, [@generic={0x71, 0x6, "eb5c1cfdcb86df7b3ee6929ab0fad78406a9389ef5e141062db4f855c496edc195f405d90925a93d7675458b6baa583deb125435bc187704135b926e91c15eee44495dca8bf622058465f8e039e882ea196de313d6d5b68c510ce5012ddf77e54341da783371fa157cf5a05b45fa08"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8f, 0x5}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x8, 0x10, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x3a}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x4, 0x0, 0xd}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x9, 0xcb, 0xff, [@generic={0x28, 0x10, "1054418439ec9a405a1898313f6d4e79f72c6173967e66964c8317ab86eba46e674f0c916d5a"}, @generic={0xc8, 0x22, "dd82b3a1414ac141a22be177caf60c9765c859f9645470610bfede142d16491e9042fab4539e705c3fbd1c425e050949fcfb99dee74ae1290e6e5eeef77e2b5723bd9cab5ff25a1b39225df865f977b080603d4763af38c02c2852dc449a304c7cc83565ff656760016c617e7434ab5a4db280da5dee4d9220224330f5ef7308bdacfcc186bae70b9c3054b9ef3e0b214e82b205925bcd9ae99f90205480a7075692ca01d6293b0dfe6aa5f0e53500652798ccbe5f94176f829194c0b63f11a17fbec81bde02"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x0, 0x6, 0xa}}]}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x5, 0x5, 0x5, 0x8, 0xf7}, 0x5c, &(0x7f0000000240)={0x5, 0xf, 0x5c, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x0, 0x0, 0x5, [0xc0c0, 0x17ff8, 0xc000, 0xffc0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xe, 0x86, 0x1f22}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa, 0x3, 0xee, 0x2, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xf, 0x7, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2d, 0x7, 0x9, 0x27c4, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x59, "754969d954e9b21422cbaa89d0845585"}]}, 0x6, [{0x81, &(0x7f00000002c0)=@string={0x81, 0x3, "32a7679b71210b3c6f447b8a7e5ba2c15a27358f0c9a1e32dd02f9d893d54b2c7b4a6c4819bcd97ead623800027cdba00ac4b6d66412cc2d984ebf480b2c1e6b6c4e5b994e8cd833bba1189a5db70b3f6cb6261150f57f38063bd94009e1ae47c05ffabbffe3a5a7e08f1f7e1663eaa48968445087daca409d98228e51a84c"}}, {0x31, &(0x7f0000000380)=@string={0x31, 0x3, "a98ce7f6316246f846ffa375e8cea4cd3bb59b7ab1916960bc642a6e2aab4da7bd200462b811866e2559a3b3e1df39"}}, {0x20, &(0x7f0000000400)=@string={0x20, 0x3, "376c9e8efcc78fda62fdd602ed207c5c9cc0eb4f4f4eab16feef2c8dee34"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x42a}}, {0x2, &(0x7f00000005c0)=@string={0x2}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000680)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f00000006c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000700), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000740)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000780)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000007c0)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r2, &(0x7f0000000b80)=""/4070, 0x20, 0x101, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b80), r2) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000001bc0)=0x8, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @multicast}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000b00)={'wg0\x00', 0x400}) write$cgroup_devices(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 907.189897ms ago: executing program 1 (id=195): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000300)=0xff, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0xfffffffffffffe9b) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000002c0)=0x8, 0x4) read(r0, &(0x7f0000000400)=""/213, 0xd5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="50000000300005040000000000000000000000003c000100380001000900010067616374000034d7bc68f30000280002801801000000000000000c000300010000000000002000"/80, 0x50}], 0x1}, 0x24040000) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r3, &(0x7f0000000500)={{0x0, 0xf, 0x9, 0x137e, 0x2a4, 0xc, 0x3a1}, "8ca7bed1342a8cb940d439d57df2ce7c707cf2462e3f18f4bdd8cb5afc843dff684fbde3c28fccca87c4ad3609a2009ac2468b30967ff579c4770c8c7489e88105f944561d0dab9843049139b8572cb0c6eb41cd1e742a34f49effaefa67a7f4b8e3ab7170622794333f42d9b5e268ade1bd11b345160c90730644ce47c7a19de7", ['\x00']}, 0x1a1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000080)={0x10003, 0x0, &(0x7f0000ffa000/0x4000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x100) signalfd4(r6, &(0x7f0000000200), 0x8, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000340)={0x0, 0x58, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, 0x2d, 0x1, 0x70bd25, 0x25dfdbfe, {0xf}, [@typed={0x14, 0xd5, 0x0, 0x0, @ipv6=@mcast1}]}, 0x28}}, 0x8000) 580.26656ms ago: executing program 2 (id=196): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000003c0)={0x1, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000400)={0x2, r2}) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1fe) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/brif/bridge_slave_0/multicast_router\x00', 0x82041, 0x102) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0x58}], 0x1) sendmsg$netlink(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)}, 0x200488d0) write(r5, &(0x7f00000002c0)='3', 0x4e) r8 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000beb000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest32=0x4818, 0x1, 0x2ffffe, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x2}], 0x80}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 374.519292ms ago: executing program 2 (id=197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/syz_tun/gro_flush_timeout\x00', 0x1, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/syz_tun/gro_flush_timeout\x00', 0x1, 0x0) write$cgroup_subtree(r2, &(0x7f0000000400)={[{0x2b, 'io'}]}, 0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000480)={@host}) mmap$binder(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = mmap$binder(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x184803, 0x0) (async) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x184803, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000600), 0x2, 0x862b01) write$char_usb(r6, &(0x7f0000000640)="e2", 0x2250) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000680)=""/76) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000880)={0xa8, 0x0, &(0x7f00000007c0)=[@enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x1, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)={@fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @fda={0x66646185, 0x0, 0x2, 0x1, 0x8}, @fd={0x66642a85, 0x0, r2, 0x0, 0x1}}, &(0x7f0000000580)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r4}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x2, 0x88, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000740)={@fd={0x66642a85, 0x0, r0, 0x0, 0x6}, @ptr={0x70742a85, 0x0, &(0x7f0000000700)=[r5, r1, r3, r6], 0x10}, @flat=@handle={0x73682a85, 0x100, 0x2, 0x3}}}, 0x2000}]}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000880)={0xa8, 0x0, &(0x7f00000007c0)=[@enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x1, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)={@fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @fda={0x66646185, 0x0, 0x2, 0x1, 0x8}, @fd={0x66642a85, 0x0, r2, 0x0, 0x1}}, &(0x7f0000000580)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r4}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x2, 0x88, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000740)={@fd={0x66642a85, 0x0, r0, 0x0, 0x6}, @ptr={0x70742a85, 0x0, &(0x7f0000000700)=[r5, r1, r3, r6], 0x10}, @flat=@handle={0x73682a85, 0x100, 0x2, 0x3}}}, 0x2000}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x28080, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae03, 0xd7) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x100, 0x0, &(0x7f0000000100)}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x1, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xc, &(0x7f0000000240)=0xfffffff9, 0x4) (async) setsockopt$packet_int(r9, 0x107, 0xc, &(0x7f0000000240)=0xfffffff9, 0x4) 17.755278ms ago: executing program 1 (id=198): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d0d, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200021"], 0x69) close(r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x50, &(0x7f0000000000)=0x5, 0x4) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 0s ago: executing program 1 (id=199): landlock_create_ruleset(&(0x7f0000000740)={0x4, 0x9, 0x0, 0x2a0, 0x8, 0x1}, 0x30, 0x3) (async) r0 = landlock_create_ruleset(&(0x7f0000000740)={0x4, 0x9, 0x0, 0x2a0, 0x8, 0x1}, 0x30, 0x3) landlock_restrict_self(r0, 0x4) (async) landlock_restrict_self(r0, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x400) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000280), 0x2, 0x0) write$cgroup_type(r4, &(0x7f00000002c0), 0x9) (async) write$cgroup_type(r4, &(0x7f00000002c0), 0x9) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000100)="b9800000c00f3235000800000f30805000fd450f01f40f017137400f1ee7c403957ca7fd5856025bb805000000b9620000000f01c1debfdbc40000400fc73dadc30000400f78741d01", 0x49}], 0x1, 0x49627e0e9a2bded4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000001c0)="66b8003000000f23c80f21f866350c0070000f23f8653e660ffa9700800f1bc6670f01c40f01c40f2265bad004edbaf80c66b8e8c54b8c66efbafc0c66edc225000f5fc9", 0x44}], 0x1, 0x18, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200000, 0x0, 0x2, 0x1, 0x3, 0x10}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200000, 0x0, 0x2, 0x1, 0x3, 0x10}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = openat$binderfs(0xffffff9c, &(0x7f0000000780)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000007c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000007c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000800)={0x8, 0x0, &(0x7f0000000840)=[@acquire]}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000880)={0x10, 0x0, &(0x7f00000008c0)=[@clear_death]}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20000845, &(0x7f0000000240), 0x1c) (async) sendto$inet6(r9, 0x0, 0x0, 0x20000845, &(0x7f0000000240), 0x1c) getsockopt$inet6_buf(r9, 0x29, 0x3d, 0x0, &(0x7f0000000300)=0x37) (async) getsockopt$inet6_buf(r9, 0x29, 0x3d, 0x0, &(0x7f0000000300)=0x37) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000400)) 0s ago: executing program 1 (id=200): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0xf}, 0x2, 0x0, &(0x7f0000000040)={0x40, 0x15, 0x25, 0x3, 0x4}, 0x8, 0x7, 0x32e7, 0x0, 0x7fffffff, 0x3, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0xe}) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000140)=0x400032, 0x4) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x3f}) write$uinput_user_dev(r0, &(0x7f0000000740)={'syz1\x00', {0x260e, 0x80, 0x2, 0x200}, 0x57, [0x7, 0x7fff, 0x38, 0x40, 0xe2, 0x5, 0x7fffffff, 0x1, 0x8361ae, 0x4, 0x4, 0x1ff, 0x4, 0x1, 0x6, 0xffffffff, 0x8, 0xbd7, 0x101, 0x0, 0x3, 0x0, 0xb11, 0x8, 0x6, 0x4, 0x3, 0x8, 0x7, 0x8a0, 0x5, 0x8, 0x1ff, 0x5, 0x6, 0x666c, 0x2, 0xb, 0xffffffff, 0x66, 0x8, 0x7fffffff, 0x9, 0x5c, 0x3ff, 0x0, 0x7, 0x5, 0x1, 0x4, 0x10000, 0xdf39, 0x1, 0x2, 0xe30f, 0x6eb, 0x0, 0xb, 0x1, 0x2, 0x6, 0x6, 0x4, 0x3], [0x6, 0x1, 0x13800000, 0x3, 0x7, 0x3, 0x8, 0xffffffff, 0x9, 0xa, 0x80000000, 0x3, 0x80000001, 0xfffffdc0, 0xe, 0x7fff, 0xfffffff7, 0xffffff90, 0xdeab, 0x1, 0x7, 0x0, 0x4, 0xd6ce, 0x800, 0xffff, 0x10000, 0x1, 0x6, 0xfffffffc, 0x2, 0x1ff, 0x563b8077, 0x6, 0x4, 0x7, 0x9, 0xffff, 0x0, 0x2, 0x1, 0x0, 0x4, 0xff, 0x2, 0x42a, 0xfffffffd, 0xffff, 0x1, 0x6, 0x2, 0x800, 0xf37, 0x3, 0x10001, 0x4, 0x7, 0x6, 0x2ce, 0x9, 0xffffffff, 0x3, 0x0, 0x3], [0x4, 0x9f9, 0xbab, 0x7, 0x3, 0x9, 0x4, 0x1, 0x7fffffff, 0x7, 0x0, 0x7, 0x6a36, 0x3ff, 0x2, 0xf5, 0x2, 0xd724, 0x7fffffff, 0xfffffffc, 0x3, 0xfffff9f4, 0x3, 0x0, 0x80, 0x7fff, 0x7, 0x1, 0x5, 0x5, 0x7, 0x9, 0x7ff, 0x8, 0x7d6, 0x40, 0x0, 0x9, 0x3, 0x4, 0x81, 0x5, 0x6, 0x6, 0x80000000, 0x1, 0x0, 0x400, 0x3, 0x3, 0x3ff, 0xfff, 0x2, 0x5, 0x4, 0x1c7, 0x1, 0x7, 0x7, 0x8001, 0x9, 0x8, 0x9, 0x3ff], [0xa, 0x5, 0x0, 0x1, 0xd, 0x7, 0x8, 0x5, 0xe, 0x0, 0xffffffff, 0x5f9087cb, 0x8, 0x1, 0x0, 0x8, 0x6, 0x1, 0x9, 0x1ff, 0x2, 0xffff, 0x15, 0x7f, 0x4d, 0x2, 0x3, 0x4, 0x3138, 0x3, 0x6, 0x4, 0x7, 0x0, 0x1, 0x2, 0xfffffff8, 0x1, 0x401, 0xffffff60, 0xf, 0x6, 0x1, 0x5, 0x2, 0x8, 0xfffffffc, 0x21e, 0x10, 0x5, 0x0, 0xc, 0x3, 0x8, 0xe, 0x7c, 0x7f, 0x3, 0x6, 0x31, 0x1, 0x1f, 0xdf]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000002c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) accept(r3, 0x0, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0xfebc) kernel console output (not intermixed with test programs): 964][ T296] bridge_slave_1: entered promiscuous mode [ 23.672868][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.679967][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.687128][ T297] bridge_slave_0: entered allmulticast mode [ 23.693523][ T297] bridge_slave_0: entered promiscuous mode [ 23.699961][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.707170][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.714255][ T297] bridge_slave_1: entered allmulticast mode [ 23.720517][ T297] bridge_slave_1: entered promiscuous mode [ 23.844677][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.852104][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.859476][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.866520][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.885421][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.892588][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.899873][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.906992][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.929525][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.936607][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.943996][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.951040][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.965137][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.972214][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.979485][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.986723][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.028804][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.036859][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.044356][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.052231][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.060379][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.067549][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.075040][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.082520][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.092375][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.099418][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.113183][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.120551][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.143275][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.150458][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.158176][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.165249][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.173139][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.180203][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.187840][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.194896][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.222164][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.229220][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.237389][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.244441][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.266651][ T294] veth0_vlan: entered promiscuous mode [ 24.279176][ T295] veth0_vlan: entered promiscuous mode [ 24.296220][ T296] veth0_vlan: entered promiscuous mode [ 24.313689][ T295] veth1_macvtap: entered promiscuous mode [ 24.322419][ T297] veth0_vlan: entered promiscuous mode [ 24.343184][ T296] veth1_macvtap: entered promiscuous mode [ 24.351611][ T294] veth1_macvtap: entered promiscuous mode [ 24.366232][ T297] veth1_macvtap: entered promiscuous mode [ 24.392442][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.445754][ T320] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.558905][ T332] sit0: entered promiscuous mode [ 24.565827][ T332] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 24.576348][ T332] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1'. [ 24.782800][ T349] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7'. [ 25.334639][ T360] syzkaller1: entered promiscuous mode [ 25.340834][ T360] syzkaller1: entered allmulticast mode [ 25.347089][ T364] netlink: 'syz.3.12': attribute type 4 has an invalid length. [ 25.365124][ T364] netlink: 'syz.3.12': attribute type 4 has an invalid length. [ 25.620065][ T311] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 25.710023][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.770993][ T311] usb 4-1: config 1 has an invalid interface number: 5 but max is 2 [ 25.779035][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.800380][ T311] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 25.809806][ T311] usb 4-1: config 1 has no interface number 3 [ 25.819530][ T311] usb 4-1: config 1 interface 1 has no altsetting 0 [ 25.831038][ T311] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 25.840514][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.848821][ T311] usb 4-1: Product: syz [ 25.853090][ T311] usb 4-1: Manufacturer: syz [ 25.857799][ T311] usb 4-1: SerialNumber: syz [ 25.880002][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 25.886550][ T10] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.897589][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 25.904315][ T10] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 25.913514][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.922452][ T10] usb 3-1: config 0 descriptor?? [ 26.069104][ T370] netlink: 'syz.3.14': attribute type 4 has an invalid length. [ 26.076771][ T370] netlink: 17 bytes leftover after parsing attributes in process `syz.3.14'. [ 26.085854][ T389] netlink: 'syz.3.14': attribute type 4 has an invalid length. [ 26.093574][ T389] netlink: 17 bytes leftover after parsing attributes in process `syz.3.14'. [ 26.103689][ T311] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 26.112421][ T66] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.120099][ T311] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 26.126237][ T311] usb 4-1: selecting invalid altsetting 0 [ 26.132219][ T311] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 26.142134][ T311] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 26.149539][ T311] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 26.155656][ T311] usb 4-1: selecting invalid altsetting 0 [ 26.161478][ T311] snd-usb-audio 4-1:1.5: probe with driver snd-usb-audio failed with error -2 [ 26.171246][ T311] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 26.178639][ T311] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 26.184991][ T311] usb 4-1: selecting invalid altsetting 0 [ 26.190892][ T311] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 26.200871][ T311] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 26.208286][ T311] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 26.214704][ T311] usb 4-1: selecting invalid altsetting 0 [ 26.222280][ T311] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 26.232295][ T311] usb 4-1: USB disconnect, device number 2 [ 26.265882][ T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.291103][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.302254][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.312110][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 26.322971][ T66] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 26.332220][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.341819][ T66] usb 2-1: config 0 descriptor?? [ 26.350672][ T10] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 26.357896][ T10] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 26.365182][ T10] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 26.372270][ T10] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 26.379320][ T10] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 26.387453][ T10] uclogic 0003:5543:0064.0001: No inputs registered, leaving [ 26.396246][ T10] uclogic 0003:5543:0064.0001: hiddev96,hidraw0: USB HID v0.01 Device [HID 5543:0064] on usb-dummy_hcd.2-1/input0 [ 26.610583][ T374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.619223][ T374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.677800][ T397] veth0: mtu less than device minimum [ 26.683900][ T36] kauditd_printk_skb: 95 callbacks suppressed [ 26.683914][ T36] audit: type=1400 audit(1794183711.819:169): avc: denied { mounton } for pid=396 comm="syz.3.22" path="/6/file0" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.749306][ T66] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 26.756991][ T66] plantronics 0003:047F:FFFF.0002: collection stack underflow [ 26.764651][ T66] plantronics 0003:047F:FFFF.0002: item 0 0 0 12 parsing failed [ 26.772589][ T66] plantronics 0003:047F:FFFF.0002: parse failed [ 26.778983][ T66] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 26.929986][ T392] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 26.958261][ T31] usb 2-1: USB disconnect, device number 2 [ 27.090701][ T392] usb 4-1: not running at top speed; connect to a high speed hub [ 27.099274][ T392] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.109914][ T392] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 27.118996][ T392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.131172][ T392] usb 4-1: Found UVC 1.00 device (046d:0825) [ 27.138143][ T392] usb 4-1: No streaming interface found for terminal 2. [ 27.332298][ T36] audit: type=1400 audit(1794183712.469:170): avc: denied { mounton } for pid=396 comm="syz.3.22" path="/6/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 27.333206][ T66] usb 4-1: USB disconnect, device number 3 [ 27.541670][ T36] audit: type=1400 audit(1794183712.679:171): avc: denied { read write } for pid=399 comm="syz.1.23" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.564642][ T36] audit: type=1400 audit(1794183712.679:172): avc: denied { open } for pid=399 comm="syz.1.23" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.588491][ T36] audit: type=1400 audit(1794183712.679:173): avc: denied { ioctl } for pid=399 comm="syz.1.23" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.613593][ T36] audit: type=1400 audit(1794183712.679:174): avc: denied { set_context_mgr } for pid=399 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 27.737135][ T36] audit: type=1400 audit(1794183712.869:175): avc: denied { create } for pid=403 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 27.823567][ T36] audit: type=1400 audit(1794183712.959:176): avc: denied { write } for pid=406 comm="syz.1.25" name="psched" dev="proc" ino=4026532319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 27.872834][ T409] ªªªªª»: renamed from vlan0 (while UP) [ 28.010091][ T416] capability: warning: `syz.3.28' uses deprecated v2 capabilities in a way that may be insecure [ 28.021981][ T36] audit: type=1400 audit(1794183713.159:177): avc: denied { write } for pid=406 comm="syz.1.25" name="001" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 28.054361][ T36] audit: type=1400 audit(1794183713.179:178): avc: denied { read } for pid=415 comm="syz.3.28" dev="nsfs" ino=4026532471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.077140][ T410] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 28.115524][ T66] rust_binder: 399: undelivered freeze notification, 0000000000000001 [ 28.289987][ T392] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 28.413210][ T66] usb 3-1: USB disconnect, device number 2 [ 28.427709][ T424] ======================================================= [ 28.427709][ T424] WARNING: The mand mount option has been deprecated and [ 28.427709][ T424] and is ignored by this kernel. Remove the mand [ 28.427709][ T424] option from the mount to silence this warning. [ 28.427709][ T424] ======================================================= [ 28.481108][ T392] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 28.492546][ T392] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 28.504266][ T392] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 28.515812][ T392] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 28.522855][ T430] capability: warning: `syz.2.34' uses 32-bit capabilities (legacy support in use) [ 28.527994][ T392] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.545036][ T392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.553064][ T392] usb 4-1: Product: syz [ 28.557233][ T392] usb 4-1: Manufacturer: syz [ 28.561873][ T392] usb 4-1: SerialNumber: syz [ 28.569209][ T416] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 28.576930][ T392] cdc_mbim 4-1:1.0: skipping garbage [ 28.777452][ T416] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 28.784830][ T416] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 28.870243][ T66] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 29.021034][ T66] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4C, changing to 0xC [ 29.032634][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 29.043558][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1297, setting to 64 [ 29.055945][ T66] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 29.065203][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.073258][ T66] usb 3-1: Product: syz [ 29.077517][ T66] usb 3-1: Manufacturer: syz [ 29.082183][ T66] usb 3-1: SerialNumber: syz [ 29.087518][ T66] usb 3-1: config 0 descriptor?? [ 29.092815][ T432] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 29.303431][ T66] usb 3-1: USB disconnect, device number 3 [ 29.393654][ T416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.402512][ T416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.411134][ T416] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 29.418307][ T416] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 29.427331][ T392] cdc_mbim 4-1:1.0: dwNtbInMaxSize=1293 is too small. Using 2048 [ 29.435221][ T316] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 29.442735][ T392] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 29.481166][ T445] batadv_slave_0: entered promiscuous mode [ 29.488726][ T444] batadv_slave_0: left promiscuous mode [ 29.505258][ T447] netlink: 104 bytes leftover after parsing attributes in process `syz.0.41'. [ 29.516484][ T447] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 9 (only 8 groups) [ 29.594056][ T316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.605747][ T316] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 29.615096][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.624161][ T316] usb 2-1: Product: syz [ 29.628637][ T392] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 29.634513][ T316] usb 2-1: Manufacturer: syz [ 29.639462][ T316] usb 2-1: SerialNumber: syz [ 29.644238][ T392] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 29.651473][ T392] wwan wwan0: port wwan0mbim0 attached [ 29.658806][ T392] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, d2:77:f3:84:38:95 [ 29.669874][ T316] usb 2-1: config 0 descriptor?? [ 29.677915][ T316] asix 2-1:0.0: probe with driver asix failed with error -22 [ 29.845278][ T66] usb 4-1: USB disconnect, device number 4 [ 29.861113][ T66] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 29.888012][ T440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.910132][ T440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.919996][ T316] usb 2-1: USB disconnect, device number 3 [ 29.958886][ T66] wwan wwan0: port wwan0mbim0 disconnected [ 29.996163][ T470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.44'. [ 30.589870][ T509] sysfs: Unknown parameter '/' [ 30.949388][ T527] /dev/nbd1: Can't lookup blockdev [ 31.076832][ T536] netlink: 60 bytes leftover after parsing attributes in process `syz.1.61'. [ 31.319999][ T66] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.410056][ T316] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.471281][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 31.479739][ T66] usb 2-1: config 1 has an invalid descriptor of length 233, skipping remainder of the config [ 31.490381][ T66] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.500604][ T66] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 31.509738][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.517763][ T66] usb 2-1: Product: syz [ 31.521993][ T66] usb 2-1: Manufacturer: syz [ 31.526669][ T66] usb 2-1: SerialNumber: syz [ 31.560017][ T316] usb 3-1: Using ep0 maxpacket: 16 [ 31.566470][ T316] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.576656][ T316] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.587358][ T316] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 31.596642][ T316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.604747][ T316] usb 3-1: Product: syz [ 31.608916][ T316] usb 3-1: Manufacturer: syz [ 31.613569][ T316] usb 3-1: SerialNumber: syz [ 31.821328][ T316] usb 3-1: 0:2 : does not exist [ 31.828044][ T316] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 31.840113][ T316] usb 3-1: USB disconnect, device number 4 [ 31.847515][ T66] usb 2-1: USB disconnect, device number 4 [ 31.859451][ T544] udevd[544]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.881711][ T544] udevd[544]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 32.237737][ T36] kauditd_printk_skb: 60 callbacks suppressed [ 32.237754][ T36] audit: type=1400 audit(1794183717.369:239): avc: denied { create } for pid=550 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 32.238254][ T551] Unsupported ieee802154 address type: 0 [ 32.244077][ T36] audit: type=1400 audit(1794183717.369:240): avc: denied { bind } for pid=550 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 32.302804][ T36] audit: type=1400 audit(1794183717.439:241): avc: denied { read } for pid=552 comm="syz.3.65" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 32.343630][ T36] audit: type=1400 audit(1794183717.439:242): avc: denied { open } for pid=552 comm="syz.3.65" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 32.386819][ T36] audit: type=1400 audit(1794183717.519:243): avc: denied { create } for pid=562 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.409973][ T36] audit: type=1400 audit(1794183717.519:244): avc: denied { bind } for pid=562 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.438006][ T36] audit: type=1400 audit(1794183717.569:245): avc: denied { listen } for pid=562 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.460654][ T36] audit: type=1400 audit(1794183717.589:246): avc: denied { bind } for pid=569 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.490050][ T36] audit: type=1400 audit(1794183717.589:247): avc: denied { setopt } for pid=569 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.776553][ T555] cgroup: fork rejected by pids controller in /syz3 [ 32.986370][ T36] audit: type=1400 audit(1794183718.119:248): avc: denied { create } for pid=596 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 33.059154][ T597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=597 comm=syz.2.70 [ 33.080321][ T598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=598 comm=syz.2.70 [ 33.651780][ T612] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 49 (only 8 groups) [ 33.704339][ T614] netlink: 140 bytes leftover after parsing attributes in process `syz.0.75'. [ 33.713611][ T316] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 33.871358][ T316] usb 3-1: unable to get BOS descriptor or descriptor too short [ 33.880026][ T316] usb 3-1: not running at top speed; connect to a high speed hub [ 33.892113][ T316] usb 3-1: string descriptor 0 read error: -22 [ 33.898883][ T316] usb 3-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 33.908840][ T316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.937490][ T316] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 33.980000][ T66] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.129998][ T66] usb 1-1: device descriptor read/64, error -71 [ 34.137022][ T316] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 34.145012][ T618] ip6gre0: mtu less than device minimum [ 34.211489][ T316] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 34.227408][ T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.232375][ T316] usb 3-1: USB disconnect, device number 5 [ 34.379971][ T66] usb 1-1: device descriptor read/64, error -71 [ 34.619972][ T66] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.759993][ T66] usb 1-1: device descriptor read/64, error -71 [ 35.000021][ T66] usb 1-1: device descriptor read/64, error -71 [ 35.130065][ T66] usb usb1-port1: attempt power cycle [ 35.440008][ T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 35.469977][ T66] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.491181][ T66] usb 1-1: device descriptor read/8, error -71 [ 35.591216][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 35.599324][ T10] usb 2-1: config 0 has no interface number 0 [ 35.607734][ T10] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 35.625694][ T10] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.638009][ T10] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.653749][ T66] usb 1-1: device descriptor read/8, error -71 [ 35.659991][ T10] usb 2-1: config 0 interface 1 has no altsetting 0 [ 35.667755][ T10] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 35.677210][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.690104][ T10] usb 2-1: config 0 descriptor?? [ 35.899966][ T66] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.920973][ T66] usb 1-1: device descriptor read/8, error -71 [ 36.053747][ T66] usb 1-1: device descriptor read/8, error -71 [ 36.170066][ T66] usb usb1-port1: unable to enumerate USB device [ 36.302961][ T10] uclogic 0003:145F:0212.0003: failed retrieving string descriptor #100: -71 [ 36.322137][ T10] uclogic 0003:145F:0212.0003: failed retrieving pen parameters: -71 [ 36.332403][ T10] uclogic 0003:145F:0212.0003: pen probing failed: -71 [ 36.339283][ T10] uclogic 0003:145F:0212.0003: failed probing parameters: -71 [ 36.350030][ T448] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.359994][ T10] uclogic 0003:145F:0212.0003: probe with driver uclogic failed with error -71 [ 36.372128][ T10] usb 2-1: USB disconnect, device number 5 [ 36.520016][ T448] usb 3-1: Using ep0 maxpacket: 16 [ 36.530786][ T448] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.541303][ T448] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.560169][ T448] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.574255][ T448] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 36.589977][ T448] usb 3-1: config 0 interface 0 has no altsetting 0 [ 36.596631][ T448] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 36.610006][ T448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.681030][ T448] usb 3-1: config 0 descriptor?? [ 36.775855][ T647] kvm: kvm [646]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 37.090271][ T448] logitech-djreceiver 0003:046D:C53A.0004: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 37.150031][ T388] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 37.212310][ T12] tipc: Subscription rejected, illegal request [ 37.294039][ T645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.315131][ T645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.321063][ T388] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 37.330523][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 37.330541][ T36] audit: type=1400 audit(1794183722.459:254): avc: denied { getopt } for pid=644 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.334273][ T388] usb 1-1: config 0 interface 0 has no altsetting 0 [ 37.342083][ T392] usb 3-1: USB disconnect, device number 6 [ 37.390045][ T388] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 37.409701][ T388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.430241][ T388] usb 1-1: config 0 descriptor?? [ 37.636824][ T36] audit: type=1400 audit(1794183722.769:255): avc: denied { map } for pid=658 comm="syz.0.90" path="socket:[10671]" dev="sockfs" ino=10671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 37.659594][ T36] audit: type=1400 audit(1794183722.769:256): avc: denied { accept } for pid=658 comm="syz.0.90" path="socket:[10671]" dev="sockfs" ino=10671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 37.773141][ T36] audit: type=1400 audit(1794183722.909:257): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.825443][ T36] audit: type=1400 audit(1794183722.959:258): avc: denied { remount } for pid=672 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.972999][ T36] audit: type=1400 audit(1794183723.109:259): avc: denied { write } for pid=678 comm="syz.1.94" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.109958][ T36] audit: type=1400 audit(1794183723.239:260): avc: denied { search } for pid=683 comm="syz.1.96" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 38.179962][ T36] audit: type=1400 audit(1794183723.239:261): avc: denied { read } for pid=683 comm="syz.1.96" name="trace_pipe_raw" dev="tracefs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 38.229962][ T36] audit: type=1400 audit(1794183723.239:262): avc: denied { ioctl } for pid=683 comm="syz.1.96" path="/33/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 38.286834][ T36] audit: type=1400 audit(1794183723.269:263): avc: denied { ioctl } for pid=685 comm="syz.1.97" path="socket:[10775]" dev="sockfs" ino=10775 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.734741][ T701] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.760148][ T700] ./dev/sda1: Can't lookup blockdev [ 38.772313][ T702] 9pnet_virtio: no channels available for device 127.0.0.1 [ 38.836001][ T710] overlayfs: workdir and upperdir must be separate subtrees [ 38.850226][ T709] FAULT_INJECTION: forcing a failure. [ 38.850226][ T709] name failslab, interval 1, probability 0, space 0, times 0 [ 38.871697][ T709] CPU: 1 UID: 0 PID: 709 Comm: syz.2.102 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 38.871726][ T709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 38.871746][ T709] Call Trace: [ 38.871752][ T709] [ 38.871760][ T709] __dump_stack+0x21/0x30 [ 38.871783][ T709] dump_stack_lvl+0x140/0x1c0 [ 38.871799][ T709] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.871818][ T709] dump_stack+0x19/0x20 [ 38.871833][ T709] should_fail_ex+0x3c2/0x510 [ 38.871851][ T709] should_failslab+0xac/0x100 [ 38.871870][ T709] __kmalloc_cache_noprof+0x41/0x470 [ 38.871895][ T709] ? __percpu_counter_init_many+0x47e/0x570 [ 38.871920][ T709] ? io_uring_alloc_task_context+0x1a7/0x6b0 [ 38.871943][ T709] io_uring_alloc_task_context+0x1a7/0x6b0 [ 38.871964][ T709] ? alloc_file_pseudo+0x191/0x1f0 [ 38.871985][ T709] ? __cfi_io_uring_alloc_task_context+0x10/0x10 [ 38.872007][ T709] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 38.872030][ T709] __io_uring_add_tctx_node+0x324/0x590 [ 38.872052][ T709] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 38.872074][ T709] ? anon_inode_create_getfile+0x3f/0x50 [ 38.872095][ T709] io_uring_create+0xc78/0x13f0 [ 38.872115][ T709] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 38.872138][ T709] ? __se_sys_futex+0x13c/0x320 [ 38.872159][ T709] ? __x64_sys_io_uring_setup+0x80/0x80 [ 38.872183][ T709] ? __kasan_check_write+0x18/0x20 [ 38.872207][ T709] __x64_sys_io_uring_setup+0x5f/0x80 [ 38.872229][ T709] x64_sys_call+0x22c0/0x2ee0 [ 38.872249][ T709] do_syscall_64+0x57/0xf0 [ 38.872267][ T709] ? clear_bhb_loop+0x50/0xa0 [ 38.872291][ T709] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.872314][ T709] RIP: 0033:0x7f90ef19fb19 [ 38.872335][ T709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.872349][ T709] RSP: 002b:00007f90edb7ffb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 38.872369][ T709] RAX: ffffffffffffffda RBX: 00002000000002c0 RCX: 00007f90ef19fb19 [ 38.872383][ T709] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000002 [ 38.872402][ T709] RBP: 00007f90ef237b70 R08: 0000000000000000 R09: 0000000000000000 [ 38.872414][ T709] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 38.872425][ T709] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe410d1658 [ 38.872439][ T709] [ 38.940019][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.280030][ T719] fuse: Bad value for 'rootmode' [ 39.320135][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 39.326591][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 39.337114][ T10] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 39.346294][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.359987][ T10] usb 2-1: Product: syz [ 39.364251][ T10] usb 2-1: Manufacturer: syz [ 39.368858][ T10] usb 2-1: SerialNumber: syz [ 39.479658][ T721] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 39.557899][ T311] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 39.571198][ T311] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 39.602070][ T10] usb 2-1: selecting invalid altsetting 1 [ 39.623082][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 39.641890][ T10] usb 2-1: USB disconnect, device number 6 [ 39.656063][ T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.925643][ T388] usbhid 1-1:0.0: can't add hid device: -71 [ 39.950001][ T388] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 39.963931][ T388] usb 1-1: USB disconnect, device number 6 [ 40.188003][ T744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 40.512654][ T759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.533446][ T759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.749975][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.899982][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 40.909047][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 40.921956][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 38, changing to 7 [ 40.940082][ T10] usb 1-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 40.954734][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.969999][ T10] usb 1-1: Product: syz [ 40.985924][ T10] usb 1-1: Manufacturer: syz [ 40.994962][ T10] usb 1-1: SerialNumber: syz [ 41.208613][ T10] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 41.219971][ T10] usb 1-1: USB disconnect, device number 7 [ 41.262163][ T544] udevd[544]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.510621][ T559] syz.3.65 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 41.511556][ T388] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 41.527667][ T559] CPU: 1 UID: 0 PID: 559 Comm: syz.3.65 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 41.527696][ T559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 41.527708][ T559] Call Trace: [ 41.527714][ T559] [ 41.527722][ T559] __dump_stack+0x21/0x30 [ 41.527744][ T559] dump_stack_lvl+0x140/0x1c0 [ 41.527759][ T559] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.527776][ T559] ? ___ratelimit+0x41c/0x5c0 [ 41.527796][ T559] ? __kasan_check_write+0x18/0x20 [ 41.527819][ T559] dump_stack+0x19/0x20 [ 41.527835][ T559] dump_header+0xd9/0x460 [ 41.527858][ T559] oom_kill_process+0x35d/0x640 [ 41.527876][ T559] out_of_memory+0x5d1/0xa20 [ 41.527892][ T559] ? __cfi_out_of_memory+0x10/0x10 [ 41.527915][ T559] ? mutex_lock_killable+0x97/0x1d0 [ 41.527937][ T559] ? __cfi_mutex_lock_killable+0x10/0x10 [ 41.527958][ T559] mem_cgroup_out_of_memory+0x2c5/0x390 [ 41.527981][ T559] ? css_next_descendant_pre+0x1ec/0x210 [ 41.527999][ T559] ? __kasan_check_write+0x18/0x20 [ 41.528021][ T559] ? drain_obj_stock+0xec0/0xec0 [ 41.528044][ T559] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 41.528066][ T559] try_charge_memcg+0x925/0xe10 [ 41.528085][ T559] ? static_key_count+0x45/0x70 [ 41.528104][ T559] ? lruvec_init+0x271/0x280 [ 41.528120][ T559] ? __cfi_try_charge_memcg+0x10/0x10 [ 41.528140][ T559] ? __alloc_pages_noprof+0x35a/0x7e0 [ 41.528159][ T559] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 41.528180][ T559] __mem_cgroup_charge+0xfc/0x420 [ 41.528202][ T559] ? do_pte_missing+0x3894/0x4440 [ 41.528220][ T559] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 41.528243][ T559] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 41.528263][ T559] ? shmem_replace_folio+0x9b0/0x9b0 [ 41.528280][ T559] ? shmem_huge_global_enabled+0x2da/0x360 [ 41.528297][ T559] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 41.528313][ T559] ? __kasan_check_write+0x18/0x20 [ 41.528334][ T559] ? _raw_spin_lock+0x92/0x120 [ 41.528351][ T559] shmem_get_folio_gfp+0x5cd/0x12e0 [ 41.528368][ T559] ? shmem_get_folio+0xc0/0xc0 [ 41.528384][ T559] ? __kasan_check_write+0x18/0x20 [ 41.528405][ T559] ? inode_to_bdi+0x6d/0x100 [ 41.528425][ T559] shmem_write_begin+0xf4/0x260 [ 41.528443][ T559] generic_perform_write+0x329/0x970 [ 41.528463][ T559] ? inode_update_timestamps+0x4d1/0x6e0 [ 41.528484][ T559] ? __cfi_generic_perform_write+0x10/0x10 [ 41.528503][ T559] ? generic_write_checks_count+0x426/0x540 [ 41.528523][ T559] ? mnt_get_write_access_file+0x1af/0x3b0 [ 41.528543][ T559] ? mnt_put_write_access_file+0xc2/0x100 [ 41.528563][ T559] ? file_update_time+0x1de/0x210 [ 41.528583][ T559] shmem_file_write_iter+0x105/0x130 [ 41.528603][ T559] __kernel_write_iter+0x462/0x900 [ 41.528626][ T559] ? __cfi___kernel_write_iter+0x10/0x10 [ 41.528649][ T559] ? get_dump_page+0x165/0x220 [ 41.528667][ T559] ? __asan_memset+0x39/0x50 [ 41.528688][ T559] ? iov_iter_bvec+0xc0/0x180 [ 41.528708][ T559] dump_user_range+0xb8b/0xe60 [ 41.528733][ T559] ? __cfi_dump_user_range+0x10/0x10 [ 41.528756][ T559] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 41.528774][ T559] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 41.528792][ T559] ? elf_core_dump+0x23cf/0x3840 [ 41.528811][ T559] elf_core_dump+0x2d61/0x3840 [ 41.528831][ T559] ? __cfi_elf_core_dump+0x10/0x10 [ 41.528849][ T559] ? mas_next_slot+0xf01/0xfd0 [ 41.528875][ T559] ? dump_interrupted+0xf0/0xf0 [ 41.528902][ T559] ? filp_open+0x199/0x1f0 [ 41.528922][ T559] ? 0xffffffffff600000 [ 41.528936][ T559] do_coredump+0x20d5/0x3050 [ 41.528960][ T559] ? __cfi_do_coredump+0x10/0x10 [ 41.528982][ T559] ? asm_exc_general_protection+0x2b/0x30 [ 41.529008][ T559] ? __kasan_slab_free+0x6a/0x80 [ 41.529026][ T559] ? get_signal+0xa2a/0x1490 [ 41.529042][ T559] get_signal+0x11bf/0x1490 [ 41.529059][ T559] arch_do_signal_or_restart+0xbc/0x700 [ 41.529078][ T559] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 41.529097][ T559] ? fixup_iopl_exception+0xe2/0x2e0 [ 41.529116][ T559] irqentry_exit_to_user_mode+0x4d/0xb0 [ 41.529139][ T559] irqentry_exit+0x16/0x60 [ 41.529160][ T559] exc_general_protection+0x152/0x1e0 [ 41.529179][ T559] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 41.529202][ T559] asm_exc_general_protection+0x2b/0x30 [ 41.529222][ T559] RIP: 0033:0x7ff468d9fb21 [ 41.529237][ T559] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 41.529250][ T559] RSP: 002b:00002000000002d0 EFLAGS: 00010217 [ 41.529266][ T559] RAX: 0000000000000000 RBX: 00007ff469026180 RCX: 00007ff468d9fb19 [ 41.529278][ T559] RDX: 0000200000000300 RSI: 00002000000002d0 RDI: 0000000000000000 [ 41.529290][ T559] RBP: 00007ff468e37b70 R08: 0000200000001540 R09: 0000200000001540 [ 41.529302][ T559] R10: 0000200000001500 R11: 0000000000000246 R12: 0000000000000000 [ 41.529313][ T559] R13: 00007ff469026218 R14: 00007ff469026180 R15: 00007fff86a46fc8 [ 41.529327][ T559] [ 41.529333][ T559] memory: usage 307200kB, limit 307200kB, failcnt 23100 [ 41.741016][ T388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.800739][ T559] memory+swap: usage 431976kB, limit 9007199254740988kB, failcnt 0 [ 41.834188][ T388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.849991][ T559] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 41.864750][ T388] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.889442][ T559] Memory cgroup stats for [ 41.913428][ T388] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.929968][ T559] /syz3 [ 41.945336][ T388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.957500][ T559] : [ 41.972973][ T388] usb 2-1: config 0 descriptor?? [ 42.030177][ T559] cache 314564608 [ 42.090464][ T10] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 42.122858][ T559] rss 8192 [ 42.125999][ T559] rss_huge 0 [ 42.129377][ T559] shmem 314515456 [ 42.134534][ T559] mapped_file 4096 [ 42.138299][ T559] dirty 0 [ 42.141542][ T559] writeback 0 [ 42.144944][ T559] workingset_refault_anon 9 [ 42.149613][ T559] workingset_refault_file 2820 [ 42.155082][ T559] swap 127770624 [ 42.162503][ T559] swapcached 0 [ 42.166527][ T559] pgpgin 117795 [ 42.170208][ T559] pgpgout 40995 [ 42.173687][ T559] pgfault 11325 [ 42.177261][ T559] pgmajfault 108 [ 42.181302][ T559] inactive_anon 73650176 [ 42.185575][ T559] active_anon 240873472 [ 42.189829][ T559] inactive_file 0 [ 42.193883][ T559] active_file 49152 [ 42.197714][ T559] unevictable 0 [ 42.202546][ T559] hierarchical_memory_limit 314572800 [ 42.207949][ T559] hierarchical_memsw_limit 9223372036854771712 [ 42.214623][ T559] total_cache 314564608 [ 42.218821][ T559] total_rss 8192 [ 42.222655][ T559] total_rss_huge 0 [ 42.226658][ T559] total_shmem 314515456 [ 42.231110][ T559] total_mapped_file 4096 [ 42.235634][ T559] total_dirty 0 [ 42.239233][ T559] total_writeback 0 [ 42.244898][ T559] total_workingset_refault_anon 9 [ 42.260849][ T10] usb 3-1: device descriptor read/64, error -71 [ 42.267203][ T559] total_workingset_refault_file 2820 [ 42.279979][ T559] total_swap 127770624 [ 42.284117][ T559] total_swapcached 0 [ 42.288034][ T559] total_pgpgin 117795 [ 42.299954][ T559] total_pgpgout 40995 [ 42.303979][ T559] total_pgfault 11325 [ 42.307975][ T559] total_pgmajfault 108 [ 42.329982][ T559] total_inactive_anon 73650176 [ 42.334808][ T559] total_active_anon 240873472 [ 42.349967][ T559] total_inactive_file 0 [ 42.354169][ T559] total_active_file 49152 [ 42.358524][ T559] total_unevictable 0 [ 42.379976][ T559] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.65,pid=581,uid=0 [ 42.409992][ T559] Memory cgroup out of memory: Killed process 581 (syz.3.65) total-vm:90824kB, anon-rss:1320kB, file-rss:22996kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 42.445961][ T388] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 42.454042][ T388] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 42.456523][ T588] syz.3.65 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 42.462031][ T388] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 42.471255][ T316] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 42.492087][ T388] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 42.504802][ T10] usb 3-1: device descriptor read/64, error -71 [ 42.530583][ T588] CPU: 0 UID: 0 PID: 588 Comm: syz.3.65 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 42.530607][ T588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 42.530616][ T588] Call Trace: [ 42.530621][ T588] [ 42.530628][ T588] __dump_stack+0x21/0x30 [ 42.530650][ T588] dump_stack_lvl+0x140/0x1c0 [ 42.530664][ T588] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.530678][ T588] ? ___ratelimit+0x41c/0x5c0 [ 42.530697][ T588] ? __kasan_check_write+0x18/0x20 [ 42.530722][ T588] dump_stack+0x19/0x20 [ 42.530736][ T588] dump_header+0xd9/0x460 [ 42.530761][ T588] oom_kill_process+0x35d/0x640 [ 42.530779][ T588] out_of_memory+0x5d1/0xa20 [ 42.530796][ T588] ? __cfi_out_of_memory+0x10/0x10 [ 42.530813][ T588] ? mutex_lock_killable+0x115/0x1d0 [ 42.530835][ T588] ? __cfi_mutex_lock_killable+0x10/0x10 [ 42.530856][ T588] mem_cgroup_out_of_memory+0x2c5/0x390 [ 42.530881][ T588] ? css_next_descendant_pre+0x1ec/0x210 [ 42.530900][ T588] ? __kasan_check_write+0x18/0x20 [ 42.530922][ T588] ? drain_obj_stock+0xec0/0xec0 [ 42.530947][ T588] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 42.530972][ T588] try_charge_memcg+0x925/0xe10 [ 42.530991][ T588] ? static_key_count+0x45/0x70 [ 42.531010][ T588] ? lruvec_init+0x271/0x280 [ 42.531026][ T588] ? __cfi_try_charge_memcg+0x10/0x10 [ 42.531047][ T588] ? __alloc_pages_noprof+0x35a/0x7e0 [ 42.531069][ T588] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 42.531091][ T588] __mem_cgroup_charge+0xfc/0x420 [ 42.531112][ T588] ? do_pte_missing+0x3894/0x4440 [ 42.531131][ T588] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 42.531154][ T588] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 42.531174][ T588] ? shmem_replace_folio+0x9b0/0x9b0 [ 42.531192][ T588] ? shmem_huge_global_enabled+0x2da/0x360 [ 42.531209][ T588] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 42.531226][ T588] ? __kasan_check_write+0x18/0x20 [ 42.531247][ T588] ? _raw_spin_lock+0x92/0x120 [ 42.531265][ T588] shmem_get_folio_gfp+0x5cd/0x12e0 [ 42.531283][ T588] ? shmem_get_folio+0xc0/0xc0 [ 42.531299][ T588] ? __kasan_check_write+0x18/0x20 [ 42.531321][ T588] ? inode_to_bdi+0x6d/0x100 [ 42.531342][ T588] shmem_write_begin+0xf4/0x260 [ 42.531370][ T588] generic_perform_write+0x329/0x970 [ 42.531390][ T588] ? inode_update_timestamps+0x4d1/0x6e0 [ 42.531414][ T588] ? __cfi_generic_perform_write+0x10/0x10 [ 42.531433][ T588] ? generic_write_checks_count+0x426/0x540 [ 42.531454][ T588] ? mnt_get_write_access_file+0x1af/0x3b0 [ 42.531475][ T588] ? mnt_put_write_access_file+0xc2/0x100 [ 42.531496][ T588] ? file_update_time+0x1de/0x210 [ 42.531518][ T588] shmem_file_write_iter+0x105/0x130 [ 42.531538][ T588] __kernel_write_iter+0x462/0x900 [ 42.531563][ T588] ? __cfi___kernel_write_iter+0x10/0x10 [ 42.531586][ T588] ? get_dump_page+0x165/0x220 [ 42.531606][ T588] ? __asan_memset+0x39/0x50 [ 42.531628][ T588] ? iov_iter_bvec+0xc0/0x180 [ 42.531648][ T588] dump_user_range+0xb8b/0xe60 [ 42.531674][ T588] ? __cfi_dump_user_range+0x10/0x10 [ 42.531697][ T588] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 42.531714][ T588] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 42.531730][ T588] ? elf_core_dump+0x23cf/0x3840 [ 42.531748][ T588] elf_core_dump+0x2d61/0x3840 [ 42.531766][ T588] ? __cfi_elf_core_dump+0x10/0x10 [ 42.531783][ T588] ? mas_next_slot+0xf01/0xfd0 [ 42.531807][ T588] ? dump_interrupted+0xf0/0xf0 [ 42.531825][ T588] ? filp_open+0x199/0x1f0 [ 42.531844][ T588] ? 0xffffffffff600000 [ 42.531858][ T588] do_coredump+0x20d5/0x3050 [ 42.531883][ T588] ? __cfi_do_coredump+0x10/0x10 [ 42.531903][ T588] ? asm_exc_general_protection+0x2b/0x30 [ 42.531932][ T588] ? __kasan_slab_free+0x6a/0x80 [ 42.531948][ T588] ? get_signal+0xa2a/0x1490 [ 42.531964][ T588] get_signal+0x11bf/0x1490 [ 42.531982][ T588] arch_do_signal_or_restart+0xbc/0x700 [ 42.532002][ T588] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 42.532021][ T588] ? fixup_iopl_exception+0xe2/0x2e0 [ 42.532040][ T588] irqentry_exit_to_user_mode+0x4d/0xb0 [ 42.532064][ T588] irqentry_exit+0x16/0x60 [ 42.532086][ T588] exc_general_protection+0x152/0x1e0 [ 42.532105][ T588] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 42.532129][ T588] asm_exc_general_protection+0x2b/0x30 [ 42.532150][ T588] RIP: 0033:0x7ff468d9fb21 [ 42.532166][ T588] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 42.532180][ T588] RSP: 002b:00002000000002d0 EFLAGS: 00010217 [ 42.532197][ T588] RAX: 0000000000000000 RBX: 00007ff469026180 RCX: 00007ff468d9fb19 [ 42.532209][ T588] RDX: 0000200000000300 RSI: 00002000000002d0 RDI: 0000000000000000 [ 42.532221][ T588] RBP: 00007ff468e37b70 R08: 0000200000001540 R09: 0000200000001540 [ 42.532234][ T588] R10: 0000200000001500 R11: 0000000000000246 R12: 0000000000000000 [ 42.532245][ T588] R13: 00007ff469026218 R14: 00007ff469026180 R15: 00007fff86a46fc8 [ 42.532260][ T588] [ 42.532267][ T588] memory: usage 306372kB, limit 307200kB, failcnt 23548 [ 42.650977][ T316] usb 1-1: config 0 interface 0 has no altsetting 0 [ 42.672898][ T588] memory+swap: usage 432180kB, limit 9007199254740988kB, failcnt 0 [ 42.686594][ T316] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.00 [ 42.686621][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.713857][ T588] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 42.793018][ T316] usb 1-1: config 0 descriptor?? [ 42.795040][ T588] Memory cgroup stats for [ 42.801765][ T392] usb 2-1: USB disconnect, device number 7 [ 42.805520][ T588] /syz3 [ 43.083569][ T10] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 43.093842][ T588] : [ 43.094045][ T588] cache 314564608 [ 43.100294][ T588] rss 8192 [ 43.103356][ T588] rss_huge 0 [ 43.106648][ T588] shmem 314535936 [ 43.110439][ T588] mapped_file 0 [ 43.114074][ T588] dirty 0 [ 43.117198][ T588] writeback 0 [ 43.120741][ T588] workingset_refault_anon 9 [ 43.125347][ T588] workingset_refault_file 3011 [ 43.130499][ T588] swap 127979520 [ 43.134049][ T588] swapcached 0 [ 43.137460][ T588] pgpgin 122569 [ 43.147511][ T588] pgpgout 45769 [ 43.151204][ T588] pgfault 11598 [ 43.154668][ T588] pgmajfault 115 [ 43.158216][ T588] inactive_anon 67915776 [ 43.162902][ T588] active_anon 246628352 [ 43.167130][ T588] inactive_file 28672 [ 43.174001][ T588] active_file 0 [ 43.177536][ T588] unevictable 0 [ 43.181404][ T588] hierarchical_memory_limit 314572800 [ 43.186835][ T588] hierarchical_memsw_limit 9223372036854771712 [ 43.193286][ T588] total_cache 314564608 [ 43.197487][ T588] total_rss 8192 [ 43.201265][ T588] total_rss_huge 0 [ 43.205028][ T588] total_shmem 314535936 [ 43.209225][ T588] total_mapped_file 0 [ 43.213600][ T588] total_dirty 0 [ 43.217107][ T588] total_writeback 0 [ 43.221177][ T588] total_workingset_refault_anon 9 [ 43.227827][ T588] total_workingset_refault_file 3011 [ 43.233615][ T588] total_swap 127979520 [ 43.237837][ T588] total_swapcached 0 [ 43.241898][ T10] usb 3-1: device descriptor read/64, error -71 [ 43.248512][ T588] total_pgpgin 122569 [ 43.252686][ T588] total_pgpgout 45769 [ 43.256713][ T588] total_pgfault 11598 [ 43.260924][ T588] total_pgmajfault 115 [ 43.265034][ T588] total_inactive_anon 67915776 [ 43.269896][ T588] total_active_anon 246628352 [ 43.274932][ T588] total_inactive_file 28672 [ 43.279567][ T588] total_active_file 0 [ 43.283802][ T588] total_unevictable 0 [ 43.287839][ T588] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.65,pid=591,uid=0 [ 43.303406][ T588] Memory cgroup out of memory: Killed process 591 (syz.3.65) total-vm:90824kB, anon-rss:1448kB, file-rss:25592kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 43.390509][ T558] syz.3.65 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 43.431019][ T558] CPU: 0 UID: 0 PID: 558 Comm: syz.3.65 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 43.431049][ T558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 43.431061][ T558] Call Trace: [ 43.431067][ T558] [ 43.431075][ T558] __dump_stack+0x21/0x30 [ 43.431102][ T558] dump_stack_lvl+0x140/0x1c0 [ 43.431118][ T558] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.431134][ T558] ? ___ratelimit+0x41c/0x5c0 [ 43.431155][ T558] ? __kasan_check_write+0x18/0x20 [ 43.431180][ T558] dump_stack+0x19/0x20 [ 43.431195][ T558] dump_header+0xd9/0x460 [ 43.431219][ T558] oom_kill_process+0x35d/0x640 [ 43.431238][ T558] out_of_memory+0x5d1/0xa20 [ 43.431255][ T558] ? __cfi_out_of_memory+0x10/0x10 [ 43.431271][ T558] ? mutex_lock_killable+0x97/0x1d0 [ 43.431294][ T558] ? __cfi_mutex_lock_killable+0x10/0x10 [ 43.431318][ T558] mem_cgroup_out_of_memory+0x2c5/0x390 [ 43.431345][ T558] ? css_next_descendant_pre+0x1ec/0x210 [ 43.431363][ T558] ? __kasan_check_write+0x18/0x20 [ 43.431386][ T558] ? drain_obj_stock+0xec0/0xec0 [ 43.431410][ T558] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 43.431434][ T558] try_charge_memcg+0x925/0xe10 [ 43.431454][ T558] ? static_key_count+0x45/0x70 [ 43.431474][ T558] ? lruvec_init+0x271/0x280 [ 43.431491][ T558] ? __cfi_try_charge_memcg+0x10/0x10 [ 43.431512][ T558] ? __alloc_pages_noprof+0x35a/0x7e0 [ 43.431534][ T558] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 43.431556][ T558] __mem_cgroup_charge+0xfc/0x420 [ 43.431578][ T558] ? folio_add_lru+0x116/0x400 [ 43.431596][ T558] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 43.431621][ T558] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 43.431641][ T558] ? shmem_replace_folio+0x9b0/0x9b0 [ 43.431658][ T558] ? shmem_huge_global_enabled+0x2da/0x360 [ 43.431675][ T558] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 43.431692][ T558] ? __kasan_check_write+0x18/0x20 [ 43.431716][ T558] ? _raw_spin_lock+0x92/0x120 [ 43.431734][ T558] shmem_get_folio_gfp+0x5cd/0x12e0 [ 43.431752][ T558] ? shmem_get_folio+0xc0/0xc0 [ 43.431768][ T558] ? follow_page_pte+0x8fb/0xba0 [ 43.431798][ T558] ? inode_to_bdi+0x6d/0x100 [ 43.431819][ T558] shmem_write_begin+0xf4/0x260 [ 43.431839][ T558] generic_perform_write+0x329/0x970 [ 43.431861][ T558] ? __cfi_generic_perform_write+0x10/0x10 [ 43.431880][ T558] ? generic_write_checks_count+0x426/0x540 [ 43.431902][ T558] ? file_update_time+0xa3/0x210 [ 43.431923][ T558] shmem_file_write_iter+0x105/0x130 [ 43.431944][ T558] __kernel_write_iter+0x462/0x900 [ 43.431967][ T558] ? __cfi___kernel_write_iter+0x10/0x10 [ 43.431988][ T558] ? get_dump_page+0x165/0x220 [ 43.432008][ T558] ? __asan_memset+0x39/0x50 [ 43.432029][ T558] ? iov_iter_bvec+0xc0/0x180 [ 43.432048][ T558] dump_user_range+0xb8b/0xe60 [ 43.432074][ T558] ? __cfi_dump_user_range+0x10/0x10 [ 43.432098][ T558] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 43.432118][ T558] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 43.432137][ T558] ? elf_core_dump+0x23cf/0x3840 [ 43.432157][ T558] elf_core_dump+0x2d61/0x3840 [ 43.432178][ T558] ? __cfi_elf_core_dump+0x10/0x10 [ 43.432197][ T558] ? mas_next_slot+0xf01/0xfd0 [ 43.432224][ T558] ? dump_interrupted+0xf0/0xf0 [ 43.432247][ T558] ? filp_open+0x199/0x1f0 [ 43.432267][ T558] ? 0xffffffffff600000 [ 43.432282][ T558] do_coredump+0x20d5/0x3050 [ 43.432308][ T558] ? __cfi_do_coredump+0x10/0x10 [ 43.432330][ T558] ? asm_exc_general_protection+0x2b/0x30 [ 43.432359][ T558] ? __kasan_slab_free+0x6a/0x80 [ 43.432377][ T558] ? get_signal+0xa2a/0x1490 [ 43.432394][ T558] get_signal+0x11bf/0x1490 [ 43.432412][ T558] arch_do_signal_or_restart+0xbc/0x700 [ 43.432433][ T558] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 43.432454][ T558] ? fixup_iopl_exception+0xe2/0x2e0 [ 43.432474][ T558] irqentry_exit_to_user_mode+0x4d/0xb0 [ 43.432499][ T558] irqentry_exit+0x16/0x60 [ 43.432520][ T558] exc_general_protection+0x152/0x1e0 [ 43.432540][ T558] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 43.432566][ T558] asm_exc_general_protection+0x2b/0x30 [ 43.432588][ T558] RIP: 0033:0x7ff468d9fb21 [ 43.432603][ T558] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 43.432617][ T558] RSP: 002b:00002000000002d0 EFLAGS: 00010217 [ 43.432634][ T558] RAX: 0000000000000000 RBX: 00007ff469026180 RCX: 00007ff468d9fb19 [ 43.432647][ T558] RDX: 0000200000000300 RSI: 00002000000002d0 RDI: 0000000000000000 [ 43.432659][ T558] RBP: 00007ff468e37b70 R08: 0000200000001540 R09: 0000200000001540 [ 43.432672][ T558] R10: 0000200000001500 R11: 0000000000000246 R12: 0000000000000000 [ 43.432684][ T558] R13: 00007ff469026218 R14: 00007ff469026180 R15: 00007fff86a46fc8 [ 43.432699][ T558] [ 43.432742][ T558] memory: usage 307200kB, limit 307200kB, failcnt 25692 [ 43.727718][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 43.727734][ T36] audit: type=1400 audit(1794183728.869:287): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.729027][ T10] usb 3-1: device descriptor read/64, error -71 [ 43.734358][ T36] audit: type=1400 audit(1794183728.879:288): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 43.739140][ T558] memory+swap: usage 431604kB, limit 9007199254740988kB, failcnt 0 [ 43.972955][ T10] usb usb3-port1: attempt power cycle [ 43.978693][ T558] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 43.985648][ T558] Memory cgroup stats for /syz3: [ 43.985762][ T558] cache 314392576 [ 43.994464][ T558] rss 8192 [ 43.997514][ T558] rss_huge 0 [ 44.000952][ T558] shmem 314376192 [ 44.004592][ T558] mapped_file 0 [ 44.008053][ T558] dirty 0 [ 44.011278][ T558] writeback 0 [ 44.014565][ T558] workingset_refault_anon 9 [ 44.019066][ T558] workingset_refault_file 3944 [ 44.024124][ T558] swap 127807488 [ 44.027711][ T558] swapcached 172032 [ 44.031807][ T558] pgpgin 128659 [ 44.035277][ T558] pgpgout 51859 [ 44.038736][ T558] pgfault 11955 [ 44.042804][ T558] pgmajfault 134 [ 44.046363][ T558] inactive_anon 190828544 [ 44.050943][ T558] active_anon 123727872 [ 44.055403][ T558] inactive_file 16384 [ 44.059380][ T558] active_file 0 [ 44.063124][ T558] unevictable 0 [ 44.066585][ T558] hierarchical_memory_limit 314572800 [ 44.072176][ T558] hierarchical_memsw_limit 9223372036854771712 [ 44.078420][ T558] total_cache 314392576 [ 44.079979][ T392] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 44.082854][ T558] total_rss 8192 [ 44.093781][ T558] total_rss_huge 0 [ 44.097682][ T558] total_shmem 314376192 [ 44.102144][ T558] total_mapped_file 0 [ 44.106145][ T558] total_dirty 0 [ 44.109607][ T558] total_writeback 0 [ 44.113676][ T558] total_workingset_refault_anon 9 [ 44.118790][ T558] total_workingset_refault_file 3944 [ 44.124345][ T558] total_swap 127807488 [ 44.128423][ T558] total_swapcached 172032 [ 44.132972][ T558] total_pgpgin 128659 [ 44.137046][ T558] total_pgpgout 51859 [ 44.141264][ T558] total_pgfault 11955 [ 44.145253][ T558] total_pgmajfault 134 [ 44.149324][ T558] total_inactive_anon 190828544 [ 44.154450][ T558] total_active_anon 123727872 [ 44.159130][ T558] total_inactive_file 16384 [ 44.163887][ T558] total_active_file 0 [ 44.167908][ T558] total_unevictable 0 [ 44.172114][ T558] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.65,pid=573,uid=0 [ 44.187134][ T558] Memory cgroup out of memory: Killed process 573 (syz.3.65) total-vm:90824kB, anon-rss:1320kB, file-rss:32392kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 44.251343][ T392] usb 2-1: unable to get BOS descriptor or descriptor too short [ 44.259888][ T392] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.271496][ T392] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 44.280755][ T392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 44.288821][ T392] usb 2-1: Product: syz [ 44.293151][ T392] usb 2-1: Manufacturer: syz [ 44.305058][ T392] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 44.309971][ T10] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 44.330958][ T10] usb 3-1: device descriptor read/8, error -71 [ 44.460942][ T10] usb 3-1: device descriptor read/8, error -71 [ 44.496061][ T567] syz.3.65 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 44.513478][ T567] CPU: 0 UID: 0 PID: 567 Comm: syz.3.65 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 44.513518][ T567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 44.513530][ T567] Call Trace: [ 44.513536][ T567] [ 44.513543][ T567] __dump_stack+0x21/0x30 [ 44.513566][ T567] dump_stack_lvl+0x140/0x1c0 [ 44.513583][ T567] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.513599][ T567] ? ___ratelimit+0x41c/0x5c0 [ 44.513620][ T567] ? __kasan_check_write+0x18/0x20 [ 44.513644][ T567] dump_stack+0x19/0x20 [ 44.513660][ T567] dump_header+0xd9/0x460 [ 44.513684][ T567] oom_kill_process+0x35d/0x640 [ 44.513703][ T567] out_of_memory+0x5d1/0xa20 [ 44.513720][ T567] ? __cfi_out_of_memory+0x10/0x10 [ 44.513736][ T567] ? mutex_lock_killable+0x97/0x1d0 [ 44.513758][ T567] ? __cfi_mutex_lock_killable+0x10/0x10 [ 44.513781][ T567] mem_cgroup_out_of_memory+0x2c5/0x390 [ 44.513807][ T567] ? css_next_descendant_pre+0x1ec/0x210 [ 44.513825][ T567] ? __kasan_check_write+0x18/0x20 [ 44.513847][ T567] ? drain_obj_stock+0xec0/0xec0 [ 44.513871][ T567] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 44.513895][ T567] try_charge_memcg+0x925/0xe10 [ 44.513915][ T567] ? static_key_count+0x45/0x70 [ 44.513935][ T567] ? lruvec_init+0x271/0x280 [ 44.513952][ T567] ? __cfi_try_charge_memcg+0x10/0x10 [ 44.513972][ T567] ? __alloc_pages_noprof+0x35a/0x7e0 [ 44.513994][ T567] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 44.514015][ T567] __mem_cgroup_charge+0xfc/0x420 [ 44.514037][ T567] ? folio_add_lru+0x116/0x400 [ 44.514056][ T567] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 44.514080][ T567] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 44.514100][ T567] ? shmem_replace_folio+0x9b0/0x9b0 [ 44.514118][ T567] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 44.514140][ T567] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 44.514163][ T567] ? shmem_get_folio_gfp+0x5a4/0x12e0 [ 44.514180][ T567] ? shmem_alloc_and_add_folio+0xa/0x10b0 [ 44.514199][ T567] shmem_get_folio_gfp+0x5cd/0x12e0 [ 44.514217][ T567] ? shmem_get_folio+0xc0/0xc0 [ 44.514233][ T567] ? follow_page_pte+0x8fb/0xba0 [ 44.514253][ T567] ? inode_to_bdi+0x6d/0x100 [ 44.514274][ T567] shmem_write_begin+0xf4/0x260 [ 44.514292][ T567] generic_perform_write+0x329/0x970 [ 44.514314][ T567] ? __cfi_generic_perform_write+0x10/0x10 [ 44.514334][ T567] ? generic_write_checks_count+0x426/0x540 [ 44.514355][ T567] ? file_update_time+0xa3/0x210 [ 44.514377][ T567] shmem_file_write_iter+0x105/0x130 [ 44.514401][ T567] __kernel_write_iter+0x462/0x900 [ 44.514425][ T567] ? __cfi___kernel_write_iter+0x10/0x10 [ 44.514448][ T567] ? get_dump_page+0x165/0x220 [ 44.514468][ T567] ? __asan_memset+0x39/0x50 [ 44.514499][ T567] ? iov_iter_bvec+0xc0/0x180 [ 44.514520][ T567] dump_user_range+0xb8b/0xe60 [ 44.514545][ T567] ? __cfi_dump_user_range+0x10/0x10 [ 44.514570][ T567] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 44.514590][ T567] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 44.514609][ T567] ? elf_core_dump+0x23cf/0x3840 [ 44.514629][ T567] elf_core_dump+0x2d61/0x3840 [ 44.514650][ T567] ? __cfi_elf_core_dump+0x10/0x10 [ 44.514668][ T567] ? mas_next_slot+0xf01/0xfd0 [ 44.514695][ T567] ? dump_interrupted+0xf0/0xf0 [ 44.514717][ T567] ? filp_open+0x199/0x1f0 [ 44.514738][ T567] ? 0xffffffffff600000 [ 44.514753][ T567] do_coredump+0x20d5/0x3050 [ 44.514778][ T567] ? __cfi_do_coredump+0x10/0x10 [ 44.514800][ T567] ? asm_exc_general_protection+0x2b/0x30 [ 44.514828][ T567] ? __kasan_slab_free+0x6a/0x80 [ 44.514845][ T567] ? get_signal+0xa2a/0x1490 [ 44.514862][ T567] get_signal+0x11bf/0x1490 [ 44.514879][ T567] arch_do_signal_or_restart+0xbc/0x700 [ 44.514899][ T567] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 44.514930][ T567] ? fixup_iopl_exception+0xe2/0x2e0 [ 44.514948][ T567] irqentry_exit_to_user_mode+0x4d/0xb0 [ 44.514968][ T567] irqentry_exit+0x16/0x60 [ 44.514988][ T567] exc_general_protection+0x152/0x1e0 [ 44.515009][ T567] asm_exc_general_protection+0x2b/0x30 [ 44.515028][ T567] RIP: 0033:0x7ff468d9fb21 [ 44.515043][ T567] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 44.515055][ T567] RSP: 002b:00002000000002d0 EFLAGS: 00010217 [ 44.515071][ T567] RAX: 0000000000000000 RBX: 00007ff469026180 RCX: 00007ff468d9fb19 [ 44.515084][ T567] RDX: 0000200000000300 RSI: 00002000000002d0 RDI: 0000000000000000 [ 44.515096][ T567] RBP: 00007ff468e37b70 R08: 0000200000001540 R09: 0000200000001540 [ 44.515107][ T567] R10: 0000200000001500 R11: 0000000000000246 R12: 0000000000000000 [ 44.515120][ T567] R13: 00007ff469026218 R14: 00007ff469026180 R15: 00007fff86a46fc8 [ 44.515134][ T567] [ 44.515176][ T567] memory: usage 307200kB, limit 307200kB, failcnt 27480 [ 44.705399][ T779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.752240][ T567] memory+swap: usage 402236kB, limit 9007199254740988kB, failcnt 0 [ 44.771003][ T779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.835992][ T567] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 44.904687][ T316] usbhid 1-1:0.0: can't add hid device: -71 [ 44.930039][ T36] audit: type=1400 audit(1794183730.049:289): avc: denied { create } for pid=774 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.932750][ T316] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 44.951265][ T36] audit: type=1400 audit(1794183730.049:290): avc: denied { write } for pid=774 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.970050][ T316] usb 1-1: USB disconnect, device number 8 [ 44.982272][ T567] Memory cgroup stats for [ 45.005812][ T36] audit: type=1400 audit(1794183730.049:291): avc: denied { read } for pid=774 comm="syz.1.119" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.050039][ T567] /syz3 [ 45.070047][ T36] audit: type=1400 audit(1794183730.049:292): avc: denied { open } for pid=774 comm="syz.1.119" path="net:[4026532303]" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.106507][ T567] : [ 45.108661][ T36] audit: type=1400 audit(1794183730.049:293): avc: denied { create } for pid=774 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.152404][ T567] cache 300830720 [ 45.156464][ T392] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 45.167256][ T392] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 45.181184][ T392] usb 2-1: USB disconnect, device number 8 [ 45.204663][ T567] rss 8192 [ 45.207716][ T567] rss_huge 0 [ 45.210665][ T36] audit: type=1400 audit(1794183730.339:294): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 45.220124][ T567] shmem 297287680 [ 45.263467][ T36] audit: type=1400 audit(1794183730.399:295): avc: denied { create } for pid=790 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.270005][ T567] mapped_file 3403776 [ 45.296231][ T36] audit: type=1400 audit(1794183730.429:296): avc: denied { ioctl } for pid=790 comm="syz.2.121" path="socket:[12536]" dev="sockfs" ino=12536 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.307096][ T567] dirty 0 [ 45.326974][ T567] writeback 0 [ 45.335509][ T567] workingset_refault_anon 9 [ 45.342112][ T567] workingset_refault_file 4805 [ 45.347120][ T567] swap 127807488 [ 45.351259][ T567] swapcached 172032 [ 45.409454][ T800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'. [ 45.417844][ T567] pgpgin 134234 [ 45.422085][ T567] pgpgout 60745 [ 45.425590][ T567] pgfault 12265 [ 45.439312][ T567] pgmajfault 144 [ 45.443273][ T567] inactive_anon 97697792 [ 45.447595][ T567] active_anon 199692288 [ 45.460000][ T567] inactive_file 16384 [ 45.464078][ T567] active_file 3514368 [ 45.469840][ T567] unevictable 0 [ 45.477192][ T567] hierarchical_memory_limit 314572800 [ 45.493263][ T567] hierarchical_memsw_limit 9223372036854771712 [ 45.499726][ T567] total_cache 300830720 [ 45.499973][ T388] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 45.517335][ T567] total_rss 8192 [ 45.522053][ T567] total_rss_huge 0 [ 45.525793][ T567] total_shmem 297287680 [ 45.530205][ T567] total_mapped_file 3403776 [ 45.534727][ T567] total_dirty 0 [ 45.538185][ T567] total_writeback 0 [ 45.542359][ T567] total_workingset_refault_anon 9 [ 45.547400][ T567] total_workingset_refault_file 4805 [ 45.552958][ T567] total_swap 127807488 [ 45.557030][ T567] total_swapcached 172032 [ 45.561615][ T567] total_pgpgin 134234 [ 45.565651][ T567] total_pgpgout 60745 [ 45.569635][ T567] total_pgfault 12265 [ 45.573951][ T567] total_pgmajfault 144 [ 45.578091][ T567] total_inactive_anon 97697792 [ 45.583157][ T567] total_active_anon 199692288 [ 45.587865][ T567] total_inactive_file 16384 [ 45.592668][ T567] total_active_file 3514368 [ 45.597174][ T567] total_unevictable 0 [ 45.601387][ T567] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.65,pid=585,uid=0 [ 45.616216][ T567] Memory cgroup out of memory: Killed process 585 (syz.3.65) total-vm:90824kB, anon-rss:1448kB, file-rss:31636kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 45.638803][ T567] syz.3.65 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 45.648672][ T567] CPU: 1 UID: 0 PID: 567 Comm: syz.3.65 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 45.648703][ T567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 45.648714][ T567] Call Trace: [ 45.648720][ T567] [ 45.648727][ T567] __dump_stack+0x21/0x30 [ 45.648750][ T567] dump_stack_lvl+0x140/0x1c0 [ 45.648767][ T567] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.648785][ T567] ? ___ratelimit+0x41c/0x5c0 [ 45.648805][ T567] ? __kasan_check_write+0x18/0x20 [ 45.648830][ T567] dump_stack+0x19/0x20 [ 45.648846][ T567] dump_header+0xd9/0x460 [ 45.648870][ T567] oom_kill_process+0x35d/0x640 [ 45.648889][ T567] out_of_memory+0x5d1/0xa20 [ 45.648906][ T567] ? __cfi_out_of_memory+0x10/0x10 [ 45.648923][ T567] ? mutex_lock_killable+0x115/0x1d0 [ 45.648946][ T567] ? __cfi_mutex_lock_killable+0x10/0x10 [ 45.648969][ T567] mem_cgroup_out_of_memory+0x2c5/0x390 [ 45.648994][ T567] ? css_next_descendant_pre+0x1ec/0x210 [ 45.649011][ T567] ? __kasan_check_write+0x18/0x20 [ 45.649034][ T567] ? drain_obj_stock+0xec0/0xec0 [ 45.649058][ T567] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 45.649080][ T567] try_charge_memcg+0x925/0xe10 [ 45.649100][ T567] ? static_key_count+0x45/0x70 [ 45.649118][ T567] ? lruvec_init+0x271/0x280 [ 45.649135][ T567] ? __cfi_try_charge_memcg+0x10/0x10 [ 45.649156][ T567] ? __alloc_pages_noprof+0x35a/0x7e0 [ 45.649178][ T567] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 45.649201][ T567] __mem_cgroup_charge+0xfc/0x420 [ 45.649223][ T567] ? folio_add_lru+0x116/0x400 [ 45.649241][ T567] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 45.649266][ T567] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 45.649287][ T567] ? shmem_replace_folio+0x9b0/0x9b0 [ 45.649305][ T567] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 45.649330][ T567] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 45.649354][ T567] ? shmem_get_folio_gfp+0x5a4/0x12e0 [ 45.649371][ T567] ? shmem_alloc_and_add_folio+0xa/0x10b0 [ 45.649390][ T567] shmem_get_folio_gfp+0x5cd/0x12e0 [ 45.649409][ T567] ? shmem_get_folio+0xc0/0xc0 [ 45.649425][ T567] ? follow_page_pte+0x8fb/0xba0 [ 45.649446][ T567] ? inode_to_bdi+0x6d/0x100 [ 45.649465][ T567] shmem_write_begin+0xf4/0x260 [ 45.649482][ T567] generic_perform_write+0x329/0x970 [ 45.649501][ T567] ? __cfi_generic_perform_write+0x10/0x10 [ 45.649520][ T567] ? generic_write_checks_count+0x426/0x540 [ 45.649541][ T567] ? file_update_time+0xa3/0x210 [ 45.649564][ T567] shmem_file_write_iter+0x105/0x130 [ 45.649593][ T567] __kernel_write_iter+0x462/0x900 [ 45.649618][ T567] ? __cfi___kernel_write_iter+0x10/0x10 [ 45.649640][ T567] ? get_dump_page+0x165/0x220 [ 45.649660][ T567] ? __asan_memset+0x39/0x50 [ 45.649683][ T567] ? iov_iter_bvec+0xc0/0x180 [ 45.649704][ T567] dump_user_range+0xb8b/0xe60 [ 45.649732][ T567] ? __cfi_dump_user_range+0x10/0x10 [ 45.649756][ T567] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 45.649775][ T567] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 45.649795][ T567] ? elf_core_dump+0x23cf/0x3840 [ 45.649815][ T567] elf_core_dump+0x2d61/0x3840 [ 45.649837][ T567] ? __cfi_elf_core_dump+0x10/0x10 [ 45.649856][ T567] ? mas_next_slot+0xf01/0xfd0 [ 45.649885][ T567] ? dump_interrupted+0xf0/0xf0 [ 45.649907][ T567] ? filp_open+0x199/0x1f0 [ 45.649931][ T567] ? 0xffffffffff600000 [ 45.649944][ T567] do_coredump+0x20d5/0x3050 [ 45.649967][ T567] ? __cfi_do_coredump+0x10/0x10 [ 45.649986][ T567] ? asm_exc_general_protection+0x2b/0x30 [ 45.650012][ T567] ? __kasan_slab_free+0x6a/0x80 [ 45.650029][ T567] ? get_signal+0xa2a/0x1490 [ 45.650045][ T567] get_signal+0x11bf/0x1490 [ 45.650064][ T567] arch_do_signal_or_restart+0xbc/0x700 [ 45.650085][ T567] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 45.650105][ T567] ? fixup_iopl_exception+0xe2/0x2e0 [ 45.650125][ T567] irqentry_exit_to_user_mode+0x4d/0xb0 [ 45.650147][ T567] irqentry_exit+0x16/0x60 [ 45.650167][ T567] exc_general_protection+0x152/0x1e0 [ 45.650185][ T567] asm_exc_general_protection+0x2b/0x30 [ 45.650205][ T567] RIP: 0033:0x7ff468d9fb21 [ 45.650221][ T567] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 45.650236][ T567] RSP: 002b:00002000000002d0 EFLAGS: 00010217 [ 45.650254][ T567] RAX: 0000000000000000 RBX: 00007ff469026180 RCX: 00007ff468d9fb19 [ 45.650268][ T567] RDX: 0000200000000300 RSI: 00002000000002d0 RDI: 0000000000000000 [ 45.650280][ T567] RBP: 00007ff468e37b70 R08: 0000200000001540 R09: 0000200000001540 [ 45.650293][ T567] R10: 0000200000001500 R11: 0000000000000246 R12: 0000000000000000 [ 45.650304][ T567] R13: 00007ff469026218 R14: 00007ff469026180 R15: 00007fff86a46fc8 [ 45.650319][ T567] [ 45.651021][ T388] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 45.666115][ T567] memory: usage 306848kB, limit 307200kB, failcnt 28420 [ 45.679980][ T388] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 45.692835][ T567] memory+swap: usage 424712kB, limit 9007199254740988kB, failcnt 0 [ 45.731099][ T388] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 45.744591][ T804] syz.1.127 uses obsolete (PF_INET,SOCK_PACKET) [ 45.758169][ T388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.765847][ T567] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 45.768084][ T388] usb 1-1: Product: syz [ 45.775896][ T567] Memory cgroup stats for [ 45.777590][ T388] usb 1-1: Manufacturer: syz [ 45.803360][ T567] /syz3 [ 45.810006][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 45.815450][ T567] : [ 45.830028][ T388] usb 1-1: SerialNumber: syz [ 45.848498][ T807] input: syz0 as /devices/virtual/input/input8 [ 45.854898][ T567] cache 290713600 [ 45.891843][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 45.908061][ T567] rss 69632 [ 45.912888][ T388] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 45.918374][ T567] rss_huge 0 [ 45.923140][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.930033][ T567] shmem 290701312 [ 45.931534][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.937860][ T567] mapped_file 0 [ 45.944884][ T388] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 45.944884][ T388] Please send a copy of this message to and [ 45.958364][ T567] dirty 0 [ 45.959395][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.968083][ T567] writeback 0 [ 45.968893][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 45.973343][ T567] workingset_refault_anon 32 [ 45.979951][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.982151][ T567] workingset_refault_file 4952 [ 45.990750][ T10] usb 3-1: config 0 descriptor?? [ 45.995591][ T567] swap 124624896 [ 46.315504][ T793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.357449][ T567] swapcached 249856 [ 46.360185][ T793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.361315][ T567] pgpgin 138678 [ 46.388097][ T567] pgpgout 67639 [ 46.391822][ T567] pgfault 12301 [ 46.395303][ T567] pgmajfault 159 [ 46.398859][ T567] inactive_anon 203128832 [ 46.403565][ T567] active_anon 87834624 [ 46.407732][ T567] inactive_file 12288 [ 46.416432][ T567] active_file 0 [ 46.420930][ T567] unevictable 0 [ 46.424779][ T567] hierarchical_memory_limit 314572800 [ 46.424937][ T388] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 46.430208][ T567] hierarchical_memsw_limit 9223372036854771712 [ 46.445814][ T567] total_cache 290713600 [ 46.450026][ T567] total_rss 69632 [ 46.453653][ T567] total_rss_huge 0 [ 46.457433][ T567] total_shmem 290701312 [ 46.461630][ T567] total_mapped_file 0 [ 46.470356][ T567] total_dirty 0 [ 46.479196][ T567] total_writeback 0 [ 46.483333][ T567] total_workingset_refault_anon 32 [ 46.489953][ T567] total_workingset_refault_file 4952 [ 46.495478][ T567] total_swap 124624896 [ 46.499740][ T567] total_swapcached 249856 [ 46.504241][ T567] total_pgpgin 138678 [ 46.508345][ T567] total_pgpgout 67639 [ 46.512697][ T567] total_pgfault 12301 [ 46.516690][ T567] total_pgmajfault 159 [ 46.520847][ T567] total_inactive_anon 203128832 [ 46.525698][ T567] total_active_anon 87834624 [ 46.530323][ T567] total_inactive_file 12288 [ 46.536347][ T567] total_active_file 0 [ 46.545143][ T567] total_unevictable 0 [ 46.549162][ T567] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.65,pid=576,uid=0 [ 46.563800][ T567] Memory cgroup out of memory: Killed process 576 (syz.3.65) total-vm:90824kB, anon-rss:1320kB, file-rss:37532kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 46.713116][ T565] syz.3.65 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 46.783409][ T565] CPU: 0 UID: 0 PID: 565 Comm: syz.3.65 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 46.783441][ T565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 46.783454][ T565] Call Trace: [ 46.783460][ T565] [ 46.783468][ T565] __dump_stack+0x21/0x30 [ 46.783492][ T565] dump_stack_lvl+0x140/0x1c0 [ 46.783510][ T565] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.783527][ T565] ? ___ratelimit+0x41c/0x5c0 [ 46.783548][ T565] ? __kasan_check_write+0x18/0x20 [ 46.783574][ T565] dump_stack+0x19/0x20 [ 46.783589][ T565] dump_header+0xd9/0x460 [ 46.783613][ T565] oom_kill_process+0x35d/0x640 [ 46.783632][ T565] out_of_memory+0x5d1/0xa20 [ 46.783650][ T565] ? __cfi_out_of_memory+0x10/0x10 [ 46.783667][ T565] ? mutex_lock_killable+0x115/0x1d0 [ 46.783690][ T565] ? __cfi_mutex_lock_killable+0x10/0x10 [ 46.783714][ T565] mem_cgroup_out_of_memory+0x2c5/0x390 [ 46.783740][ T565] ? css_next_descendant_pre+0x1ec/0x210 [ 46.783759][ T565] ? __kasan_check_write+0x18/0x20 [ 46.783782][ T565] ? drain_obj_stock+0xec0/0xec0 [ 46.783807][ T565] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 46.783832][ T565] try_charge_memcg+0x925/0xe10 [ 46.783851][ T565] ? static_key_count+0x45/0x70 [ 46.783871][ T565] ? lruvec_init+0x271/0x280 [ 46.783889][ T565] ? __cfi_try_charge_memcg+0x10/0x10 [ 46.783909][ T565] ? __alloc_pages_noprof+0x35a/0x7e0 [ 46.783932][ T565] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 46.783954][ T565] __mem_cgroup_charge+0xfc/0x420 [ 46.783978][ T565] ? folio_add_lru+0x116/0x400 [ 46.783996][ T565] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 46.784021][ T565] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 46.784043][ T565] ? shmem_replace_folio+0x9b0/0x9b0 [ 46.784062][ T565] ? shmem_huge_global_enabled+0x2da/0x360 [ 46.784080][ T565] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 46.784097][ T565] ? __kasan_check_write+0x18/0x20 [ 46.784120][ T565] ? _raw_spin_lock+0x92/0x120 [ 46.784138][ T565] shmem_get_folio_gfp+0x5cd/0x12e0 [ 46.784158][ T565] ? shmem_get_folio+0xc0/0xc0 [ 46.784174][ T565] ? follow_page_pte+0x8fb/0xba0 [ 46.784195][ T565] ? inode_to_bdi+0x6d/0x100 [ 46.784216][ T565] shmem_write_begin+0xf4/0x260 [ 46.784236][ T565] generic_perform_write+0x329/0x970 [ 46.784258][ T565] ? __cfi_generic_perform_write+0x10/0x10 [ 46.784278][ T565] ? generic_write_checks_count+0x426/0x540 [ 46.784299][ T565] ? file_update_time+0xa3/0x210 [ 46.784327][ T565] shmem_file_write_iter+0x105/0x130 [ 46.784349][ T565] __kernel_write_iter+0x462/0x900 [ 46.784373][ T565] ? __cfi___kernel_write_iter+0x10/0x10 [ 46.784398][ T565] ? get_dump_page+0x165/0x220 [ 46.784418][ T565] ? __asan_memset+0x39/0x50 [ 46.784441][ T565] ? iov_iter_bvec+0xc0/0x180 [ 46.784462][ T565] dump_user_range+0xb8b/0xe60 [ 46.784489][ T565] ? __cfi_dump_user_range+0x10/0x10 [ 46.784513][ T565] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 46.784534][ T565] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 46.784553][ T565] ? elf_core_dump+0x23cf/0x3840 [ 46.784573][ T565] elf_core_dump+0x2d61/0x3840 [ 46.784594][ T565] ? __cfi_elf_core_dump+0x10/0x10 [ 46.784613][ T565] ? mas_next_slot+0xf01/0xfd0 [ 46.784642][ T565] ? dump_interrupted+0xf0/0xf0 [ 46.784664][ T565] ? filp_open+0x199/0x1f0 [ 46.784685][ T565] ? 0xffffffffff600000 [ 46.784700][ T565] do_coredump+0x20d5/0x3050 [ 46.784726][ T565] ? __cfi_do_coredump+0x10/0x10 [ 46.784749][ T565] ? asm_exc_general_protection+0x2b/0x30 [ 46.784778][ T565] ? __kasan_slab_free+0x6a/0x80 [ 46.784797][ T565] ? get_signal+0xa2a/0x1490 [ 46.784815][ T565] get_signal+0x11bf/0x1490 [ 46.784833][ T565] arch_do_signal_or_restart+0xbc/0x700 [ 46.784854][ T565] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 46.784876][ T565] ? fixup_iopl_exception+0xe2/0x2e0 [ 46.784897][ T565] irqentry_exit_to_user_mode+0x4d/0xb0 [ 46.784922][ T565] irqentry_exit+0x16/0x60 [ 46.784944][ T565] exc_general_protection+0x152/0x1e0 [ 46.784964][ T565] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 46.784990][ T565] asm_exc_general_protection+0x2b/0x30 [ 46.785012][ T565] RIP: 0033:0x7ff468d9fb21 [ 46.785029][ T565] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 46.785043][ T565] RSP: 002b:00002000000002d0 EFLAGS: 00010217 [ 46.785060][ T565] RAX: 0000000000000000 RBX: 00007ff469026180 RCX: 00007ff468d9fb19 [ 46.785074][ T565] RDX: 0000200000000300 RSI: 00002000000002d0 RDI: 0000000000000000 [ 46.785088][ T565] RBP: 00007ff468e37b70 R08: 0000200000001540 R09: 0000200000001540 [ 46.785102][ T565] R10: 0000200000001500 R11: 0000000000000246 R12: 0000000000000000 [ 46.785114][ T565] R13: 00007ff469026218 R14: 00007ff469026180 R15: 00007fff86a46fc8 [ 46.785130][ T565] [ 46.949720][ T823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.130019][ T10] sony 0003:054C:042F.0007: can't set operational mode: step 1 [ 47.159967][ T565] memory: usage 303476kB, limit 307200kB, failcnt 30730 [ 47.161147][ T10] sony 0003:054C:042F.0007: Failed to set controller into operational mode [ 47.200562][ T565] memory+swap: usage 431964kB, limit 9007199254740988kB, failcnt 0 [ 47.250128][ T10] sony 0003:054C:042F.0007: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.2-1/input0 [ 47.260098][ T823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.279393][ T10] sony 0003:054C:042F.0007: failed to claim input [ 47.326390][ T388] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 47.337825][ T565] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 47.376592][ T10] usb 3-1: USB disconnect, device number 10 [ 47.405138][ T565] Memory cgroup stats for /syz3: [ 47.405274][ T565] cache 314425344 [ 47.429895][ T565] rss 69632 [ 47.433076][ T565] rss_huge 0 [ 47.436336][ T565] shmem 314408960 [ 47.440047][ T565] mapped_file 0 [ 47.443515][ T565] dirty 0 [ 47.446452][ T565] writeback 0 [ 47.449745][ T565] workingset_refault_anon 35 [ 47.454415][ T565] workingset_refault_file 6252 [ 47.459173][ T565] swap 127844352 [ 47.463498][ T565] swapcached 135168 [ 47.467362][ T565] pgpgin 157536 [ 47.471118][ T565] pgpgout 80736 [ 47.474696][ T565] pgfault 13337 [ 47.478199][ T565] pgmajfault 197 [ 47.483098][ T565] inactive_anon 180682752 [ 47.487445][ T565] active_anon 133873664 [ 47.491755][ T388] usb 2-1: Using ep0 maxpacket: 8 [ 47.497908][ T388] usb 2-1: config 0 has no interfaces? [ 47.504965][ T388] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 47.514151][ T388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.522279][ T388] usb 2-1: Product: syz [ 47.526531][ T388] usb 2-1: Manufacturer: syz [ 47.531519][ T565] inactive_file 0 [ 47.532490][ T388] usb 2-1: SerialNumber: syz [ 47.543838][ T565] active_file 16384 [ 47.547954][ T565] unevictable 0 [ 47.551970][ T388] usb 2-1: config 0 descriptor?? [ 47.557817][ T565] hierarchical_memory_limit 314572800 [ 47.563346][ T565] hierarchical_memsw_limit 9223372036854771712 [ 47.570545][ T565] total_cache 314425344 [ 47.577119][ T565] total_rss 69632 [ 47.580861][ T565] total_rss_huge 0 [ 47.584682][ T565] total_shmem 314408960 [ 47.588886][ T565] total_mapped_file 0 [ 47.592911][ T565] total_dirty 0 [ 47.596455][ T565] total_writeback 0 [ 47.600417][ T565] total_workingset_refault_anon 35 [ 47.605610][ T565] total_workingset_refault_file 6252 [ 47.610961][ T565] total_swap 127844352 [ 47.615024][ T565] total_swapcached 135168 [ 47.619354][ T565] total_pgpgin 157536 [ 47.623428][ T565] total_pgpgout 80736 [ 47.627405][ T565] total_pgfault 13337 [ 47.631424][ T565] total_pgmajfault 197 [ 47.635540][ T565] total_inactive_anon 180682752 [ 47.640456][ T565] total_active_anon 133873664 [ 47.645134][ T565] total_inactive_file 0 [ 47.649330][ T565] total_active_file 16384 [ 47.653706][ T565] total_unevictable 0 [ 47.657682][ T565] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.65,pid=567,uid=0 [ 47.672386][ T565] Memory cgroup out of memory: Killed process 567 (syz.3.65) total-vm:90824kB, anon-rss:1320kB, file-rss:32616kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 47.741557][ T558] syz.3.65 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 47.857099][ T558] CPU: 0 UID: 0 PID: 558 Comm: syz.3.65 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 47.857130][ T558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 47.857142][ T558] Call Trace: [ 47.857148][ T558] [ 47.857156][ T558] __dump_stack+0x21/0x30 [ 47.857179][ T558] dump_stack_lvl+0x140/0x1c0 [ 47.857196][ T558] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.857213][ T558] ? ___ratelimit+0x41c/0x5c0 [ 47.857234][ T558] ? __kasan_check_write+0x18/0x20 [ 47.857258][ T558] dump_stack+0x19/0x20 [ 47.857275][ T558] dump_header+0xd9/0x460 [ 47.857299][ T558] oom_kill_process+0x35d/0x640 [ 47.857318][ T558] out_of_memory+0x5d1/0xa20 [ 47.857335][ T558] ? __cfi_out_of_memory+0x10/0x10 [ 47.857352][ T558] ? mutex_lock_killable+0x97/0x1d0 [ 47.857375][ T558] ? __cfi_mutex_lock_killable+0x10/0x10 [ 47.857400][ T558] mem_cgroup_out_of_memory+0x2c5/0x390 [ 47.857425][ T558] ? css_next_descendant_pre+0x1ec/0x210 [ 47.857443][ T558] ? __kasan_check_write+0x18/0x20 [ 47.857466][ T558] ? drain_obj_stock+0xec0/0xec0 [ 47.857491][ T558] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 47.857516][ T558] try_charge_memcg+0x925/0xe10 [ 47.857536][ T558] ? static_key_count+0x45/0x70 [ 47.857556][ T558] ? lruvec_init+0x271/0x280 [ 47.857573][ T558] ? __cfi_try_charge_memcg+0x10/0x10 [ 47.857594][ T558] ? __alloc_pages_noprof+0x35a/0x7e0 [ 47.857616][ T558] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 47.857638][ T558] __mem_cgroup_charge+0xfc/0x420 [ 47.857661][ T558] ? do_pte_missing+0x3894/0x4440 [ 47.857682][ T558] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 47.857706][ T558] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 47.857727][ T558] ? shmem_replace_folio+0x9b0/0x9b0 [ 47.857746][ T558] ? shmem_huge_global_enabled+0x2da/0x360 [ 47.857765][ T558] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 47.857783][ T558] ? __kasan_check_write+0x18/0x20 [ 47.857807][ T558] ? _raw_spin_lock+0x92/0x120 [ 47.857825][ T558] shmem_get_folio_gfp+0x5cd/0x12e0 [ 47.857844][ T558] ? shmem_get_folio+0xc0/0xc0 [ 47.857860][ T558] ? __kasan_check_write+0x18/0x20 [ 47.857883][ T558] ? inode_to_bdi+0x6d/0x100 [ 47.857905][ T558] shmem_write_begin+0xf4/0x260 [ 47.857923][ T558] generic_perform_write+0x329/0x970 [ 47.857942][ T558] ? inode_update_timestamps+0x4d1/0x6e0 [ 47.857991][ T558] ? __cfi_generic_perform_write+0x10/0x10 [ 47.858011][ T558] ? generic_write_checks_count+0x426/0x540 [ 47.858033][ T558] ? mnt_get_write_access_file+0x1af/0x3b0 [ 47.858054][ T558] ? mnt_put_write_access_file+0xc2/0x100 [ 47.858074][ T558] ? file_update_time+0x1de/0x210 [ 47.858095][ T558] shmem_file_write_iter+0x105/0x130 [ 47.858116][ T558] __kernel_write_iter+0x462/0x900 [ 47.858144][ T558] ? __cfi___kernel_write_iter+0x10/0x10 [ 47.858168][ T558] ? get_dump_page+0x165/0x220 [ 47.858189][ T558] ? __asan_memset+0x39/0x50 [ 47.858211][ T558] ? iov_iter_bvec+0xc0/0x180 [ 47.858232][ T558] dump_user_range+0xb8b/0xe60 [ 47.858258][ T558] ? __cfi_dump_user_range+0x10/0x10 [ 47.858282][ T558] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 47.858302][ T558] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 47.858322][ T558] ? elf_core_dump+0x23cf/0x3840 [ 47.858343][ T558] elf_core_dump+0x2d61/0x3840 [ 47.858365][ T558] ? __cfi_elf_core_dump+0x10/0x10 [ 47.858384][ T558] ? mas_next_slot+0xf01/0xfd0 [ 47.858413][ T558] ? dump_interrupted+0xf0/0xf0 [ 47.858436][ T558] ? filp_open+0x199/0x1f0 [ 47.858456][ T558] ? 0xffffffffff600000 [ 47.858472][ T558] do_coredump+0x20d5/0x3050 [ 47.858498][ T558] ? __cfi_do_coredump+0x10/0x10 [ 47.858521][ T558] ? asm_exc_general_protection+0x2b/0x30 [ 47.858547][ T558] ? __kasan_slab_free+0x6a/0x80 [ 47.858563][ T558] ? get_signal+0xa2a/0x1490 [ 47.858579][ T558] get_signal+0x11bf/0x1490 [ 47.858595][ T558] arch_do_signal_or_restart+0xbc/0x700 [ 47.858614][ T558] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 47.858646][ T558] ? fixup_iopl_exception+0xe2/0x2e0 [ 47.858667][ T558] irqentry_exit_to_user_mode+0x4d/0xb0 [ 47.858690][ T558] irqentry_exit+0x16/0x60 [ 47.858709][ T558] exc_general_protection+0x152/0x1e0 [ 47.858727][ T558] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 47.858751][ T558] asm_exc_general_protection+0x2b/0x30 [ 47.858770][ T558] RIP: 0033:0x7ff468d9fb21 [ 47.858786][ T558] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 47.858800][ T558] RSP: 002b:00002000000002d0 EFLAGS: 00010217 [ 47.858815][ T558] RAX: 0000000000000000 RBX: 00007ff469026180 RCX: 00007ff468d9fb19 [ 47.858827][ T558] RDX: 0000200000000300 RSI: 00002000000002d0 RDI: 0000000000000000 [ 47.858837][ T558] RBP: 00007ff468e37b70 R08: 0000200000001540 R09: 0000200000001540 [ 47.858848][ T558] R10: 0000200000001500 R11: 0000000000000246 R12: 0000000000000000 [ 47.858857][ T558] R13: 00007ff469026218 R14: 00007ff469026180 R15: 00007fff86a46fc8 [ 47.858870][ T558] [ 47.921736][ T558] memory: usage 305880kB, limit 307200kB, failcnt 32722 [ 48.358715][ T388] usb 1-1: USB disconnect, device number 9 [ 48.457902][ T558] memory+swap: usage 431720kB, limit 9007199254740988kB, failcnt 0 [ 48.494297][ T558] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 48.532541][ T857] ./dev/sda1: Can't lookup blockdev [ 48.535228][ T558] Memory cgroup stats for /syz3: [ 48.537957][ T558] cache 314130432 [ 48.549293][ T558] rss 61440 [ 48.561659][ T854] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.581705][ T854] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.596583][ T558] rss_huge 0 [ 48.604168][ T854] bridge_slave_0: entered allmulticast mode [ 48.621525][ T854] bridge_slave_0: entered promiscuous mode [ 48.642513][ T854] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.662607][ T854] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.686737][ T854] bridge_slave_1: entered allmulticast mode [ 48.692737][ T388] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 48.710893][ T854] bridge_slave_1: entered promiscuous mode [ 48.742600][ T558] shmem 314068992 [ 48.822238][ T558] mapped_file 0 [ 48.825815][ T558] dirty 0 [ 48.828844][ T558] writeback 0 [ 48.832170][ T558] workingset_refault_anon 35 [ 48.836804][ T558] workingset_refault_file 8703 [ 48.841604][ T558] swap 127488000 [ 48.845159][ T558] swapcached 438272 [ 48.849003][ T558] pgpgin 170823 [ 48.853242][ T558] pgpgout 94023 [ 48.856766][ T558] pgfault 14008 [ 48.856887][ T388] usb 1-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 48.860553][ T558] pgmajfault 224 [ 48.880497][ T558] inactive_anon 174616576 [ 48.884916][ T558] active_anon 139894784 [ 48.889073][ T558] inactive_file 0 [ 48.900309][ T854] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.907378][ T854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.914684][ T854] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.921731][ T854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.933506][ T388] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 48.961087][ T388] usb 1-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 48.969961][ T558] active_file 61440 [ 48.970294][ T388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 48.974121][ T558] unevictable 0 [ 48.987062][ T388] usb 1-1: Product: syz [ 48.996184][ T388] usb 1-1: Manufacturer: syz [ 49.010779][ T388] uvcvideo 1-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 49.021460][ T388] usb 1-1: Found UVC 1.00 device syz (046d:0821) [ 49.021586][ T844] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.027906][ T388] usb 1-1: No streaming interface found for terminal 2. [ 49.046507][ T844] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.051342][ T558] hierarchical_memory_limit 314572800 [ 49.059015][ T558] hierarchical_memsw_limit 9223372036854771712 [ 49.072893][ T558] total_cache 314130432 [ 49.101577][ T841] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.108685][ T841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.120363][ T841] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.127532][ T841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.158099][ T854] veth0_vlan: entered promiscuous mode [ 49.163652][ T558] total_rss 61440 [ 49.167305][ T558] total_rss_huge 0 [ 49.180798][ T854] veth1_macvtap: entered promiscuous mode [ 49.204825][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 49.204840][ T36] audit: type=1400 audit(1794183734.339:333): avc: denied { mounton } for pid=854 comm="syz-executor" path="/root/syzkaller.AwG1hs/syz-tmp" dev="sda1" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 49.217657][ T448] usb 1-1: USB disconnect, device number 10 [ 49.241176][ T36] audit: type=1400 audit(1794183734.379:334): avc: denied { mount } for pid=854 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.249974][ T861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.270106][ T36] audit: type=1400 audit(1794183734.379:335): avc: denied { mounton } for pid=854 comm="syz-executor" path="/root/syzkaller.AwG1hs/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.292936][ T861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.312505][ T36] audit: type=1400 audit(1794183734.379:336): avc: denied { mounton } for pid=854 comm="syz-executor" path="/root/syzkaller.AwG1hs/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 49.341572][ T558] total_shmem 314068992 [ 49.360064][ T36] audit: type=1400 audit(1794183734.439:337): avc: denied { mounton } for pid=854 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 49.390345][ T558] total_mapped_file 0 [ 49.390713][ T36] audit: type=1400 audit(1794183734.439:338): avc: denied { mount } for pid=854 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.397052][ T558] total_dirty 0 [ 49.421488][ T865] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.429487][ T36] audit: type=1400 audit(1794183734.439:339): avc: denied { mounton } for pid=854 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 49.454074][ T865] rust_binder: 863:865 error while translating object: EINVAL [ 49.460345][ T36] audit: type=1400 audit(1794183734.439:340): avc: denied { mount } for pid=854 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 49.461925][ T392] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 49.492045][ T865] rust_binder: 863:865 transaction async to 863:0 failed EINVAL, code 1 size 72-24 line thread.rs:867 [ 49.492951][ T36] audit: type=1400 audit(1794183734.559:341): avc: denied { read } for pid=863 comm="syz.4.134" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.543064][ T66] usb 2-1: USB disconnect, device number 9 [ 49.559125][ T36] audit: type=1400 audit(1794183734.559:342): avc: denied { open } for pid=863 comm="syz.4.134" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.602453][ T558] total_writeback 0 [ 49.606405][ T558] total_workingset_refault_anon 35 [ 49.626775][ T558] total_workingset_refault_file 8703 [ 49.653917][ T558] total_swap 127488000 [ 49.660367][ T871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 49.680203][ T392] usb 3-1: Using ep0 maxpacket: 16 [ 49.686427][ T392] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.689616][ T558] total_swapcached 438272 [ 49.701700][ T392] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.723652][ T392] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.742916][ T392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.763904][ T392] usb 3-1: Product: syz [ 49.768189][ T392] usb 3-1: Manufacturer: syz [ 49.779965][ T392] usb 3-1: SerialNumber: syz [ 49.791938][ T558] total_pgpgin 170823 [ 49.793543][ T448] rust_binder: 863: undelivered TRANSACTION_COMPLETE [ 49.808424][ T448] rust_binder: 863: undelivered TRANSACTION_ERROR: 29201 [ 49.815707][ T316] rust_binder: 863: undelivered transaction 5, process died [ 49.826436][ T558] total_pgpgout 94023 [ 49.840035][ T558] total_pgfault 14008 [ 49.844050][ T558] total_pgmajfault 224 [ 49.878601][ T558] total_inactive_anon 174616576 [ 49.899980][ T558] total_active_anon 139894784 [ 49.904709][ T558] total_inactive_file 0 [ 49.945809][ T880] overlay: Unknown parameter 'measure' [ 49.951473][ T558] total_active_file 61440 [ 49.960558][ T884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.979736][ T884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.989748][ T558] total_unevictable 0 [ 49.994185][ T558] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.65,pid=587,uid=0 [ 50.020656][ T392] usb 3-1: 0:2 : does not exist [ 50.030020][ T558] Memory cgroup out of memory: Killed process 587 (syz.3.65) total-vm:90824kB, anon-rss:1320kB, file-rss:36240kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000 [ 50.060703][ T392] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 50.073847][ T392] usb 3-1: USB disconnect, device number 11 [ 50.102502][ T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.199979][ T448] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 50.369985][ T448] usb 1-1: Using ep0 maxpacket: 32 [ 50.376580][ T448] usb 1-1: unable to get BOS descriptor or descriptor too short [ 50.387195][ T448] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.401918][ T448] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 50.421511][ T448] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 50.444897][ T448] usb 1-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 50.453146][ T448] usb 1-1: Product: syz [ 50.457323][ T448] usb 1-1: Manufacturer: syz [ 50.462640][ T448] usb 1-1: SerialNumber: syz [ 50.502635][ T841] bridge_slave_1: left allmulticast mode [ 50.518687][ T841] bridge_slave_1: left promiscuous mode [ 50.524601][ T841] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.534708][ T841] bridge_slave_0: left allmulticast mode [ 50.544961][ T841] bridge_slave_0: left promiscuous mode [ 50.553981][ T841] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.600425][ T896] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 50.702848][ T841] veth1_macvtap: left promiscuous mode [ 50.830020][ T841] veth0_vlan: left promiscuous mode [ 51.259975][ T66] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 51.419998][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 51.429869][ T66] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.444478][ T66] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 51.453889][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.462414][ T66] usb 2-1: Product: ࠧ [ 51.466730][ T66] usb 2-1: Manufacturer: ш [ 51.471668][ T66] usb 2-1: SerialNumber: ѕ [ 51.686594][ T66] usbhid 2-1:1.0: can't add hid device: -71 [ 51.693079][ T66] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 51.705336][ T66] usb 2-1: USB disconnect, device number 10 [ 51.899998][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 52.051353][ T10] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 52.059545][ T10] usb 3-1: config 1 has no interface number 0 [ 52.069827][ T10] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 8 [ 52.080068][ T10] usb 3-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 52.092456][ T10] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 52.101846][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.110254][ T10] usb 3-1: Product: syz [ 52.114664][ T10] usb 3-1: Manufacturer: syz [ 52.119327][ T10] usb 3-1: SerialNumber: syz [ 52.127615][ T909] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 52.948343][ T448] usb 1-1: 3:0: cannot get min/max values for control 2 (id 3) [ 52.961949][ T448] usb 1-1: 3:0: cannot get min/max values for control 8 (id 3) [ 52.970097][ T448] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 52.982496][ T923] netlink: 'syz.1.154': attribute type 49 has an invalid length. [ 52.987509][ T448] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 53.002393][ T448] usb 1-1: USB disconnect, device number 11 [ 53.056797][ T923] team_slave_1: entered promiscuous mode [ 53.063854][ T923] team_slave_1: entered allmulticast mode [ 53.469994][ T448] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 53.621290][ T448] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.633981][ T448] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 53.644865][ T448] usb 1-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 53.654666][ T448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.662906][ T448] usb 1-1: Product: syz [ 53.667243][ T448] usb 1-1: Manufacturer: syz [ 53.672119][ T448] usb 1-1: SerialNumber: syz [ 53.825184][ T961] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.884718][ T448] usb 1-1: Can't get UAC3 power state for id 11 [ 53.892076][ T448] usb 1-1: 5:0: failed to get current value for ch 0 (-71) [ 53.901834][ T448] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 53.915250][ T448] usb 1-1: USB disconnect, device number 12 [ 54.089997][ T66] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 54.249983][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 54.260114][ T66] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 108, changing to 7 [ 54.271232][ T66] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 54.291104][ T66] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 54.300275][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.308312][ T66] usb 2-1: Product: ᠫ押篼헖猸૯ᨽ藮䇩Ỉ傑Ȅ섏佊晇⡷췣贜瑇핂텙䱽 [ 54.319447][ T66] usb 2-1: Manufacturer: ဇ [ 54.324220][ T66] usb 2-1: SerialNumber: syz [ 54.471564][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 54.471582][ T36] audit: type=1400 audit(1794183739.609:389): avc: denied { read } for pid=966 comm="syz.0.160" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.500825][ T36] audit: type=1400 audit(1794183739.639:390): avc: denied { open } for pid=966 comm="syz.0.160" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.524649][ T36] audit: type=1400 audit(1794183739.639:391): avc: denied { ioctl } for pid=966 comm="syz.0.160" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.640038][ T974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.163'. [ 54.651080][ T974] Zero length message leads to an empty skb [ 54.680134][ T9] usb 3-1: USB disconnect, device number 12 [ 54.696745][ T36] audit: type=1400 audit(1794183739.829:392): avc: denied { create } for pid=977 comm="syz.2.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 54.722982][ T36] audit: type=1400 audit(1794183739.829:393): avc: denied { name_bind } for pid=977 comm="syz.2.165" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 54.743742][ T66] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.745941][ T36] audit: type=1400 audit(1794183739.829:394): avc: denied { node_bind } for pid=977 comm="syz.2.165" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 54.771891][ T66] usb 2-1: USB disconnect, device number 11 [ 54.808386][ T36] audit: type=1400 audit(1794183739.859:395): avc: denied { create } for pid=975 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.828020][ T36] audit: type=1400 audit(1794183739.859:396): avc: denied { setopt } for pid=975 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.861299][ T36] audit: type=1400 audit(1794183739.859:397): avc: denied { read } for pid=975 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.880869][ T36] audit: type=1400 audit(1794183739.869:398): avc: denied { read write } for pid=960 comm="syz.1.158" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 55.159998][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 55.274081][ T1004] SELinux: policydb magic number 0x4000000 does not match expected magic number 0xf97cff8c [ 55.284471][ T1004] SELinux: failed to load policy [ 55.291326][ T1004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 55.321424][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 55.331072][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 55.339569][ T9] usb 1-1: config 15 has 0 interfaces, different from the descriptor's value: 1 [ 55.353439][ T9] usb 1-1: New USB device found, idVendor=3285, idProduct=ba35, bcdDevice=83.64 [ 55.362704][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.370754][ T9] usb 1-1: Product: syz [ 55.386136][ T9] usb 1-1: Manufacturer: syz [ 55.390893][ T9] usb 1-1: SerialNumber: syz [ 55.602877][ T9] usb 1-1: USB disconnect, device number 13 [ 55.669981][ T66] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 55.759977][ T392] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 55.819987][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 55.826318][ T66] usb 3-1: config 3 has an invalid interface number: 160 but max is 0 [ 55.834622][ T66] usb 3-1: config 3 has no interface number 0 [ 55.840821][ T66] usb 3-1: config 3 interface 160 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 55.850828][ T66] usb 3-1: config 3 interface 160 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 55.862264][ T66] usb 3-1: config 3 interface 160 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 55.872336][ T66] usb 3-1: config 3 interface 160 has no altsetting 0 [ 55.891808][ T66] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 55.904424][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.910669][ T392] usb 2-1: not running at top speed; connect to a high speed hub [ 55.921054][ T66] usb 3-1: Product: syz [ 55.926177][ T66] usb 3-1: Manufacturer: syz [ 55.930641][ T392] usb 2-1: config 6 has an invalid interface number: 6 but max is 0 [ 55.930954][ T66] usb 3-1: SerialNumber: syz [ 55.938832][ T392] usb 2-1: config 6 has no interface number 0 [ 55.945909][ T1013] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 55.956769][ T392] usb 2-1: config 6 interface 6 has no altsetting 0 [ 55.964840][ T392] usb 2-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=b4.d9 [ 55.973999][ T392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.982057][ T392] usb 2-1: Product: syz [ 55.986366][ T392] usb 2-1: Manufacturer: syz [ 55.991048][ T392] usb 2-1: SerialNumber: syz [ 56.172083][ T66] usb 3-1: USB disconnect, device number 13 [ 56.211317][ T392] uvcvideo 2-1:6.6: Found Unit with invalid ID 0 [ 56.230484][ T392] usb 2-1: Found UVC 0.00 device syz (174f:8a12) [ 56.236865][ T392] usb 2-1: No valid video chain found. [ 56.259618][ T392] usb 2-1: USB disconnect, device number 12 [ 56.685953][ T1036] SELinux: policydb magic number 0x72666c65 does not match expected magic number 0xf97cff8c [ 56.699434][ T1036] SELinux: failed to load policy [ 56.750287][ T1038] device-mapper: table: 252:0: crypt: Error decoding and setting key (-EINVAL) [ 56.779085][ T1038] device-mapper: ioctl: error adding target to table [ 56.982278][ T1054] rust_binder: 1053:1054 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 56.990719][ T1054] rust_binder: Write failure EINVAL in pid:200 [ 57.050027][ T392] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 57.199986][ T66] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 57.208649][ T392] usb 1-1: config 127 has an invalid interface number: 57 but max is 0 [ 57.217187][ T392] usb 1-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 57.227685][ T392] usb 1-1: config 127 has no interface number 0 [ 57.234164][ T392] usb 1-1: too many endpoints for config 127 interface 57 altsetting 0: 232, using maximum allowed: 30 [ 57.245652][ T392] usb 1-1: config 127 interface 57 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 232 [ 57.260840][ T392] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 57.269902][ T392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.278160][ T392] usb 1-1: Product: syz [ 57.282522][ T392] usb 1-1: Manufacturer: syz [ 57.287155][ T392] usb 1-1: SerialNumber: syz [ 57.319981][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 57.361093][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.372234][ T66] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 57.381468][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.390434][ T66] usb 2-1: config 0 descriptor?? [ 57.489984][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 57.496749][ T392] asix 1-1:127.57: probe with driver asix failed with error -22 [ 57.496853][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 57.515808][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 57.527122][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 57.541274][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 57.550627][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.560169][ T10] usb 3-1: config 0 descriptor?? [ 57.600201][ T66] usbhid 2-1:0.0: can't add hid device: -71 [ 57.610254][ T66] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 57.623939][ T66] usb 2-1: USB disconnect, device number 13 [ 57.699343][ T388] usb 1-1: USB disconnect, device number 14 [ 57.770776][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x1 [ 57.778222][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x0 [ 57.785715][ T10] wacom 0003:056A:00B8.0008: unknown main item tag 0x4 [ 57.793254][ T10] wacom 0003:056A:00B8.0008: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 57.814015][ T10] wacom 0003:056A:00B8.0008: hidraw0: USB HID vc.52 Device [HID 056a:00b8] on usb-dummy_hcd.2-1/input0 [ 57.837606][ T10] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B8.0008/input/input10 [ 57.950007][ T66] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 57.970337][ T1057] netlink: 'syz.2.185': attribute type 4 has an invalid length. [ 58.032330][ T388] usb 3-1: USB disconnect, device number 14 [ 58.101529][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.112761][ T66] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 58.122041][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.134127][ T66] usb 2-1: config 0 descriptor?? [ 58.550071][ T66] usbhid 2-1:0.0: can't add hid device: -71 [ 58.560427][ T66] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 58.574091][ T66] usb 2-1: USB disconnect, device number 14 [ 58.706244][ T1070] netlink: 64 bytes leftover after parsing attributes in process `syz.2.189'. [ 58.949986][ T392] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 59.102982][ T392] usb 3-1: Using ep0 maxpacket: 16 [ 59.120998][ T392] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.138874][ T392] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.150424][ T392] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.163428][ T392] usb 3-1: string descriptor 0 read error: -71 [ 59.169650][ T392] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.181454][ T392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 59.198055][ T392] usb 3-1: can't set config #1, error -71 [ 59.212641][ T392] usb 3-1: USB disconnect, device number 15 [ 59.377580][ T1086] netlink: 40 bytes leftover after parsing attributes in process `syz.1.195'. [ 59.386910][ T1086] netlink: 40 bytes leftover after parsing attributes in process `syz.1.195'. [ 59.453085][ T1086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 59.559987][ T45] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 59.690380][ T45] usb 1-1: device descriptor read/64, error -71 [ 59.697639][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 59.697657][ T36] audit: type=1400 audit(1700000001.609:430): avc: denied { mount } for pid=1087 comm="syz.2.196" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.886325][ T1092] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.888832][ T36] audit: type=1400 audit(1700000001.789:431): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.913467][ T1092] rust_binder: 1090:1092 got reply transaction with no transaction stack [ 59.922210][ T1093] rust_binder: 1090:1093 got reply transaction with no transaction stack [ 59.930921][ T45] usb 1-1: device descriptor read/64, error -71 [ 59.937294][ T1092] rust_binder: 1090:1092 transaction reply to 0:0 failed EINVAL, code 1 size 80-24 line thread.rs:1556 [ 59.948879][ T1093] rust_binder: 1090:1093 transaction reply to 0:0 failed EINVAL, code 1 size 80-24 line thread.rs:1556 [ 60.011095][ T1092] rust_binder: Error in use_page_slow: ESRCH [ 60.017708][ T1092] rust_binder: use_range failure ESRCH [ 60.023595][ T1092] rust_binder: 1090:1092 transaction async to 1090:0 failed ESRCH, code 1 size 0-0 line process.rs:1128 [ 60.180023][ T45] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 60.230802][ T36] audit: type=1400 audit(1700000002.149:432): avc: denied { read } for pid=1094 comm="syz.1.198" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 60.261033][ T36] audit: type=1400 audit(1700000002.149:433): avc: denied { open } for pid=1094 comm="syz.1.198" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 60.284742][ T36] audit: type=1400 audit(1700000002.149:434): avc: denied { ioctl } for pid=1094 comm="syz.1.198" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 60.319975][ T45] usb 1-1: device descriptor read/64, error -71 [ 60.399307][ T1102] input: syz1 as /devices/virtual/input/input13 [ 60.407775][ T1102] ------------[ cut here ]------------ [ 60.413428][ T1102] WARNING: CPU: 0 PID: 1102 at mm/page_alloc.c:5286 __alloc_pages_noprof+0x109/0x7e0 [ 60.419974][ T36] audit: type=1400 audit(1700000002.319:435): avc: denied { accept } for pid=1101 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.422991][ T1102] Modules linked in: [ 60.446767][ T1102] CPU: 0 UID: 0 PID: 1102 Comm: syz.1.200 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 60.458510][ T1102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 60.468830][ T1102] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 60.474863][ T1102] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d eb ef 89 06 00 0f 85 c2 00 00 00 c6 05 de ef 89 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 60.494510][ T1102] RSP: 0018:ffffc9000ee27520 EFLAGS: 00010246 [ 60.500640][ T1102] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 60.508632][ T1102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000ee275d8 [ 60.516652][ T1102] RBP: ffffc9000ee27660 R08: ffffc9000ee275d7 R09: 0000000000000000 [ 60.524673][ T1102] R10: ffffc9000ee275c0 R11: fffff52001dc4ebb R12: ffffc9000ee27560 [ 60.532691][ T1102] R13: dffffc0000000000 R14: 1ffff92001dc4ea8 R15: 0000000000000000 [ 60.540718][ T1102] FS: 00007fca7dfde6c0(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 60.549667][ T1102] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.556295][ T1102] CR2: 0000200000010000 CR3: 00000001149ee000 CR4: 00000000003526b0 [ 60.564336][ T1102] Call Trace: [ 60.567637][ T1102] [ 60.570683][ T1102] ? vfs_write+0x3c1/0xfd0 [ 60.575125][ T1102] ? ksys_write+0x145/0x260 [ 60.579751][ T1102] ? x64_sys_call+0x271c/0x2ee0 [ 60.579994][ T45] usb 1-1: device descriptor read/64, error -71 [ 60.584688][ T1102] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 60.596781][ T1102] ? hashtab_init+0xd6/0x1f0 [ 60.601435][ T1102] ___kmalloc_large_node+0x81/0x220 [ 60.606749][ T1102] ? hashtab_init+0xd6/0x1f0 [ 60.611393][ T1102] __kmalloc_large_node_noprof+0x1e/0xd0 [ 60.617055][ T1102] ? hashtab_init+0xd6/0x1f0 [ 60.621708][ T1102] __kmalloc_noprof+0x326/0x510 [ 60.626570][ T1102] ? kasan_save_alloc_info+0x3a/0x50 [ 60.631910][ T1102] hashtab_init+0xd6/0x1f0 [ 60.636338][ T1102] ? class_read+0x17f/0x8a0 [ 60.640907][ T1102] symtab_init+0x44/0x70 [ 60.645167][ T1102] class_read+0x208/0x8a0 [ 60.649506][ T1102] ? __kasan_kmalloc+0x96/0xb0 [ 60.654408][ T1102] ? hashtab_init+0xd6/0x1f0 [ 60.659007][ T1102] ? __cfi_class_read+0x10/0x10 [ 60.663966][ T1102] ? hashtab_init+0x100/0x1f0 [ 60.668657][ T1102] policydb_read+0xa83/0x2860 [ 60.673376][ T1102] ? __kasan_kmalloc+0x96/0xb0 [ 60.678243][ T1102] ? __cfi_policydb_read+0x10/0x10 [ 60.683414][ T1102] ? security_load_policy+0x130/0x12d0 [ 60.688927][ T1102] security_load_policy+0x16a/0x12d0 [ 60.694272][ T1102] ? irqentry_exit+0x4a/0x60 [ 60.698890][ T1102] ? __kasan_check_write+0x18/0x20 [ 60.700097][ T45] usb usb1-port1: attempt power cycle [ 60.704052][ T1102] ? mutex_lock+0x97/0x1d0 [ 60.713853][ T1102] ? __cfi_security_load_policy+0x10/0x10 [ 60.719396][ T448] rust_binder: 1090: undelivered TRANSACTION_ERROR: 29201 [ 60.719598][ T1102] ? rep_movs_alternative+0x4a/0xa0 [ 60.726996][ T448] rust_binder: 1090: undelivered TRANSACTION_ERROR: 29201 [ 60.731936][ T1102] sel_write_load+0x258/0x600 [ 60.743734][ T1102] ? __cfi_futex_wake+0x10/0x10 [ 60.748596][ T1102] ? __cfi_sel_write_load+0x10/0x10 [ 60.753845][ T1102] ? bpf_lsm_file_permission+0xd/0x20 [ 60.759231][ T1102] ? __cfi_sel_write_load+0x10/0x10 [ 60.764472][ T1102] vfs_write+0x3c1/0xfd0 [ 60.768730][ T1102] ? __cfi_vfs_write+0x10/0x10 [ 60.773546][ T1102] ? __kasan_check_write+0x18/0x20 [ 60.778666][ T1102] ? mutex_lock+0x97/0x1d0 [ 60.783131][ T1102] ? __cfi_mutex_lock+0x10/0x10 [ 60.788000][ T1102] ksys_write+0x145/0x260 [ 60.792376][ T1102] ? xfd_validate_state+0x68/0x140 [ 60.797493][ T1102] ? __cfi_ksys_write+0x10/0x10 [ 60.802406][ T1102] ? __kasan_check_write+0x18/0x20 [ 60.807533][ T1102] ? fpregs_restore_userregs+0x11c/0x260 [ 60.813220][ T1102] __x64_sys_write+0x7f/0x90 [ 60.817820][ T1102] x64_sys_call+0x271c/0x2ee0 [ 60.822543][ T1102] do_syscall_64+0x57/0xf0 [ 60.826970][ T1102] ? clear_bhb_loop+0x50/0xa0 [ 60.831695][ T1102] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.837610][ T1102] RIP: 0033:0x7fca7d19fb19 [ 60.842159][ T1102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.861803][ T1102] RSP: 002b:00007fca7dfde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 60.870273][ T1102] RAX: ffffffffffffffda RBX: 00007fca7d425fa0 RCX: 00007fca7d19fb19 [ 60.878290][ T1102] RDX: 000000000000febc RSI: 0000200000000280 RDI: 0000000000000007 [ 60.886317][ T1102] RBP: 00007fca7d237b70 R08: 0000000000000000 R09: 0000000000000000 [ 60.894331][ T1102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.902356][ T1102] R13: 00007fca7d426038 R14: 00007fca7d425fa0 R15: 00007fff363a6d48 [ 60.910358][ T1102] [ 60.913391][ T1102] ---[ end trace 0000000000000000 ]--- [ 60.919184][ T1102] SELinux: failed to load policy [ 60.921054][ T392] rust_binder: 1090: undelivered TRANSACTION_ERROR: 29201 [ 61.049996][ T45] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 61.071007][ T45] usb 1-1: device descriptor read/8, error -71 [ 61.201052][ T45] usb 1-1: device descriptor read/8, error -71 [ 61.440031][ T45] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 61.461051][ T45] usb 1-1: device descriptor read/8, error -71 [ 61.611032][ T45] usb 1-1: device descriptor read/8, error -71 [ 61.720051][ T45] usb usb1-port1: unable to enumerate USB device