last executing test programs: 4.524156396s ago: executing program 2 (id=2371): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x120, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0xe8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x810}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 4.523734056s ago: executing program 2 (id=2372): syz_usb_connect$uac1(0x4, 0xa4, &(0x7f0000000080)=ANY=[@ANYRES64], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000480)={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0xffffffffffffffff, 0x4c011a, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @private0={0xfc, 0x0, '\x00', 0x20}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r4}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./tracing/dynamic_events\x00', &(0x7f0000000080)='rootfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r8, &(0x7f0000000140)="653a6d796d737231206d73722f722d3bd4d6706a2fa295b11af47d3507f2997fd66d8a793d86ebce6cf76325bdc4f6326007e352cf34a7ca3f1f978c1ff0ed91381e8da7c17e4e6b3f58af24c7", 0x4d) keyctl$set_reqkey_keyring(0xe, 0x1) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x10}]}) close_range(r9, 0xffffffffffffffff, 0x200000000000000) r10 = getpgid(0x0) r11 = landlock_create_ruleset(&(0x7f00000000c0)={0xc0d8, 0x1}, 0x44, 0x0) landlock_restrict_self(r11, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r10, 0x0) pidfd_send_signal(r12, 0x21, 0x0, 0x4) socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYBLOB='\a'], 0x0) 2.276192253s ago: executing program 3 (id=2387): socket$inet_tcp(0x2, 0x1, 0x0) gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="240000002000150000000000fffffffe0a000000020200002c900000080010800400d00007a883d39c9073328ed81c63b1842e0e6389fed67469dec9942b00146793b6547c3146fdbecea8def0de299fc0265d7632d34f1d72da41567316c5248c1fda4c882824fbbfa48796a45fa22cf5248c24efbc0b0d1c05d184aa30298905f8c7ea6a32bb5c6cb577af9c034d0355313cabb3d42d1a2d4ceef2d8f71054cf98a77f5abb7a076654fb719dfa8fd47579e38a4dafbdd3a1bba25837bc6388396051d579af74d6ddf339ee91033c96c80d03f87b66abd2509f762f945fe10913addb"], 0x24}], 0x1}, 0x800) write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESDEC=r1], 0xfdef) 2.249590834s ago: executing program 3 (id=2388): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000006c0)) 2.233727814s ago: executing program 3 (id=2389): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x8, &(0x7f0000000340)={0x0, 0x778f, 0x80, 0x3, 0x330}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$unix(0x1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x8427, 0x2000000, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.128124697s ago: executing program 3 (id=2390): r0 = socket(0x1, 0x2, 0x1) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x6af7, &(0x7f00000003c0)={0x0, 0xb6fa, 0x200, 0x7, 0xdd, 0x0, r1}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x801, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0xffff, 0xe, 0x80, 0xfff}]}) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000100)=0xffffffff, 0x4) syz_usb_control_io$sierra_net(r4, 0x0, &(0x7f0000001280)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="401604000000906a60071304acb37f42"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="200de5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) 1.517421152s ago: executing program 2 (id=2392): unshare(0x64000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x24040844) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000480)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x24008800) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5381}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x1, 0xfffc, 0x8003}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', r5, 0x1, 0x8050, 0x5, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @loopback}}}}) 1.424175505s ago: executing program 2 (id=2393): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x62) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0/../file0\x00', 0x800) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f0000000100)={[{@name={'name', 0x3d, 'qt.,\xac\xa7@\xef\xac\r\xbd\xe6\xec\xa64\x10*o\xe4\xc2\xd2\xa3\x02h\xd3\xee\xbao\xfe\x17\xfc\x0f\xedU\x7f\xdc\x005\x1f\xaaAa\x19V\xc6Ks9\xe6\xa8\xbc\x97\xe6\x1d,\xc4\x16\x8b[h~\t\x04\xdb\xe8\x14\x81\xae\x04\x9fX\xf0`W\x01\xd8\xb4Q\xc9\x96R\xd0\xcf\x85\xcfX\x9d\xdd\x89>Y\x8a\x95\xd7\xde@0R[\xd5'}}]}) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) futimesat(r0, &(0x7f0000000280)='./file1\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) write$cgroup_devices(r2, 0x0, 0x21) r3 = socket$netlink(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x8) listen(r3, 0xf5) 1.342443457s ago: executing program 0 (id=2394): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) 1.271282248s ago: executing program 0 (id=2395): r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./mysys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0000:00:03.0', 0xc) 1.21218963s ago: executing program 0 (id=2396): socket$inet_tcp(0x2, 0x1, 0x0) gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESDEC=r1], 0xfdef) 1.19971161s ago: executing program 0 (id=2397): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000006c0)) 1.182446341s ago: executing program 0 (id=2398): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x14, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x6, r2, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) prctl$PR_SET_VMA(0x42, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) socket$packet(0x11, 0x2, 0x300) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x2, r6, 0x0, 0x0}, 0x10) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x30) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000000)={0x5, 0x2, 0xe, 0x4, 0x30, 0xfb, 0x34}, 0xc) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.112074433s ago: executing program 0 (id=2399): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) socket(0x1e, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x1943, &(0x7f0000000480)={0x0, 0x5fc5, 0x1, 0xffffffff, 0x3b5}, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x7104, 0x2202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x81, 0x90, 0xbe, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x3, [], [{{0x9, 0x5, 0x8d, 0x3, 0x220, 0x7f, 0xfa, 0xf8, {0x4}}}]}}}}}]}}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, r2, r1, r3, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r0, r4, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 597.799605ms ago: executing program 2 (id=2400): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x120, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0xe8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x900}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 579.525806ms ago: executing program 2 (id=2401): syz_usb_connect$uac1(0x4, 0xa4, &(0x7f0000000080)=ANY=[@ANYRES64], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000480)={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0xffffffffffffffff, 0x4c011a, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @private0={0xfc, 0x0, '\x00', 0x20}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r4}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./tracing/dynamic_events\x00', &(0x7f0000000080)='rootfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r8, &(0x7f0000000140)="653a6d796d737231206d73722f722d3bd4d6706a2fa295b11af47d3507f2997fd66d8a793d86ebce6cf76325bdc4f6326007e352cf34a7ca3f1f978c1ff0ed91381e8da7c17e4e6b3f58af24c7", 0x4d) keyctl$set_reqkey_keyring(0xe, 0x1) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x10}]}) close_range(r9, 0xffffffffffffffff, 0x200000000000000) r10 = getpgid(0x0) r11 = landlock_create_ruleset(&(0x7f00000000c0)={0xc0d8, 0x1}, 0x44, 0x0) landlock_restrict_self(r11, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r10, 0x0) pidfd_send_signal(r12, 0x21, 0x0, 0x4) socket$xdp(0x2c, 0x3, 0x0) r13 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r13, @ANYBLOB='\a'], 0x0) 164.612236ms ago: executing program 1 (id=2406): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000006c0)) 108.616808ms ago: executing program 1 (id=2407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x28, r1, 0x1, 0x70bd28, 0x25dfdc00, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x14}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) 108.378738ms ago: executing program 1 (id=2408): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x62) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0/../file0\x00', 0x800) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f0000000100)={[{@name={'name', 0x3d, 'qt.,\xac\xa7@\xef\xac\r\xbd\xe6\xec\xa64\x10*o\xe4\xc2\xd2\xa3\x02h\xd3\xee\xbao\xfe\x17\xfc\x0f\xedU\x7f\xdc\x005\x1f\xaaAa\x19V\xc6Ks9\xe6\xa8\xbc\x97\xe6\x1d,\xc4\x16\x8b[h~\t\x04\xdb\xe8\x14\x81\xae\x04\x9fX\xf0`W\x01\xd8\xb4Q\xc9\x96R\xd0\xcf\x85\xcfX\x9d\xdd\x89>Y\x8a\x95\xd7\xde@0R[\xd5'}}]}) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) futimesat(r0, &(0x7f0000000280)='./file1\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) write$cgroup_devices(r2, 0x0, 0x21) r3 = socket$netlink(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x8) listen(r3, 0xf5) 107.979088ms ago: executing program 1 (id=2409): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000001f, &(0x7f00000005c0)=0x1, 0x4) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) listen(r1, 0xf5) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = eventfd2(0x9, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000001480)={0x1, r6}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) writev(r2, &(0x7f0000001400)=[{&(0x7f0000000100)="b74ca6c0782e5e18c1410cf846aab141565c5ccc017f0487617132497586ba84db4a1ec581ec7ac34d5bfb79e96cecf6308de6cd285c9b6ee408fe831f09b93d7e0bc5bba7d0b3d5870bd0ccb5d783559ffe17e7f43e9caffb82aca787ab7081", 0x60}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="0ef86b49c90cf3195ee62d61d1829715d9a89bbe552cfa7ba07a8d2fe3cd53741defc6cd85ceb7691d52b69b9a675c2d347c05a1d7f65e1056a132510270ee14159dda25f86456f6f038084d4b0e7fc76f00aef28dc29a4969c7aa6f190ad11d2bd2d572a36f9809a5a4f3f71070d4b496b868095889c3cb75c275e0a0bf430ea3d79ff9262d0953a6c5791091e007d0ec31332abba1be3d9557fa7e5336e7ace7b67812040d9e8ee6df785efa65c862fbcff1b7422f0a6190ac7512eea34d7bc76fa25a3777899957fe3f232db783993567c64bed65a3474c96704950", 0xdd}, {&(0x7f0000001280)="3e2340e125d26f68fe4c1a91ff5c55173e81d07418f99c9518f83ad8a84aaadf93ff982d3be2fbb7265b4c748f4451bfdd67bc1bf779bc6530507a6e5671b3a0f594ae088dda8e", 0x47}, {&(0x7f0000001300)="b19d0881aefd50a92d506481f689480e8ddcdc2a2ef2116815a66941afc2578e3cbdc29da3e647dae927f5c4fc654a93c87b9f88320277761545833450d33c4d7d3de3432cd0cedfb66fc97ffc18c187defcf03501300638ac174157396b40fdd5c4ae7b0ba427ff413e3b70dc3bb7ef13f82028134d980d2398d8285253f5bcf6d7cce170568d8729b1fc5c4f292799ee889f0689ecc0c7bc36b9a82729de462272da3926fa41ddbb6e66cab5bd31cc51c4224acaee8537e94c1c0106a26dd216cee857e558864c604bfaa066c819d7fe934041", 0xd4}], 0x5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) close_range(r7, r7, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="64000000010401"], 0x64}, 0x1, 0x0, 0x0, 0x20000484}, 0x20008004) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@broadcast, @empty, 0x1, 0x6, [@broadcast, @remote, @multicast2, @broadcast, @private=0xa010100, @local]}, 0x28) 69.934159ms ago: executing program 3 (id=2410): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x3) write$FUSE_DIRENT(r1, &(0x7f0000000340)=ANY=[], 0x128) read(r1, &(0x7f0000000080)=""/119, 0x77) 63.682409ms ago: executing program 1 (id=2411): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff, 0x0, 0x0, 0x7}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff, 0x0, 0x0, 0x7}]}, 0x10) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x19) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000040)="99a188ec76ecac33bd59e99b1dbdd204e578911614437db63392f1388f1ddb9581346e115704a80c18dbe7a5bffbc16df011c9a15ec9b1be03b531b13cf167fb6656a20ce8378d90850d9de2fe99709f4c6383c74f905e6d1f9dac7b06e79f287b958c841c90dd50e64520a0d338cceeca464b4e8c780c4387a41f49180767de5dbbf76e4750036b56") connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 55.087459ms ago: executing program 3 (id=2412): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) (fail_nth: 1) 0s ago: executing program 1 (id=2413): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) kernel console output (not intermixed with test programs): ] usb 3-1: config 0 descriptor?? [ 131.733592][ T5082] CPU: 1 UID: 0 PID: 5082 Comm: syz.1.2068 Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 131.733686][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.733729][ T5082] Call Trace: [ 131.733758][ T5082] [ 131.733781][ T5082] __dump_stack+0x21/0x30 [ 131.733890][ T5082] dump_stack_lvl+0x140/0x1c0 [ 131.733982][ T5082] ? __cfi_dump_stack_lvl+0x10/0x10 [ 131.734065][ T5082] ? ___ratelimit+0x41c/0x5c0 [ 131.734146][ T5082] ? __kasan_check_write+0x18/0x20 [ 131.734210][ T5082] dump_stack+0x19/0x20 [ 131.734292][ T5082] dump_header+0xd9/0x460 [ 131.734375][ T5082] oom_kill_process+0x35d/0x640 [ 131.734449][ T5082] out_of_memory+0x5d1/0xa20 [ 131.734521][ T5082] ? __cfi_out_of_memory+0x10/0x10 [ 131.734585][ T5082] ? mutex_lock_killable+0x97/0x1d0 [ 131.734715][ T5082] ? __cfi_mutex_lock_killable+0x10/0x10 [ 131.734817][ T5082] mem_cgroup_out_of_memory+0x2c5/0x390 [ 131.734897][ T5082] ? css_next_descendant_pre+0x1ec/0x210 [ 131.734998][ T5082] ? __kasan_check_write+0x18/0x20 [ 131.735084][ T5082] ? drain_obj_stock+0xec0/0xec0 [ 131.735157][ T5082] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 131.735181][ T5082] try_charge_memcg+0x925/0xe10 [ 131.735213][ T5082] ? static_key_count+0x45/0x70 [ 131.735312][ T5082] ? __cfi_gfp_zone+0x1/0x10 [ 131.735385][ T5082] ? __cfi_try_charge_memcg+0x10/0x10 [ 131.735476][ T5082] ? __alloc_pages_noprof+0x35a/0x7e0 [ 131.735569][ T5082] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 131.735671][ T5082] ? _raw_spin_lock+0x92/0x120 [ 131.735749][ T5082] __mem_cgroup_charge+0xfc/0x420 [ 131.735810][ T5082] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 131.735871][ T5082] ? __pte_alloc+0x1ae/0x440 [ 131.735934][ T5082] folio_prealloc+0x67/0x220 [ 131.736023][ T5082] do_pte_missing+0x16af/0x4440 [ 131.736105][ T5082] ? schedule+0xc5/0x240 [ 131.736174][ T5082] ? __futex_wait+0x330/0x3d0 [ 131.736235][ T5082] ? pte_marker_clear+0x1b0/0x1b0 [ 131.736350][ T5082] ? __cfi_futex_wake_mark+0x10/0x10 [ 131.736457][ T5082] ? futex_wake+0x666/0x950 [ 131.736510][ T5082] handle_mm_fault+0x1189/0x1ba0 [ 131.736594][ T5082] ? __cfi_handle_mm_fault+0x10/0x10 [ 131.736673][ T5082] ? lock_vma_under_rcu+0x4cf/0x590 [ 131.736747][ T5082] ? kfree+0x158/0x440 [ 131.736809][ T5082] ? __se_sys_futex+0x13c/0x320 [ 131.736900][ T5082] do_user_addr_fault+0x951/0x1230 [ 131.737004][ T5082] ? fpregs_restore_userregs+0x11c/0x260 [ 131.737087][ T5082] exc_page_fault+0x58/0xc0 [ 131.737175][ T5082] asm_exc_page_fault+0x2b/0x30 [ 131.737256][ T5082] RIP: 0033:0x7fb80fa571b6 [ 131.737309][ T5082] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 9c d9 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 131.737369][ T5082] RSP: 002b:00007fb810abef60 EFLAGS: 00010206 [ 131.737429][ T5082] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000c00000 [ 131.737476][ T5082] RDX: 00000000000025f5 RSI: 0000200000c00000 RDI: 0000200000c01000 [ 131.737526][ T5082] RBP: 00007fb80fc54600 R08: 0000000000000000 R09: 0000000000000006 [ 131.737568][ T5082] R10: 0000000000000006 R11: 0000000000000000 R12: 00000000003ff000 [ 131.737609][ T5082] R13: 0000200000c00000 R14: 00007fb80fe25fa0 R15: 0000000000000000 [ 131.737691][ T5082] [ 131.737721][ T5082] memory: usage 0kB, limit 0kB, failcnt 19 [ 131.755019][ T5067] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 131.760483][ T5082] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 131.795439][ T5053] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=9 sclass=netlink_xfrm_socket pid=5053 comm=syz.0.2056 [ 131.799116][ T5082] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 131.799137][ T5082] Memory cgroup stats for /syz1/syz2 [ 131.813259][ T5053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.814108][ T5082] : [ 131.819667][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 131.824926][ T5082] cache 0 [ 131.831231][ T5053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.836403][ T5082] rss 0 [ 131.843355][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 131.848053][ T5082] rss_huge 0 [ 131.856314][ T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 131.862004][ T5082] shmem 0 [ 131.869601][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.869833][ T62] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 131.875991][ T5082] mapped_file 0 [ 131.882582][ T5082] dirty 0 [ 131.890019][ T62] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 131.893162][ T5082] writeback 0 [ 131.897986][ T10] usb 4-1: Product: syz [ 131.903083][ T5082] workingset_refault_anon 0 [ 131.909791][ T10] usb 4-1: Manufacturer: syz [ 131.914430][ T5082] workingset_refault_file 0 [ 131.916258][ T10] usb 4-1: SerialNumber: syz [ 131.921474][ T5082] swap 0 [ 131.927744][ T62] usbhid 1-1:0.0: can't add hid device: -71 [ 131.932211][ T5082] swapcached 0 [ 131.936904][ T62] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 131.941568][ T5082] pgpgin 90 [ 131.975832][ T62] usb 1-1: USB disconnect, device number 5 [ 132.194081][ T513] konepure 0003:1E7D:2DBE.0002: item fetching failed at offset 5/7 [ 132.197471][ T5082] pgpgout 6222 [ 132.214839][ T10] usb 4-1: USB disconnect, device number 8 [ 132.215494][ T5082] pgfault 152 [ 132.223373][ T513] konepure 0003:1E7D:2DBE.0002: parse failed [ 132.226182][ T5082] pgmajfault 0 [ 132.240029][ T513] konepure 0003:1E7D:2DBE.0002: probe with driver konepure failed with error -22 [ 132.244937][ T5082] inactive_anon 0 [ 132.278177][ T5082] active_anon 0 [ 132.281713][ T5082] inactive_file 0 [ 132.285383][ T5082] active_file 0 [ 132.288864][ T5082] unevictable 0 [ 132.293278][ T5082] hierarchical_memory_limit 0 [ 132.298824][ T5082] hierarchical_memsw_limit 9223372036854771712 [ 132.305212][ T5082] total_cache 0 [ 132.308234][ T5049] udevd[5049]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 132.308694][ T5082] total_rss 0 [ 132.328039][ T5082] total_rss_huge 0 [ 132.331926][ T5082] total_shmem 0 [ 132.335429][ T5082] total_mapped_file 0 [ 132.339677][ T5082] total_dirty 0 [ 132.343281][ T5082] total_writeback 0 [ 132.347122][ T5082] total_workingset_refault_anon 0 [ 132.352448][ T5082] total_workingset_refault_file 0 [ 132.357558][ T5082] total_swap 0 [ 132.361014][ T5082] total_swapcached 0 [ 132.365036][ T5082] total_pgpgin 90 [ 132.368693][ T5082] total_pgpgout 6222 [ 132.372777][ T5082] total_pgfault 152 [ 132.376787][ T5082] total_pgmajfault 0 [ 132.380898][ T5082] total_inactive_anon 0 [ 132.385084][ T5082] total_active_anon 0 [ 132.389165][ T5082] total_inactive_file 0 [ 132.390202][ T9] usb 3-1: USB disconnect, device number 6 [ 132.393935][ T5082] total_active_file 0 [ 132.416729][ T5082] total_unevictable 0 [ 132.420968][ T5082] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz1/syz2,task_memcg=/syz1/syz2,task=syz.1.2068,pid=5081,uid=0 [ 132.440800][ T5082] Memory cgroup out of memory: Killed process 5081 (syz.1.2068) total-vm:94236kB, anon-rss:1236kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 132.772563][ T5111] syz.0.2080 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 132.782513][ T5111] CPU: 0 UID: 0 PID: 5111 Comm: syz.0.2080 Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 132.782552][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.782568][ T5111] Call Trace: [ 132.782577][ T5111] [ 132.782588][ T5111] __dump_stack+0x21/0x30 [ 132.782628][ T5111] dump_stack_lvl+0x140/0x1c0 [ 132.782662][ T5111] ? __cfi_dump_stack_lvl+0x10/0x10 [ 132.782696][ T5111] ? ___ratelimit+0x41c/0x5c0 [ 132.782728][ T5111] ? __kasan_check_write+0x18/0x20 [ 132.782755][ T5111] dump_stack+0x19/0x20 [ 132.782788][ T5111] dump_header+0xd9/0x460 [ 132.782820][ T5111] oom_kill_process+0x35d/0x640 [ 132.782849][ T5111] out_of_memory+0x5d1/0xa20 [ 132.782877][ T5111] ? __cfi_out_of_memory+0x10/0x10 [ 132.782904][ T5111] ? mutex_lock_killable+0x97/0x1d0 [ 132.782938][ T5111] ? __cfi_mutex_lock_killable+0x10/0x10 [ 132.782976][ T5111] mem_cgroup_out_of_memory+0x2c5/0x390 [ 132.783014][ T5111] ? css_next_descendant_pre+0x1ec/0x210 [ 132.783045][ T5111] ? __kasan_check_write+0x18/0x20 [ 132.783071][ T5111] ? drain_obj_stock+0xec0/0xec0 [ 132.783106][ T5111] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 132.783133][ T5111] try_charge_memcg+0x925/0xe10 [ 132.783167][ T5111] ? static_key_count+0x45/0x70 [ 132.783200][ T5111] ? __cfi_gfp_zone+0x1/0x10 [ 132.783227][ T5111] ? __cfi_try_charge_memcg+0x10/0x10 [ 132.783267][ T5111] ? __alloc_pages_noprof+0x35a/0x7e0 [ 132.783303][ T5111] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 132.783338][ T5111] ? _raw_spin_lock+0x92/0x120 [ 132.783378][ T5111] __mem_cgroup_charge+0xfc/0x420 [ 132.783402][ T5111] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 132.783425][ T5111] ? __pte_alloc+0x1ae/0x440 [ 132.783450][ T5111] folio_prealloc+0x67/0x220 [ 132.783480][ T5111] do_pte_missing+0x16af/0x4440 [ 132.783512][ T5111] ? schedule+0xc5/0x240 [ 132.783542][ T5111] ? __futex_wait+0x330/0x3d0 [ 132.783567][ T5111] ? pte_marker_clear+0x1b0/0x1b0 [ 132.783600][ T5111] ? __cfi_futex_wake_mark+0x10/0x10 [ 132.783639][ T5111] ? futex_wake+0x666/0x950 [ 132.783662][ T5111] handle_mm_fault+0x1189/0x1ba0 [ 132.783694][ T5111] ? __cfi_handle_mm_fault+0x10/0x10 [ 132.783721][ T5111] ? lock_vma_under_rcu+0x4cf/0x590 [ 132.783750][ T5111] ? kfree+0x158/0x440 [ 132.783802][ T5111] ? __se_sys_futex+0x13c/0x320 [ 132.783837][ T5111] do_user_addr_fault+0x951/0x1230 [ 132.783876][ T5111] ? fpregs_restore_userregs+0x11c/0x260 [ 132.783909][ T5111] exc_page_fault+0x58/0xc0 [ 132.783944][ T5111] asm_exc_page_fault+0x2b/0x30 [ 132.783975][ T5111] RIP: 0033:0x7fe11fe571b6 [ 132.783996][ T5111] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 9c d9 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 132.784018][ T5111] RSP: 002b:00007fe120eeef60 EFLAGS: 00010206 [ 132.784041][ T5111] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000c00000 [ 132.784059][ T5111] RDX: 00000000000025f5 RSI: 0000200000c00000 RDI: 0000200000c01000 [ 132.784078][ T5111] RBP: 00007fe120054600 R08: 0000000000000000 R09: 0000000000000006 [ 132.784101][ T5111] R10: 0000000000000006 R11: 0000000000000000 R12: 00000000003ff000 [ 132.784118][ T5111] R13: 0000200000c00000 R14: 00007fe120225fa0 R15: 0000000000000000 [ 132.784138][ T5111] [ 132.784149][ T5111] memory: usage 0kB, limit 0kB, failcnt 380 [ 132.939720][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.944382][ T5111] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 133.101947][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 133.105743][ T5111] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 133.120968][ T31] usb 4-1: config 1 has an invalid interface number: 244 but max is 2 [ 133.128629][ T5111] Memory cgroup stats for /syz0/syz2: [ 133.128965][ T5111] cache 0 [ 133.136365][ T31] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 133.151513][ T5111] rss 0 [ 133.157547][ T31] usb 4-1: config 1 has no interface number 3 [ 133.161787][ T5111] rss_huge 0 [ 133.166581][ T31] usb 4-1: config 1 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 133.182124][ T5111] shmem 0 [ 133.185263][ T31] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 133.187373][ T5111] mapped_file 0 [ 133.187386][ T5111] dirty 0 [ 133.187395][ T5111] writeback 0 [ 133.198628][ T31] usb 4-1: config 1 interface 244 has no altsetting 0 [ 133.212441][ T5111] workingset_refault_anon 1 [ 133.219682][ T31] usb 4-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 133.229147][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.232060][ T5111] workingset_refault_file 0 [ 133.237611][ T31] usb 4-1: Product: syz [ 133.243351][ T5111] swap 0 [ 133.247998][ T31] usb 4-1: Manufacturer: syz [ 133.250188][ T5111] swapcached 0 [ 133.253700][ T31] usb 4-1: SerialNumber: syz [ 133.259645][ T5111] pgpgin 73 [ 133.264524][ T5111] pgpgout 4672 [ 133.275336][ T5111] pgfault 145 [ 133.278700][ T5111] pgmajfault 1 [ 133.282319][ T5111] inactive_anon 0 [ 133.285985][ T5111] active_anon 0 [ 133.289467][ T5111] inactive_file 0 [ 133.293319][ T5111] active_file 0 [ 133.296804][ T5111] unevictable 0 [ 133.300469][ T5111] hierarchical_memory_limit 0 [ 133.305173][ T5111] hierarchical_memsw_limit 9223372036854771712 [ 133.311594][ T5111] total_cache 0 [ 133.315961][ T5111] total_rss 0 [ 133.319346][ T5111] total_rss_huge 0 [ 133.323211][ T5111] total_shmem 0 [ 133.327004][ T5111] total_mapped_file 0 [ 133.331137][ T5111] total_dirty 0 [ 133.334628][ T5111] total_writeback 0 [ 133.338453][ T5111] total_workingset_refault_anon 1 [ 133.343704][ T5111] total_workingset_refault_file 0 [ 133.348761][ T5111] total_swap 0 [ 133.352333][ T5111] total_swapcached 0 [ 133.356252][ T5111] total_pgpgin 73 [ 133.360069][ T5111] total_pgpgout 4672 [ 133.364020][ T5111] total_pgfault 145 [ 133.367847][ T5111] total_pgmajfault 1 [ 133.371972][ T5111] total_inactive_anon 0 [ 133.376180][ T5111] total_active_anon 0 [ 133.380347][ T5111] total_inactive_file 0 [ 133.384528][ T5111] total_active_file 0 [ 133.388536][ T5111] total_unevictable 0 [ 133.392864][ T5111] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz0/syz2,task_memcg=/syz0/syz2,task=syz.0.2080,pid=5110,uid=0 [ 133.408911][ T5111] Memory cgroup out of memory: Killed process 5110 (syz.0.2080) total-vm:94236kB, anon-rss:1368kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 133.484798][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 133.511712][ T31] usb 4-1: USB disconnect, device number 9 [ 133.528666][ T5126] udevd[5126]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 133.610371][ T5130] tipc: Enabled bearer , priority 10 [ 133.620048][ T5130] tipc: Enabling of bearer rejected, already enabled [ 133.789639][ T311] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 133.869713][ T46] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.940750][ T311] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 133.951751][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 133.963368][ T311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 133.982962][ T311] usb 3-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 133.992453][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.009577][ T311] usb 3-1: config 0 descriptor?? [ 134.015015][ T5128] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.022468][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 134.032000][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.044134][ T46] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.054943][ T46] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.064390][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.072553][ T46] usb 2-1: Product: syz [ 134.076850][ T46] usb 2-1: Manufacturer: syz [ 134.081579][ T46] usb 2-1: SerialNumber: syz [ 134.259617][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 134.323107][ T5170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2106'. [ 134.409615][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 134.415816][ T31] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 134.424056][ T31] usb 1-1: config 0 has no interface number 0 [ 134.430209][ T31] usb 1-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 134.440639][ T31] usb 1-1: config 0 interface 184 has no altsetting 0 [ 134.449136][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 134.458286][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.466397][ T31] usb 1-1: Product: syz [ 134.470679][ T31] usb 1-1: Manufacturer: syz [ 134.475377][ T31] usb 1-1: SerialNumber: syz [ 134.490417][ T31] usb 1-1: config 0 descriptor?? [ 134.495973][ T5158] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 134.506661][ T5174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.507018][ T31] smsc75xx v1.0.0 [ 134.515499][ T5174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.582142][ T311] sony 0003:054C:1000.0003: unknown main item tag 0x4 [ 134.589070][ T311] sony 0003:054C:1000.0003: unknown main item tag 0x2 [ 134.596086][ T311] sony 0003:054C:1000.0003: unknown main item tag 0x1 [ 134.603083][ T311] sony 0003:054C:1000.0003: unknown main item tag 0x7 [ 134.610012][ T311] sony 0003:054C:1000.0003: unknown main item tag 0x5 [ 134.616855][ T311] sony 0003:054C:1000.0003: collection stack underflow [ 134.623876][ T311] sony 0003:054C:1000.0003: item 0 1 0 12 parsing failed [ 134.631361][ T311] sony 0003:054C:1000.0003: parse failed [ 134.637084][ T394] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 134.644808][ T311] sony 0003:054C:1000.0003: probe with driver sony failed with error -22 [ 134.707727][ T5158] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 134.783403][ T311] usb 3-1: USB disconnect, device number 7 [ 134.790330][ T394] usb 4-1: device descriptor read/64, error -71 [ 135.029617][ T394] usb 4-1: device descriptor read/64, error -71 [ 135.116397][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 135.127267][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 135.269637][ T394] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 135.409617][ T394] usb 4-1: device descriptor read/64, error -71 [ 135.425838][ T5177] tipc: New replicast peer: 255.255.255.255 [ 135.432176][ T5177] tipc: Enabled bearer , priority 10 [ 135.649681][ T394] usb 4-1: device descriptor read/64, error -71 [ 135.759805][ T394] usb usb4-port1: attempt power cycle [ 135.899604][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 135.938371][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 135.949694][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 135.959396][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 135.969032][ T31] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 136.051156][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 136.059668][ T9] usb 3-1: config 1 has an invalid interface number: 244 but max is 2 [ 136.067971][ T9] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 136.077121][ T9] usb 3-1: config 1 has no interface number 3 [ 136.083370][ T9] usb 3-1: config 1 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 136.094579][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 136.105688][ T9] usb 3-1: config 1 interface 244 has no altsetting 0 [ 136.109775][ T394] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 136.115194][ T9] usb 3-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 136.129272][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.137640][ T9] usb 3-1: Product: syz [ 136.141900][ T9] usb 3-1: Manufacturer: syz [ 136.146571][ T9] usb 3-1: SerialNumber: syz [ 136.152125][ T394] usb 4-1: device descriptor read/8, error -71 [ 136.280720][ T394] usb 4-1: device descriptor read/8, error -71 [ 136.517940][ T46] usb 2-1: 0:2 : does not exist [ 136.527705][ T394] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 136.538309][ T46] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 136.550339][ T46] usb 2-1: USB disconnect, device number 4 [ 136.556913][ T10] tipc: Node number set to 2130706433 [ 136.560527][ T394] usb 4-1: device descriptor read/8, error -71 [ 136.574659][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 136.586985][ T5126] udevd[5126]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 136.594817][ T9] usb 3-1: USB disconnect, device number 8 [ 136.621607][ T5049] udevd[5049]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 136.659571][ T36] kauditd_printk_skb: 1241 callbacks suppressed [ 136.659592][ T36] audit: type=1400 audit(1785755762.696:466440): avc: denied { setopt } for pid=5194 comm="syz.1.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 136.712238][ T394] usb 4-1: device descriptor read/8, error -71 [ 136.821071][ T394] usb usb4-port1: unable to enumerate USB device [ 137.059612][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.175355][ T10] usb 1-1: USB disconnect, device number 6 [ 137.209603][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 137.217773][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 137.227302][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.235533][ T9] usb 2-1: Product: syz [ 137.239993][ T9] usb 2-1: Manufacturer: syz [ 137.244626][ T9] usb 2-1: SerialNumber: syz [ 137.281452][ T36] audit: type=1400 audit(1785755763.326:466441): avc: denied { mounton } for pid=5211 comm="syz.0.2121" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 137.311886][ T5213] overlayfs: missing 'workdir' [ 137.320152][ T394] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 137.459391][ T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 137.489576][ T394] usb 3-1: Using ep0 maxpacket: 32 [ 137.501877][ T394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.521818][ T394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.538802][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 137.540850][ T394] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 137.565641][ T9] usb 2-1: USB disconnect, device number 5 [ 137.571878][ T394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.584992][ T5126] udevd[5126]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 137.592352][ T394] usb 3-1: config 0 descriptor?? [ 137.620910][ T394] hub 3-1:0.0: USB hub found [ 137.767208][ T5217] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 137.821482][ T394] hub 3-1:0.0: 1 port detected [ 137.955113][ T5226] FAULT_INJECTION: forcing a failure. [ 137.955113][ T5226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.968421][ T5226] CPU: 1 UID: 0 PID: 5226 Comm: syz.3.2127 Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 137.968459][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.968470][ T5226] Call Trace: [ 137.968476][ T5226] [ 137.968484][ T5226] __dump_stack+0x21/0x30 [ 137.968515][ T5226] dump_stack_lvl+0x140/0x1c0 [ 137.968538][ T5226] ? __cfi_dump_stack_lvl+0x10/0x10 [ 137.968561][ T5226] ? exc_page_fault+0x65/0xc0 [ 137.968587][ T5226] dump_stack+0x19/0x20 [ 137.968609][ T5226] should_fail_ex+0x3c2/0x510 [ 137.968634][ T5226] should_fail+0xf/0x20 [ 137.968651][ T5226] should_fail_usercopy+0x1e/0x30 [ 137.968671][ T5226] _copy_to_iter+0x56d/0x1520 [ 137.968693][ T5226] ? __cfi__copy_to_iter+0x10/0x10 [ 137.968714][ T5226] ? __check_object_size+0x54c/0x870 [ 137.968731][ T5226] ? __cfi___check_object_size+0x10/0x10 [ 137.968748][ T5226] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 137.968767][ T5226] ? __skb_try_recv_datagram+0x3e0/0x4e0 [ 137.968793][ T5226] __skb_datagram_iter+0x103/0x940 [ 137.968818][ T5226] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 137.968834][ T5226] skb_copy_datagram_iter+0x44/0x160 [ 137.968859][ T5226] netlink_recvmsg+0x2d4/0xe60 [ 137.968878][ T5226] ? __cfi_netlink_recvmsg+0x10/0x10 [ 137.968897][ T5226] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 137.968916][ T5226] ? security_socket_recvmsg+0x44/0x130 [ 137.968938][ T5226] ? __cfi_netlink_recvmsg+0x10/0x10 [ 137.968954][ T5226] sock_recvmsg+0x185/0x1e0 [ 137.968976][ T5226] ____sys_recvmsg+0x1e7/0x4a0 [ 137.968994][ T5226] ? __sys_recvmsg_sock+0x60/0x60 [ 137.969013][ T5226] ? import_iovec+0x80/0xb0 [ 137.969036][ T5226] ___sys_recvmsg+0x214/0x590 [ 137.969054][ T5226] ? __sys_recvmsg+0x2a0/0x2a0 [ 137.969075][ T5226] do_recvmmsg+0x36d/0x7f0 [ 137.969093][ T5226] ? __sys_recvmmsg+0x2a0/0x2a0 [ 137.969110][ T5226] ? __cfi_vfs_write+0x10/0x10 [ 137.969130][ T5226] ? _copy_from_user+0x87/0xa0 [ 137.969155][ T5226] __x64_sys_recvmmsg+0x1b8/0x250 [ 137.969172][ T5226] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 137.969190][ T5226] ? __kasan_check_read+0x15/0x20 [ 137.969206][ T5226] x64_sys_call+0x292c/0x2ee0 [ 137.969221][ T5226] do_syscall_64+0x57/0xf0 [ 137.969239][ T5226] ? clear_bhb_loop+0x50/0xa0 [ 137.969261][ T5226] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 137.969282][ T5226] RIP: 0033:0x7fdc1b59e019 [ 137.969296][ T5226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.969311][ T5226] RSP: 002b:00007fdc19ff7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 137.969328][ T5226] RAX: ffffffffffffffda RBX: 00007fdc1b825fa0 RCX: 00007fdc1b59e019 [ 137.969341][ T5226] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 137.969354][ T5226] RBP: 00007fdc19ff7090 R08: 0000200000003700 R09: 0000000000000000 [ 137.969384][ T5226] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 137.969400][ T5226] R13: 00007fdc1b826038 R14: 00007fdc1b825fa0 R15: 00007fffe2833978 [ 137.969419][ T5226] [ 138.022346][ T5208] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=9 sclass=netlink_xfrm_socket pid=5208 comm=syz.2.2119 [ 138.089716][ T31] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 138.139748][ T36] audit: type=1400 audit(1785755764.156:466442): avc: denied { mount } for pid=5227 comm="syz.3.2128" name="/" dev="ramfs" ino=23174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 138.140094][ T394] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 138.195204][ T5230] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 138.201051][ T394] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 138.220874][ T5230] syzkaller1: linktype set to 518 [ 138.280700][ T394] usbhid 3-1:0.0: can't add hid device: -71 [ 138.365543][ T394] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 138.400335][ T394] usb 3-1: USB disconnect, device number 9 [ 138.430267][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 138.438852][ T31] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1616, setting to 1023 [ 138.451402][ T31] usb 1-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 138.460783][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.468809][ T31] usb 1-1: Product: syz [ 138.473031][ T31] usb 1-1: Manufacturer: syz [ 138.477661][ T31] usb 1-1: SerialNumber: syz [ 138.640188][ T46] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 138.742552][ T5240] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2132'. [ 138.796472][ T36] audit: type=1400 audit(1785755764.836:466443): avc: denied { name_bind } for pid=5241 comm="syz.2.2133" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 138.819597][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 138.832588][ T46] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 138.841155][ T46] usb 2-1: config 0 has no interface number 0 [ 138.848444][ T46] usb 2-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 138.849151][ T36] audit: type=1400 audit(1785755764.866:466444): avc: denied { node_bind } for pid=5241 comm="syz.2.2133" saddr=::ffff:0.0.0.0 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 138.870827][ T46] usb 2-1: config 0 interface 184 has no altsetting 0 [ 138.901255][ T46] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 138.912790][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.942283][ T46] usb 2-1: Product: syz [ 138.952206][ T46] usb 2-1: Manufacturer: syz [ 138.963799][ T46] usb 2-1: SerialNumber: syz [ 138.996384][ T46] usb 2-1: config 0 descriptor?? [ 139.001929][ T5233] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 139.010043][ T46] smsc75xx v1.0.0 [ 139.041638][ T5246] UDC core: g1: couldn't find an available UDC or it's busy [ 139.087864][ T5250] syz.2.2137 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 139.097970][ T5250] CPU: 0 UID: 0 PID: 5250 Comm: syz.2.2137 Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 139.098017][ T5250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.098037][ T5250] Call Trace: [ 139.098048][ T5250] [ 139.098059][ T5250] __dump_stack+0x21/0x30 [ 139.098106][ T5250] dump_stack_lvl+0x140/0x1c0 [ 139.098147][ T5250] ? __cfi_dump_stack_lvl+0x10/0x10 [ 139.098187][ T5250] ? ___ratelimit+0x41c/0x5c0 [ 139.098223][ T5250] ? __kasan_check_write+0x18/0x20 [ 139.098253][ T5250] dump_stack+0x19/0x20 [ 139.098292][ T5250] dump_header+0xd9/0x460 [ 139.098331][ T5250] oom_kill_process+0x35d/0x640 [ 139.098365][ T5250] out_of_memory+0x5d1/0xa20 [ 139.098398][ T5250] ? __cfi_out_of_memory+0x10/0x10 [ 139.098430][ T5250] ? mutex_lock_killable+0x97/0x1d0 [ 139.098470][ T5250] ? __cfi_mutex_lock_killable+0x10/0x10 [ 139.098523][ T5250] mem_cgroup_out_of_memory+0x2c5/0x390 [ 139.098556][ T5250] ? css_next_descendant_pre+0x1ec/0x210 [ 139.098591][ T5250] ? __kasan_check_write+0x18/0x20 [ 139.098619][ T5250] ? drain_obj_stock+0xec0/0xec0 [ 139.098651][ T5250] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 139.098681][ T5250] try_charge_memcg+0x925/0xe10 [ 139.098721][ T5250] ? static_key_count+0x45/0x70 [ 139.098759][ T5250] ? __cfi_gfp_zone+0x1/0x10 [ 139.098789][ T5250] ? __cfi_try_charge_memcg+0x10/0x10 [ 139.098830][ T5250] ? __alloc_pages_noprof+0x35a/0x7e0 [ 139.098872][ T5250] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 139.098914][ T5250] __mem_cgroup_charge+0xfc/0x420 [ 139.098942][ T5250] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 139.098974][ T5250] ? __kmalloc_cache_noprof+0x23c/0x470 [ 139.099006][ T5250] folio_prealloc+0x67/0x220 [ 139.099042][ T5250] do_pte_missing+0x16af/0x4440 [ 139.099083][ T5250] ? pte_marker_clear+0x1b0/0x1b0 [ 139.099119][ T5250] ? cgroup_rstat_updated+0x144/0x800 [ 139.099151][ T5250] ? ioctl_has_perm+0x1bc/0x500 [ 139.099179][ T5250] ? __asan_memcpy+0x5a/0x80 [ 139.099208][ T5250] ? ioctl_has_perm+0x408/0x500 [ 139.099236][ T5250] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 139.099283][ T5250] handle_mm_fault+0x1189/0x1ba0 [ 139.099321][ T5250] ? __cfi_handle_mm_fault+0x10/0x10 [ 139.099354][ T5250] ? lock_vma_under_rcu+0x4cf/0x590 [ 139.099395][ T5250] do_user_addr_fault+0x951/0x1230 [ 139.099438][ T5250] ? __kasan_check_write+0x18/0x20 [ 139.099468][ T5250] ? fpregs_restore_userregs+0x11c/0x260 [ 139.099553][ T5250] exc_page_fault+0x58/0xc0 [ 139.099594][ T5250] asm_exc_page_fault+0x2b/0x30 [ 139.099631][ T5250] RIP: 0033:0x7f302f4573d5 [ 139.099656][ T5250] Code: 0f 1f 44 00 00 49 89 4c 24 28 e9 a5 fe ff ff 66 0f 1f 44 00 00 48 81 fe 00 f0 02 00 0f 85 92 fe ff ff 66 0f 6f 0d bb dc 1f 00 01 0f 00 00 00 48 89 4c 24 38 0f 11 49 08 66 0f 6f 0d b4 dc 1f [ 139.099682][ T5250] RSP: 002b:00007f3030408f60 EFLAGS: 00010246 [ 139.099708][ T5250] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000200000c10000 [ 139.099728][ T5250] RDX: 0000000000001000 RSI: 000000000002f000 RDI: 0000000000000001 [ 139.099746][ T5250] RBP: 00007f302f654620 R08: 0000000000000000 R09: 0000000000000006 [ 139.099766][ T5250] R10: 0000000000000000 R11: 0000000000000002 R12: 0000200000c00000 [ 139.099785][ T5250] R13: 0000000000000002 R14: 0000000000000000 R15: 00000000003ef000 [ 139.099808][ T5250] [ 139.211855][ T31] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 139.239498][ T5250] memory: usage 4kB, limit 4kB, failcnt 1383 [ 139.267212][ T5233] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 139.285525][ T5250] memory+swap: usage 20kB, limit 9007199254740988kB, failcnt 0 [ 139.332746][ T31] usb 1-1: unit 14 not found! [ 139.366827][ T5250] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 139.395671][ T31] usb 1-1: USB disconnect, device number 7 [ 139.464185][ T5250] Memory cgroup stats for /syz2/syz2: [ 139.464344][ T5250] cache 0 [ 139.474648][ T5250] rss 4096 [ 139.477709][ T5250] rss_huge 0 [ 139.481110][ T5250] shmem 0 [ 139.484143][ T5250] mapped_file 0 [ 139.487920][ T5250] dirty 0 [ 139.491407][ T5250] writeback 0 [ 139.495343][ T5250] workingset_refault_anon 14 [ 139.500246][ T5250] workingset_refault_file 0 [ 139.504779][ T5250] swap 16384 [ 139.508085][ T5250] swapcached 0 [ 139.514386][ T5250] pgpgin 79 [ 139.517557][ T5250] pgpgout 1100 [ 139.521023][ T5190] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 139.525426][ T5250] pgfault 100 [ 139.532047][ T5250] pgmajfault 14 [ 139.535584][ T5250] inactive_anon 0 [ 139.539244][ T5250] active_anon 0 [ 139.542877][ T5250] inactive_file 0 [ 139.546693][ T5250] active_file 0 [ 139.550250][ T5250] unevictable 0 [ 139.553748][ T5250] hierarchical_memory_limit 4096 [ 139.558809][ T5250] hierarchical_memsw_limit 9223372036854771712 [ 139.565286][ T5250] total_cache 0 [ 139.569053][ T5250] total_rss 4096 [ 139.572804][ T5250] total_rss_huge 0 [ 139.576543][ T5250] total_shmem 0 [ 139.580095][ T5250] total_mapped_file 0 [ 139.584131][ T5250] total_dirty 0 [ 139.587617][ T5250] total_writeback 0 [ 139.591466][ T5250] total_workingset_refault_anon 14 [ 139.596620][ T5250] total_workingset_refault_file 0 [ 139.601738][ T5250] total_swap 16384 [ 139.605480][ T5250] total_swapcached 0 [ 139.609391][ T5250] total_pgpgin 79 [ 139.613084][ T5250] total_pgpgout 1100 [ 139.617115][ T5250] total_pgfault 100 [ 139.620974][ T5250] total_pgmajfault 14 [ 139.624981][ T5250] total_inactive_anon 0 [ 139.629184][ T5250] total_active_anon 0 [ 139.633232][ T5250] total_inactive_file 0 [ 139.637591][ T5250] total_active_file 0 [ 139.641621][ T5250] total_unevictable 0 [ 139.645644][ T5250] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2/syz2,task_memcg=/syz2/syz2,task=syz.2.2137,pid=5249,uid=0 [ 139.661467][ T5250] Memory cgroup out of memory: Killed process 5249 (syz.2.2137) total-vm:94368kB, anon-rss:1364kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 139.700705][ T5190] usb 4-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 139.712156][ T5190] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.719014][ T5190] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 139.728897][ T5190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.738002][ T5190] usb 4-1: config 0 descriptor?? [ 139.749210][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 139.760988][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 140.150134][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.157627][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.168043][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.175813][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.183242][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.190645][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.197985][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.205762][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.213195][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.220435][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.227832][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.235091][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.242500][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.249756][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.257149][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.264385][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.271803][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.278997][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.286359][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.293706][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.301100][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.321167][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.328443][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.338613][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.348624][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.355949][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.363525][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.373946][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.381586][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.389079][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.396332][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.403842][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.411083][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.418577][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.425856][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.448724][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.456174][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.463622][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.471117][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.478577][ T5190] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 140.496418][ T5190] zeroplus 0003:0C12:0030.0004: hidraw0: USB HID v0.bf Device [HID 0c12:0030] on usb-dummy_hcd.3-1/input0 [ 140.515191][ T5190] zeroplus 0003:0C12:0030.0004: no inputs found [ 140.523552][ T5190] usb 4-1: USB disconnect, device number 14 [ 140.575679][ T5265] fido_id[5265]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 140.590353][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 140.601283][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 140.611836][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 140.622514][ T46] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 140.636726][ T5270] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2144'. [ 140.646069][ T36] audit: type=1400 audit(1785755766.686:466445): avc: denied { setopt } for pid=5268 comm="syz.0.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 140.682074][ T5275] UDC core: g1: couldn't find an available UDC or it's busy [ 140.902232][ T5300] FAULT_INJECTION: forcing a failure. [ 140.902232][ T5300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.916316][ T5300] CPU: 1 UID: 0 PID: 5300 Comm: syz.2.2155 Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 140.916352][ T5300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.916367][ T5300] Call Trace: [ 140.916375][ T5300] [ 140.916384][ T5300] __dump_stack+0x21/0x30 [ 140.916433][ T5300] dump_stack_lvl+0x140/0x1c0 [ 140.916466][ T5300] ? __cfi_dump_stack_lvl+0x10/0x10 [ 140.916501][ T5300] ? vfs_write+0xbcf/0xfd0 [ 140.916526][ T5300] dump_stack+0x19/0x20 [ 140.916557][ T5300] should_fail_ex+0x3c2/0x510 [ 140.916584][ T5300] should_fail+0xf/0x20 [ 140.916608][ T5300] should_fail_usercopy+0x1e/0x30 [ 140.916636][ T5300] _copy_from_user+0x20/0xa0 [ 140.916668][ T5300] get_timespec64+0x97/0x1b0 [ 140.916701][ T5300] ? __cfi_get_timespec64+0x10/0x10 [ 140.916734][ T5300] __x64_sys_recvmmsg+0x14c/0x250 [ 140.916763][ T5300] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 140.916789][ T5300] ? __kasan_check_read+0x15/0x20 [ 140.916814][ T5300] x64_sys_call+0x292c/0x2ee0 [ 140.916836][ T5300] do_syscall_64+0x57/0xf0 [ 140.916860][ T5300] ? clear_bhb_loop+0x50/0xa0 [ 140.916890][ T5300] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 140.916919][ T5300] RIP: 0033:0x7f302f59e019 [ 140.916938][ T5300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.916958][ T5300] RSP: 002b:00007f3030409028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 140.916982][ T5300] RAX: ffffffffffffffda RBX: 00007f302f825fa0 RCX: 00007f302f59e019 [ 140.916999][ T5300] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 140.917016][ T5300] RBP: 00007f3030409090 R08: 0000200000003700 R09: 0000000000000000 [ 140.917031][ T5300] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 140.917046][ T5300] R13: 00007f302f826038 R14: 00007f302f825fa0 R15: 00007ffe7dcca408 [ 140.917067][ T5300] [ 140.940654][ T36] audit: type=1400 audit(1785755766.966:466446): avc: denied { mount } for pid=5301 comm="syz.0.2156" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 141.134734][ T36] audit: type=1400 audit(1785755767.036:466447): avc: denied { create } for pid=5303 comm="syz.2.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 141.154805][ T36] audit: type=1326 audit(1785755767.126:466448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5301 comm="syz.0.2156" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe11ff9e019 code=0x0 [ 141.181920][ T36] audit: type=1400 audit(1785755767.136:466449): avc: denied { read write } for pid=5301 comm="syz.0.2156" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 141.376864][ T5332] UDC core: g1: couldn't find an available UDC or it's busy [ 141.453869][ T5345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2172'. [ 141.625225][ T5370] fuse: Bad value for 'user_id' [ 141.632158][ T5370] fuse: Bad value for 'user_id' [ 141.669641][ T62] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 141.698659][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 141.698679][ T36] audit: type=1400 audit(1785755767.736:466463): avc: denied { map } for pid=5367 comm="syz.3.2179" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 141.771992][ T5375] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2182'. [ 141.781318][ T5375] gretap0: entered promiscuous mode [ 141.788413][ T5375] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2182'. [ 141.797357][ T5375] 0{X: renamed from gretap0 [ 141.803979][ T5375] 0{X: left promiscuous mode [ 141.809274][ T5375] 0{X: entered allmulticast mode [ 141.815672][ T5375] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 141.827307][ T10] usb 2-1: USB disconnect, device number 6 [ 141.845255][ T36] audit: type=1400 audit(1785755767.886:466464): avc: denied { create } for pid=5373 comm="syz.0.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.869635][ T5375] tipc: Started in network mode [ 141.873129][ T62] usb 3-1: Using ep0 maxpacket: 8 [ 141.874563][ T5375] tipc: Node identity 7f000001, cluster identity 4711 [ 141.897054][ T62] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 141.905542][ T36] audit: type=1400 audit(1785755767.886:466465): avc: denied { bind } for pid=5373 comm="syz.0.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.906089][ T5375] tipc: Enabled bearer , priority 10 [ 141.935576][ T62] usb 3-1: config 179 has no interface number 0 [ 141.943983][ T62] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 141.955747][ T36] audit: type=1400 audit(1785755767.886:466466): avc: denied { listen } for pid=5373 comm="syz.0.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.976275][ T62] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 141.987913][ T62] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 141.999949][ T5375] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 142.000080][ T36] audit: type=1400 audit(1785755767.886:466467): avc: denied { connect } for pid=5373 comm="syz.0.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.020548][ T5375] tipc: Enabled bearer , priority 10 [ 142.029185][ T62] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 142.049606][ T62] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 142.067640][ T36] audit: type=1400 audit(1785755768.016:466468): avc: denied { create } for pid=5372 comm="syz.3.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 142.088249][ T62] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 142.097670][ T36] audit: type=1400 audit(1785755768.026:466469): avc: denied { connect } for pid=5372 comm="syz.3.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 142.117726][ T62] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.129385][ T5341] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 142.139116][ T62] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 142.176810][ T5390] bridge: RTM_NEWNEIGH with invalid ether address [ 142.216637][ T36] audit: type=1400 audit(1785755768.256:466470): avc: denied { read } for pid=5392 comm="syz.3.2189" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.217773][ T5393] rust_binder: Write failure EFAULT in pid:1113 [ 142.239697][ T36] audit: type=1400 audit(1785755768.256:466471): avc: denied { open } for pid=5392 comm="syz.3.2189" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.270560][ T36] audit: type=1400 audit(1785755768.256:466472): avc: denied { ioctl } for pid=5392 comm="syz.3.2189" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.311000][ T5397] Config c/1 of g1 needs at least one function. [ 142.317481][ T5397] udc dummy_udc.0: failed to start g1: -22 [ 142.323748][ T5397] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 142.340875][ T5397] UDC core: g1: couldn't find an available UDC or it's busy [ 142.371032][ T394] usb 3-1: USB disconnect, device number 10 [ 142.758939][ T5422] Config c/1 of g1 needs at least one function. [ 142.765326][ T5422] udc dummy_udc.0: failed to start g1: -22 [ 142.771582][ T5422] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 142.782605][ T5422] UDC core: g1: couldn't find an available UDC or it's busy [ 142.789683][ T62] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 142.949576][ T62] usb 4-1: Using ep0 maxpacket: 8 [ 142.956276][ T62] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.967210][ T62] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.979816][ T62] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 142.999138][ T62] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.008078][ T62] usb 4-1: Product: syz [ 143.012514][ T62] usb 4-1: Manufacturer: syz [ 143.017155][ T62] usb 4-1: SerialNumber: syz [ 143.019726][ T5190] tipc: Node number set to 2130706433 [ 143.049618][ T394] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 143.122660][ T5444] FAULT_INJECTION: forcing a failure. [ 143.122660][ T5444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.154955][ T5444] CPU: 1 UID: 0 PID: 5444 Comm: syz.2.2210 Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 143.154992][ T5444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.155007][ T5444] Call Trace: [ 143.155016][ T5444] [ 143.155026][ T5444] __dump_stack+0x21/0x30 [ 143.155064][ T5444] dump_stack_lvl+0x140/0x1c0 [ 143.155097][ T5444] ? __cfi_dump_stack_lvl+0x10/0x10 [ 143.155130][ T5444] ? vfs_write+0xbcf/0xfd0 [ 143.155157][ T5444] dump_stack+0x19/0x20 [ 143.155189][ T5444] should_fail_ex+0x3c2/0x510 [ 143.155227][ T5444] should_fail+0xf/0x20 [ 143.155252][ T5444] should_fail_usercopy+0x1e/0x30 [ 143.155280][ T5444] strncpy_from_user+0x29/0x280 [ 143.155309][ T5444] __se_sys_request_key+0xb9/0x350 [ 143.155335][ T5444] ? __x64_sys_request_key+0xc0/0xc0 [ 143.155363][ T5444] __x64_sys_request_key+0x9f/0xc0 [ 143.155388][ T5444] x64_sys_call+0x2b60/0x2ee0 [ 143.155411][ T5444] do_syscall_64+0x57/0xf0 [ 143.155438][ T5444] ? clear_bhb_loop+0x50/0xa0 [ 143.155470][ T5444] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 143.155502][ T5444] RIP: 0033:0x7f302f59e019 [ 143.155523][ T5444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.155544][ T5444] RSP: 002b:00007f3030409028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 143.155570][ T5444] RAX: ffffffffffffffda RBX: 00007f302f825fa0 RCX: 00007f302f59e019 [ 143.155590][ T5444] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000040 [ 143.155608][ T5444] RBP: 00007f3030409090 R08: 0000000000000000 R09: 0000000000000000 [ 143.155624][ T5444] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000001 [ 143.155641][ T5444] R13: 00007f302f826038 R14: 00007f302f825fa0 R15: 00007ffe7dcca408 [ 143.155662][ T5444] [ 143.335094][ T62] usb 4-1: unit 0 not found! [ 143.365778][ T62] usb 4-1: USB disconnect, device number 15 [ 143.371996][ T394] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 143.382874][ T394] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 143.392666][ T394] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41845, setting to 64 [ 143.404029][ T394] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 143.419784][ T394] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.422627][ T5448] Config c/1 of g1 needs at least one function. [ 143.428903][ T394] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 143.443227][ T394] usb 2-1: SerialNumber: syz [ 143.453260][ T5424] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 143.457909][ T5448] udc dummy_udc.0: failed to start g1: -22 [ 143.466338][ T5448] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 143.476649][ T5126] udevd[5126]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 143.480748][ T5448] UDC core: g1: couldn't find an available UDC or it's busy [ 143.501884][ T394] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 143.713528][ T5424] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5424 comm=syz.1.2203 [ 143.726627][ T5424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.736120][ T5424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.744790][ T394] usb 2-1: USB disconnect, device number 7 [ 143.819672][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 143.949638][ T10] usb 1-1: device descriptor read/64, error -71 [ 144.189625][ T10] usb 1-1: device descriptor read/64, error -71 [ 144.429623][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 144.559608][ T10] usb 1-1: device descriptor read/64, error -71 [ 144.569603][ T62] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 144.720769][ T62] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 144.749611][ T62] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 144.770843][ T62] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 144.780065][ T62] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.788107][ T62] usb 2-1: Product: syz [ 144.792386][ T62] usb 2-1: Manufacturer: syz [ 144.797194][ T62] usb 2-1: SerialNumber: syz [ 144.801884][ T10] usb 1-1: device descriptor read/64, error -71 [ 144.899619][ T394] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 144.909778][ T10] usb usb1-port1: attempt power cycle [ 145.033961][ T62] usb 2-1: Can't get UAC3 power state for id 10 [ 145.041663][ T62] usb 2-1: BAAD MICROPHONE c_chmask mismatch [ 145.053263][ T394] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 145.053303][ T62] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 145.073346][ T394] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 145.085183][ T62] usb 2-1: USB disconnect, device number 8 [ 145.092910][ T394] usb 3-1: config 0 interface 0 has no altsetting 0 [ 145.099627][ T394] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 145.108871][ T394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.118875][ T5255] udevd[5255]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 145.136040][ T394] usb 3-1: config 0 descriptor?? [ 145.141584][ T5489] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 145.249633][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 145.270867][ T10] usb 1-1: device descriptor read/8, error -71 [ 145.400782][ T10] usb 1-1: device descriptor read/8, error -71 [ 145.552460][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.560287][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.567396][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.574497][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.581590][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.588630][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.595721][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.602829][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.609950][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.617024][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.624134][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.631234][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.638302][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.645451][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.652211][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 145.652626][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.667262][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.678857][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.686114][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.693493][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.700903][ T10] usb 1-1: device descriptor read/8, error -71 [ 145.709583][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.716830][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.725171][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.732785][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.740047][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.754461][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.761801][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.768880][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.776303][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.783807][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.791209][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.798299][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.805572][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.810146][ T5509] syz.3.2238 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 145.813200][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.823156][ T5509] CPU: 0 UID: 0 PID: 5509 Comm: syz.3.2238 Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 145.823248][ T5509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.823285][ T5509] Call Trace: [ 145.823306][ T5509] [ 145.823328][ T5509] __dump_stack+0x21/0x30 [ 145.823424][ T5509] dump_stack_lvl+0x140/0x1c0 [ 145.823526][ T5509] ? __cfi_dump_stack_lvl+0x10/0x10 [ 145.823617][ T5509] ? ___ratelimit+0x41c/0x5c0 [ 145.823701][ T5509] ? __kasan_check_write+0x18/0x20 [ 145.823772][ T5509] dump_stack+0x19/0x20 [ 145.823855][ T5509] dump_header+0xd9/0x460 [ 145.823939][ T5509] oom_kill_process+0x35d/0x640 [ 145.824030][ T5509] out_of_memory+0x5d1/0xa20 [ 145.824117][ T5509] ? __cfi_out_of_memory+0x10/0x10 [ 145.824210][ T5509] ? mutex_lock_killable+0x97/0x1d0 [ 145.824304][ T5509] ? __cfi_mutex_lock_killable+0x10/0x10 [ 145.824384][ T5509] mem_cgroup_out_of_memory+0x2c5/0x390 [ 145.824456][ T5509] ? css_next_descendant_pre+0x1ec/0x210 [ 145.824549][ T5509] ? __kasan_check_write+0x18/0x20 [ 145.824612][ T5509] ? drain_obj_stock+0xec0/0xec0 [ 145.824685][ T5509] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 145.824770][ T5509] try_charge_memcg+0x925/0xe10 [ 145.824848][ T5509] ? static_key_count+0x45/0x70 [ 145.824935][ T5509] ? __cfi_gfp_zone+0x1/0x10 [ 145.824994][ T5509] ? __cfi_try_charge_memcg+0x10/0x10 [ 145.825086][ T5509] ? __alloc_pages_noprof+0x35a/0x7e0 [ 145.825180][ T5509] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 145.825274][ T5509] __mem_cgroup_charge+0xfc/0x420 [ 145.825335][ T5509] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 145.825402][ T5509] ? folio_add_lru+0x116/0x400 [ 145.825496][ T5509] ? __cfi_folio_add_lru+0x10/0x10 [ 145.825633][ T5509] folio_prealloc+0x67/0x220 [ 145.825706][ T5509] do_pte_missing+0x16af/0x4440 [ 145.825798][ T5509] ? pte_marker_clear+0x1b0/0x1b0 [ 145.825877][ T5509] ? cgroup_rstat_updated+0x144/0x800 [ 145.825951][ T5509] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 145.826046][ T5509] handle_mm_fault+0x1189/0x1ba0 [ 145.826127][ T5509] ? __cfi_handle_mm_fault+0x10/0x10 [ 145.826198][ T5509] ? lock_vma_under_rcu+0x4cf/0x590 [ 145.826279][ T5509] ? __se_sys_futex+0x13c/0x320 [ 145.826363][ T5509] ? __fget_files+0x2bc/0x330 [ 145.826435][ T5509] do_user_addr_fault+0x951/0x1230 [ 145.826544][ T5509] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 145.826626][ T5509] exc_page_fault+0x58/0xc0 [ 145.826739][ T5509] asm_exc_page_fault+0x2b/0x30 [ 145.826822][ T5509] RIP: 0033:0x7fdc1b4573d5 [ 145.826901][ T5509] Code: 0f 1f 44 00 00 49 89 4c 24 28 e9 a5 fe ff ff 66 0f 1f 44 00 00 48 81 fe 00 f0 02 00 0f 85 92 fe ff ff 66 0f 6f 0d bb dc 1f 00 01 0f 00 00 00 48 89 4c 24 38 0f 11 49 08 66 0f 6f 0d b4 dc 1f [ 145.826976][ T5509] RSP: 002b:00007fdc19ff6f60 EFLAGS: 00010246 [ 145.827032][ T5509] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000200000c10000 [ 145.827074][ T5509] RDX: 0000000000001000 RSI: 000000000002f000 RDI: 0000000000000001 [ 145.827116][ T5509] RBP: 00007fdc1b654620 R08: 0000000000000000 R09: ffffffffffffffff [ 145.827158][ T5509] R10: 0000000000000000 R11: 0000000000000002 R12: 0000200000c00000 [ 145.827206][ T5509] R13: 0000000000000002 R14: 0000000000000000 R15: 00000000003ef000 [ 145.827257][ T5509] [ 145.827280][ T5509] memory: usage 4kB, limit 4kB, failcnt 599 [ 145.836342][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.843432][ T10] usb 1-1: device descriptor read/8, error -71 [ 145.853650][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.862268][ T5509] memory+swap: usage 16kB, limit 9007199254740988kB, failcnt 0 [ 145.868198][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.878462][ T5509] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 145.883842][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.887624][ T5509] Memory cgroup stats for [ 145.892332][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.896989][ T5509] /syz3/syz2 [ 145.901702][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.906782][ T5509] : [ 145.911596][ T394] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 145.917617][ T5509] cache 0 [ 145.928335][ T394] hid-led 0003:1294:1320.0005: hidraw0: USB HID v0.0c Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0 [ 145.939764][ T5509] rss 0 [ 145.947696][ T394] hid-led 0003:1294:1320.0005: Riso Kagaku Webmail Notifier initialized [ 145.959125][ T5509] rss_huge 0 [ 145.978481][ T394] usb 3-1: USB disconnect, device number 11 [ 145.980225][ T10] usb usb1-port1: unable to enumerate USB device [ 145.985600][ T311] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 146.009699][ T5509] shmem 0 [ 146.016917][ T46] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 146.037661][ T5510] fido_id[5510]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 146.044387][ T46] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 146.048879][ T5509] mapped_file 0 [ 146.053032][ T46] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 146.067114][ T5509] dirty 0 [ 146.161907][ T311] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 146.166510][ T5509] writeback 0 [ 146.174573][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.181923][ T5509] workingset_refault_anon 1 [ 146.188305][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.195734][ T5509] workingset_refault_file 0 [ 146.201107][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 146.207669][ T5509] swap 12288 [ 146.211068][ T311] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 146.217068][ T5509] swapcached 4096 [ 146.219201][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.227722][ T5509] pgpgin 27 [ 146.238404][ T311] usb 2-1: config 0 descriptor?? [ 146.241455][ T5509] pgpgout 1559 [ 146.415792][ T5509] pgfault 62 [ 146.419020][ T5509] pgmajfault 2 [ 146.422455][ T5509] inactive_anon 0 [ 146.426110][ T5509] active_anon 4096 [ 146.429894][ T5509] inactive_file 0 [ 146.433564][ T5509] active_file 0 [ 146.437052][ T5509] unevictable 0 [ 146.440580][ T5509] hierarchical_memory_limit 4096 [ 146.445547][ T5509] hierarchical_memsw_limit 9223372036854771712 [ 146.451777][ T5509] total_cache 0 [ 146.455297][ T5509] total_rss 0 [ 146.458604][ T5509] total_rss_huge 0 [ 146.462401][ T5509] total_shmem 0 [ 146.465880][ T5509] total_mapped_file 0 [ 146.469978][ T5509] total_dirty 0 [ 146.473891][ T5509] total_writeback 0 [ 146.477920][ T5509] total_workingset_refault_anon 1 [ 146.483075][ T5509] total_workingset_refault_file 0 [ 146.488185][ T5509] total_swap 12288 [ 146.495415][ T5509] total_swapcached 4096 [ 146.499748][ T5509] total_pgpgin 27 [ 146.503557][ T5509] total_pgpgout 1559 [ 146.507552][ T5509] total_pgfault 62 [ 146.511782][ T5509] total_pgmajfault 2 [ 146.515709][ T5509] total_inactive_anon 0 [ 146.519936][ T5509] total_active_anon 4096 [ 146.524206][ T5509] total_inactive_file 0 [ 146.528386][ T5509] total_active_file 0 [ 146.539567][ T5509] total_unevictable 0 [ 146.544142][ T5509] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz3/syz2,task_memcg=/syz3/syz2,task=syz.3.2238,pid=5508,uid=0 [ 146.567779][ T5509] Memory cgroup out of memory: Killed process 5508 (syz.3.2238) total-vm:94236kB, anon-rss:1368kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 146.623184][ T5520] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 146.671101][ T311] usbhid 2-1:0.0: can't add hid device: -71 [ 146.678619][ T311] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 146.694096][ T311] usb 2-1: USB disconnect, device number 9 [ 146.731208][ T5533] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=10 sclass=netlink_xfrm_socket pid=5533 comm=syz.3.2248 [ 146.757790][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 146.757810][ T36] audit: type=1400 audit(1785755772.796:466486): avc: denied { read } for pid=5534 comm="syz.3.2249" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 146.787470][ T36] audit: type=1400 audit(1785755772.796:466487): avc: denied { open } for pid=5534 comm="syz.3.2249" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 146.827782][ T5538] syz.3.2250 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 146.837822][ T5538] CPU: 1 UID: 0 PID: 5538 Comm: syz.3.2250 Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 146.837860][ T5538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.837876][ T5538] Call Trace: [ 146.837885][ T5538] [ 146.837895][ T5538] __dump_stack+0x21/0x30 [ 146.837936][ T5538] dump_stack_lvl+0x140/0x1c0 [ 146.837978][ T5538] ? __cfi_dump_stack_lvl+0x10/0x10 [ 146.838013][ T5538] ? ___ratelimit+0x41c/0x5c0 [ 146.838045][ T5538] ? __kasan_check_write+0x18/0x20 [ 146.838071][ T5538] dump_stack+0x19/0x20 [ 146.838104][ T5538] dump_header+0xd9/0x460 [ 146.838138][ T5538] oom_kill_process+0x35d/0x640 [ 146.838167][ T5538] out_of_memory+0x5d1/0xa20 [ 146.838196][ T5538] ? __cfi_out_of_memory+0x10/0x10 [ 146.838223][ T5538] ? mutex_lock_killable+0x97/0x1d0 [ 146.838259][ T5538] ? __cfi_mutex_lock_killable+0x10/0x10 [ 146.838297][ T5538] mem_cgroup_out_of_memory+0x2c5/0x390 [ 146.838324][ T5538] ? css_next_descendant_pre+0x1ec/0x210 [ 146.838355][ T5538] ? __kasan_check_write+0x18/0x20 [ 146.838380][ T5538] ? drain_obj_stock+0xec0/0xec0 [ 146.838408][ T5538] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 146.838435][ T5538] try_charge_memcg+0x925/0xe10 [ 146.838468][ T5538] ? static_key_count+0x45/0x70 [ 146.838501][ T5538] ? __cfi_gfp_zone+0x1/0x10 [ 146.838528][ T5538] ? __cfi_try_charge_memcg+0x10/0x10 [ 146.838562][ T5538] ? __alloc_pages_noprof+0x35a/0x7e0 [ 146.838599][ T5538] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 146.838636][ T5538] __mem_cgroup_charge+0xfc/0x420 [ 146.838659][ T5538] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 146.838684][ T5538] ? folio_add_lru+0x116/0x400 [ 146.838714][ T5538] ? __cfi_folio_add_lru+0x10/0x10 [ 146.838747][ T5538] folio_prealloc+0x67/0x220 [ 146.838777][ T5538] do_pte_missing+0x16af/0x4440 [ 146.838809][ T5538] ? schedule+0xc5/0x240 [ 146.838841][ T5538] ? pte_marker_clear+0x1b0/0x1b0 [ 146.838872][ T5538] ? cgroup_rstat_updated+0x144/0x800 [ 146.838901][ T5538] ? futex_wake+0x666/0x950 [ 146.838923][ T5538] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 146.838963][ T5538] handle_mm_fault+0x1189/0x1ba0 [ 146.839003][ T5538] ? __cfi_handle_mm_fault+0x10/0x10 [ 146.839032][ T5538] ? lock_vma_under_rcu+0x4cf/0x590 [ 146.839064][ T5538] ? __se_sys_futex+0x13c/0x320 [ 146.839097][ T5538] ? __fget_files+0x2bc/0x330 [ 146.839126][ T5538] do_user_addr_fault+0x951/0x1230 [ 146.839165][ T5538] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 146.839199][ T5538] exc_page_fault+0x58/0xc0 [ 146.839235][ T5538] asm_exc_page_fault+0x2b/0x30 [ 146.839266][ T5538] RIP: 0033:0x7fdc1b4573d5 [ 146.839287][ T5538] Code: 0f 1f 44 00 00 49 89 4c 24 28 e9 a5 fe ff ff 66 0f 1f 44 00 00 48 81 fe 00 f0 02 00 0f 85 92 fe ff ff 66 0f 6f 0d bb dc 1f 00 01 0f 00 00 00 48 89 4c 24 38 0f 11 49 08 66 0f 6f 0d b4 dc 1f [ 146.839308][ T5538] RSP: 002b:00007fdc19ff6f60 EFLAGS: 00010246 [ 146.839332][ T5538] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000200000c10000 [ 146.839350][ T5538] RDX: 0000000000001000 RSI: 000000000002f000 RDI: 0000000000000001 [ 146.839367][ T5538] RBP: 00007fdc1b654620 R08: 0000000000000000 R09: ffffffffffffffff [ 146.839386][ T5538] R10: 0000000000000000 R11: 0000000000000002 R12: 0000200000c00000 [ 146.839404][ T5538] R13: 0000000000000002 R14: 0000000000000000 R15: 00000000003ef000 [ 146.839424][ T5538] [ 146.839434][ T5538] memory: usage 4kB, limit 4kB, failcnt 640 [ 147.111246][ T5545] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 147.111277][ T5545] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 147.111369][ T5545] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 147.111391][ T5545] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 147.200479][ T5538] memory+swap: usage 24kB, limit 9007199254740988kB, failcnt 0 [ 147.208074][ T5538] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 147.215008][ T5538] Memory cgroup stats for /syz3/syz2: [ 147.215180][ T5538] cache 0 [ 147.223755][ T5538] rss 0 [ 147.227947][ T5538] rss_huge 0 [ 147.231204][ T5538] shmem 0 [ 147.234403][ T5538] mapped_file 0 [ 147.238020][ T5538] dirty 0 [ 147.241652][ T5538] writeback 0 [ 147.244991][ T5538] workingset_refault_anon 1 [ 147.249513][ T5538] workingset_refault_file 0 [ 147.254075][ T5538] swap 20480 [ 147.257302][ T5538] swapcached 4096 [ 147.261008][ T5538] pgpgin 30 [ 147.264240][ T5538] pgpgout 1562 [ 147.267634][ T5538] pgfault 65 [ 147.273141][ T5538] pgmajfault 2 [ 147.276559][ T5538] inactive_anon 0 [ 147.280485][ T5538] active_anon 4096 [ 147.284232][ T5538] inactive_file 0 [ 147.287887][ T5538] active_file 0 [ 147.291744][ T5538] unevictable 0 [ 147.295244][ T5538] hierarchical_memory_limit 4096 [ 147.306832][ T5538] hierarchical_memsw_limit 9223372036854771712 [ 147.326236][ T5538] total_cache 0 [ 147.333327][ T5549] netlink: 'syz.1.2256': attribute type 21 has an invalid length. [ 147.342297][ T5538] total_rss 0 [ 147.349699][ T5538] total_rss_huge 0 [ 147.356909][ T5538] total_shmem 0 [ 147.362862][ T5538] total_mapped_file 0 [ 147.367158][ T5538] total_dirty 0 [ 147.371502][ T5538] total_writeback 0 [ 147.375634][ T5538] total_workingset_refault_anon 1 [ 147.379792][ T5555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5555 comm=syz.2.2258 [ 147.381266][ T5538] total_workingset_refault_file 0 [ 147.398702][ T5538] total_swap 20480 [ 147.402633][ T5538] total_swapcached 4096 [ 147.406853][ T5538] total_pgpgin 30 [ 147.410782][ T5538] total_pgpgout 1562 [ 147.414737][ T5538] total_pgfault 65 [ 147.418548][ T5538] total_pgmajfault 2 [ 147.427229][ T5538] total_inactive_anon 0 [ 147.431641][ T5538] total_active_anon 4096 [ 147.457402][ T5538] total_inactive_file 0 [ 147.463469][ T5538] total_active_file 0 [ 147.467626][ T5538] total_unevictable 0 [ 147.471825][ T5538] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz3/syz2,task_memcg=/syz3/syz2,task=syz.3.2250,pid=5537,uid=0 [ 147.488601][ T5538] Memory cgroup out of memory: Killed process 5537 (syz.3.2250) total-vm:94236kB, anon-rss:1240kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 147.515523][ T36] audit: type=1400 audit(1785755773.556:466488): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 147.725054][ T5577] kvm: vcpu 0: requested 138 ns lapic timer period limited to 200000 ns [ 147.819667][ T311] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 147.846644][ T5591] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5591 comm=syz.3.2275 [ 147.869613][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 147.877948][ T36] audit: type=1400 audit(1785755773.916:466489): avc: denied { setopt } for pid=5592 comm="syz.3.2276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.898333][ T36] audit: type=1400 audit(1785755773.916:466490): avc: denied { write } for pid=5592 comm="syz.3.2276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.980099][ T311] usb 3-1: device descriptor read/64, error -71 [ 147.993851][ T36] audit: type=1400 audit(1785755774.036:466491): avc: denied { mount } for pid=5598 comm="syz.3.2279" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 148.029661][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 148.036511][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 148.046901][ T10] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 148.056101][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.059707][ T394] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 148.064233][ T10] usb 2-1: Product: syz [ 148.076371][ T10] usb 2-1: Manufacturer: syz [ 148.081051][ T10] usb 2-1: SerialNumber: syz [ 148.089849][ T10] usb 2-1: unit 4 not found! [ 148.094502][ T10] usb 2-1: unit 0 not found! [ 148.100769][ T36] audit: type=1400 audit(1785755774.146:466492): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 148.219612][ T394] usb 1-1: Using ep0 maxpacket: 16 [ 148.219682][ T311] usb 3-1: device descriptor read/64, error -71 [ 148.232749][ T394] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 148.240493][ T394] usb 1-1: can't read configurations, error -61 [ 148.369658][ T394] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 148.449655][ T46] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 148.469642][ T311] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 148.489363][ T36] audit: type=1400 audit(1785755774.526:466493): avc: denied { getopt } for pid=5572 comm="syz.1.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.510578][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 148.520495][ T10] usb 2-1: unit 4 not found! [ 148.525103][ T10] usb 2-1: unit 0 not found! [ 148.529722][ T394] usb 1-1: Using ep0 maxpacket: 16 [ 148.532799][ T394] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 148.538252][ T10] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 148.543654][ T394] usb 1-1: can't read configurations, error -61 [ 148.554112][ T10] usb 2-1: unit 4 not found! [ 148.559189][ T394] usb usb1-port1: attempt power cycle [ 148.562991][ T10] usb 2-1: unit 0 not found! [ 148.576568][ T10] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 148.588092][ T10] usb 2-1: USB disconnect, device number 10 [ 148.598092][ T5049] udevd[5049]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 148.614040][ T311] usb 3-1: device descriptor read/64, error -71 [ 148.620800][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 148.627351][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.637839][ T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.648386][ T46] usb 4-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 148.657495][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.665619][ T46] usb 4-1: Product: syz [ 148.669828][ T46] usb 4-1: Manufacturer: syz [ 148.674454][ T46] usb 4-1: SerialNumber: syz [ 148.859659][ T311] usb 3-1: device descriptor read/64, error -71 [ 148.885207][ T46] usb 4-1: USB disconnect, device number 16 [ 148.897128][ T5126] udevd[5126]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 148.909813][ T394] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 148.940023][ T394] usb 1-1: Using ep0 maxpacket: 16 [ 148.946907][ T394] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 148.954966][ T394] usb 1-1: can't read configurations, error -61 [ 148.969798][ T311] usb usb3-port1: attempt power cycle [ 149.089697][ T394] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 149.123235][ T394] usb 1-1: Using ep0 maxpacket: 16 [ 149.130527][ T394] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 149.138121][ T394] usb 1-1: can't read configurations, error -61 [ 149.144741][ T394] usb usb1-port1: unable to enumerate USB device [ 149.245875][ T5617] UDC core: g1: couldn't find an available UDC or it's busy [ 149.269070][ T5619] tipc: Started in network mode [ 149.274035][ T5619] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 149.283066][ T5619] tipc: Enabling of bearer rejected, failed to enable media [ 149.309628][ T311] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 149.330710][ T311] usb 3-1: device descriptor read/8, error -71 [ 149.396146][ T36] audit: type=1400 audit(1785755775.436:466494): avc: denied { relabelfrom } for pid=5622 comm="syz.1.2291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 149.417923][ T36] audit: type=1400 audit(1785755775.436:466495): avc: denied { relabelto } for pid=5622 comm="syz.1.2291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 149.463787][ T311] usb 3-1: device descriptor read/8, error -71 [ 149.709623][ T311] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 149.730722][ T311] usb 3-1: device descriptor read/8, error -71 [ 149.860781][ T311] usb 3-1: device descriptor read/8, error -71 [ 149.969711][ T311] usb usb3-port1: unable to enumerate USB device [ 150.161873][ T5651] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5651 comm=syz.3.2304 [ 150.409668][ T513] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 150.539952][ T513] usb 4-1: device descriptor read/64, error -71 [ 150.769737][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 150.779696][ T513] usb 4-1: device descriptor read/64, error -71 [ 150.919624][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 150.927790][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 150.936493][ T10] usb 2-1: config 254 has an invalid interface number: 103 but max is 0 [ 150.944988][ T10] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 150.955358][ T10] usb 2-1: config 254 has no interface number 0 [ 150.961792][ T10] usb 2-1: config 254 interface 103 has no altsetting 0 [ 150.970262][ T10] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=64.5b [ 150.979328][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.987381][ T10] usb 2-1: Product: syz [ 150.991623][ T10] usb 2-1: Manufacturer: syz [ 150.996308][ T10] usb 2-1: SerialNumber: syz [ 151.019697][ T513] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 151.049635][ T311] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 151.159720][ T5497] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 151.167428][ T513] usb 4-1: device descriptor read/64, error -71 [ 151.210720][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.221037][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 255, changing to 11 [ 151.232249][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 59391, setting to 1024 [ 151.245460][ T311] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 151.254643][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.262702][ T311] usb 3-1: Product: syz [ 151.266963][ T311] usb 3-1: Manufacturer: syz [ 151.271638][ T311] usb 3-1: SerialNumber: syz [ 151.277395][ T5671] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 151.299611][ T5497] usb 1-1: device descriptor read/64, error -71 [ 151.419627][ T513] usb 4-1: device descriptor read/64, error -71 [ 151.486497][ T5675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.495261][ T5675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.505961][ T311] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 151.515958][ T311] usb 3-1: USB disconnect, device number 16 [ 151.529809][ T513] usb usb4-port1: attempt power cycle [ 151.540096][ T5497] usb 1-1: device descriptor read/64, error -71 [ 151.779618][ T5497] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 151.869668][ T513] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 151.890785][ T513] usb 4-1: device descriptor read/8, error -71 [ 151.909664][ T5497] usb 1-1: device descriptor read/64, error -71 [ 152.021576][ T513] usb 4-1: device descriptor read/8, error -71 [ 152.052722][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 152.052743][ T36] audit: type=1400 audit(1785755778.096:466498): avc: denied { getopt } for pid=5679 comm="syz.2.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 152.149626][ T5497] usb 1-1: device descriptor read/64, error -71 [ 152.259737][ T513] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 152.267387][ T5497] usb usb1-port1: attempt power cycle [ 152.290868][ T513] usb 4-1: device descriptor read/8, error -71 [ 152.420727][ T513] usb 4-1: device descriptor read/8, error -71 [ 152.529737][ T513] usb usb4-port1: unable to enumerate USB device [ 152.559610][ T311] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 152.609617][ T5497] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 152.630663][ T5497] usb 1-1: device descriptor read/8, error -71 [ 152.760780][ T5497] usb 1-1: device descriptor read/8, error -71 [ 153.019603][ T5497] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 153.040768][ T5497] usb 1-1: device descriptor read/8, error -71 [ 153.170687][ T5497] usb 1-1: device descriptor read/8, error -71 [ 153.279772][ T5497] usb usb1-port1: unable to enumerate USB device [ 153.436565][ T10] usbserial_generic 2-1:254.103: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 153.451396][ T10] usbserial_generic 2-1:254.103: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 153.462618][ T10] usbserial_generic 2-1:254.103: device has no bulk endpoints [ 153.474692][ T10] usb 2-1: USB disconnect, device number 11 [ 153.589639][ T46] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 153.636725][ T5701] syz.1.2323 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 153.646722][ T5701] CPU: 1 UID: 0 PID: 5701 Comm: syz.1.2323 Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 153.646749][ T5701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.646760][ T5701] Call Trace: [ 153.646767][ T5701] [ 153.646774][ T5701] __dump_stack+0x21/0x30 [ 153.646806][ T5701] dump_stack_lvl+0x140/0x1c0 [ 153.646831][ T5701] ? __cfi_dump_stack_lvl+0x10/0x10 [ 153.646857][ T5701] ? ___ratelimit+0x41c/0x5c0 [ 153.646879][ T5701] ? __kasan_check_write+0x18/0x20 [ 153.646898][ T5701] dump_stack+0x19/0x20 [ 153.646921][ T5701] dump_header+0xd9/0x460 [ 153.646944][ T5701] oom_kill_process+0x35d/0x640 [ 153.646964][ T5701] out_of_memory+0x5d1/0xa20 [ 153.646983][ T5701] ? __cfi_out_of_memory+0x10/0x10 [ 153.647002][ T5701] ? mutex_lock_killable+0x97/0x1d0 [ 153.647027][ T5701] ? __cfi_mutex_lock_killable+0x10/0x10 [ 153.647053][ T5701] mem_cgroup_out_of_memory+0x2c5/0x390 [ 153.647073][ T5701] ? css_next_descendant_pre+0x1ec/0x210 [ 153.647094][ T5701] ? __kasan_check_write+0x18/0x20 [ 153.647111][ T5701] ? drain_obj_stock+0xec0/0xec0 [ 153.647130][ T5701] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 153.647148][ T5701] try_charge_memcg+0x925/0xe10 [ 153.647172][ T5701] ? static_key_count+0x45/0x70 [ 153.647195][ T5701] ? __cfi_gfp_zone+0x1/0x10 [ 153.647214][ T5701] ? __cfi_try_charge_memcg+0x10/0x10 [ 153.647238][ T5701] ? __alloc_pages_noprof+0x35a/0x7e0 [ 153.647264][ T5701] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 153.647289][ T5701] ? _raw_spin_lock+0x92/0x120 [ 153.647309][ T5701] __mem_cgroup_charge+0xfc/0x420 [ 153.647325][ T5701] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 153.647350][ T5701] ? __pte_alloc+0x1ae/0x440 [ 153.647367][ T5701] folio_prealloc+0x67/0x220 [ 153.647389][ T5701] do_pte_missing+0x16af/0x4440 [ 153.647411][ T5701] ? schedule+0xc5/0x240 [ 153.647433][ T5701] ? __futex_wait+0x330/0x3d0 [ 153.647450][ T5701] ? pte_marker_clear+0x1b0/0x1b0 [ 153.647472][ T5701] ? __cfi_futex_wake_mark+0x10/0x10 [ 153.647500][ T5701] ? futex_wake+0x666/0x950 [ 153.647516][ T5701] handle_mm_fault+0x1189/0x1ba0 [ 153.647539][ T5701] ? __cfi_handle_mm_fault+0x10/0x10 [ 153.647558][ T5701] ? lock_vma_under_rcu+0x4cf/0x590 [ 153.647578][ T5701] ? kfree+0x158/0x440 [ 153.647596][ T5701] ? __se_sys_futex+0x13c/0x320 [ 153.647654][ T5701] do_user_addr_fault+0x951/0x1230 [ 153.647695][ T5701] ? fpregs_restore_userregs+0x11c/0x260 [ 153.647726][ T5701] exc_page_fault+0x58/0xc0 [ 153.647753][ T5701] asm_exc_page_fault+0x2b/0x30 [ 153.647775][ T5701] RIP: 0033:0x7fb80fa571b6 [ 153.647789][ T5701] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 9c d9 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 153.647804][ T5701] RSP: 002b:00007fb810abef60 EFLAGS: 00010206 [ 153.647820][ T5701] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000c00000 [ 153.647834][ T5701] RDX: 00000000000025f5 RSI: 0000200000c00000 RDI: 0000200000c01000 [ 153.647848][ T5701] RBP: 00007fb80fc54600 R08: 0000000000000000 R09: 0000000000000006 [ 153.647859][ T5701] R10: 0000000000000006 R11: 0000000000000000 R12: 00000000003ff000 [ 153.647870][ T5701] R13: 0000200000c00000 R14: 00007fb80fe25fa0 R15: 0000000000000000 [ 153.647885][ T5701] [ 153.647905][ T5701] memory: usage 0kB, limit 0kB, failcnt 91 [ 153.971647][ T5701] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 153.981561][ T5701] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 153.988524][ T5701] Memory cgroup stats for /syz1/syz2: [ 153.988671][ T5701] cache 0 [ 153.997085][ T5701] rss 0 [ 153.999980][ T5701] rss_huge 0 [ 154.003216][ T5701] shmem 0 [ 154.006345][ T5701] mapped_file 0 [ 154.009861][ T5701] dirty 0 [ 154.012834][ T5701] writeback 0 [ 154.016139][ T5701] workingset_refault_anon 0 [ 154.020883][ T5701] workingset_refault_file 0 [ 154.025415][ T5701] swap 0 [ 154.028384][ T5701] swapcached 0 [ 154.031992][ T5701] pgpgin 90 [ 154.035135][ T5701] pgpgout 6222 [ 154.039042][ T5701] pgfault 158 [ 154.042539][ T5701] pgmajfault 0 [ 154.046229][ T5701] inactive_anon 0 [ 154.050169][ T46] usb 4-1: too many configurations: 140, using maximum allowed: 8 [ 154.050886][ T5701] active_anon 0 [ 154.061476][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 154.061519][ T46] usb 4-1: can't read configurations, error -61 [ 154.069158][ T5701] inactive_file 0 [ 154.069171][ T5701] active_file 0 [ 154.069178][ T5701] unevictable 0 [ 154.069185][ T5701] hierarchical_memory_limit 0 [ 154.069192][ T5701] hierarchical_memsw_limit 9223372036854771712 [ 154.069200][ T5701] total_cache 0 [ 154.069207][ T5701] total_rss 0 [ 154.069213][ T5701] total_rss_huge 0 [ 154.069254][ T5701] total_shmem 0 [ 154.069263][ T5701] total_mapped_file 0 [ 154.069272][ T5701] total_dirty 0 [ 154.069280][ T5701] total_writeback 0 [ 154.069289][ T5701] total_workingset_refault_anon 0 [ 154.069300][ T5701] total_workingset_refault_file 0 [ 154.069310][ T5701] total_swap 0 [ 154.069319][ T5701] total_swapcached 0 [ 154.140357][ T5701] total_pgpgin 90 [ 154.144037][ T5701] total_pgpgout 6222 [ 154.148029][ T5701] total_pgfault 158 [ 154.151920][ T5701] total_pgmajfault 0 [ 154.155948][ T5701] total_inactive_anon 0 [ 154.160220][ T5701] total_active_anon 0 [ 154.164242][ T5701] total_inactive_file 0 [ 154.168420][ T5701] total_active_file 0 [ 154.172565][ T5701] total_unevictable 0 [ 154.176574][ T5701] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz1/syz2,task_memcg=/syz1/syz2,task=syz.1.2323,pid=5700,uid=0 [ 154.192515][ T5701] Memory cgroup out of memory: Killed process 5700 (syz.1.2323) total-vm:94236kB, anon-rss:1236kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 154.219628][ T46] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 154.390037][ T46] usb 4-1: too many configurations: 140, using maximum allowed: 8 [ 154.399843][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 154.407551][ T46] usb 4-1: can't read configurations, error -61 [ 154.414356][ T46] usb usb4-port1: attempt power cycle [ 154.426327][ T51] device offline error, dev sda, sector 1134902 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 154.436978][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2029 starting block 141862) [ 154.448655][ T51] Buffer I/O error on device sda1, logical block 141824 [ 154.455716][ T51] Buffer I/O error on device sda1, logical block 141825 [ 154.462784][ T51] device offline error, dev sda, sector 1179958 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 154.473410][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 147494) [ 154.485162][ T51] Buffer I/O error on device sda1, logical block 147456 [ 154.492636][ T51] device offline error, dev sda, sector 1180462 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 154.503284][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 147557) [ 154.514951][ T51] Buffer I/O error on device sda1, logical block 147519 [ 154.522034][ T51] device offline error, dev sda, sector 1188126 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 154.532632][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 148515) [ 154.544302][ T51] Buffer I/O error on device sda1, logical block 148477 [ 154.551410][ T51] Buffer I/O error on device sda1, logical block 148478 [ 154.558398][ T51] Buffer I/O error on device sda1, logical block 148479 [ 154.565473][ T51] device offline error, dev sda, sector 1192126 op 0x1:(WRITE) flags 0x0 phys_seg 15 prio class 2 [ 154.576217][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 149015) [ 154.587843][ T51] Buffer I/O error on device sda1, logical block 148977 [ 154.594866][ T51] Buffer I/O error on device sda1, logical block 148978 [ 154.601894][ T51] Buffer I/O error on device sda1, logical block 148979 [ 154.608952][ T51] device offline error, dev sda, sector 1212726 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 154.619927][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2033 starting block 151590) [ 154.631737][ T51] device offline error, dev sda, sector 1213230 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 154.642339][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2033 starting block 151653) [ 154.652311][ T3712] device offline error, dev sda, sector 1224806 op 0x1:(WRITE) flags 0x0 phys_seg 20 prio class 2 [ 154.654172][ T51] device offline error, dev sda, sector 1220894 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 154.675138][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2033 starting block 152611) [ 154.685119][ T3712] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2033 starting block 153100) [ 154.698923][ T3712] device offline error, dev sda, sector 1241382 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 154.711474][ T3712] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2033 starting block 155172) [ 154.726614][ T3707] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2030, error -5) [ 154.728065][ T73] Aborting journal on device sda1-8. [ 154.746494][ T73] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 154.747507][ T36] audit: type=1400 audit(1785755780.786:466499): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 154.756095][ T73] JBD2: I/O error when updating journal superblock for sda1-8. [ 154.784803][ T46] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 154.799682][ T36] audit: type=1400 audit(1785755780.786:466500): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.825466][ T5704] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.0.2325: Detected aborted journal [ 154.836065][ T5710] EXT4-fs (sda1): shut down requested (2) [ 154.838611][ T36] audit: type=1400 audit(1785755780.786:466501): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.864062][ T36] audit: type=1400 audit(1785755780.786:466502): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.868782][ T46] usb 4-1: too many configurations: 140, using maximum allowed: 8 [ 154.886085][ T5704] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 154.901488][ T36] audit: type=1400 audit(1785755780.786:466503): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.922604][ T36] audit: type=1400 audit(1785755780.786:466504): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.945270][ T5704] EXT4-fs (sda1): I/O error while writing superblock [ 154.947008][ T36] audit: type=1400 audit(1785755780.786:466505): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.975715][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 154.976113][ T5704] EXT4-fs (sda1): Remounting filesystem read-only [ 154.983376][ T46] usb 4-1: can't read configurations, error -61 [ 155.025073][ T5710] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 155.062317][ T5714] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2327'. [ 155.073503][ T5714] fuse: Unknown parameter 'RL/kФKj*gr$Fsņ~s*-7[gR;ªٖ߅RFWs|w0KxS}h_J*fJas]dTXQ'7#MPp'JX0x0000000000000005' [ 155.093767][ T36] audit: type=1400 audit(1785755781.136:466506): avc: denied { bind } for pid=5713 comm="syz.0.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.142389][ T46] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 155.210443][ T46] usb 4-1: too many configurations: 140, using maximum allowed: 8 [ 155.230470][ T5716] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2328'. [ 155.239990][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 155.250062][ T46] usb 4-1: can't read configurations, error -61 [ 155.262657][ T46] usb usb4-port1: unable to enumerate USB device [ 155.403855][ T5724] Write-error on swap-device (8:0:806230) [ 155.410077][ T5724] Write-error on swap-device (8:0:806230) [ 155.416527][ T5724] Write-error on swap-device (8:0:806230) [ 155.425334][ T5724] Write-error on swap-device (8:0:806230) [ 155.431652][ T5724] Write-error on swap-device (8:0:806230) [ 155.443565][ T5724] Write-error on swap-device (8:0:806230) [ 155.450053][ T5724] Write-error on swap-device (8:0:806230) [ 155.456318][ T5724] Write-error on swap-device (8:0:806230) [ 155.462566][ T5724] Write-error on swap-device (8:0:806230) [ 155.463792][ T5723] syz.0.2332 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 155.469313][ T5724] Write-error on swap-device (8:0:806230) [ 155.499631][ T5723] CPU: 0 UID: 0 PID: 5723 Comm: syz.0.2332 Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 155.499670][ T5723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.499685][ T5723] Call Trace: [ 155.499694][ T5723] [ 155.499704][ T5723] __dump_stack+0x21/0x30 [ 155.499742][ T5723] dump_stack_lvl+0x140/0x1c0 [ 155.499775][ T5723] ? __cfi_dump_stack_lvl+0x10/0x10 [ 155.499809][ T5723] ? ___ratelimit+0x41c/0x5c0 [ 155.499841][ T5723] ? __kasan_check_write+0x18/0x20 [ 155.499867][ T5723] dump_stack+0x19/0x20 [ 155.499898][ T5723] dump_header+0xd9/0x460 [ 155.499932][ T5723] oom_kill_process+0x35d/0x640 [ 155.499962][ T5723] out_of_memory+0x5d1/0xa20 [ 155.499989][ T5723] ? __cfi_out_of_memory+0x10/0x10 [ 155.500015][ T5723] ? mutex_lock_killable+0x97/0x1d0 [ 155.500048][ T5723] ? __cfi_mutex_lock_killable+0x10/0x10 [ 155.500084][ T5723] mem_cgroup_out_of_memory+0x2c5/0x390 [ 155.500122][ T5723] ? css_next_descendant_pre+0x1ec/0x210 [ 155.500153][ T5723] ? __kasan_check_write+0x18/0x20 [ 155.500177][ T5723] ? drain_obj_stock+0xec0/0xec0 [ 155.500204][ T5723] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 155.500229][ T5723] try_charge_memcg+0x925/0xe10 [ 155.500261][ T5723] ? static_key_count+0x45/0x70 [ 155.500298][ T5723] ? __cfi_gfp_zone+0x1/0x10 [ 155.500323][ T5723] ? __cfi_try_charge_memcg+0x10/0x10 [ 155.500358][ T5723] ? __alloc_pages_noprof+0x35a/0x7e0 [ 155.500394][ T5723] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 155.500431][ T5723] __mem_cgroup_charge+0xfc/0x420 [ 155.500455][ T5723] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 155.500481][ T5723] folio_prealloc+0x67/0x220 [ 155.500512][ T5723] do_pte_missing+0x16af/0x4440 [ 155.500545][ T5723] ? pte_marker_clear+0x1b0/0x1b0 [ 155.500574][ T5723] ? vma_modify_flags+0x182/0x1c0 [ 155.500604][ T5723] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 155.500643][ T5723] handle_mm_fault+0x1189/0x1ba0 [ 155.500676][ T5723] ? __cfi_handle_mm_fault+0x10/0x10 [ 155.500703][ T5723] ? lock_vma_under_rcu+0x4cf/0x590 [ 155.500738][ T5723] do_user_addr_fault+0x951/0x1230 [ 155.500775][ T5723] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 155.500808][ T5723] exc_page_fault+0x58/0xc0 [ 155.500845][ T5723] asm_exc_page_fault+0x2b/0x30 [ 155.500877][ T5723] RIP: 0033:0x7fe11ff5b1c4 [ 155.500898][ T5723] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 155.500920][ T5723] RSP: 002b:00007fff0279c470 EFLAGS: 00010246 [ 155.500944][ T5723] RAX: 00007fe120eae000 RBX: 00007fe120ece6c0 RCX: 00007fe11ff9de17 [ 155.500964][ T5723] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe120ece6c0 [ 155.500981][ T5723] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 155.500997][ T5723] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fff0279c5c0 [ 155.501014][ T5723] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 155.501033][ T5723] [ 155.501165][ T5723] memory: usage 4kB, limit 4kB, failcnt 472 [ 155.799336][ T5723] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 155.806991][ T5723] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 155.813942][ T5723] Memory cgroup stats for /syz0/syz2: [ 155.814135][ T5723] cache 0 [ 155.822770][ T5723] rss 0 [ 155.825557][ T5723] rss_huge 0 [ 155.828768][ T5723] shmem 0 [ 155.834781][ T5723] mapped_file 0 [ 155.838283][ T5723] dirty 0 [ 155.841464][ T5723] writeback 0 [ 155.844775][ T5723] workingset_refault_anon 1 [ 155.849298][ T5723] workingset_refault_file 0 [ 155.854116][ T5723] swap 0 [ 155.857026][ T5723] swapcached 4096 [ 155.860945][ T5723] pgpgin 74 [ 155.864082][ T5723] pgpgout 4672 [ 155.867469][ T5723] pgfault 154 [ 155.871098][ T5723] pgmajfault 1 [ 155.874500][ T5723] inactive_anon 0 [ 155.878163][ T5723] active_anon 4096 [ 155.887611][ T5723] inactive_file 0 [ 155.891587][ T5723] active_file 0 [ 155.895132][ T5723] unevictable 0 [ 155.898620][ T5723] hierarchical_memory_limit 4096 [ 155.903911][ T5723] hierarchical_memsw_limit 9223372036854771712 [ 155.910577][ T5723] total_cache 0 [ 155.914070][ T5723] total_rss 0 [ 155.917371][ T5723] total_rss_huge 0 [ 155.921588][ T5723] total_shmem 0 [ 155.925079][ T5723] total_mapped_file 0 [ 155.929083][ T5723] total_dirty 0 [ 155.933019][ T5723] total_writeback 0 [ 155.936858][ T5723] total_workingset_refault_anon 1 [ 155.942582][ T5723] total_workingset_refault_file 0 [ 155.958171][ T5723] total_swap 0 [ 155.967507][ T5723] total_swapcached 4096 [ 155.978652][ T5723] total_pgpgin 74 [ 155.993923][ T5723] total_pgpgout 4672 [ 156.001981][ T5723] total_pgfault 154 [ 156.006082][ T5723] total_pgmajfault 1 [ 156.010180][ T5723] total_inactive_anon 0 [ 156.014382][ T5723] total_active_anon 4096 [ 156.018790][ T5723] total_inactive_file 0 [ 156.023033][ T5723] total_active_file 0 [ 156.027064][ T5723] total_unevictable 0 [ 156.031197][ T5723] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz0/syz2,task_memcg=/syz0/syz2,task=syz.0.2332,pid=5723,uid=0 [ 156.047099][ T5723] Memory cgroup out of memory: Killed process 5723 (syz.0.2332) total-vm:96284kB, anon-rss:1240kB, file-rss:22424kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 156.064418][ T5728] syz.2.2334 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 156.078031][ T5728] CPU: 1 UID: 0 PID: 5728 Comm: syz.2.2334 Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 156.078080][ T5728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.078097][ T5728] Call Trace: [ 156.078106][ T5728] [ 156.078116][ T5728] __dump_stack+0x21/0x30 [ 156.078156][ T5728] dump_stack_lvl+0x140/0x1c0 [ 156.078190][ T5728] ? __cfi_dump_stack_lvl+0x10/0x10 [ 156.078226][ T5728] ? ___ratelimit+0x41c/0x5c0 [ 156.078259][ T5728] ? __kasan_check_write+0x18/0x20 [ 156.078286][ T5728] dump_stack+0x19/0x20 [ 156.078319][ T5728] dump_header+0xd9/0x460 [ 156.078354][ T5728] oom_kill_process+0x35d/0x640 [ 156.078384][ T5728] out_of_memory+0x5d1/0xa20 [ 156.078412][ T5728] ? __cfi_out_of_memory+0x10/0x10 [ 156.078441][ T5728] ? mutex_lock_killable+0x115/0x1d0 [ 156.078478][ T5728] ? __cfi_mutex_lock_killable+0x10/0x10 [ 156.078517][ T5728] mem_cgroup_out_of_memory+0x2c5/0x390 [ 156.078545][ T5728] ? css_next_descendant_pre+0x1ec/0x210 [ 156.078574][ T5728] ? __kasan_check_write+0x18/0x20 [ 156.078599][ T5728] ? drain_obj_stock+0xec0/0xec0 [ 156.078628][ T5728] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 156.078655][ T5728] try_charge_memcg+0x925/0xe10 [ 156.078690][ T5728] ? static_key_count+0x45/0x70 [ 156.078723][ T5728] ? __cfi_gfp_zone+0x1/0x10 [ 156.078751][ T5728] ? __cfi_try_charge_memcg+0x10/0x10 [ 156.078787][ T5728] ? __alloc_pages_noprof+0x35a/0x7e0 [ 156.078824][ T5728] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 156.078862][ T5728] __mem_cgroup_charge+0xfc/0x420 [ 156.078887][ T5728] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 156.078923][ T5728] folio_prealloc+0x67/0x220 [ 156.078957][ T5728] do_pte_missing+0x16af/0x4440 [ 156.078990][ T5728] ? __kasan_check_write+0x18/0x20 [ 156.079015][ T5728] ? _raw_spin_trylock+0xb5/0x140 [ 156.079046][ T5728] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 156.079085][ T5728] ? pte_marker_clear+0x1b0/0x1b0 [ 156.079118][ T5728] ? cgroup_rstat_updated+0x3fd/0x800 [ 156.079148][ T5728] ? ioctl_has_perm+0x408/0x500 [ 156.079174][ T5728] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 156.079215][ T5728] handle_mm_fault+0x1189/0x1ba0 [ 156.079249][ T5728] ? __cfi_handle_mm_fault+0x10/0x10 [ 156.079278][ T5728] ? lock_vma_under_rcu+0x4cf/0x590 [ 156.079315][ T5728] do_user_addr_fault+0x951/0x1230 [ 156.079354][ T5728] ? __kasan_check_write+0x18/0x20 [ 156.079381][ T5728] ? __kasan_check_read+0x15/0x20 [ 156.079408][ T5728] exc_page_fault+0x58/0xc0 [ 156.079445][ T5728] asm_exc_page_fault+0x2b/0x30 [ 156.079478][ T5728] RIP: 0033:0x7f302f56d147 [ 156.079500][ T5728] Code: ee a3 de 00 01 74 9d 83 f9 c0 0f 87 8f fe ff ff c5 fe 6f 4e 20 48 29 fe 48 83 c7 3f 49 8d 0c 10 48 83 e7 c0 48 01 fe 48 29 f9 a4 c4 c1 7e 7f 00 c4 c1 7e 7f 48 20 e9 0e fd ff ff 0f 1f 80 00 [ 156.079528][ T5728] RSP: 002b:00007f3030408f58 EFLAGS: 00010206 [ 156.079551][ T5728] RAX: 0000200000c62000 RBX: 0000000000000009 RCX: 00000000000025f5 [ 156.079569][ T5728] RDX: 00000000000025f5 RSI: 00007f302f604b40 RDI: 0000200000c62000 [ 156.079587][ T5728] RBP: 00007f302f654690 R08: 0000200000c62000 R09: 0000000000000006 [ 156.079605][ T5728] R10: 0000000000000000 R11: 0000000000000008 R12: 0000200000c00000 [ 156.079622][ T5728] R13: 0000000000000008 R14: 0000000000000002 R15: 000000000039a000 [ 156.079642][ T5728] [ 156.400236][ T5728] memory: usage 4kB, limit 4kB, failcnt 1613 [ 156.406295][ T5728] memory+swap: usage 32kB, limit 9007199254740988kB, failcnt 0 [ 156.414001][ T5728] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 156.420923][ T5728] Memory cgroup stats for /syz2/syz2: [ 156.421094][ T5728] cache 0 [ 156.437360][ T5728] rss 0 [ 156.441195][ T5728] rss_huge 0 [ 156.444503][ T5728] shmem 0 [ 156.447479][ T5728] mapped_file 0 [ 156.451585][ T5728] dirty 0 [ 156.455166][ T5728] writeback 0 [ 156.458812][ T5728] workingset_refault_anon 15 [ 156.463807][ T5728] workingset_refault_file 0 [ 156.468404][ T5728] swap 28672 [ 156.472245][ T5728] swapcached 4096 [ 156.475922][ T5728] pgpgin 84 [ 156.481120][ T5728] pgpgout 1105 [ 156.496578][ T5728] pgfault 108 [ 156.500096][ T5728] pgmajfault 15 [ 156.503591][ T5728] inactive_anon 0 [ 156.507425][ T5728] active_anon 4096 [ 156.511465][ T5728] inactive_file 0 [ 156.515136][ T5728] active_file 0 [ 156.518668][ T5728] unevictable 0 [ 156.519472][ T5735] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 156.523163][ T5728] hierarchical_memory_limit 4096 [ 156.535165][ T5728] hierarchical_memsw_limit 9223372036854771712 [ 156.541756][ T5728] total_cache 0 [ 156.545306][ T5728] total_rss 0 [ 156.548617][ T5728] total_rss_huge 0 [ 156.552710][ T5728] total_shmem 0 [ 156.556247][ T5728] total_mapped_file 0 [ 156.560480][ T5728] total_dirty 0 [ 156.563981][ T5728] total_writeback 0 [ 156.567862][ T5728] total_workingset_refault_anon 15 [ 156.573256][ T5728] total_workingset_refault_file 0 [ 156.578372][ T5728] total_swap 28672 [ 156.582376][ T5728] total_swapcached 4096 [ 156.586567][ T5728] total_pgpgin 84 [ 156.590458][ T5728] total_pgpgout 1105 [ 156.594486][ T5728] total_pgfault 108 [ 156.598325][ T5728] total_pgmajfault 15 [ 156.602883][ T5728] total_inactive_anon 0 [ 156.607210][ T5728] total_active_anon 4096 [ 156.611767][ T5728] total_inactive_file 0 [ 156.615992][ T5728] total_active_file 0 [ 156.620248][ T5728] total_unevictable 0 [ 156.624260][ T5728] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2/syz2,task_memcg=/syz2/syz2,task=syz.2.2334,pid=5727,uid=0 [ 156.640256][ T5728] Memory cgroup out of memory: Killed process 5728 (syz.2.2334) total-vm:98604kB, anon-rss:1240kB, file-rss:26636kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 156.741516][ T5745] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 156.741795][ T36] audit: type=1400 audit(1785755782.786:466507): avc: denied { remount } for pid=5744 comm="syz.1.2340" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 156.754531][ T5745] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 156.781547][ T5745] SELinux: failed to load policy [ 156.788889][ T5745] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5745 comm=syz.1.2340 [ 156.953120][ T5754] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=591197932 (1182395864 ns) > initial count (4398 ns). Using initial count to start timer. [ 157.274229][ T5766] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 157.334514][ T5768] netlink: 'syz.1.2350': attribute type 10 has an invalid length. [ 157.342810][ T5768] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2350'. [ 157.360725][ T5768] veth1: entered promiscuous mode [ 157.367609][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 157.367628][ T36] audit: type=1400 audit(1785755783.406:466509): avc: denied { read } for pid=5767 comm="syz.1.2350" name="trace" dev="tracefs" ino=1093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 157.398258][ T36] audit: type=1400 audit(1785755783.436:466510): avc: denied { create } for pid=5770 comm="syz.3.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 157.420128][ T5771] process 'syz.3.2351' launched './file0' with NULL argv: empty string added [ 157.420196][ T36] audit: type=1400 audit(1785755783.466:466511): avc: denied { execute } for pid=5770 comm="syz.3.2351" name="file0" dev="tmpfs" ino=2857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 157.452690][ T36] audit: type=1400 audit(1785755783.476:466512): avc: denied { execute_no_trans } for pid=5770 comm="syz.3.2351" path="/541/file0" dev="tmpfs" ino=2857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 157.477378][ T5771] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2351'. [ 157.487186][ T36] audit: type=1400 audit(1785755783.496:466513): avc: denied { accept } for pid=5767 comm="syz.1.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 157.509657][ T36] audit: type=1400 audit(1785755783.516:466514): avc: denied { nlmsg_read } for pid=5770 comm="syz.3.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.531510][ T36] audit: type=1400 audit(1785755783.536:466515): avc: denied { read write } for pid=5767 comm="syz.1.2350" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 157.558076][ T36] audit: type=1400 audit(1785755783.536:466516): avc: denied { open } for pid=5767 comm="syz.1.2350" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 157.583761][ T36] audit: type=1400 audit(1785755783.546:466517): avc: denied { ioctl } for pid=5767 comm="syz.1.2350" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 157.628746][ T36] audit: type=1400 audit(1785755783.666:466518): avc: denied { read } for pid=5773 comm="syz.3.2352" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 157.856359][ T5790] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 158.059608][ T5078] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 158.145941][ T5794] FAULT_INJECTION: forcing a failure. [ 158.145941][ T5794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.159292][ T5794] CPU: 0 UID: 0 PID: 5794 Comm: syz.0.2360 Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 158.159330][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.159346][ T5794] Call Trace: [ 158.159354][ T5794] [ 158.159364][ T5794] __dump_stack+0x21/0x30 [ 158.159402][ T5794] dump_stack_lvl+0x140/0x1c0 [ 158.159436][ T5794] ? __cfi_dump_stack_lvl+0x10/0x10 [ 158.159472][ T5794] ? check_stack_object+0x138/0x150 [ 158.159499][ T5794] dump_stack+0x19/0x20 [ 158.159536][ T5794] should_fail_ex+0x3c2/0x510 [ 158.159565][ T5794] should_fail+0xf/0x20 [ 158.159593][ T5794] should_fail_usercopy+0x1e/0x30 [ 158.159624][ T5794] _copy_to_user+0x24/0xa0 [ 158.159658][ T5794] simple_read_from_buffer+0xed/0x160 [ 158.159694][ T5794] proc_fail_nth_read+0x1aa/0x220 [ 158.159721][ T5794] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 158.159748][ T5794] ? bpf_lsm_file_permission+0xd/0x20 [ 158.159772][ T5794] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 158.159798][ T5794] vfs_read+0x28b/0xc70 [ 158.159818][ T5794] ? __cfi_vfs_read+0x10/0x10 [ 158.159835][ T5794] ? __kasan_check_write+0x18/0x20 [ 158.159854][ T5794] ? mutex_lock+0x97/0x1d0 [ 158.159879][ T5794] ? __cfi_mutex_lock+0x10/0x10 [ 158.159906][ T5794] ksys_read+0x145/0x260 [ 158.159924][ T5794] ? __cfi_ksys_read+0x10/0x10 [ 158.159943][ T5794] ? __kasan_check_read+0x15/0x20 [ 158.159968][ T5794] __x64_sys_read+0x7f/0x90 [ 158.159987][ T5794] x64_sys_call+0x2638/0x2ee0 [ 158.160004][ T5794] do_syscall_64+0x57/0xf0 [ 158.160025][ T5794] ? clear_bhb_loop+0x50/0xa0 [ 158.160049][ T5794] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 158.160073][ T5794] RIP: 0033:0x7fe11ff5e84e [ 158.160090][ T5794] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 158.160107][ T5794] RSP: 002b:00007fe120eeefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.160127][ T5794] RAX: ffffffffffffffda RBX: 00007fe120eef6c0 RCX: 00007fe11ff5e84e [ 158.160142][ T5794] RDX: 000000000000000f RSI: 00007fe120eef0a0 RDI: 0000000000000006 [ 158.160155][ T5794] RBP: 00007fe120eef090 R08: 0000000000000000 R09: 0000000000000000 [ 158.160167][ T5794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.160179][ T5794] R13: 00007fe120226038 R14: 00007fe120225fa0 R15: 00007fff0279c4c8 [ 158.160195][ T5794] [ 158.413685][ T5078] usb 4-1: Using ep0 maxpacket: 16 [ 158.423403][ T5078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.434624][ T5078] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 158.447568][ T5078] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 158.456752][ T5078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.474900][ T5078] usb 4-1: config 0 descriptor?? [ 158.515295][ T110] udevd[110]: worker [5126] terminated by signal 7 (Bus error) [ 158.528030][ T110] udevd[110]: worker [5126] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 158.631888][ T110] udevd[110]: worker [5254] terminated by signal 7 (Bus error) [ 158.639675][ T110] udevd[110]: worker [5254] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0' [ 158.743643][ T5812] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2366'. [ 158.897384][ T5078] HID 045e:07da: Invalid code 65791 type 1 [ 158.907160][ T5078] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0006/input/input5 [ 158.921289][ T5078] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 158.935994][ T5824] udevd[5824]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 159.005477][ T110] udevd[110]: worker [5049] terminated by signal 7 (Bus error) [ 159.013253][ T110] udevd[110]: worker [5049] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0' [ 159.099636][ T311] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 159.219608][ T31] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 159.260729][ T311] usb 1-1: config 1 has an invalid descriptor of length 107, skipping remainder of the config [ 159.271215][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.281712][ T311] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.290837][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.298911][ T311] usb 1-1: Product: syz [ 159.303170][ T311] usb 1-1: Manufacturer: syz [ 159.307954][ T311] usb 1-1: SerialNumber: syz [ 159.324831][ T110] udevd[110]: worker [5255] terminated by signal 7 (Bus error) [ 159.332584][ T110] udevd[110]: worker [5255] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 159.516435][ T5821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5821 comm=syz.0.2370 [ 159.522530][ T46] usb 4-1: USB disconnect, device number 25 [ 159.659440][ T5833] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 160.576218][ T5855] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 160.859651][ T5078] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 161.009620][ T5078] usb 2-1: Using ep0 maxpacket: 16 [ 161.016231][ T5078] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 161.025472][ T5078] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 161.035304][ T5078] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 161.045226][ T5078] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 161.055305][ T5078] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 161.065145][ T5078] usb 2-1: config 1 interface 0 has no altsetting 0 [ 161.071821][ T5078] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 161.080926][ T5078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.097986][ T5078] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 161.298814][ T5078] scsi host1: usb-storage 2-1:1.0 [ 161.489698][ T394] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 161.639892][ T394] usb 4-1: Using ep0 maxpacket: 32 [ 161.646286][ T394] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 161.654876][ T394] usb 4-1: config 0 has no interface number 0 [ 161.662775][ T394] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 161.671966][ T394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.680053][ T394] usb 4-1: Product: syz [ 161.684260][ T394] usb 4-1: Manufacturer: syz [ 161.688871][ T394] usb 4-1: SerialNumber: syz [ 161.694519][ T394] usb 4-1: config 0 descriptor?? [ 161.700653][ T394] smsc95xx v2.0.0 [ 161.811071][ T311] usb 1-1: 0:2 : does not exist [ 161.821618][ T311] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 161.859776][ T311] usb 1-1: USB disconnect, device number 20 [ 161.958398][ T5881] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 162.360371][ T3676] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 162.509629][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 162.572960][ T311] usb 2-1: USB disconnect, device number 12 [ 162.574302][ T5870] sddr09: could not read card info [ 162.619742][ T3677] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 162.627029][ T3677] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 162.633065][ T3677] sd 1:0:0:0: [sdb] Write Protect is off [ 162.639004][ T3677] sd 1:0:0:0: [sdb] Asking for cache data failed [ 162.645533][ T3677] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 162.657424][ T3677] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 162.669595][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 162.675607][ T5897] udevd[5897]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sdb': Input/output error [ 162.691254][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 162.704677][ T394] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 162.710056][ T10] usb 1-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 162.724913][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.733807][ T10] usb 1-1: Product: syz [ 162.740495][ T10] usb 1-1: Manufacturer: syz [ 162.745137][ T10] usb 1-1: SerialNumber: syz [ 162.753677][ T394] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 162.766266][ T394] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 162.779356][ T394] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 162.789884][ T394] usb 4-1: USB disconnect, device number 26 [ 162.838789][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 162.838825][ T36] audit: type=1326 audit(1785755788.876:466531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.2.2401" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f302f59e019 code=0x0 [ 162.989563][ T10] usb 1-1: USB disconnect, device number 21 [ 163.118456][ T5907] tipc: Enabling of bearer rejected, failed to enable media [ 163.130511][ T5907] tipc: Enabling of bearer rejected, failed to enable media [ 163.179613][ T46] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 163.284363][ T5919] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 163.321364][ T5921] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2409'. [ 163.360117][ T5928] FAULT_INJECTION: forcing a failure. [ 163.360117][ T5928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.378856][ T5928] CPU: 0 UID: 0 PID: 5928 Comm: syz.3.2412 Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 163.378896][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.378912][ T5928] Call Trace: [ 163.378921][ T5928] SYZFAIL: SIGBUS pc-offset:0xfffffffffffe340d pc:0x7f6d9c870123 addr:0x7f6d991ffffc code=2 (errno 11: Resource temporarily unavailable) [ 163.378931][ T5928] __dump_stack+0x21/0x30 [ 163.378969][ T5928] dump_stack_lvl+0x140/0x1c0 [ 163.379003][ T5928] ? __cfi_dump_stack_lvl+0x10/0x10 [ 163.379039][ T5928] dump_stack+0x19/0x20 [ 163.379070][ T5928] should_fail_ex+0x3c2/0x510 [ 163.379098][ T5928] should_fail+0xf/0x20 [ 163.379123][ T5928] should_fail_usercopy+0x1e/0x30 [ 163.379152][ T5928] _copy_from_user+0x20/0xa0 [ 163.379190][ T5928] inet6_ioctl+0x1a8/0x2d0 [ 163.379217][ T5928] ? __cfi_inet6_ioctl+0x10/0x10 [ 163.379244][ T5928] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 163.379281][ T5928] sock_do_ioctl+0x115/0x330 [ 163.379312][ T5928] ? sock_show_fdinfo+0xd0/0xd0 [ 163.379342][ T5928] ? __cfi_vfs_write+0x10/0x10 [ 163.379367][ T5928] ? __kasan_check_write+0x18/0x20 [ 163.379390][ T5928] ? mutex_unlock+0x90/0x240 [ 163.379423][ T5928] sock_ioctl+0x568/0x7e0 [ 163.379451][ T5928] ? __cfi_sock_ioctl+0x10/0x10 [ 163.379480][ T5928] ? bpf_lsm_file_ioctl+0xd/0x20 [ 163.379511][ T5928] ? security_file_ioctl+0x3e/0x110 [ 163.379550][ T5928] ? __cfi_sock_ioctl+0x10/0x10 [ 163.379585][ T5928] __se_sys_ioctl+0x132/0x1b0 [ 163.379615][ T5928] __x64_sys_ioctl+0x7f/0xa0 [ 163.379644][ T5928] x64_sys_call+0x1878/0x2ee0 [ 163.379666][ T5928] do_syscall_64+0x57/0xf0 [ 163.379692][ T5928] ? clear_bhb_loop+0x50/0xa0 [ 163.379726][ T5928] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 163.379757][ T5928] RIP: 0033:0x7fdc1b59e019 [ 163.379777][ T5928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.379797][ T5928] RSP: 002b:00007fdc19ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.379824][ T5928] RAX: ffffffffffffffda RBX: 00007fdc1b825fa0 RCX: 00007fdc1b59e019 [ 163.379844][ T5928] RDX: 00002000000002c0 RSI: 000000000000890b RDI: 0000000000000003 [ 163.379861][ T5928] RBP: 00007fdc19ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 163.379878][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.379893][ T5928] R13: 00007fdc1b826038 R14: 00007fdc1b825fa0 R15: 00007fffe2833978 [ 163.379915][ T5928] [ 163.449724][ T36] audit: type=1400 audit(1785755789.436:466532): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1500]" dev="pipefs" ino=1500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 163.993300][ T3677] bridge_slave_1: left allmulticast mode [ 163.998980][ T3677] bridge_slave_1: left promiscuous mode [ 164.004926][ T3677] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.013002][ T3677] bridge_slave_0: left allmulticast mode [ 164.018690][ T3677] bridge_slave_0: left promiscuous mode [ 164.024399][ T3677] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.032391][ T3677] bridge_slave_1: left allmulticast mode [ 164.038306][ T3677] bridge_slave_1: left promiscuous mode [ 164.044279][ T3677] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.052030][ T3677] bridge_slave_0: left allmulticast mode [ 164.057697][ T3677] bridge_slave_0: left promiscuous mode [ 164.063452][ T3677] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.071328][ T3677] bridge_slave_1: left allmulticast mode [ 164.076994][ T3677] bridge_slave_1: left promiscuous mode [ 164.082747][ T3677] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.090384][ T3677] bridge_slave_0: left allmulticast mode [ 164.096054][ T3677] bridge_slave_0: left promiscuous mode [ 164.101769][ T3677] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.109629][ T3677] bridge_slave_1: left allmulticast mode [ 164.115288][ T3677] bridge_slave_1: left promiscuous mode [ 164.121196][ T3677] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.128803][ T3677] bridge_slave_0: left allmulticast mode [ 164.134633][ T3677] bridge_slave_0: left promiscuous mode [ 164.140326][ T3677] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.414430][ T3677] tipc: Left network mode [ 164.419193][ T3677] tipc: Disabling bearer [ 164.424653][ T3677] tipc: Disabling bearer [ 164.430315][ T3677] tipc: Left network mode [ 164.434911][ T3677] tipc: Disabling bearer [ 164.440383][ T3677] tipc: Left network mode [ 164.445199][ T3677] tipc: Disabling bearer [ 164.450824][ T3677] tipc: Disabling bearer [ 164.456283][ T3677] tipc: Left network mode [ 164.463423][ T3677] veth1_macvtap: left promiscuous mode [ 164.468964][ T3677] veth0_vlan: left promiscuous mode [ 164.474618][ T3677] veth1_macvtap: left promiscuous mode [ 164.480333][ T3677] veth0_vlan: left promiscuous mode [ 164.485820][ T3677] veth1_macvtap: left promiscuous mode [ 164.491358][ T3677] veth0_vlan: left promiscuous mode [ 164.496927][ T3677] veth1_macvtap: left promiscuous mode [ 164.502526][ T3677] veth0_vlan: left promiscuous mode