last executing test programs: 5m0.593153954s ago: executing program 2 (id=443): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}, 0x1, 0x1500}, 0x0) 5m0.581804365s ago: executing program 2 (id=444): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e01000009058103"], 0x0) unshare(0x22020600) r0 = socket(0x2, 0x1, 0x0) shutdown(r0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fchmod(0xffffffffffffffff, 0x21) writev(0xffffffffffffffff, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setreuid(r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) openat$tun(0xffffffffffffff9c, 0x0, 0x8ab00, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000400)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000008c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='\x00'/10], 0x0}) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x18, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf8, 0x10, 0x56, [{{0x9, 0x4, 0x0, 0xe3, 0x1, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x7f, 0x67, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xc0, 0x6, 0xba}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x20, 0x9, 0x1, 0x20, 0x9}, 0x27, &(0x7f00000000c0)={0x5, 0xf, 0x27, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "00000000333b612e1628977000"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x82, 0x1, 0x2, 0x7ab, 0x5}]}, 0x1, [{0xc9, &(0x7f0000000200)=@string={0xc9, 0x3, "06b74f5be9701cb31c75aaa208ee47165f60c226a4f16bc496620b87c326fafc2857b4156ba651ee88ae362de36c87ce869de70c5124cf2eca963ee7d1b8dd861341552e1bade328bca0f20a82b716dd2c1b9cd0314a554679177114ea89028f13c91405f3214ba4a8a9f09c3b03d855d3fb4b66342d11c83029c9f383ec73277f83f0e3d89802593de05090c6fb2aae5f884e492a388abed4da3c5812eaf877c7d1eb9c47d9962d0aa83cbbfbd90b060b4b5f9f7c5d1fc47100"/199}}]}) 4m59.98525168s ago: executing program 2 (id=445): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r0, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xfe9}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000080)=""/24, 0x18}], 0x4, 0x0, 0xa1ff}, 0x8}], 0x1, 0x180, 0x0) 4m59.886088285s ago: executing program 2 (id=446): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000280), 0x5506, 0x52080) openat(r0, &(0x7f00000002c0)='./file0\x00', 0x2100, 0x2) unshare(0x40600) (async) unshare(0x40600) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000040)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r1 = socket$inet_icmp(0x2, 0x2, 0x1) pwrite64(r1, &(0x7f0000000140)="d9b56795bcfc6254b4efbb0303ff646bc096c15ea2fd60045ffb5e9700b63f9949bc2daeb8b86e47e1086b1b291b1e50220bd9d6cdb9f5cda60d9cd936e1120f2393bd94ba1de84cf753afc643cdf564a92d0de6dd3d96348e28c27e1edd2d062cb6c8cc45946d683d74de7414e6997142223fea5112a0311a77911d59994f673f471463b5edbacec4a05a71f50e153c840543b515e2d693954d8a81ddfa727f62b545bcea939d0108507cc11d09a7101ebb06c50fd81849be92796821cab03fd1cf12b20efb2ec17f2e28e357e19831bb7c3d64df6d2b6835e815f22cbd", 0xde, 0x0) (async) pwrite64(r1, &(0x7f0000000140)="d9b56795bcfc6254b4efbb0303ff646bc096c15ea2fd60045ffb5e9700b63f9949bc2daeb8b86e47e1086b1b291b1e50220bd9d6cdb9f5cda60d9cd936e1120f2393bd94ba1de84cf753afc643cdf564a92d0de6dd3d96348e28c27e1edd2d062cb6c8cc45946d683d74de7414e6997142223fea5112a0311a77911d59994f673f471463b5edbacec4a05a71f50e153c840543b515e2d693954d8a81ddfa727f62b545bcea939d0108507cc11d09a7101ebb06c50fd81849be92796821cab03fd1cf12b20efb2ec17f2e28e357e19831bb7c3d64df6d2b6835e815f22cbd", 0xde, 0x0) io_setup(0x9, &(0x7f00000000c0)) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x60, 0x80000) (async) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x60, 0x80000) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b5fb0a0100000000000000000300", "2809e8dbe108598904004ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dac00000000000000000000002000", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 4m59.763678242s ago: executing program 2 (id=447): io_setup(0x6, &(0x7f0000000000)) syz_io_uring_setup(0x3a4f, &(0x7f0000000080)={0x0, 0x1852, 0x0, 0x0, 0x181}, &(0x7f0000000100), 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) write$tun(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)="c002084eb524", 0x6}, {&(0x7f0000000240)="a43b2eaab400000092e588a84c82af9e9bbb", 0x12}], 0x2) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000002900)={0x1, [{0x1, 0x0, 0x80000000, 0x0}, {0x1, 0x20, 0x6, &(0x7f0000000200)="81ca07ad"}, {0x2, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x8534, 0x0}, {0x1, 0x0, 0xfffffffa, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x80, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x2, 0x5e0, 0x7, &(0x7f0000002640)="e4a1fcd4b7145b14f51c4b3c6d786a7738c822a2cc236d474d4fdf9c8e998c6bf805f505bdadb5475b813acde296a9c89ceef5a2a466b1bcd32485cd725bc38e3d1a86ae28d2ce1e8a6735cc14f07d06a5048963a86267aaa892652e8ae3595104e00e4c2fa85643d56f161b0dbec3ab3557578ae44ae5218ba3238d491dfd78d9200209c6237e0c625addfb5ebf7f8503bb6cbb04c6307e8a1fd8014d9ca77b41bcf246f4bd018d8c8eb71afe9904fa9f698437e1ac512c29c70205"}, {0x0, 0x0, 0x0, &(0x7f0000002740)}, {0x1, 0x0, 0x6, &(0x7f0000002780)}, {0x2, 0x90, 0x6, &(0x7f0000002800)="e56413c3ace868d49de118fef99b9b558920"}, {0x3, 0x2a0, 0x3fa256c5, &(0x7f0000002840)="63557e9353628802b59cbe2a124f876a96c34b1f89e679d5559f53e8cf527f150c6ed0c559bbf04bd7c8129f708679f70b31d7bfaffae5b75484c35720e79e4b32e602882bb75af097f54b03b21cb39462a4db71"}, {0x3, 0xb0, 0x4, &(0x7f00000028c0)="fdbb4a9fe185ae8318bcca64db62f9eaf2ab04ea7ddb"}]}) r7 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r8 = memfd_create(0x0, 0x2) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, 0x0) r10 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, &(0x7f0000000380)={0x0, 0x1, 0x200, 0x3, 0x4}) r11 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f0000000180)=@x86={0x40, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x9, 0x0, 0x80, 0x49, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0xdddd0000, 0x2, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0x3}, {0x0, 0x8, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0x0, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x7, 0x50, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x3, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x3, 0x26}, {0x9, 0x3, 0x8, '\x00', 0x6}, {0xf, 0x3, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x4, 0x6, 0xb, '\x00', 0x1}, {0x4, 0xc, 0xdf, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xca}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x4, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x7}, {0x7, 0x4, 0x4}]}}) rt_sigtimedwait(&(0x7f0000005280)={[0x8]}, &(0x7f00000052c0), &(0x7f0000005340)={0x77359400}, 0x8) 4m59.504850808s ago: executing program 2 (id=450): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup(r0) (async) r1 = dup(r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240606000308000000f9a153519a08039e0c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003070005490c240206"], 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e2000"/62, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb000000002b000000fe8000000000000000000000000000aa00000000000000000000000000000000020000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200"], 0x114}}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x200000, 0x81, 0xffffffff, 0xfffffffe}) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x200000, 0x81, 0xffffffff, 0xfffffffe}) r4 = syz_open_dev$loop(&(0x7f0000000340), 0x5, 0x188862) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r5, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x10}, 0x18) (async) openat2(r5, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x10}, 0x18) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) (async) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r6) keyctl$chown(0x4, r7, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000", 0x4) (async) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000", 0x4) r9 = socket(0x2b, 0x2, 0x0) bind$unix(r9, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETLINKNAME(r9, 0x89e0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r11, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async) setsockopt$XDP_TX_RING(r11, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) (async) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) setsockopt$inet_buf(r10, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="0213000602000000ff0e000001000000"], 0x10}}, 0x4000840) 4m59.453088501s ago: executing program 32 (id=450): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup(r0) (async) r1 = dup(r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240606000308000000f9a153519a08039e0c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003070005490c240206"], 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e2000"/62, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb000000002b000000fe8000000000000000000000000000aa00000000000000000000000000000000020000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200"], 0x114}}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x200000, 0x81, 0xffffffff, 0xfffffffe}) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x200000, 0x81, 0xffffffff, 0xfffffffe}) r4 = syz_open_dev$loop(&(0x7f0000000340), 0x5, 0x188862) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r5, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x10}, 0x18) (async) openat2(r5, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x10}, 0x18) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) (async) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r6) keyctl$chown(0x4, r7, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000", 0x4) (async) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000", 0x4) r9 = socket(0x2b, 0x2, 0x0) bind$unix(r9, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETLINKNAME(r9, 0x89e0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r11, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async) setsockopt$XDP_TX_RING(r11, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) (async) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) setsockopt$inet_buf(r10, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="0213000602000000ff0e000001000000"], 0x10}}, 0x4000840) 2m27.193539411s ago: executing program 3 (id=1251): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) sendmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)='\v', 0x1}], 0x1}}], 0x1, 0x4010) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x6, 0x3, 0x7, 0x6, 0x100000001, 0x0}) timer_create(0x5, &(0x7f0000000100)={0x0, 0x25, 0x0, @tid=r1}, &(0x7f0000000180)) 2m27.068382698s ago: executing program 3 (id=1252): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xbff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@private1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000200), &(0x7f0000000240)) lchown(&(0x7f0000000040)='./file0\x00', r0, r1) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) timer_create(0x2, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) unshare(0x44040200) openat(r2, &(0x7f0000000000)='./file0\x00', 0x200200, 0x100) (async) openat(r2, &(0x7f0000000000)='./file0\x00', 0x200200, 0x100) 2m27.043868869s ago: executing program 3 (id=1253): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) (async, rerun: 64) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000080)=0x8, 0x4) (async, rerun: 64) sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x34, 0x2}}, @ip_tos_int={{0x14, 0x900, 0x1, 0x7}}], 0x30}}], 0x400000000000234, 0x200448c0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000200)={0x40, 0x0, 0xe}, 0x18) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e44e4b3b5d2c132ce1595c85ab82fbe15703a2653b2b7d783bc965fac88b3a91f3f10317d1c67420063311f04765f02b4e1ccf07323402fc495c817dc2b8aca", 0x34}, 0x48, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) chdir(&(0x7f0000000500)='./file0\x00') (async) lsetxattr$trusted_overlay_redirect(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)='./bus\x00', 0x6, 0x1) (async) getdents64(r2, &(0x7f0000000200)=""/245, 0xf5) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000840)={'sit0\x00', &(0x7f0000000800)={@remote, 0x1}}) (rerun: 32) r3 = socket(0x3, 0x1, 0x3) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @local, 0x3}, 0x1c) (async) getpeername$packet(r3, 0x0, 0x0) (async) mkdirat(r2, &(0x7f0000000540)='./file0\x00', 0xac) (async, rerun: 64) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e44e4b3b5d2c132ce1595c85ab82fbe15703a2653b2b7d783bc965fac88b3a91f3f10317d1c67420063311f04765f02b4e1ccf07323402fc495c817dc2b8aca", 0x2d}, 0x48, 0xfffffffffffffffd) (rerun: 64) r5 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "c067405f3c6095338d62c4eb838c7ca9e616876ec271a01dafbe5fabca733928f2b50b45b5e9e61c2fabba1e4957115e1fb7a2da9247b577436146d78e643b78", 0x1f}, 0x48, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000240)={r5, 0xe8, 0x2d}, &(0x7f0000000600)=ANY=[@ANYBLOB="656e633d6f61657020686173683d7368613232342d61726d3634000000000000000000000000000000000000000000000000000000000000000000270b54d89222ba2eb0467c7700000000000000e3caae5ac217e3ce4fa352df8813b81e9f109f5dcece1e8f69adbd77ec07729f3687f6b5f6eaee099d16000bca0fb855face7ba299b209dbd36bdeb4bd872be3a3e5ee26c93436d832575f011a8fc049985b91627b9239be62590cae141bdf5618fa7fddf9fd067178aa225902e9f6c6e0bb48f7ce917e282681656829f71857cbcfa49f768144d198611bf3119d2cbdcf3293e9e5b6edfe1aef3c68c87923b2b2e6037ef15a254b88abc6ea5b9ecc5dfba51cf8fae875c8482a2587d7ae918bbf1f967bc884310c7dfc31c4fa56231d2fc6c158c2955cd2ef43d351289f94a584f813a6285641710607c332c2ba3bd349838a1c3e03b3113818b3b230ef99bc72ab374d6b537180439f001704504757a6ab48d377953a749a97f43a01b82526bb0b2302cdc7b300aa65d70404e5e8e335683c8ec6e2c512de5d634838e41b110f3533d9267ccf70af77a93e849324fa0a579298f2709c4a73370dbdca54588ae310bf263cde858374b605fc5be37b3bc5e59918f1435ec5ca4776e4f0268d15a90c1eb3f0"], &(0x7f0000000300)="cc02678c06e33f218f75c0e975f6335fde45a48db594443d002082f8b354cbbfc0be769b63fa3a256be328bc78fd9336fb5b287d79b3b0e11916db4bcc355d717e0d8ccb4463baca962e1848a630807652fb982b8bc150e00a4ebbf2a3aa567709322703efe1d5912b9196f530d662ab0b5d886c89f4d90bfe54710391a38b972ffa7c7e09814fa75371fe669344a4f4bcd8f5e76fa56d2c4a3c672168393e8f3b20b1b1ca395b8b521fd991b8e322c1ef182090d4d316536771bc7bdea671d50f39a28fb158e86f691e26cec3a69d544cbd74476a9fc3a419e8f3e4cdea933fad76411a1a098301", &(0x7f0000000400)=""/45) 2m27.022873021s ago: executing program 3 (id=1254): r0 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000340)="aa9cbea2537bff06c5f849280a7ca8008535faee5f4526414c9fa45f312437897c34efc86d11b5e627445c3dba6f5e9f6b114ac71dc7f166271c418db67dbe0b19f13d44535ab3322b7c6434bd5f5d5247f580e9151aae752b329d5dcec381a5499ca072f5a8fe0a43f12f452416a09d96e6bd41acb192c63b5e6244d7e5115ec0bca649a5349ef4c68d8b1a8656471b02", 0x91, 0xfffffffffffffffa) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) r2 = getegid() keyctl$chown(0x4, r0, r1, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) keyctl$unlink(0x9, r0, 0xfffffffffffffffa) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$peekuser(0x3, r5, 0x388) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x21b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x58, 0x25, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0x298}}, {{{0x9, 0x5, 0x81, 0x3, 0xddabb1b38564935c, 0x6, 0x47, 0x7f}}}}}]}}]}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r9, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x5555555555550301}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x1) syz_usb_control_io$hid(r7, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@generic="b5"]}, 0x18}}, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220100000083b50a6efb75aa"], 0x0}, 0x0) 2m25.704422818s ago: executing program 3 (id=1257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@multicast, @random="fdb065f649d1", @val={@val={0x88a8, 0x1, 0x1, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x20, 0x60, 0x0, 0x9, 0x2f, 0x0, @private=0xa010120, @multicast1}, "a0006558befc0d4c721a9757"}}}}}, 0x36) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, 0x0, 0x0, &(0x7f0000000040)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, 0x0) r6 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r10, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r9, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000200)={0x40000000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000000c0)="66b9880100000f32660fc777003e66f20f78fb0b00269d67f76d99360f01efbaf80c66b884b48e8e66efbafc0c66ed66b9381001c066b80070000066ba000000000f30360f9be10fc728"}], 0x10, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m25.429217584s ago: executing program 3 (id=1261): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) r1 = syz_pidfd_open(r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="80fd0fa67941", 0x6}], 0x1, 0xfffffffc, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) (async) sendmmsg$inet6(r3, &(0x7f000000a1c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xe0, @local, 0x7}, 0x18, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000ff01"], 0x28}}], 0x1, 0x81) (async) r4 = socket$inet6(0xa, 0x400000000001, 0x0) (async) setuid(0xee01) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000480)) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, 0x0, 0x48) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000974281408205050083e50102030109021b0002000000000904"], 0x0) 2m25.308358371s ago: executing program 33 (id=1261): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) r1 = syz_pidfd_open(r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="80fd0fa67941", 0x6}], 0x1, 0xfffffffc, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) (async) sendmmsg$inet6(r3, &(0x7f000000a1c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xe0, @local, 0x7}, 0x18, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000ff01"], 0x28}}], 0x1, 0x81) (async) r4 = socket$inet6(0xa, 0x400000000001, 0x0) (async) setuid(0xee01) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000480)) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, 0x0, 0x48) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000974281408205050083e50102030109021b0002000000000904"], 0x0) 13.237024509s ago: executing program 0 (id=2031): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/pid_for_children\x00') ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000200)=r1) r3 = syz_usb_connect(0x5, 0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000da99bb2003045080ac7301020301090232000100002000090465010227d35a800905021010000000000905820200020000000725010001970a07250182060400"], 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x50, &(0x7f0000000000)=0x5, 0x4) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="0900004e3a87c5664836fb55890000005500004e235cc23d83b10a15459048e3b006d500fe39b09a819b4d9468654465b68ee4ce1510ab50309eb8d91622f25a18aa4f22fd94a123636f168dd59f576158f20d387af5f3ebcc7136ca741cee95244bf83c348d295f39cb1800"]) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x17, &(0x7f0000001140)=0x401, 0x4) syz_usb_control_io$uac1(r3, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003060000000603", @ANYRES64=r5]}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f0000000100)={0x3, 0x0, [{0xb, 0x8, 0x4, 0x2, 0x80000001, 0x3, 0x5}, {0x0, 0x5, 0x3, 0x2f, 0x4, 0x9, 0x5}, {0x80000019, 0x8b4, 0x0, 0x3, 0x7, 0x0, 0x7}]}) syz_usb_ep_read(r3, 0x3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x20, 0x14, 0x6, "f99d5133974f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r3, @ANYRESOCT=r5, @ANYRES16=r0, @ANYBLOB="a095a7cac1511b98562147b5ee66989ae5ec1a57637095b9a9adfaf50eee6f0a5a50c92cd8a5de23a787004911c9435c197835e6d32dd9a80e4855a2367c3781", @ANYRES64=r1, @ANYRES16=0x0, @ANYRESOCT=r2, @ANYRES16=r2, @ANYRESOCT=r3], 0xc, 0x81}, 0x4048801) socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 10.196951276s ago: executing program 0 (id=2053): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x14, 0x18, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4044800) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8c, 0x8, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sched_setscheduler(0x0, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0xe0586f4}}, {@version_u}]}}) 7.155320393s ago: executing program 0 (id=2076): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x811}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x64, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "2e2c949fc5febe56bac29ff6dc0384ae2b23826295853bc179aac1022502d3399b3bd609"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000084) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000040)={0x0, 0x1}) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7.128639355s ago: executing program 0 (id=2077): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x20, 0x22, 0x2, {0x2, 0xa}}, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xa, "47d4e447"}, @global=@item_4={0x3, 0x1, 0xb, "5a40197b"}]}}, 0x0}, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) write$UHID_DESTROY(r0, &(0x7f0000000140), 0x4) 6.849510881s ago: executing program 1 (id=2079): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) fchdir(0xffffffffffffffff) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0, 0x240, 0x0}) syz_clone(0x640c7000, 0x0, 0x61, 0x0, 0x0, 0x0) 6.728864988s ago: executing program 1 (id=2080): ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x4000000001, 0x0, 0xc3, 0x2000000000001fd, 0x86, 0x41ff, 0x9, 0x8, 0xd5, 0x8, 0x0, 0x7, 0x0, 0x0, 0x8, 0x80], 0x10000, 0x120200}) (async) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.573758547s ago: executing program 1 (id=2081): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x80, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64], 0x10) 5.180837358s ago: executing program 1 (id=2088): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) (async) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) (async) userfaultfd(0x801) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4c9, 0xffff, 0x9dff, 0x0, "00010400"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x4000000, 0x0, 0x3, 0xd72, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400807e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0xfffffffffffffeb0}], 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb88a8480081000000080045110014006800000988900f2ae28f00ffffffff1c202b7de5847faffc00f36c03b5ebc7c7edb7f1c0b2e9e18d4249db28ff48136c62e13c91d9bfe58018b2400ae4bd45f0f00155a2598f03d51272d6e80e2b685aa4d7f1500f78d6662293ed070c9f366735603815b00ec3c01387f9e1fdf76d920763902da942d84ffc"], 0x2a) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240", @ANYRESDEC=r1], 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) (async) r9 = syz_open_pts(r0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000200)='freezer.parent_freezing\x00', 0x0, 0x0) preadv2(r11, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x2, 0x0, 0x1) (async) r12 = dup3(r9, r0, 0x0) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000000)=0xff) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x5}, 0xfffffffffffffd9b) 5.180279498s ago: executing program 1 (id=2089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0000100180c2000002bbbbbbbbbbbb86dd6900040000180000fc0100000000000000d754796e26f3876767e21f00000000000001fc0000000000000000000000000000010602000000000000010a000000"], 0x52) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00f5fbed6b6d0000eae9d33fbb24186da1", @ANYRES16=r4, @ANYBLOB="090327bd7000fedbdf2516000000140001800d000100fbbb61803b9a2f8de529"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x9}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@handle={0x73682a85, 0xa}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setsig(0x4203, r6, 0x6, &(0x7f0000000000)={0x3a, 0x3, 0x8}) timer_settime(r5, 0x1, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x10100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) syz_usb_control_io(r7, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r9, 0x54a3) syz_usb_control_io$hid(r7, 0x0, 0x0) 4.11857258s ago: executing program 0 (id=2096): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x80, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r1], 0x10) 2.029487942s ago: executing program 1 (id=2115): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000004090400001202060000052406000005240000000d240f0100000000040057f77a37a2230d00000009cf05820200020000000905030200020000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000100)={0x3, 0x200, 0xde4, 0x5, 0x80000, 0x1}) setrlimit(0xc, &(0x7f0000000100)={0x3, 0xfff}) 1.108669895s ago: executing program 0 (id=2119): syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x10, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x2, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x1, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x83}}}}}}}]}}, 0x0) 1.069989418s ago: executing program 4 (id=2122): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x5}, [], {0x4, 0x3}, [], {0x10, 0x7}, {0x20, 0x4}}, 0x24, 0x3) (async) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX=r0], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex(0x0, 0x6, 0x1, 0x0, 0x0, 0x2) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000800)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x77ea, 0xf, 0x1, 0xfffe, 0x9, 0x2, 0x9, 0x1fe, 0x3f0, 0x4, 0x1004, 0x1ff}}, 0x0, 0x0, 0x0, 0x0}) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x228002, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) write$cgroup_devices(r2, &(0x7f0000000000)={'c', ' *:* ', 'rwm\x00'}, 0xa) 525.012399ms ago: executing program 4 (id=2124): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004140)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a302f328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d1ae7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13766204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edce6c85cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000500)={&(0x7f00000002c0)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008140)="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", 0x2000, &(0x7f0000003240)={&(0x7f00000003c0)={0x50, 0xffffffffffffffda, 0x100000001, {0x7, 0x2b, 0x8001, 0x400, 0x7f, 0x4, 0x81, 0x101, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)={0x510, r2, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4ebe, 0x74}}}}, [@NL80211_ATTR_TX_RATES={0x288, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x9, 0x9, 0x6c, 0x18, 0x73, 0xb, 0x12, 0x1b, 0x36, 0x16, 0x5, 0x4, 0x9, 0x1b, 0x5, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x60, 0x36, 0x60, 0x2, 0x16, 0x24, 0xc, 0xc, 0x12, 0x18, 0x36, 0x1, 0xc, 0xb, 0x9, 0x5, 0x6, 0xb, 0x18, 0x36, 0x1, 0x18, 0x4, 0xb, 0x3, 0xb, 0x18, 0x36, 0x60, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0xf085, 0x5, 0x0, 0xfff, 0x5, 0x7, 0x3]}}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0x48, 0x1b, 0x4, 0x18, 0x36, 0x9, 0x3, 0x2, 0x24, 0x1b, 0x48, 0x48, 0x16, 0x0, 0x1, 0xb, 0x4b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x4}, {0x2, 0x8}, {0x6, 0x5}, {0x6, 0x1}, {0x5, 0x2}, {0x4, 0x9}, {0x0, 0x8}, {0x5, 0x4}, {0x5, 0x4}, {0x5, 0xa}, {0x5, 0xa}, {0x4, 0x6}, {0x4, 0x9}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x16, 0x2, 0x5, 0x36, 0x36, 0x48, 0x60, 0xf525414dd3ded428, 0x60, 0x2, 0x16, 0x18, 0x4, 0x9, 0x3, 0x30, 0xc, 0x2, 0x48, 0x6c, 0x16, 0x5, 0xb, 0x18, 0x16, 0xb, 0x0, 0x5, 0x1, 0x7c]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7f, 0x8, 0x2, 0x30, 0x1000, 0x5, 0xc8]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x33, 0x4, 0x1, 0xb, 0x3, 0x5, 0x1, 0x12, 0x3, 0x60, 0xb, 0x1, 0x2, 0x4, 0x16, 0x5, 0x48, 0x6]}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7ff, 0x4, 0x1, 0x3, 0x40, 0x5, 0xc9a5]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x5, 0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x6, 0x2}, {0x0, 0x9}, {0x3, 0x6}, {0x6, 0x1}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x1}, {0x4, 0x2}, {0x6}, {0x5, 0x7}, {0x4, 0x5}, {0x4, 0x9}, {0x0, 0x5}, {0x5, 0xa}, {0x4, 0x2}, {0x2, 0x8}, {0x7, 0x2}, {0x2, 0x3}, {0x4, 0x9}, {0x5}, {0x7, 0xa}, {0x3, 0x4}, {0x4, 0x6}, {0x7, 0x11}, {0x0, 0x9}, {0x3, 0x1}, {0x6, 0x2}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x3}, {0x1}, {0x4, 0x4}, {0x3, 0xa}, {0x2}, {0x4, 0x9}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0x2}, {0x4, 0x9}, {0x4, 0x3}, {0x2, 0x5}, {0x3, 0xa}, {0x1, 0x7}, {0x3, 0x2}, {0x5, 0x3}, {0x0, 0xa}, {0x5, 0x6}, {0x1, 0x8}, {0x6}, {0x5, 0x1}, {0x1, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x41a, 0x8, 0x8536, 0x1, 0x6, 0x5, 0x8000, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x7fff, 0x9f, 0x3, 0x6, 0x80, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x7, 0x5, 0x100, 0x4, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5e, 0x3, 0x1b, 0x18, 0x36, 0x78, 0x48, 0x5, 0x24, 0x4, 0x9, 0xb]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x9}, {0x7, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8f38, 0x2, 0xb, 0x453, 0x3, 0xa0, 0xfff, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfff8, 0x100, 0x0, 0xa, 0x7, 0xc1fd, 0x4]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x30, 0x5, 0x6c, 0x9, 0x12, 0x30, 0x1, 0x6c, 0x36, 0x24, 0x24, 0x24, 0x60, 0x30, 0x30, 0x3, 0x3, 0x0, 0x24, 0x24, 0x24, 0x6, 0x36, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x646f, 0x9, 0x96bd, 0x7, 0x3, 0xff]}}]}]}, @NL80211_ATTR_TX_RATES={0x260, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7f, 0xc919, 0x80, 0x5, 0x4, 0x1, 0x7]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x5, 0xe, 0x7, 0x0, 0x81, 0xfffe]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc2ec, 0x8, 0x6, 0x7, 0x6, 0x2, 0x7ff, 0xdd7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x9, 0x3ff, 0x0, 0x3, 0x8000, 0x9, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x6c, 0x60, 0x18, 0xc, 0x60, 0x60, 0x16, 0x18, 0x6c, 0x30, 0xb, 0x1b, 0x1, 0x9, 0x24, 0x0, 0x5, 0x9, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x6, 0x8001, 0x4, 0x2, 0xb882, 0x81, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x12, 0x6, 0x1b, 0x18, 0x48, 0x48, 0x18, 0x1]}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x6, 0xb9dd, 0x1ff, 0xd, 0x3, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x5}, {0x6, 0x7}, {0x2, 0x6}, {0x1, 0x3}, {0x3, 0x4}, {0x6}, {0x6, 0x8}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x6, 0x1ca, 0xd, 0x6, 0x2, 0xf, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x1, 0x1, 0x7ff, 0xb, 0x7, 0x9, 0x3]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6c, 0x6c, 0x2b, 0x5, 0x5, 0x1, 0x2, 0x4, 0x60, 0xc, 0x4, 0x60, 0x18, 0x30, 0x18, 0x48, 0x30, 0x5, 0x4, 0x1b, 0x48, 0x48, 0x6c, 0x1b, 0x3, 0x2a, 0x1b, 0x5, 0x36, 0x4]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x47, 0x60, 0x24, 0x24, 0xb, 0x3, 0x3, 0x60, 0xb, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xcc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0xdc6, 0xfffe, 0x6, 0xb, 0x8a, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x28, 0x2, 0x2, 0x58e7, 0xd9, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0xc, 0x1b, 0x2, 0x4, 0x2, 0x62, 0x36, 0x36, 0x3, 0x9f0c4abbc9db04ce, 0x5, 0x30, 0x48, 0x1b, 0x18, 0x5, 0x9, 0x1, 0x1b, 0x12, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xd332, 0xfff9, 0x7f, 0x400, 0x10, 0x1, 0xfffa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x2}, {0x2, 0x3}, {0x7, 0x2}, {0x3, 0x3}, {0x5}, {0x0, 0x2}, {0x0, 0xa}, {0x0, 0xa}, {0x4, 0x3}, {0x6, 0x2}, {0x3, 0x2}, {0x4}, {0x6, 0x3}, {0x6, 0x7}, {0x1, 0x7}, {0x1, 0x5}, {0x2, 0x2}, {0x7, 0x4}, {0x3, 0x7}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x8}, {0x1, 0x7}, {0x3, 0x6}, {0x0, 0x2}, {0x2, 0x3}, {0x7, 0x3}, {0x4, 0x5}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0xa}, {0x7, 0x6}, {0x7, 0x9}, {0x4, 0x9}, {0x1, 0xa}, {0x1, 0x5}, {0x2, 0x4}, {0x2, 0x1a}, {0x4, 0xa}, {0x6, 0x8}, {0x5, 0x7}, {0x7, 0x8}, {0x7, 0x8}, {0x5, 0x7}, {0x0, 0xa}, {0x0, 0x7}, {0x2, 0x5}, {0x4, 0xa}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0xa}, {0x6, 0x4}, {0x2, 0x7}, {0x1, 0x5}, {0x7, 0x4}, {0x5, 0x7}, {0x2}, {0x2, 0x3}, {0x0, 0x2}, {0x7, 0x9}, {0x5, 0x8}, {0x7, 0x7}, {0x0, 0xa}, {0x3, 0x5}, {0x0, 0x6}, {0x6, 0x3}, {0x6}, {0x3, 0x3}, {0x1, 0x3}, {0x3}, {0x4, 0xa}]}]}]}]}, 0x510}, 0x1, 0x0, 0x0, 0x40000}, 0x14) chdir(&(0x7f0000000240)='./file0\x00') r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r3, &(0x7f00000003c0)={&(0x7f0000000140)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, 0x0}, 0x48080) 523.64143ms ago: executing program 4 (id=2125): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="45d94d52a98d4908726ae5c6224144dd37392669f6a41a9d3eadda17a9a56c0bed361684d5e928a58363711c4fa9339f1830425ed916a9e2f6d47a2864db18e3b2f3979528309e05a9840fcf49f4a48efa440ffd5cadce6cb8f19e8eb1f8f7661a6c448f79178002bcb1cbf1c71b19a322eb1bc2822f3a8f001b5c3d6bc1312df08545d7b73b40c9e2de8cd9c81f9139a5db8532d322dd474956c0be6bdd54c6040622893c0000af0a300a4f9dfbb32f1411a19fd0b67eb44785bc68abf443", 0xbf}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) (async) ptrace(0x10, r0) (async, rerun: 32) ptrace$cont(0x9, r0, 0x0, 0x0) (rerun: 32) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = gettid() sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async, rerun: 32) rt_sigqueueinfo(r2, 0x21, &(0x7f0000000100)={0x1f}) (rerun: 32) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, '\x00', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x50, 0xbde37c8dbb0ed282, 0x46, 0x50, 0x43]}, 0x34) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r7 = memfd_secret(0x80000) openat$cgroup_ro(r7, &(0x7f0000000500)='memory.numa_stat\x00', 0x0, 0x0) (async, rerun: 64) fcntl$setown(r1, 0x8, 0x0) (rerun: 64) 522.91824ms ago: executing program 4 (id=2127): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0x4, 0x9, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0xb0}]}, 0x20}}, 0x84) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x3, 0x0, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000100)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000000, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/206, 0xce}, {&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000004500)=""/4110, 0x100e}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000001f80)=""/138, 0x8a}, {&(0x7f0000001d40)=""/277, 0x115}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0x1a}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x80d}], 0x8, 0x40000100, 0x0) 521.87191ms ago: executing program 4 (id=2128): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x80, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r1], 0x10) 69.619036ms ago: executing program 5 (id=2134): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000000080)="081e38b05bbed83825a047e09ec0b2d06b77adfe77f3111a3a7899778d6e9f0fd5e27aa7ed78df0e91e794a27d708e8f69b5837cf41185ba0c6b7a8f1cf10e528e1817c8e462c956899ed3e1e3d5fa08e0089f1fa453a72a9ac7b655f6c92a58", 0x60}, {&(0x7f0000002180)="919f22585c5251c6edee80e6dcc170c2668686496810777d34e51bf2085f36c11d9e0524a3dabe84359063c1dc45a27cb09a95b2", 0x34}, {&(0x7f00000021c0)="0b6d7b2acbd5d53c4f24206295bfd4d5ccb61cece7753646e73be8f59e43620737b37f41d93f0c26e9f35f03fcec724158e2f1e704294060a7616ca2ab8e8298caca0a7b48c9e497bf09bc79366e11e3b4d899bd04be69b3469b971991e59cf556398cdddbcb8b164c0cbce3f61bae6334e184b710b9deb8009db9bc35c6f75afff6a6add93174e8e6d573081b696f1c266a76edc2385c7f5f8c8ed67b885e6ff7f08196ef9e33ae0ae779236817489478897b181fa60dd1a4e3ed63d5357c5e145a1d1bd1349345cd2cfc4a5fd8", 0xce}, {&(0x7f00000022c0)="1812108fc443151c39dc2966f97e5f8301a6b730e0a560adb568e8", 0x1b}, {&(0x7f0000002300)="62b00862ed06f3d566a0624b6a6364222c051c6cd6dcbd3bae71ddff43c0ea24cb086e61c97e904d6aa60543a4e364d88a7f90ef3aea8bd53147282d35a2f07a56a881a5de2c09faef3fbcd73d026aab2ee45bc3e2555f382991710b2ebc469fdfc019f959102a5a1b9e26af2339c79a13281f1c7c1683e2e0c2f83cea5c27b5929a08ba50617b196c7fdafe05e8209c7ccc30138c22b69dd53b15b4e2001f188cc22436d9dc7eb9400f2ee66f04694dd3", 0xb1}], 0x5, &(0x7f0000002440)="96983e394619724bb3988044b2567ac0ceeac9669c866d99e30d25643f5c4ed07828c44682ffa1c69bfad5c43fb31bcfec3dac4044451f0e649950bb53a887b22064a6bdbd0ab1bb37f7e0130101713546999528dca2c6eda228a32bf2ccfa703f", 0x61, 0x40050}, 0x14) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, r0, {0x1}}, 0x18) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000002500)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000c, 0x11, 0xffffffffffffffff, 0xf28c1000) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r2 = socket$inet6(0xa, 0x8, 0xff) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x89e0, 0x0) 62.129536ms ago: executing program 5 (id=2135): prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001400010300000006000000000c"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40488a0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x68800, 0x20) r5 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) ioctl$int_in(r5, 0x5421, &(0x7f0000000340)=0xfff) connect$unix(r5, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) connect$unix(r5, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) read$FUSE(r4, &(0x7f0000002040)={0x2020}, 0x2020) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f00000000c0)={0x1, 0x0, @ioapic={0x30000, 0x3, 0xffffff96, 0x47, 0x0, [{0x5, 0x7, 0x4, '\x00', 0x4}, {0x9, 0x5c, 0x74, '\x00', 0x4}, {0x10, 0x1d, 0x4, '\x00', 0xd3}, {0x7, 0x9, 0x36}, {0x7, 0xfe, 0xf7, '\x00', 0x1}, {0x7, 0x6f, 0xe, '\x00', 0x3}, {0x9, 0x9c, 0x81, '\x00', 0x1}, {0x2, 0x9, 0x3, '\x00', 0x4}, {0x4, 0x7, 0x3, '\x00', 0x7}, {0x0, 0x8, 0xe, '\x00', 0x3c}, {0xf0, 0x3, 0x4, '\x00', 0x81}, {0x5, 0x9, 0x9b, '\x00', 0xfc}, {0x8, 0x3, 0x4}, {0x6, 0xf2, 0xb, '\x00', 0x3}, {0x7, 0x1, 0xfd, '\x00', 0x9}, {0x3, 0xfa, 0x3, '\x00', 0x5}, {0xde, 0x6, 0x7, '\x00', 0x7f}, {0x6, 0xa, 0xac, '\x00', 0x3b}, {0x0, 0x4, 0xa, '\x00', 0x64}, {0x8, 0x9, 0x2, '\x00', 0x3}, {0x6, 0x1, 0x0, '\x00', 0xd}, {0x10, 0x8, 0x0, '\x00', 0x2}, {0x78, 0x3, 0xff, '\x00', 0x59}, {0x2, 0x5, 0xe1, '\x00', 0x5}]}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x14, 0x0, 0x1, 0xfffffffc}, {0x6}]}) 37.916548ms ago: executing program 5 (id=2136): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000100)={@mcast1}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/oops_count', 0x14001, 0x0) sendfile(r1, r1, 0x0, 0xc3) sendmsg$tipc(r1, &(0x7f00000007c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x82, 0x0, 0x2}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000040)="bda1c108a3231c295d43ae210b0f6cd845709118", 0x14}, {&(0x7f0000000180)="ffcd5ef7c1f5cc41b7b11c924bc72c3a6dec4031535a0651574cf340ccf338f693f12f3fe561dbda8d6635692d87eb8b5cbb301e424a09cd5e015f21f75dc9181b1028d665e2c4f01bba17b3c387f35460a9b16571942dd18462e4782703d8da362881a19938ac2c9f16335d5a6f7e143fde1eacb4f23ec23e7aed74f523c6d9d7e991fa870ebe63b7b03226eae0d87b4d58ff137ded8ab46381b2939fb386bad3d76aebbb2115f4aa645ce5f5fbe56b36507ea7eea822d9703e10dac303498ec0ab32dd81c3b9514d688e568c7b196cab6c9fcf1436ecb8d7eb29ed830d0a6405d2456a1e43", 0xe6}, {&(0x7f00000002c0)="d8fc415c6fc2fefce4fcf1235b088386c89a7c220c3a81061ce6f8f86c31181e8486e1daed69afc5ad0386865d4d1369c5825fadd12b5db453e00785d55cce567731fc420816ff4c5def5b2b1c4270950bcdff873dea4db34f9c5775b3636518f8bcc735e56c4eb680531af1fa4dc00def64e8b78407774db15fb64d8d7e48c3c1c5add2f10eedbe21eb63e0b8eff2bd84464968d9032c395b3534e6f30aa8fa3c6cf4283a319cf16d281eea6045243969f713d5029fd7bb5d1d55b91401ab1706c9eb27bea55fe891773f5712a753b271efe98f1a373dc8002fa397c8739885b0736c0fb14821b8bc493cc5da8b", 0xee}, {&(0x7f00000003c0)="27256511f6baf3327e52383155088cc3008711ef54594e0313052f582f548e32e44e4e83acabe68f4ab3dceccde3ce7e63546f8a22acd65f", 0x38}, {&(0x7f00000008c0)="50e4d9dba705d42f9720574ad92eeb41d2d466b5a94661de6e7c8bc68bf92616ab97887715f8ce98a85ab780394026d14565562d37cdd6a2ab5914abf6fdbe6385203bab898ad5ebf2cb6c1c1577140fbd3c04722a82afafe3be74648de2b31153ded594b60291a10be7a1dfee60d0c5bc937c59f2ee74d154645fe86979787fefc168aa5a5e6452f2524cad1a448e00ae5061de511dba9ac85600816cc38feae7e5860dfc7ef1ef0099dc876a321078043f466ae5ce49590d2e761ce6ace495d68bb21372246890d68a1f0a4ab7d14a833d43a47f5f12053e8d431227c53bfa80b5cef13f569f3b98aa2830b9ef", 0xee}, {&(0x7f0000000500)="4cdab9eb17da4a34efe2fc6436385bffc63e21df582758b918e257093de1f5a7a2324169fd924f4804cbc4eaa843222d8aac51df96ca6fe8d3815d0bf6186addba856074", 0x44}, {&(0x7f0000000580)="5ba6569c7c2a6382d9c8ec1fc8b4efe3dc2c603191eff52a959d3fc0316a65c354a2911a1f9cfe725dd0a6c9f4892f80db4073c7449468886e22354dc6b3", 0x3e}, {&(0x7f00000005c0)="0b34fecf4a8ced082c288827f176b2bba217ae84c1ef2ce355d96167219449be4109cc003436884e6f5d50423ad43fa23fa4b1e123101c682fa947d3a951e2fded57fd73ce13c967f7fccbb12f37225c3968d1511b92d8a07f86ef7f674ca2c1727c8d3368a2318fa877ac9b923514a41548a03049ff0f416efdbf532a7e5ee0f792b9a8f847e1ce98fe4ba8d5a6f48172b7e32b08ce01ce974bee944c68d8a0dad19ea14502bb809bee6a698e63a44503f8fd433ce17478", 0xb8}, {&(0x7f0000000680)="5167a8b9c3422185711126719a3149b744c3a6d7ea078de5e72f074f50bd976a831c2479058803bf91c3dd450e6e79e6c60699fde3aced6a480bded046c486501055689efd6607fec16bab141ff69a4b45944cecf5708c6d3ff61bd2535e5a6055fd93210cd04d0eac4224754c1f00", 0x6f}], 0x9, 0x0, 0x0, 0x400c041}, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @mcast2, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x8659, @mcast2, 0x102}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000280)=0x7ff, 0x4) r3 = syz_open_dev$usbmon(&(0x7f0000000800), 0x9, 0x40000) fcntl$dupfd(r3, 0x406, r3) memfd_secret(0xb268d0c03f4ca9e8) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x289, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x7, 0x7, 0x97b6, 0x2000000, {{0x13, 0x4, 0x2, 0x22, 0x4c, 0x65, 0x0, 0x1, 0x4, 0x0, @loopback, @broadcast, {[@lsrr={0x83, 0x13, 0xd0, [@empty, @rand_addr=0x64010102, @multicast1, @multicast2]}, @timestamp_addr={0x44, 0x4, 0x10, 0x1, 0x1}, @end, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x31, 0x0, 0x2, [0x7, 0x7, 0x2]}, @generic={0x94, 0x9, "966e7fb7a2a91a"}]}}}}}) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="0600000e000005000000ab5d0385dcb19200000000000000", 0x18, 0x40, &(0x7f00000001c0)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'batadv0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x8, 0x0, 0xffffffff, 0xfff, {{0x5, 0x4, 0x1, 0x11, 0x14, 0x68, 0x0, 0x2, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x3, 0x0}}}}}) 25.112718ms ago: executing program 5 (id=2137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc902, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) mount$tmpfs(0x0, 0x0, 0x0, 0xf54080, &(0x7f00000000c0)=ANY=[]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc080}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x1000) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000100)=""/23, &(0x7f0000000240)=0x17) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000080)={0x9, 0x6, 0x0, 0x1, 0x1a, "5e44c2cb6bec71b90652151a0142bb33ed300f"}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r11, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x1000000}) ioctl$TCSETSW2(r9, 0x5408, &(0x7f0000000040)={0x200, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) 2.11303ms ago: executing program 5 (id=2138): setrlimit(0x40000000000008, &(0x7f0000000000)={0xb2, 0x1}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) 1.48806ms ago: executing program 4 (id=2139): r0 = fsopen(&(0x7f0000000200)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES64], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x1}) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (async) personality(0x87bf5ac905ea0f7f) (async) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) (async) ppoll(0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0)={[0x7e54cae7]}, 0x8) (async) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002200aa368359890054b8ce"], 0x0}, 0x0) 0s ago: executing program 5 (id=2140): r0 = syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d00000905820200020000000905", @ANYRES64], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000880)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x1, 0x1, 0x4, 0x7, 0x40, 0x6, 0xe, 0x0, 0x1004}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xd0, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0x8, 0x8, 0x8a, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x40}, [@extension_unit={0x8, 0x24, 0x8, 0x6, 0x7, 0xfd, "e3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x2, 0x218e, 0xd, "ddd294864b"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xe0, 0x1, 0x94, 0x2, '.@', "c66c71"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xdf, 0x1, 0x81, 0x2}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x938, 0x7, 0x1, "dfee155b31c1"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x7f, 0x0, {0x7, 0x25, 0x1, 0x82, 0x80, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x100, 0x7, 0x2, "7861101c085a"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x1, 0x3, 0xd, "4946bce03beaff"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0xa3, 0x9f, {0x7, 0x25, 0x1, 0x0, 0x7, 0x7}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x110, 0x0, 0x4, 0x0, 0x40, 0x3f}, 0xce, &(0x7f0000000680)={0x5, 0xf, 0xce, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x3, 0xff0f, 0x2, [0xffffff]}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0xe, 0xf00, 0x2, [0xffff30, 0xff000f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xb, 0x1, 0x800}, @generic={0x83, 0x10, 0x1, "ef38e2df12f00a26a636b29ac6865afafd8375c11425a4778dc8262ea603f6164e958864fa049a6213352f38314b4d0cade8579e164255e6b58de32136a3a722573f14fda4b0ce61a92de5f73403c426ba9319a5bfc2c1a20c00dae980f5bf601e62b284ec4968b86fe3ad67beb4a2eb8f27a0e3f263ea93a9d47aa8ec70b3e3"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "121250fc354ecba7072dff05eac1aaa6"}]}, 0x3, [{0xa9, &(0x7f0000000780)=@string={0xa9, 0x3, "c4e3fcc7687923f0da940adddffa959e7b0393035f63f79b010fdb67cd467dd6696f470e682cdf7b4eb5c9b942b84f31a3c1b3f4ffb3cb8fc4b3f0a8ea1da8ab1446afb28f8928290d2fca689e0c2a2e2aa3acbec0280873406b00a709da2f1649e28fa5583d7d3cdaf326beb9862a59db8901defd584000aa64c73b706e016ac8f74a229669f77785df010b0673616275cf2692a663b415c971900978a3c33f7cfe4e99eba19f"}}, {0x6f, &(0x7f0000000900)=@string={0x6f, 0x3, "2b7c8659ffdaa829359dc3d29efe3c3cda0a3d01008f9161df93b41fbb062e0df276d6793841ef3e1196e87be1ec87f701b6a08da2a8b30c0203484652abd21ece9500cfb1c84388b87ba63659aefe81ab99be6bdbb69764643537efc0caeb8a180d6a34c8bdf776949f356d46"}}, {0x50, &(0x7f0000000980)=@string={0x50, 0x3, "568bd955b58f6a5ee6cdaadf7c5508805509c5d63b720eee1fb6a26f531a08f79dacd317cdbf8e1cbf3bbd9605bd82f5718e47a40240670306a19127ac9e1576ef90ea4d45ea70804876bbd901cb"}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000b80)={0x14, &(0x7f0000000a00)={0x20, 0x3ec6a3fd47edbdf9, 0x100, {0x100, 0x6, "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"}}, &(0x7f0000000b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000000e80)={0x44, &(0x7f0000000bc0)={0x40, 0x16, 0xe9, "882cb3266316c7f740f85f6973f6a2887ab66f3b9e6c2705839801ea5403bc2d1056dc38a5e98e5a0e783469e98543dab5bd7dd99a6e62a23d4ff8bb58da223796bd745796ba587d7f26706053e08d10cd7fa5ab254f4dcc4f246188c2497a07f14c55ebe4374e10acf10c5813d0f52e4ed73f4e4d96f98f2c76f9bd05320bb6111c8220378b9f174a2364e9b3ec9291820001bce4ad9e95fde08f5f6e616b2f2c1ac52eacc1c3050e3da6068dcffa60f24104a321da451c6be1e8de95ddcbaebe7812d760377d93b89fb6aac7d9b37698b948d9fcf30b85f069cbc48ba459e98b03fe93a705e970df"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000d40)={0x20, 0x81, 0x3, "1f8e12"}, &(0x7f0000000d80)={0x20, 0x82, 0x3, "c95b48"}, &(0x7f0000000dc0)={0x20, 0x83, 0x1, "1b"}, &(0x7f0000000e00)={0x20, 0x84, 0x1, "b1"}, &(0x7f0000000e40)={0x20, 0x85, 0x3, '\bxG'}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x0, 0x10, 0xf1, {0xf1, 0x22, "e1e5bcd0abf481d7629e3d189a9eda6983f226fead6f15645b72b8ffe790b769fd4d541a171aba6c9d5fecf97dcec89d09331314b6409d5eb7d533d1499835dccd01e0aa7eb1b9f23c468461229e4a37e673849a9cc1e5264a3782857b728410c2af1a027cd55e6b49f84524698f8609405347ad7015964a069e882900c4cd7d99ce64572f636ffe66872603b655c45832b9448fc7ad14d648ef6a8e3b0725c20f1517809fcca89ab6e4cdc1187dabdab7df70b79d3798d1a6b8136727a89d9397468c86b435b1f308d8cc8cb4afb0e0e74aed648fe94dd8298643f960d16f3552328796517f4f2ce079559d402c37"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0xa, 0x86, "57803171004282cad830df98a9f23c86ce547eba212f2db291b06b76864d9fdbb77afae5ba57115ff439bc01cbaf6e00dbce499e1183e856555b2ad54d5b2d17b71d5156208336dd1e10160e49f9629b15b3a08f29a11a2ac67ede0679f4cf0b05bb5ab5dddbaf92a27784ea4eb230d7c4435da6f8ae51b7d9e2aeb02bd3de5b03a64d7eb155"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0xa385, 0x71, 0x4, 0x7, 0x6, 0x7ec, 0x401, 0x9, 0x6, 0x465c, 0xf, 0x2}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000001080)={0x14, &(0x7f0000000f00)={0x20, 0x1, 0xde, {0xde, 0xe, "72fac75c811ba5685cd9d4f17020c20f4269ba9f9ddfcd54fed673105cd2be8d37c822d654fe369dec40af495a2f46fed0568e88ab01c4b603d1db581ac02f2d376b311670cb055b446ed1b76dd73bcf1c82186f32b3f9556128154cb5e3ec3f298ab4e439b46061c06f06d67658f11aec0b90e7113976e3f57b9b657912dde85f85589ac8a7a442815dd8d3387da1d350a6a3f9fdc338cec4fe6994904c143e06a912daa4d98364bcc848653b58cc2215750a4058d6eabd075d6156b7828f8470a919d7dacb27a01fe4aa35e58fcad8d285134e369c5e9ce89e12ce"}}, &(0x7f0000001000)={0x0, 0x3, 0x59, @string={0x59, 0x3, "67ffdbe51c26924813f5cb648af4c6ebed0d76ecabc5519ea97bb47afcd04acf88c2eeef6bd26a0b699da3e95e13535b4be79740c02d6151390cfcf5f52e694af12d1fed41a17afd232ad9e14d7d47b9ebef86ec1bf676"}}}, &(0x7f0000001300)={0x34, &(0x7f00000010c0)={0x60, 0x31, 0x2, "00fe"}, &(0x7f0000001100)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000001180)={0x20, 0x0, 0xd3, {0xd1, "5537a559e36d27d81a82fc9de24a9e9132e08730d059b70369be9992b7b6365e06c60856035daff41ace35b5703dd216b750348eb5eba32dabefaa90f4f08ff7536445bdbc6fc69b02255a88ca4a6544f1cd8820b2fb51cdea4f231732efedf66ce89d96bccfb722b2bb9e36d8c5989dd035dec6eb3705dff0bc1ad62935287cb9ca7dd07da7ab2434e676f83f601362b0df32febdbca518008c7f34c60a6af730b6bb696d0759d4e65c4ecd1c69f4d9dcb23d12e170233338f8481683bb35cedfbc744397942fbe507683948f103bde54"}}, &(0x7f0000001280)={0x20, 0x1, 0x1, 0xd}, &(0x7f00000012c0)={0x20, 0x0, 0x1, 0xc0}}) kernel console output (not intermixed with test programs): ation has been removed. [ 313.662487][ T5325] support for the xor transformation has been removed. [ 313.669381][ T5325] support for the xor transformation has been removed. [ 313.676315][ T5325] support for the xor transformation has been removed. [ 313.683214][ T5325] support for the xor transformation has been removed. [ 313.690093][ T5325] support for the xor transformation has been removed. [ 313.697181][ T5325] support for the xor transformation has been removed. [ 313.704267][ T5325] support for the xor transformation has been removed. [ 313.711333][ T5325] support for the xor transformation has been removed. [ 313.718329][ T5325] support for the xor transformation has been removed. [ 313.725252][ T5325] support for the xor transformation has been removed. [ 313.732192][ T5325] support for the xor transformation has been removed. [ 313.739070][ T5325] support for the xor transformation has been removed. [ 313.745965][ T5325] support for the xor transformation has been removed. [ 313.753012][ T5325] support for the xor transformation has been removed. [ 313.760091][ T5325] support for the xor transformation has been removed. [ 313.769325][ T5325] support for the xor transformation has been removed. [ 313.776353][ T5325] support for the xor transformation has been removed. [ 313.783297][ T5325] support for the xor transformation has been removed. [ 313.790165][ T5325] support for the xor transformation has been removed. [ 313.797073][ T5325] support for the xor transformation has been removed. [ 313.803950][ T5325] support for the xor transformation has been removed. [ 313.810791][ T5325] support for the xor transformation has been removed. [ 313.817691][ T5325] support for the xor transformation has been removed. [ 313.824837][ T5325] support for the xor transformation has been removed. [ 313.831736][ T5325] support for the xor transformation has been removed. [ 313.838597][ T5325] support for the xor transformation has been removed. [ 313.845513][ T5325] support for the xor transformation has been removed. [ 313.852435][ T5325] support for the xor transformation has been removed. [ 313.859303][ T5325] support for the xor transformation has been removed. [ 313.866230][ T5325] support for the xor transformation has been removed. [ 313.873133][ T5325] support for the xor transformation has been removed. [ 313.879978][ T5325] support for the xor transformation has been removed. [ 313.886861][ T5325] support for the xor transformation has been removed. [ 313.893749][ T5325] support for the xor transformation has been removed. [ 313.900608][ T5325] support for the xor transformation has been removed. [ 313.907866][ T5325] support for the xor transformation has been removed. [ 313.914776][ T5325] support for the xor transformation has been removed. [ 313.921675][ T5325] support for the xor transformation has been removed. [ 313.928568][ T5325] support for the xor transformation has been removed. [ 313.935482][ T5325] support for the xor transformation has been removed. [ 313.942418][ T5325] support for the xor transformation has been removed. [ 313.949436][ T5325] support for the xor transformation has been removed. [ 313.956461][ T5325] support for the xor transformation has been removed. [ 313.963591][ T5325] support for the xor transformation has been removed. [ 313.970479][ T5325] support for the xor transformation has been removed. [ 313.977448][ T5325] support for the xor transformation has been removed. [ 313.984369][ T5325] support for the xor transformation has been removed. [ 313.991314][ T5325] support for the xor transformation has been removed. [ 313.998221][ T5325] support for the xor transformation has been removed. [ 314.005162][ T5325] support for the xor transformation has been removed. [ 314.012107][ T5325] support for the xor transformation has been removed. [ 314.019007][ T5325] support for the xor transformation has been removed. [ 314.025903][ T5325] support for the xor transformation has been removed. [ 314.032828][ T5325] support for the xor transformation has been removed. [ 314.039684][ T5325] support for the xor transformation has been removed. [ 314.046584][ T5325] support for the xor transformation has been removed. [ 314.301696][ T45] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 314.452839][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.464126][ T45] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 314.473241][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.481435][ T36] audit: type=1400 audit(2000000140.378:696): avc: denied { mount } for pid=5335 comm="syz.1.1662" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 314.504319][ T45] usb 6-1: config 0 descriptor?? [ 314.710480][ T5334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.719063][ T5334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.928671][ T45] logitech 0003:046D:C293.0045: invalid report_count 50514 [ 314.936042][ T45] logitech 0003:046D:C293.0045: item 0 2 1 9 parsing failed [ 314.943753][ T45] logitech 0003:046D:C293.0045: parse failed [ 314.949780][ T45] logitech 0003:046D:C293.0045: probe with driver logitech failed with error -22 [ 314.991664][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 315.089394][ T5343] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 315.136773][ T5334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.143303][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 315.146503][ T5334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.154835][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.171878][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 315.182936][ T9] usb 5-1: config 1 has no interface number 0 [ 315.184732][ T5334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.191757][ T9] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 315.200947][ T5334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.209364][ T5350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.224433][ T9] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 315.237626][ T5350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.246681][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.255761][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.263913][ T9] usb 5-1: Product: syz [ 315.268097][ T9] usb 5-1: Manufacturer: syz [ 315.270837][ T45] usb 6-1: USB disconnect, device number 35 [ 315.273090][ T9] usb 5-1: SerialNumber: syz [ 315.692065][ T9] usb 5-1: USB disconnect, device number 5 [ 316.441647][ T9] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 316.556573][ T36] audit: type=1326 audit(2000000142.458:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.0.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0b79aeb9 code=0x7ffc0000 [ 316.580112][ T36] audit: type=1326 audit(2000000142.458:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.0.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0b79aeb9 code=0x7ffc0000 [ 316.603960][ T36] audit: type=1326 audit(2000000142.458:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.0.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb0b79aeb9 code=0x7ffc0000 [ 316.628181][ T9] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 316.636618][ T9] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 316.644937][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 316.653963][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 316.664979][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x7E, changing to 0xE [ 316.676598][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 316.694178][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 316.704310][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 316.719627][ T9] usb 5-1: string descriptor 0 read error: -22 [ 316.726042][ T9] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 316.737813][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.747839][ T9] usb 5-1: config 0 descriptor?? [ 316.753832][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 316.763006][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 316.820120][ T5377] kvm: kvm [5376]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 316.957019][ T5366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.965602][ T5366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.101726][ T338] usb 5-1: USB disconnect, device number 6 [ 317.142856][ T5398] sock: sock_set_timeout: `syz.0.1681' (pid 5398) tries to set negative timeout [ 317.153269][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 317.153287][ T36] audit: type=1400 audit(2000000143.058:727): avc: denied { ioctl } for pid=5386 comm="syz.0.1681" path="socket:[36452]" dev="sockfs" ino=36452 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 317.241630][ T45] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 317.402814][ T45] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 317.411712][ T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.421965][ T45] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 317.430899][ T45] usb 6-1: config 1 has no interface number 0 [ 317.437126][ T45] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 317.448010][ T45] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 317.462824][ T45] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.472051][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.480098][ T45] usb 6-1: Product: syz [ 317.484382][ T45] usb 6-1: Manufacturer: syz [ 317.489178][ T45] usb 6-1: SerialNumber: syz [ 317.510741][ T36] audit: type=1400 audit(2000000143.408:728): avc: denied { setopt } for pid=5401 comm="syz.4.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 317.548921][ T36] audit: type=1400 audit(2000000143.448:729): avc: denied { create } for pid=5403 comm="syz.4.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 317.615938][ T5406] netlink: 'syz.4.1687': attribute type 4 has an invalid length. [ 317.623821][ T5406] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1687'. [ 317.881744][ T338] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 317.910660][ T9] usb 6-1: USB disconnect, device number 36 [ 318.032933][ T338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 318.043799][ T338] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 318.058111][ T338] usb 5-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 318.067248][ T338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.075322][ T338] usb 5-1: Product: syz [ 318.079500][ T338] usb 5-1: Manufacturer: syz [ 318.084365][ T338] usb 5-1: SerialNumber: syz [ 318.089524][ T338] usb 5-1: config 0 descriptor?? [ 318.671624][ T45] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 318.817927][ T5426] netlink: 'syz.1.1694': attribute type 10 has an invalid length. [ 318.826049][ T5426] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1694'. [ 318.835397][ T5426] bridge_slave_1: left promiscuous mode [ 318.841211][ T5426] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.849600][ T45] usb 6-1: config 2 has an invalid interface number: 82 but max is 0 [ 318.859066][ T36] audit: type=1400 audit(2000000144.758:730): avc: denied { create } for pid=5425 comm="syz.1.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 318.867459][ T45] usb 6-1: config 2 has no interface number 0 [ 318.886257][ T5426] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1694'. [ 318.896753][ T45] usb 6-1: config 2 interface 82 has no altsetting 0 [ 318.903563][ T45] usb 6-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 318.912777][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.123074][ T45] usb 6-1: string descriptor 0 read error: -71 [ 319.134004][ T45] ums-alauda 6-1:2.82: USB Mass Storage device detected [ 319.187545][ T45] usb 6-1: USB disconnect, device number 37 [ 319.825137][ T36] audit: type=1400 audit(2000000145.728:731): avc: denied { name_bind } for pid=5439 comm="syz.5.1698" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 319.874400][ T36] audit: type=1400 audit(2000000145.778:732): avc: denied { read write } for pid=5444 comm="syz.5.1699" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 319.898906][ T36] audit: type=1400 audit(2000000145.778:733): avc: denied { open } for pid=5444 comm="syz.5.1699" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 320.181673][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 320.331658][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 320.338223][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.349397][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.359679][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 320.368976][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.378442][ T9] usb 6-1: config 0 descriptor?? [ 320.790789][ T9] playstation 0003:054C:05C4.0046: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 320.813682][ T2223] usb 5-1: USB disconnect, device number 7 [ 320.988799][ T36] audit: type=1400 audit(2000000146.888:734): avc: denied { setattr } for pid=5478 comm="syz.4.1710" name="ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 321.212373][ T9] playstation 0003:054C:05C4.0046: Failed to retrieve feature with reportID 163: -32 [ 321.221979][ T9] playstation 0003:054C:05C4.0046: Failed to retrieve DualShock4 firmware info: -32 [ 321.231395][ T9] playstation 0003:054C:05C4.0046: Failed to get firmware info from DualShock4 [ 321.240669][ T9] playstation 0003:054C:05C4.0046: HW/FW version data in sysfs will be invalid. [ 321.256828][ T9] playstation 0003:054C:05C4.0046: Failed to retrieve feature with reportID 2: -71 [ 321.266253][ T9] playstation 0003:054C:05C4.0046: Retrying DualShock 4 get calibration report (0x02) request [ 321.271729][ T331] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 321.277512][ T9] playstation 0003:054C:05C4.0046: Failed to retrieve feature with reportID 2: -71 [ 321.293378][ T9] playstation 0003:054C:05C4.0046: Retrying DualShock 4 get calibration report (0x02) request [ 321.303917][ T9] playstation 0003:054C:05C4.0046: Failed to retrieve feature with reportID 2: -71 [ 321.313253][ T9] playstation 0003:054C:05C4.0046: Failed to retrieve DualShock4 calibration info: -71 [ 321.322966][ T9] playstation 0003:054C:05C4.0046: Invalid gyro calibration data for axis (3), disabling calibration. [ 321.333987][ T9] playstation 0003:054C:05C4.0046: Invalid gyro calibration data for axis (4), disabling calibration. [ 321.344979][ T9] playstation 0003:054C:05C4.0046: Invalid gyro calibration data for axis (5), disabling calibration. [ 321.355993][ T9] playstation 0003:054C:05C4.0046: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 321.367844][ T9] playstation 0003:054C:05C4.0046: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 321.379609][ T9] playstation 0003:054C:05C4.0046: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 321.391381][ T9] playstation 0003:054C:05C4.0046: Failed to get calibration data from DualShock4 [ 321.400627][ T9] playstation 0003:054C:05C4.0046: Gyroscope and accelerometer will be inaccurate. [ 321.410747][ T9] input: HID 054c:05c4 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:05C4.0046/input/input98 [ 321.423989][ T9] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:05C4.0046/input/input99 [ 321.438597][ T9] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:05C4.0046/input/input100 [ 321.452849][ T331] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 321.464004][ T331] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.479044][ T331] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 321.483387][ T9] playstation 0003:054C:05C4.0046: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 321.496729][ T331] usb 5-1: config 1 has no interface number 0 [ 321.506574][ T331] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 321.519057][ T331] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 321.542935][ T331] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 321.554931][ T9] usb 6-1: USB disconnect, device number 38 [ 321.558207][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.572282][ T331] usb 5-1: Product: syz [ 321.593695][ T331] usb 5-1: Manufacturer: syz [ 321.598355][ T331] usb 5-1: SerialNumber: syz [ 321.613550][ T5493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=5493 comm=syz.1.1715 [ 321.627375][ T5493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5493 comm=syz.1.1715 [ 321.640813][ T5493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=5493 comm=syz.1.1715 [ 321.653372][ T5493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=5493 comm=syz.1.1715 [ 321.665959][ T5493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=5493 comm=syz.1.1715 [ 321.693355][ T5498] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1716'. [ 321.693359][ T36] audit: type=1400 audit(2000000147.598:735): avc: denied { nlmsg_read } for pid=5497 comm="syz.1.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 321.807768][ T36] audit: type=1400 audit(2000000147.708:736): avc: denied { mounton } for pid=5499 comm="syz.5.1717" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 321.807794][ T5500] fuse: Invalid rootmode [ 321.857353][ T5500] kvm: kvm [5499]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 322.099032][ T331] usb 5-1: USB disconnect, device number 8 [ 322.165739][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 322.165760][ T36] audit: type=1400 audit(2000000148.068:738): avc: denied { read } for pid=5514 comm="syz.5.1722" name="file2" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 322.195216][ T36] audit: type=1400 audit(2000000148.068:739): avc: denied { open } for pid=5514 comm="syz.5.1722" path="/80/file2" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 322.223932][ T36] audit: type=1400 audit(2000000148.098:740): avc: denied { ioctl } for pid=5514 comm="syz.5.1722" path="/80/file2" dev="tmpfs" ino=447 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 322.441184][ T36] audit: type=1400 audit(2000000148.338:741): avc: denied { watch watch_reads } for pid=5531 comm="syz.5.1728" path="/83" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 322.702599][ T331] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 322.831656][ T331] usb 6-1: device descriptor read/64, error -71 [ 322.915541][ T5562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1737'. [ 323.071660][ T331] usb 6-1: device descriptor read/64, error -71 [ 323.311643][ T331] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 323.441650][ T331] usb 6-1: device descriptor read/64, error -71 [ 323.681678][ T331] usb 6-1: device descriptor read/64, error -71 [ 323.791717][ T331] usb usb6-port1: attempt power cycle [ 323.811628][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 323.961629][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 323.967958][ T9] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 323.976227][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.986425][ T9] usb 5-1: config 0 has no interface number 0 [ 323.994203][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 324.003478][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.011580][ T9] usb 5-1: Product: syz [ 324.015846][ T9] usb 5-1: Manufacturer: syz [ 324.020481][ T9] usb 5-1: SerialNumber: syz [ 324.025906][ T9] usb 5-1: config 0 descriptor?? [ 324.032283][ T9] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 324.038665][ T9] usb 5-1: No valid video chain found. [ 324.063794][ T36] audit: type=1400 audit(2000000149.968:742): avc: denied { create } for pid=5577 comm="syz.1.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 324.086266][ T36] audit: type=1400 audit(2000000149.988:743): avc: denied { ioctl } for pid=5577 comm="syz.1.1744" path="socket:[36980]" dev="sockfs" ino=36980 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 324.131640][ T331] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 324.152634][ T331] usb 6-1: device descriptor read/8, error -71 [ 324.233519][ T5571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.242443][ T5571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.250863][ T5571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.259403][ T5571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.292611][ T331] usb 6-1: device descriptor read/8, error -71 [ 324.468169][ T5571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.476787][ T5571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.494626][ T36] audit: type=1400 audit(2000000150.398:744): avc: denied { ioctl } for pid=5581 comm="syz.0.1745" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 324.529893][ T36] audit: type=1400 audit(2000000150.428:745): avc: denied { getopt } for pid=5584 comm="syz.0.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 324.530266][ T5587] __vm_enough_memory: pid: 5587, comm: syz.0.1746, bytes: 18014402804453376 not enough memory for the allocation [ 324.561478][ T331] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 324.569714][ T36] audit: type=1400 audit(2000000150.478:746): avc: denied { bind } for pid=5570 comm="syz.4.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 324.584145][ T5588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.592684][ T36] audit: type=1400 audit(2000000150.478:747): avc: denied { name_bind } for pid=5570 comm="syz.4.1741" src=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 324.599056][ T5588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.635960][ T331] usb 6-1: device descriptor read/8, error -71 [ 324.660789][ T5588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.669245][ T5599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.670292][ T5588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.682359][ T5599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.772769][ T331] usb 6-1: device descriptor read/8, error -71 [ 324.881730][ T331] usb usb6-port1: unable to enumerate USB device [ 325.175900][ T5601] fuse: Bad value for 'fd' [ 325.430395][ T5608] 9pnet_fd: Insufficient options for proto=fd [ 325.791644][ T338] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 325.941638][ T338] usb 6-1: Using ep0 maxpacket: 16 [ 325.947993][ T338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.959139][ T338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.969111][ T338] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 325.978207][ T338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.986841][ T338] usb 6-1: config 0 descriptor?? [ 326.595743][ T331] usb 5-1: USB disconnect, device number 9 [ 326.602134][ T338] playstation 0003:054C:05C4.0047: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 326.796096][ T338] playstation 0003:054C:05C4.0047: Failed to retrieve feature with reportID 18: -32 [ 326.805625][ T338] playstation 0003:054C:05C4.0047: Failed to retrieve DualShock4 pairing info: -32 [ 326.815016][ T338] playstation 0003:054C:05C4.0047: Failed to get MAC address from DualShock4 [ 326.823869][ T338] playstation 0003:054C:05C4.0047: Failed to create dualshock4. [ 326.832185][ T338] playstation 0003:054C:05C4.0047: probe with driver playstation failed with error -32 [ 327.471221][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 327.471240][ T36] audit: type=1400 audit(2000000153.368:753): avc: denied { create } for pid=5626 comm="syz.4.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 327.497772][ T36] audit: type=1400 audit(2000000153.398:754): avc: denied { setopt } for pid=5626 comm="syz.4.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 328.463429][ T45] usb 6-1: USB disconnect, device number 43 [ 328.543210][ T36] audit: type=1400 audit(2000000154.448:755): avc: denied { read write } for pid=5670 comm="syz.5.1772" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 328.567733][ T36] audit: type=1400 audit(2000000154.448:756): avc: denied { open } for pid=5670 comm="syz.5.1772" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 328.592357][ T36] audit: type=1400 audit(2000000154.498:757): avc: denied { read } for pid=5670 comm="syz.5.1772" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 328.615327][ T36] audit: type=1400 audit(2000000154.498:758): avc: denied { open } for pid=5670 comm="syz.5.1772" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 328.639544][ T36] audit: type=1400 audit(2000000154.498:759): avc: denied { ioctl } for pid=5670 comm="syz.5.1772" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 328.663338][ T5674] batadv_slave_1: entered promiscuous mode [ 328.666730][ T36] audit: type=1400 audit(2000000154.498:760): avc: denied { set_context_mgr } for pid=5670 comm="syz.5.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 328.672511][ T5674] batadv_slave_1: left promiscuous mode [ 328.690808][ T36] audit: type=1400 audit(2000000154.498:761): avc: denied { mount } for pid=5670 comm="syz.5.1772" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 328.718088][ T36] audit: type=1400 audit(2000000154.498:762): avc: denied { mounton } for pid=5670 comm="syz.5.1772" path="/88/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 329.011639][ T338] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 329.163494][ T338] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 329.173686][ T338] usb 5-1: too many endpoints for config 1 interface 0 altsetting 181: 66, using maximum allowed: 30 [ 329.184656][ T338] usb 5-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 329.197933][ T338] usb 5-1: config 1 interface 0 has no altsetting 0 [ 329.206297][ T338] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 329.215427][ T338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.223475][ T338] usb 5-1: Product: Ë憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓êŠÝœã„¿â†¦è£ŒèŽ¡ê‰³îµ°å’†çº¥ã‰¸å¾žà®´è®§ê±¿â¨”亓뉭얄슀葋ä¤ë¹—馿㞘톷注栴享◗◧報ꓨèŽè—·â¢žë¥ï¯•ì¢¢ë–¸æž±å˜¯ë–¦æ‘µï¹§ê²¥éˆáœ‡ä¤¬îªŠîŒ¹æ¼³ [ 329.244963][ T338] usb 5-1: SerialNumber: syz [ 329.331669][ T9] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 329.454930][ T338] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 329.464326][ T338] usb 5-1: USB disconnect, device number 10 [ 329.482812][ T9] usb 6-1: config 0 has no interfaces? [ 329.488381][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 329.497522][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.506133][ T9] usb 6-1: config 0 descriptor?? [ 329.714352][ T5687] overlayfs: overlapping lowerdir path [ 330.069418][ T5695] can0: slcan on ptm0. [ 330.327661][ T5718] netlink: 'syz.1.1784': attribute type 20 has an invalid length. [ 330.703206][ T5726] overlayfs: workdir and upperdir must be separate subtrees [ 330.831448][ T5694] can0 (unregistered): slcan off ptm0. [ 331.141638][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 331.236743][ T5777] netlink: 'syz.0.1792': attribute type 4 has an invalid length. [ 331.277433][ T5785] fuseblk: Bad value for 'source' [ 331.293876][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.305363][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26432, setting to 1024 [ 331.317252][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 331.330304][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.339460][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.348300][ T9] usb 5-1: config 0 descriptor?? [ 331.357177][ T5748] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 331.371031][ T5789] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1797'. [ 331.579835][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 331.588163][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 331.596918][ T9] usb 5-1: USB disconnect, device number 11 [ 331.795525][ T9] usb 6-1: USB disconnect, device number 44 [ 331.941459][ T5805] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1804'. [ 332.171629][ T9] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 332.321626][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 332.327959][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.338929][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 332.348011][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.356739][ T9] usb 6-1: config 0 descriptor?? [ 332.766682][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 332.766701][ T36] audit: type=1326 audit(2000000158.668:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5802 comm="syz.5.1803" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f718879aeb9 code=0x0 [ 332.809241][ T5816] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 333.091661][ T45] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 333.242825][ T45] usb 5-1: config 0 has no interfaces? [ 333.249785][ T45] usb 5-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 333.259090][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 333.267146][ T45] usb 5-1: SerialNumber: syz [ 333.272598][ T45] usb 5-1: config 0 descriptor?? [ 333.482588][ T5824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.493399][ T5824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.503552][ T2223] usb 5-1: USB disconnect, device number 12 [ 334.261651][ T2223] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 334.411626][ T2223] usb 5-1: Using ep0 maxpacket: 16 [ 334.419317][ T2223] usb 5-1: unable to get BOS descriptor or descriptor too short [ 334.429737][ T2223] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 334.437470][ T2223] usb 5-1: can't read configurations, error -71 [ 334.862896][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 334.869085][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 334.878715][ T9] usb 6-1: USB disconnect, device number 45 [ 334.889753][ T5839] incfs: ino conflict with backing FS 1 [ 334.904112][ T36] audit: type=1400 audit(2000000160.808:839): avc: denied { read } for pid=5838 comm="syz.5.1819" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 334.904985][ T5839] tmpfs: Bad value for 'nr_blocks' [ 334.931781][ T36] audit: type=1400 audit(2000000160.808:840): avc: denied { open } for pid=5838 comm="syz.5.1819" path="/93/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 334.933846][ T5839] incfs: ino conflict with backing FS 2 [ 334.962726][ T5839] incfs: ino conflict with backing FS 3 [ 334.968320][ T5839] incfs: ino conflict with backing FS 1 [ 334.979130][ T36] audit: type=1400 audit(2000000160.808:841): avc: denied { ioctl } for pid=5838 comm="syz.5.1819" path="/93/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 335.021031][ T5845] netlink: 'syz.4.1822': attribute type 4 has an invalid length. [ 335.341642][ T9] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 335.491621][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 335.497875][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.508814][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.518626][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 335.527700][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.536365][ T9] usb 6-1: config 0 descriptor?? [ 335.627114][ T36] audit: type=1400 audit(2000000161.528:842): avc: denied { block_suspend } for pid=5857 comm="syz.4.1828" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 335.871645][ T45] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 335.945779][ T9] playstation 0003:054C:05C4.0048: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 336.021655][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 336.028044][ T45] usb 5-1: config index 0 descriptor too short (expected 64967, got 165) [ 336.036528][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.046667][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.057063][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.066249][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.074288][ T45] usb 5-1: Product: syz [ 336.078485][ T45] usb 5-1: Manufacturer: syz [ 336.083131][ T45] usb 5-1: SerialNumber: syz [ 336.145663][ T9] playstation 0003:054C:05C4.0048: Failed to retrieve feature with reportID 18: -32 [ 336.155204][ T9] playstation 0003:054C:05C4.0048: Failed to retrieve DualShock4 pairing info: -32 [ 336.164588][ T9] playstation 0003:054C:05C4.0048: Failed to get MAC address from DualShock4 [ 336.173442][ T9] playstation 0003:054C:05C4.0048: Failed to create dualshock4. [ 336.181747][ T9] playstation 0003:054C:05C4.0048: probe with driver playstation failed with error -32 [ 336.300132][ T45] usb 5-1: 0:2 : does not exist [ 336.309458][ T45] usb 5-1: USB disconnect, device number 15 [ 336.472052][ T36] audit: type=1400 audit(2000000162.378:843): avc: denied { bind } for pid=5878 comm="syz.1.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 336.492705][ T36] audit: type=1400 audit(2000000162.388:844): avc: denied { setopt } for pid=5878 comm="syz.1.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 337.312785][ T36] audit: type=1400 audit(2000000163.218:845): avc: denied { create } for pid=5894 comm="syz.1.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 337.449093][ T36] audit: type=1400 audit(2000000163.348:846): avc: denied { ioctl } for pid=5900 comm="syz.0.1840" path="socket:[38574]" dev="sockfs" ino=38574 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 337.486972][ T36] audit: type=1400 audit(2000000163.378:847): avc: denied { write } for pid=5900 comm="syz.0.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.013691][ T5915] netlink: 'syz.1.1844': attribute type 15 has an invalid length. [ 338.024515][ T5915] netlink: 'syz.1.1844': attribute type 15 has an invalid length. [ 338.032853][ T5915] netlink: 'syz.1.1844': attribute type 15 has an invalid length. [ 338.041020][ T5915] netlink: 'syz.1.1844': attribute type 15 has an invalid length. [ 338.050823][ T9] usb 6-1: USB disconnect, device number 46 [ 338.063777][ T5915] netlink: 'syz.1.1844': attribute type 15 has an invalid length. [ 338.075334][ T5915] netlink: 'syz.1.1844': attribute type 15 has an invalid length. [ 338.086007][ T5915] netlink: 'syz.1.1844': attribute type 15 has an invalid length. [ 338.094863][ T5915] netlink: 'syz.1.1844': attribute type 15 has an invalid length. [ 338.102975][ T5915] netlink: 'syz.1.1844': attribute type 15 has an invalid length. [ 338.110856][ T5915] netlink: 'syz.1.1844': attribute type 15 has an invalid length. [ 338.251627][ T2223] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 338.402017][ T2223] usb 5-1: no configurations [ 338.406695][ T2223] usb 5-1: can't read configurations, error -22 [ 338.541670][ T2223] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 338.623873][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 338.623891][ T36] audit: type=1400 audit(2000000164.528:849): avc: denied { write } for pid=5924 comm="syz.5.1848" name="raw" dev="proc" ino=4026532510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 338.667992][ T36] audit: type=1400 audit(2000000164.568:850): avc: denied { create } for pid=5929 comm="syz.1.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 338.693399][ T2223] usb 5-1: no configurations [ 338.698275][ T2223] usb 5-1: can't read configurations, error -22 [ 338.706990][ T2223] usb usb5-port1: attempt power cycle [ 338.713480][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1850'. [ 338.779447][ T5945] rust_binder: Write failure EINVAL in pid:297 [ 339.011630][ T31] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 339.051676][ T2223] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 339.072417][ T2223] usb 5-1: no configurations [ 339.077032][ T2223] usb 5-1: can't read configurations, error -22 [ 339.172761][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.182790][ T31] usb 6-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 339.191924][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.200495][ T31] usb 6-1: config 0 descriptor?? [ 339.211664][ T2223] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 339.232453][ T2223] usb 5-1: no configurations [ 339.237083][ T2223] usb 5-1: can't read configurations, error -22 [ 339.243504][ T2223] usb usb5-port1: unable to enumerate USB device [ 339.610144][ T31] elecom 0003:056E:00FE.0049: hidraw0: USB HID v0.01 Device [HID 056e:00fe] on usb-dummy_hcd.5-1/input0 [ 339.810555][ T36] audit: type=1400 audit(2000000165.708:851): avc: denied { write } for pid=5944 comm="syz.5.1854" path="socket:[38653]" dev="sockfs" ino=38653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 339.835250][ T2223] usb 6-1: USB disconnect, device number 47 [ 340.356184][ T5959] fuse: Bad value for 'rootmode' [ 340.391237][ T36] audit: type=1400 audit(2000000166.288:852): avc: denied { write } for pid=5964 comm="syz.5.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 340.471132][ T5969] fuseblk: Bad value for 'group_id' [ 340.476409][ T5969] fuseblk: Bad value for 'group_id' [ 340.483107][ T5970] overlayfs: failed to clone upperpath [ 340.488809][ T5969] overlayfs: failed to clone upperpath [ 340.511450][ T36] audit: type=1400 audit(2000000166.408:853): avc: denied { bind } for pid=5968 comm="syz.1.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 340.546503][ T36] audit: type=1400 audit(2000000166.448:854): avc: denied { bind } for pid=5973 comm="syz.1.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 340.566006][ T36] audit: type=1400 audit(2000000166.448:855): avc: denied { ioctl } for pid=5973 comm="syz.1.1864" path="socket:[37606]" dev="sockfs" ino=37606 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 340.591000][ T36] audit: type=1400 audit(2000000166.458:856): avc: denied { write } for pid=5973 comm="syz.1.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 340.610780][ T36] audit: type=1400 audit(2000000166.458:857): avc: denied { accept } for pid=5973 comm="syz.1.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 340.661638][ T331] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 340.791620][ T331] usb 6-1: device descriptor read/64, error -71 [ 341.022064][ T36] audit: type=1400 audit(2000000166.928:858): avc: denied { setopt } for pid=5980 comm="syz.4.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 341.031879][ T331] usb 6-1: device descriptor read/64, error -71 [ 341.157584][ T5992] 9pnet_fd: Insufficient options for proto=fd [ 341.281661][ T331] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 341.411642][ T331] usb 6-1: device descriptor read/64, error -71 [ 341.411642][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 341.562790][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.573777][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.583546][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 341.592663][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.601349][ T9] usb 5-1: config 0 descriptor?? [ 341.679939][ T331] usb 6-1: device descriptor read/64, error -71 [ 341.783752][ T6000] overlayfs: failed to clone upperpath [ 341.791744][ T331] usb usb6-port1: attempt power cycle [ 341.811831][ T6002] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 341.821296][ T6002] overlayfs: failed to clone lowerpath [ 341.852764][ T6006] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1878'. [ 341.861899][ T6006] z00ªX¹¦: renamed from gretap0 (while UP) [ 341.868665][ T6006] z00ªX¹¦: entered allmulticast mode [ 341.875939][ T6006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6006 comm=syz.1.1878 [ 342.010786][ T9] lenovo 0003:17EF:60B5.004A: hidraw0: USB HID v0.20 Device [HID 17ef:60b5] on usb-dummy_hcd.4-1/input0 [ 342.131659][ T331] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 342.152624][ T331] usb 6-1: device descriptor read/8, error -71 [ 342.210057][ T9] usb 5-1: USB disconnect, device number 20 [ 342.282810][ T331] usb 6-1: device descriptor read/8, error -71 [ 342.521632][ T331] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 342.542679][ T331] usb 6-1: device descriptor read/8, error -71 [ 342.672698][ T331] usb 6-1: device descriptor read/8, error -71 [ 342.782635][ T331] usb usb6-port1: unable to enumerate USB device [ 342.936100][ T6025] input: syz1 as /devices/virtual/input/input101 [ 343.045363][ T6027] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 343.821644][ T9] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 343.918898][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 343.918916][ T36] audit: type=1400 audit(2000000169.818:865): avc: denied { mounton } for pid=6049 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 343.988423][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 343.998883][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 344.014494][ T9] usb 6-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 344.025996][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.033187][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.042244][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.049477][ T6049] bridge_slave_0: entered allmulticast mode [ 344.056339][ T6049] bridge_slave_0: entered promiscuous mode [ 344.062622][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 344.072480][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.080013][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.088148][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.095461][ T9] usb 6-1: Product: syz [ 344.099638][ T9] usb 6-1: Manufacturer: syz [ 344.104380][ T6049] bridge_slave_1: entered allmulticast mode [ 344.110783][ T6049] bridge_slave_1: entered promiscuous mode [ 344.117079][ T9] usb 6-1: SerialNumber: syz [ 344.176867][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.183942][ T6049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.191193][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.198254][ T6049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.225578][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.233119][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.243521][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.250573][ T3319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.259513][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.266591][ T3323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.275841][ T3319] bridge_slave_0: left allmulticast mode [ 344.281524][ T3319] bridge_slave_0: left promiscuous mode [ 344.287306][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.335502][ T9] usb 6-1: 0:2 : does not exist [ 344.343493][ T9] usb 6-1: USB disconnect, device number 52 [ 344.353432][ T4540] udevd[4540]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 344.411518][ T6049] veth0_vlan: entered promiscuous mode [ 344.422850][ T6049] veth1_macvtap: entered promiscuous mode [ 344.440674][ T36] audit: type=1400 audit(2000000170.338:866): avc: denied { mounton } for pid=6049 comm="syz-executor" path="/root/syzkaller.s1oWKt/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 344.465885][ T36] audit: type=1400 audit(2000000170.348:867): avc: denied { mounton } for pid=6049 comm="syz-executor" path="/root/syzkaller.s1oWKt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 344.492676][ T36] audit: type=1400 audit(2000000170.348:868): avc: denied { mounton } for pid=6049 comm="syz-executor" path="/root/syzkaller.s1oWKt/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=40111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 344.520670][ T36] audit: type=1400 audit(2000000170.378:869): avc: denied { mounton } for pid=6049 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 344.543754][ T36] audit: type=1400 audit(2000000170.378:870): avc: denied { mounton } for pid=6049 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 344.568908][ T3319] veth1_macvtap: left allmulticast mode [ 344.574693][ T3319] veth1_macvtap: left promiscuous mode [ 344.686330][ T36] audit: type=1400 audit(2000000170.588:871): avc: denied { load_policy } for pid=6068 comm="syz.1.1895" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 344.686674][ T6069] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 344.716373][ T6069] SELinux: failed to load policy [ 344.962279][ T31] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 344.999899][ T6081] IPv6: NLM_F_CREATE should be specified when creating new route [ 345.021687][ T331] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 345.091618][ T31] usb 2-1: device descriptor read/64, error -71 [ 345.171654][ T331] usb 5-1: Using ep0 maxpacket: 32 [ 345.177935][ T331] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 345.186433][ T331] usb 5-1: config 0 has no interface number 0 [ 345.194089][ T331] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 345.203242][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.211271][ T331] usb 5-1: Product: syz [ 345.215522][ T331] usb 5-1: Manufacturer: syz [ 345.220163][ T331] usb 5-1: SerialNumber: syz [ 345.225703][ T331] usb 5-1: config 0 descriptor?? [ 345.231419][ T331] smsc95xx v2.0.0 [ 345.251592][ T45] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 345.351636][ T31] usb 2-1: device descriptor read/64, error -71 [ 345.402589][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 345.413524][ T45] usb 6-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 345.422847][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.431869][ T45] usb 6-1: config 0 descriptor?? [ 345.439510][ T6081] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 345.591598][ T31] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 345.721631][ T31] usb 2-1: device descriptor read/64, error -71 [ 345.849797][ T45] thrustmaster 0003:044F:B304.004B: unknown main item tag 0x0 [ 345.857431][ T45] thrustmaster 0003:044F:B304.004B: item fetching failed at offset 3/5 [ 345.866024][ T45] thrustmaster 0003:044F:B304.004B: parse failed [ 345.872427][ T45] thrustmaster 0003:044F:B304.004B: probe with driver thrustmaster failed with error -22 [ 345.971598][ T31] usb 2-1: device descriptor read/64, error -71 [ 346.054065][ T45] usb 6-1: USB disconnect, device number 53 [ 346.082654][ T31] usb usb2-port1: attempt power cycle [ 346.294560][ T6074] kvm: MWAIT instruction emulated as NOP! [ 346.421609][ T45] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 346.429249][ T31] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 346.452671][ T31] usb 2-1: device descriptor read/8, error -71 [ 346.582767][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.593795][ T31] usb 2-1: device descriptor read/8, error -71 [ 346.600043][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.610271][ T331] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 346.621098][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 346.634279][ T331] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 346.643926][ T45] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 346.653071][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.661104][ T331] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 346.672377][ T331] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 346.680780][ T45] usb 6-1: config 0 descriptor?? [ 346.686675][ T331] usb 5-1: USB disconnect, device number 21 [ 346.729871][ T36] audit: type=1400 audit(2000000172.628:872): avc: denied { getopt } for pid=6095 comm="syz.0.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 346.749404][ T36] audit: type=1400 audit(2000000172.658:873): avc: denied { getopt } for pid=6095 comm="syz.0.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 346.793048][ T6101] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1907'. [ 346.807558][ T6101] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer. [ 346.831677][ T31] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 346.852554][ T31] usb 2-1: device descriptor read/8, error -71 [ 346.895952][ T45] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x6 [ 346.903632][ T45] plantronics 0003:047F:FFFF.004C: item 0 4 0 11 parsing failed [ 346.911389][ T45] plantronics 0003:047F:FFFF.004C: parse failed [ 346.917700][ T45] plantronics 0003:047F:FFFF.004C: probe with driver plantronics failed with error -22 [ 346.982789][ T31] usb 2-1: device descriptor read/8, error -71 [ 347.091719][ T31] usb usb2-port1: unable to enumerate USB device [ 347.098851][ T9] usb 6-1: USB disconnect, device number 54 [ 347.200741][ T6113] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 347.209039][ T6113] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 347.461622][ T2223] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 347.611616][ T2223] usb 5-1: Using ep0 maxpacket: 16 [ 347.618039][ T2223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.629418][ T2223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.639672][ T2223] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 347.645792][ T6117] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 347.649195][ T2223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.657143][ T36] audit: type=1400 audit(2000000173.548:874): avc: denied { mounton } for pid=6116 comm="syz.5.1912" path="/108/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 347.682571][ T2223] usb 5-1: config 0 descriptor?? [ 347.941601][ T338] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 348.092546][ T338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.103551][ T338] usb 6-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 348.113847][ T338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.122400][ T2223] playstation 0003:054C:05C4.004D: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 348.134651][ T338] usb 6-1: config 0 descriptor?? [ 348.144022][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 348.302796][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 348.313751][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 348.314425][ T2223] playstation 0003:054C:05C4.004D: Invalid byte count transferred, expected 16 got 0 [ 348.325460][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.334658][ T2223] playstation 0003:054C:05C4.004D: Failed to retrieve DualShock4 pairing info: -22 [ 348.344514][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 348.354173][ T2223] playstation 0003:054C:05C4.004D: Failed to get MAC address from DualShock4 [ 348.367347][ T31] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 348.375889][ T2223] playstation 0003:054C:05C4.004D: Failed to create dualshock4. [ 348.384664][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.397934][ T2223] playstation 0003:054C:05C4.004D: probe with driver playstation failed with error -22 [ 348.410107][ T31] usb 2-1: config 0 descriptor?? [ 348.576834][ T338] aureal 0003:0755:2626.004E: item fetching failed at offset 0/3 [ 348.584827][ T338] aureal 0003:0755:2626.004E: probe with driver aureal failed with error -22 [ 348.783000][ T525] usb 6-1: USB disconnect, device number 55 [ 348.819219][ T31] usbhid 2-1:0.0: can't add hid device: -32 [ 348.825283][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 349.531611][ T525] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 349.682949][ T525] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 349.692851][ T525] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 349.705842][ T525] usb 6-1: New USB device found, idVendor=0484, idProduct=ffff, bcdDevice= 0.00 [ 349.715125][ T525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.723868][ T525] usb 6-1: config 0 descriptor?? [ 349.729821][ T525] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 350.239910][ T2223] usb 5-1: USB disconnect, device number 22 [ 350.571608][ T2223] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 350.640884][ T6148] fuse: Bad value for 'fd' [ 350.701621][ T2223] usb 5-1: device descriptor read/64, error -71 [ 350.803482][ T31] usb 2-1: USB disconnect, device number 2 [ 350.941623][ T2223] usb 5-1: device descriptor read/64, error -71 [ 351.181635][ T2223] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 351.231604][ T31] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 351.311597][ T2223] usb 5-1: device descriptor read/64, error -71 [ 351.361600][ T31] usb 2-1: device descriptor read/64, error -71 [ 351.551612][ T2223] usb 5-1: device descriptor read/64, error -71 [ 351.601606][ T31] usb 2-1: device descriptor read/64, error -71 [ 351.661691][ T2223] usb usb5-port1: attempt power cycle [ 351.841633][ T31] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 351.971599][ T31] usb 2-1: device descriptor read/64, error -71 [ 352.001622][ T2223] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 352.022676][ T2223] usb 5-1: device descriptor read/8, error -71 [ 352.152706][ T2223] usb 5-1: device descriptor read/8, error -71 [ 352.211602][ T31] usb 2-1: device descriptor read/64, error -71 [ 352.307266][ T525] usb 6-1: USB disconnect, device number 56 [ 352.321780][ T31] usb usb2-port1: attempt power cycle [ 352.401888][ T2223] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 352.422560][ T2223] usb 5-1: device descriptor read/8, error -71 [ 352.552719][ T2223] usb 5-1: device descriptor read/8, error -71 [ 352.661885][ T31] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 352.662443][ T2223] usb usb5-port1: unable to enumerate USB device [ 352.682684][ T31] usb 2-1: device descriptor read/8, error -71 [ 352.691623][ T525] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 352.812667][ T31] usb 2-1: device descriptor read/8, error -71 [ 352.841596][ T525] usb 6-1: Using ep0 maxpacket: 16 [ 352.847743][ T525] usb 6-1: config 0 has an invalid interface number: 109 but max is 0 [ 352.855945][ T525] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.866908][ T525] usb 6-1: config 0 has no interface number 0 [ 352.874427][ T525] usb 6-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 352.883529][ T525] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.891539][ T525] usb 6-1: Product: syz [ 352.895746][ T525] usb 6-1: Manufacturer: syz [ 352.900325][ T525] usb 6-1: SerialNumber: syz [ 352.905555][ T525] usb 6-1: config 0 descriptor?? [ 353.051623][ T31] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 353.072631][ T31] usb 2-1: device descriptor read/8, error -71 [ 353.166291][ T525] rndis_host 6-1:0.109: More than one union descriptor, skipping ... [ 353.174565][ T525] usb 6-1: bad CDC descriptors [ 353.179450][ T525] cdc_acm 6-1:0.109: More than one union descriptor, skipping ... [ 353.188419][ T525] usb 6-1: USB disconnect, device number 57 [ 353.202806][ T31] usb 2-1: device descriptor read/8, error -71 [ 353.280868][ T6174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.289367][ T6174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.297583][ T6174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.306137][ T6174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.312170][ T31] usb usb2-port1: unable to enumerate USB device [ 353.317082][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 353.317128][ T36] audit: type=1326 audit(2000004531.216:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.4.1931" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97b1d9aeb9 code=0x0 [ 353.671607][ T2223] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 353.745028][ T36] audit: type=1400 audit(2000004531.646:878): avc: denied { read } for pid=6176 comm="syz.5.1932" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 353.768105][ T36] audit: type=1400 audit(2000004531.646:879): avc: denied { open } for pid=6176 comm="syz.5.1932" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 353.821606][ T2223] usb 5-1: Using ep0 maxpacket: 32 [ 353.833071][ T2223] usb 5-1: unable to get BOS descriptor or descriptor too short [ 353.851585][ T2223] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 353.859200][ T2223] usb 5-1: can't read configurations, error -71 [ 354.073859][ T6184] overlayfs: failed to resolve './file0': -2 [ 354.271738][ T525] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 354.361167][ T36] audit: type=1400 audit(2000004532.256:880): avc: denied { sqpoll } for pid=6188 comm="syz.4.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 354.380610][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1936'. [ 354.412961][ T36] audit: type=1400 audit(2000004532.316:881): avc: denied { write } for pid=6192 comm="syz.4.1938" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 354.435737][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 354.435769][ T36] audit: type=1400 audit(2000004532.316:882): avc: denied { map } for pid=6192 comm="syz.4.1938" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 354.445103][ T525] usb 6-1: unable to get BOS descriptor or descriptor too short [ 354.478890][ T36] audit: type=1400 audit(2000004532.386:883): avc: denied { write } for pid=6192 comm="syz.4.1938" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 354.499209][ T525] usb 6-1: not running at top speed; connect to a high speed hub [ 354.508482][ T525] usb 6-1: config 0 has too many interfaces: 128, using maximum allowed: 32 [ 354.517390][ T525] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.527549][ T525] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 128 [ 354.539944][ T525] usb 6-1: New USB device found, idVendor=2040, idProduct=721e, bcdDevice=5e.2b [ 354.549153][ T525] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.557193][ T525] usb 6-1: Product: syz [ 354.561390][ T525] usb 6-1: Manufacturer: syz [ 354.566030][ T525] usb 6-1: SerialNumber: syz [ 354.571060][ T525] usb 6-1: config 0 descriptor?? [ 354.592743][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.603667][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.613423][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 354.622513][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.630986][ T31] usb 2-1: config 0 descriptor?? [ 354.782288][ T525] usb 6-1: USB disconnect, device number 58 [ 354.838217][ T6187] netlink: 1335 bytes leftover after parsing attributes in process `syz.1.1935'. [ 354.850205][ T36] audit: type=1400 audit(2000004532.756:884): avc: denied { listen } for pid=6186 comm="syz.1.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 354.941609][ T2223] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 355.070732][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 355.075294][ T2223] usb 5-1: device descriptor read/64, error -71 [ 355.078036][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 355.091507][ T31] usb 2-1: USB disconnect, device number 7 [ 355.321634][ T2223] usb 5-1: device descriptor read/64, error -71 [ 355.431747][ T2223] usb usb5-port1: attempt power cycle [ 355.650776][ T36] audit: type=1326 audit(2000004533.546:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.1.1944" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6747d9aeb9 code=0x0 [ 355.771627][ T2223] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 355.792704][ T2223] usb 5-1: device descriptor read/8, error -71 [ 355.922863][ T2223] usb 5-1: device descriptor read/8, error -71 [ 355.941704][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 356.091974][ T31] usb 2-1: too many configurations: 72, using maximum allowed: 8 [ 356.104619][ T31] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 356.113723][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.122355][ T31] usb 2-1: config 0 descriptor?? [ 356.142257][ T9] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 356.171627][ T2223] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 356.192609][ T2223] usb 5-1: device descriptor read/8, error -71 [ 356.291687][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 356.298034][ T9] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.308005][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 356.314655][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 356.323764][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.332850][ T9] usb 6-1: config 0 descriptor?? [ 356.337874][ T2223] usb 5-1: device descriptor read/8, error -71 [ 356.451719][ T2223] usb usb5-port1: unable to enumerate USB device [ 356.545777][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.554405][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.893137][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 356.899359][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 356.908099][ T9] usb 6-1: USB disconnect, device number 59 [ 357.559642][ T6221] overlayfs: missing 'lowerdir' [ 357.565736][ T36] audit: type=1400 audit(2000004535.476:886): avc: denied { create } for pid=6220 comm="syz.4.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 357.611648][ T6224] validate_nla: 56 callbacks suppressed [ 357.611683][ T6224] netlink: 'syz.4.1951': attribute type 2 has an invalid length. [ 357.661627][ T2223] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 357.823131][ T2223] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 357.830794][ T2223] usb 6-1: can't read configurations, error -61 [ 357.838323][ T6230] overlayfs: failed to clone upperpath [ 357.981632][ T2223] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 358.133116][ T2223] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 358.140720][ T2223] usb 6-1: can't read configurations, error -61 [ 358.147205][ T2223] usb usb6-port1: attempt power cycle [ 358.491605][ T2223] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 358.513458][ T2223] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 358.521169][ T2223] usb 6-1: can't read configurations, error -61 [ 358.651659][ T2223] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 358.661455][ T525] usb 2-1: USB disconnect, device number 8 [ 358.674508][ T2223] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 358.682333][ T2223] usb 6-1: can't read configurations, error -61 [ 358.688673][ T2223] usb usb6-port1: unable to enumerate USB device [ 359.001629][ T525] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 359.017776][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 359.017793][ T36] audit: type=1400 audit(2000004536.916:890): avc: denied { bind } for pid=6237 comm="syz.0.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 359.018722][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1956'. [ 359.065061][ T6240] fuse: Bad value for 'fd' [ 359.131648][ T525] usb 2-1: device descriptor read/64, error -71 [ 359.371605][ T525] usb 2-1: device descriptor read/64, error -71 [ 359.611620][ T525] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 359.741602][ T525] usb 2-1: device descriptor read/64, error -71 [ 359.981635][ T525] usb 2-1: device descriptor read/64, error -71 [ 360.092013][ T525] usb usb2-port1: attempt power cycle [ 360.435707][ T525] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 360.469286][ T525] usb 2-1: device descriptor read/8, error -71 [ 360.602716][ T525] usb 2-1: device descriptor read/8, error -71 [ 360.841605][ T525] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 360.849248][ T31] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 360.872678][ T525] usb 2-1: device descriptor read/8, error -71 [ 361.001610][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 361.007889][ T525] usb 2-1: device descriptor read/8, error -71 [ 361.014135][ T31] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 361.022884][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.033011][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.043458][ T31] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 361.052543][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.060534][ T31] usb 6-1: Product: syz [ 361.064749][ T31] usb 6-1: Manufacturer: syz [ 361.069349][ T31] usb 6-1: SerialNumber: syz [ 361.131705][ T525] usb usb2-port1: unable to enumerate USB device [ 361.153617][ T6265] fuse: Bad value for 'fd' [ 361.476897][ T31] usb 6-1: 0:2 : does not exist [ 362.071611][ T2223] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 362.105090][ T31] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 362.126590][ T31] usb 6-1: USB disconnect, device number 64 [ 362.221630][ T2223] usb 2-1: Using ep0 maxpacket: 16 [ 362.228125][ T2223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.239095][ T2223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.248881][ T2223] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.261767][ T2223] usb 2-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 362.270848][ T2223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.279591][ T2223] usb 2-1: config 0 descriptor?? [ 362.543611][ T6290] fuse: Bad value for 'fd' [ 362.571610][ T31] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 362.686283][ T6269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.695129][ T2223] wacom 0003:056A:032F.004F: hidraw0: USB HID v0.00 Device [HID 056a:032f] on usb-dummy_hcd.1-1/input0 [ 362.696983][ T6269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.731631][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 362.738247][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.749240][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.759026][ T31] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 362.768087][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.776690][ T31] usb 6-1: config 0 descriptor?? [ 362.894126][ T331] usb 2-1: USB disconnect, device number 13 [ 362.974198][ T6295] veth1: entered allmulticast mode [ 363.101410][ T6299] cgroup: fork rejected by pids controller in /syz4 [ 363.188117][ T31] playstation 0003:054C:05C4.0050: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 363.384369][ T31] playstation 0003:054C:05C4.0050: Invalid byte count transferred, expected 16 got 12 [ 363.401632][ T31] playstation 0003:054C:05C4.0050: Failed to retrieve DualShock4 pairing info: -22 [ 363.411054][ T31] playstation 0003:054C:05C4.0050: Failed to get MAC address from DualShock4 [ 363.437323][ T31] playstation 0003:054C:05C4.0050: Failed to create dualshock4. [ 363.446937][ T31] playstation 0003:054C:05C4.0050: probe with driver playstation failed with error -22 [ 363.481439][ T36] audit: type=1400 audit(2000004541.376:891): avc: denied { execute } for pid=6438 comm="syz.1.1982" path="/memory.events.local" dev="ramfs" ino=40974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 363.806911][ T6293] veth1: left allmulticast mode [ 363.857617][ T36] audit: type=1400 audit(2000004541.756:892): avc: denied { bind } for pid=6451 comm="syz.0.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 363.891691][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 363.911845][ T36] audit: type=1400 audit(2000004541.756:893): avc: denied { name_bind } for pid=6451 comm="syz.0.1986" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 363.941904][ T36] audit: type=1400 audit(2000004541.756:894): avc: denied { node_bind } for pid=6451 comm="syz.0.1986" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 364.071776][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 364.077986][ T31] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 364.089644][ T31] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.100348][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 364.107044][ T31] usb 2-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 364.116381][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.125207][ T31] usb 2-1: config 0 descriptor?? [ 364.556218][ T31] uclogic 0003:28BD:0074.0051: interface is invalid, ignoring [ 364.923689][ T338] usb 2-1: USB disconnect, device number 14 [ 365.003456][ T6309] syz.4.1978 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 365.034675][ T6309] CPU: 0 UID: 0 PID: 6309 Comm: syz.4.1978 Not tainted syzkaller #0 5d18be0d7d8d5053dc4a903978481071267b1302 [ 365.034710][ T6309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.034725][ T6309] Call Trace: [ 365.034733][ T6309] [ 365.034742][ T6309] __dump_stack+0x21/0x30 [ 365.034778][ T6309] dump_stack_lvl+0x140/0x1c0 [ 365.034817][ T6309] ? __cfi_dump_stack_lvl+0x10/0x10 [ 365.034842][ T6309] ? ___ratelimit+0x40e/0x5b0 [ 365.034871][ T6309] dump_stack+0x19/0x20 [ 365.034895][ T6309] dump_header+0xd6/0x490 [ 365.034918][ T6309] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 365.034939][ T6309] oom_kill_process+0x35d/0x640 [ 365.034969][ T6309] out_of_memory+0x624/0xa30 [ 365.034997][ T6309] ? __cfi_out_of_memory+0x10/0x10 [ 365.035025][ T6309] ? mutex_lock_killable+0x97/0x1d0 [ 365.035044][ T6309] ? __cfi_mutex_lock_killable+0x10/0x10 [ 365.035065][ T6309] mem_cgroup_out_of_memory+0x2c8/0x390 [ 365.035091][ T6309] ? css_next_descendant_pre+0x202/0x230 [ 365.035112][ T6309] ? drain_obj_stock+0xed0/0xed0 [ 365.035134][ T6309] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 365.035155][ T6309] try_charge_memcg+0x91c/0xe10 [ 365.035173][ T6309] ? __cfi_try_charge_memcg+0x10/0x10 [ 365.035191][ T6309] ? __alloc_pages_noprof+0x35f/0x7e0 [ 365.035210][ T6309] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 365.035229][ T6309] __mem_cgroup_charge+0xfc/0x420 [ 365.035248][ T6309] ? folio_add_lru+0x116/0x400 [ 365.035274][ T6309] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 365.035295][ T6309] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 365.035322][ T6309] ? put_swap_device+0x130/0x130 [ 365.035347][ T6309] ? shmem_huge_global_enabled+0x2da/0x360 [ 365.035371][ T6309] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 365.035395][ T6309] ? __kasan_check_write+0x18/0x20 [ 365.035416][ T6309] ? _raw_spin_lock+0x92/0x120 [ 365.035437][ T6309] shmem_get_folio_gfp+0x607/0x1390 [ 365.035462][ T6309] ? shmem_get_folio+0xc0/0xc0 [ 365.035485][ T6309] ? __kasan_check_write+0x18/0x20 [ 365.035504][ T6309] ? inode_to_bdi+0x6d/0x100 [ 365.035523][ T6309] shmem_write_begin+0xf4/0x270 [ 365.035549][ T6309] generic_perform_write+0x32b/0x970 [ 365.035567][ T6309] ? inode_update_timestamps+0x4f0/0x700 [ 365.035592][ T6309] ? __cfi_generic_perform_write+0x10/0x10 [ 365.035610][ T6309] ? down_write+0xee/0x2b0 [ 365.035626][ T6309] ? mnt_get_write_access_file+0x1af/0x3b0 [ 365.035643][ T6309] ? mnt_put_write_access_file+0xc2/0x100 [ 365.035659][ T6309] ? file_update_time+0x1de/0x210 [ 365.035677][ T6309] shmem_file_write_iter+0x105/0x130 [ 365.035695][ T6309] __kernel_write_iter+0x42f/0x8a0 [ 365.035716][ T6309] ? __cfi___kernel_write_iter+0x10/0x10 [ 365.035736][ T6309] ? get_dump_page+0x165/0x220 [ 365.035752][ T6309] ? __asan_memset+0x39/0x50 [ 365.035771][ T6309] ? iov_iter_bvec+0xc0/0x180 [ 365.035792][ T6309] dump_user_range+0xb8b/0xe60 [ 365.035815][ T6309] ? __cfi_dump_user_range+0x10/0x10 [ 365.035837][ T6309] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 365.035861][ T6309] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 365.035885][ T6309] ? elf_core_dump+0x24c0/0x3960 [ 365.035911][ T6309] elf_core_dump+0x2e7e/0x3960 [ 365.035938][ T6309] ? __cfi_elf_core_dump+0x10/0x10 [ 365.035969][ T6309] ? dump_interrupted+0xf0/0xf0 [ 365.035988][ T6309] ? filp_open+0x199/0x1f0 [ 365.036004][ T6309] ? 0xffffffffff600000 [ 365.036027][ T6309] do_coredump+0x208a/0x2fe0 [ 365.036049][ T6309] ? __cfi_do_coredump+0x10/0x10 [ 365.036068][ T6309] ? asm_exc_page_fault+0x2b/0x30 [ 365.036094][ T6309] ? __kasan_slab_free+0x6a/0x80 [ 365.036118][ T6309] ? kmem_cache_free+0x1bd/0x4f0 [ 365.036138][ T6309] ? get_signal+0xa74/0x14e0 [ 365.036159][ T6309] get_signal+0x11f8/0x14e0 [ 365.036180][ T6309] arch_do_signal_or_restart+0xbc/0x760 [ 365.036205][ T6309] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 365.036230][ T6309] ? __kasan_check_write+0x18/0x20 [ 365.036251][ T6309] irqentry_exit_to_user_mode+0x4d/0xb0 [ 365.036270][ T6309] irqentry_exit+0x16/0x60 [ 365.036286][ T6309] exc_page_fault+0x65/0xc0 [ 365.036302][ T6309] asm_exc_page_fault+0x2b/0x30 [ 365.036321][ T6309] RIP: 0033:0x7f97b1d9aeb9 [ 365.036339][ T6309] Code: Unable to access opcode bytes at 0x7f97b1d9ae8f. [ 365.036348][ T6309] RSP: 002b:000000000000ffd0 EFLAGS: 00010206 [ 365.036364][ T6309] RAX: 0000000000000000 RBX: 00007f97b2016090 RCX: 00007f97b1d9aeb9 [ 365.036377][ T6309] RDX: 0000000000000000 RSI: 000000000000ffd0 RDI: 0000000000002000 [ 365.036389][ T6309] RBP: 00007f97b1e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 365.036400][ T6309] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 365.036411][ T6309] R13: 00007f97b2016128 R14: 00007f97b2016090 R15: 00007ffe591aece8 [ 365.036427][ T6309] [ 365.036461][ T6309] memory: usage 307200kB, limit 307200kB, failcnt 13894 [ 365.361979][ T331] usb 6-1: USB disconnect, device number 65 [ 365.422841][ T6309] memory+swap: usage 431776kB, limit 9007199254740988kB, failcnt 0 [ 365.508643][ T6309] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 365.518509][ T6309] Memory cgroup stats for /syz4: [ 365.518620][ T6309] cache 314019840 [ 365.527240][ T6309] rss 122880 [ 365.530441][ T6309] rss_huge 0 [ 365.533667][ T6309] shmem 314019840 [ 365.537302][ T6309] mapped_file 0 [ 365.540766][ T6309] dirty 0 [ 365.543727][ T6309] writeback 0 [ 365.547025][ T6309] workingset_refault_anon 908 [ 365.551724][ T6309] workingset_refault_file 32 [ 365.556322][ T6309] swap 127565824 [ 365.559855][ T6309] swapcached 430080 [ 365.563699][ T6309] pgpgin 187499 [ 365.567165][ T6309] pgpgout 111210 [ 365.570721][ T6309] pgfault 89519 [ 365.574202][ T6309] pgmajfault 129 [ 365.577749][ T6309] inactive_anon 128557056 [ 365.582108][ T6309] active_anon 186015744 [ 365.586273][ T6309] inactive_file 0 [ 365.589895][ T6309] active_file 0 [ 365.593382][ T6309] unevictable 0 [ 365.596848][ T6309] hierarchical_memory_limit 314572800 [ 365.602266][ T6309] hierarchical_memsw_limit 9223372036854771712 [ 365.608424][ T6309] total_cache 314019840 [ 365.612611][ T6309] total_rss 122880 [ 365.616334][ T6309] total_rss_huge 0 [ 365.620038][ T6309] total_shmem 314019840 [ 365.624231][ T6309] total_mapped_file 0 [ 365.628211][ T6309] total_dirty 0 [ 365.631692][ T6309] total_writeback 0 [ 365.635498][ T6309] total_workingset_refault_anon 908 [ 365.640715][ T6309] total_workingset_refault_file 32 [ 365.645855][ T6309] total_swap 127565824 [ 365.649930][ T6309] total_swapcached 430080 [ 365.654312][ T6309] total_pgpgin 187499 [ 365.659434][ T6309] total_pgpgout 111210 [ 365.663563][ T6309] total_pgfault 89519 [ 365.667556][ T6309] total_pgmajfault 129 [ 365.671664][ T6309] total_inactive_anon 128557056 [ 365.676512][ T6309] total_active_anon 186015744 [ 365.681179][ T6309] total_inactive_file 0 [ 365.685359][ T6309] total_active_file 0 [ 365.689339][ T6309] total_unevictable 0 [ 365.693339][ T6309] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1709,pid=5477,uid=0 [ 365.708242][ T6309] Memory cgroup out of memory: Killed process 5477 (syz.4.1709) total-vm:94048kB, anon-rss:1236kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 365.818442][ T6315] syz.4.1978 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 365.840577][ T6315] CPU: 1 UID: 0 PID: 6315 Comm: syz.4.1978 Not tainted syzkaller #0 5d18be0d7d8d5053dc4a903978481071267b1302 [ 365.840613][ T6315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.840628][ T6315] Call Trace: [ 365.840636][ T6315] [ 365.840645][ T6315] __dump_stack+0x21/0x30 [ 365.840678][ T6315] dump_stack_lvl+0x140/0x1c0 [ 365.840705][ T6315] ? __cfi_dump_stack_lvl+0x10/0x10 [ 365.840732][ T6315] ? ___ratelimit+0x40e/0x5b0 [ 365.840764][ T6315] dump_stack+0x19/0x20 [ 365.840789][ T6315] dump_header+0xd6/0x490 [ 365.840813][ T6315] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 365.840836][ T6315] oom_kill_process+0x35d/0x640 [ 365.840868][ T6315] out_of_memory+0x624/0xa30 [ 365.840898][ T6315] ? __cfi_out_of_memory+0x10/0x10 [ 365.840928][ T6315] ? mutex_lock_killable+0x115/0x1d0 [ 365.840949][ T6315] ? __cfi_mutex_lock_killable+0x10/0x10 [ 365.840972][ T6315] mem_cgroup_out_of_memory+0x2c8/0x390 [ 365.841001][ T6315] ? css_next_descendant_pre+0x202/0x230 [ 365.841024][ T6315] ? drain_obj_stock+0xed0/0xed0 [ 365.841052][ T6315] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 365.841079][ T6315] try_charge_memcg+0x91c/0xe10 [ 365.841103][ T6315] ? __cfi_try_charge_memcg+0x10/0x10 [ 365.841125][ T6315] ? __alloc_pages_noprof+0x35f/0x7e0 [ 365.841149][ T6315] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 365.841173][ T6315] __mem_cgroup_charge+0xfc/0x420 [ 365.841197][ T6315] ? folio_add_lru+0x116/0x400 [ 365.841230][ T6315] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 365.841256][ T6315] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 365.841292][ T6315] ? put_swap_device+0x130/0x130 [ 365.841323][ T6315] ? shmem_huge_global_enabled+0x2da/0x360 [ 365.841354][ T6315] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 365.841384][ T6315] ? __kasan_check_write+0x18/0x20 [ 365.841409][ T6315] ? _raw_spin_lock+0x92/0x120 [ 365.841436][ T6315] shmem_get_folio_gfp+0x607/0x1390 [ 365.841468][ T6315] ? shmem_get_folio+0xc0/0xc0 [ 365.841503][ T6315] ? __kasan_check_write+0x18/0x20 [ 365.841528][ T6315] ? inode_to_bdi+0x6d/0x100 [ 365.841555][ T6315] shmem_write_begin+0xf4/0x270 [ 365.841587][ T6315] generic_perform_write+0x32b/0x970 [ 365.841608][ T6315] ? inode_update_timestamps+0x4f0/0x700 [ 365.841631][ T6315] ? __cfi_generic_perform_write+0x10/0x10 [ 365.841652][ T6315] ? down_write+0xee/0x2b0 [ 365.841672][ T6315] ? mnt_get_write_access_file+0x1af/0x3b0 [ 365.841693][ T6315] ? mnt_put_write_access_file+0xc2/0x100 [ 365.841715][ T6315] ? file_update_time+0x1de/0x210 [ 365.841737][ T6315] shmem_file_write_iter+0x105/0x130 [ 365.841761][ T6315] __kernel_write_iter+0x42f/0x8a0 [ 365.841793][ T6315] ? __cfi___kernel_write_iter+0x10/0x10 [ 365.841837][ T6315] ? get_dump_page+0x165/0x220 [ 365.841859][ T6315] ? __asan_memset+0x39/0x50 [ 365.841887][ T6315] ? iov_iter_bvec+0xc0/0x180 [ 365.841916][ T6315] dump_user_range+0xb8b/0xe60 [ 365.841947][ T6315] ? __cfi_dump_user_range+0x10/0x10 [ 365.841971][ T6315] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 365.841999][ T6315] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 365.842026][ T6315] ? elf_core_dump+0x24c0/0x3960 [ 365.842056][ T6315] elf_core_dump+0x2e7e/0x3960 [ 365.842087][ T6315] ? __cfi_elf_core_dump+0x10/0x10 [ 365.842122][ T6315] ? dump_interrupted+0xf0/0xf0 [ 365.842145][ T6315] ? filp_open+0x199/0x1f0 [ 365.842164][ T6315] ? 0xffffffffff600000 [ 365.842180][ T6315] do_coredump+0x208a/0x2fe0 [ 365.842206][ T6315] ? __cfi_do_coredump+0x10/0x10 [ 365.842228][ T6315] ? asm_exc_page_fault+0x2b/0x30 [ 365.842270][ T6315] ? __kasan_slab_free+0x6a/0x80 [ 365.842295][ T6315] ? kmem_cache_free+0x1bd/0x4f0 [ 365.842317][ T6315] ? get_signal+0xa74/0x14e0 [ 365.842358][ T6315] get_signal+0x11f8/0x14e0 [ 365.842384][ T6315] arch_do_signal_or_restart+0xbc/0x760 [ 365.842412][ T6315] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 365.842442][ T6315] ? __kasan_check_write+0x18/0x20 [ 365.842466][ T6315] irqentry_exit_to_user_mode+0x4d/0xb0 [ 365.842494][ T6315] irqentry_exit+0x16/0x60 [ 365.842513][ T6315] exc_page_fault+0x65/0xc0 [ 365.842532][ T6315] asm_exc_page_fault+0x2b/0x30 [ 365.842554][ T6315] RIP: 0033:0x7f97b1d9aeb9 [ 365.842573][ T6315] Code: Unable to access opcode bytes at 0x7f97b1d9ae8f. [ 365.842583][ T6315] RSP: 002b:000000000000ffd0 EFLAGS: 00010206 [ 365.842602][ T6315] RAX: 0000000000000000 RBX: 00007f97b2016090 RCX: 00007f97b1d9aeb9 [ 365.842616][ T6315] RDX: 0000000000000000 RSI: 000000000000ffd0 RDI: 0000000000002000 [ 365.842630][ T6315] RBP: 00007f97b1e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 365.842643][ T6315] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 365.842656][ T6315] R13: 00007f97b2016128 R14: 00007f97b2016090 R15: 00007ffe591aece8 [ 365.842674][ T6315] [ 366.292271][ T6315] memory: usage 307200kB, limit 307200kB, failcnt 14914 [ 366.299255][ T6315] memory+swap: usage 431612kB, limit 9007199254740988kB, failcnt 0 [ 366.307230][ T6315] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 366.314134][ T6315] Memory cgroup stats for /syz4: [ 366.314997][ T6315] cache 314019840 [ 366.323659][ T6315] rss 122880 [ 366.326865][ T6315] rss_huge 0 [ 366.330065][ T6315] shmem 314019840 [ 366.333857][ T6315] mapped_file 0 [ 366.337321][ T6315] dirty 0 [ 366.340240][ T6315] writeback 0 [ 366.343553][ T6315] workingset_refault_anon 908 [ 366.348372][ T6315] workingset_refault_file 32 [ 366.353013][ T6315] swap 127565824 [ 366.356560][ T6315] swapcached 430080 [ 366.360349][ T6315] pgpgin 187499 [ 366.363853][ T6315] pgpgout 111210 [ 366.367424][ T6315] pgfault 89519 [ 366.370899][ T6315] pgmajfault 129 [ 366.374474][ T6315] inactive_anon 128557056 [ 366.378804][ T6315] active_anon 186015744 [ 366.383035][ T6315] inactive_file 0 [ 366.386688][ T6315] active_file 0 [ 366.390154][ T6315] unevictable 0 [ 366.393775][ T6315] hierarchical_memory_limit 314572800 [ 366.399182][ T6315] hierarchical_memsw_limit 9223372036854771712 [ 366.405414][ T6315] total_cache 314019840 [ 366.409716][ T6315] total_rss 122880 [ 366.413605][ T6315] total_rss_huge 0 [ 366.417402][ T6315] total_shmem 314019840 [ 366.421687][ T6315] total_mapped_file 0 [ 366.425678][ T6315] total_dirty 0 [ 366.429119][ T6315] total_writeback 0 [ 366.432980][ T6315] total_workingset_refault_anon 908 [ 366.438238][ T6315] total_workingset_refault_file 32 [ 366.443372][ T6315] total_swap 127565824 [ 366.447439][ T6315] total_swapcached 430080 [ 366.451794][ T6315] total_pgpgin 187499 [ 366.455804][ T6315] total_pgpgout 111210 [ 366.459856][ T6315] total_pgfault 89519 [ 366.463856][ T6315] total_pgmajfault 129 [ 366.467922][ T6315] total_inactive_anon 128557056 [ 366.472831][ T6315] total_active_anon 186015744 [ 366.477514][ T6315] total_inactive_file 0 [ 366.481696][ T6315] total_active_file 0 [ 366.485682][ T6315] total_unevictable 0 [ 366.489650][ T6315] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1217,pid=3925,uid=0 [ 366.504514][ T6315] Memory cgroup out of memory: Killed process 3925 (syz.4.1217) total-vm:94048kB, anon-rss:1228kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 366.529747][ T6308] syz.4.1978 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 366.539435][ T6308] CPU: 1 UID: 0 PID: 6308 Comm: syz.4.1978 Not tainted syzkaller #0 5d18be0d7d8d5053dc4a903978481071267b1302 [ 366.539465][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 366.539479][ T6308] Call Trace: [ 366.539486][ T6308] [ 366.539494][ T6308] __dump_stack+0x21/0x30 [ 366.539525][ T6308] dump_stack_lvl+0x140/0x1c0 [ 366.539550][ T6308] ? __cfi_dump_stack_lvl+0x10/0x10 [ 366.539575][ T6308] ? ___ratelimit+0x40e/0x5b0 [ 366.539604][ T6308] dump_stack+0x19/0x20 [ 366.539628][ T6308] dump_header+0xd6/0x490 [ 366.539650][ T6308] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 366.539676][ T6308] oom_kill_process+0x35d/0x640 [ 366.539706][ T6308] out_of_memory+0x624/0xa30 [ 366.539734][ T6308] ? __cfi_out_of_memory+0x10/0x10 [ 366.539762][ T6308] ? mutex_lock_killable+0x115/0x1d0 [ 366.539782][ T6308] ? __cfi_mutex_lock_killable+0x10/0x10 [ 366.539803][ T6308] mem_cgroup_out_of_memory+0x2c8/0x390 [ 366.539829][ T6308] ? css_next_descendant_pre+0x202/0x230 [ 366.539851][ T6308] ? drain_obj_stock+0xed0/0xed0 [ 366.539878][ T6308] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 366.539903][ T6308] try_charge_memcg+0x91c/0xe10 [ 366.539925][ T6308] ? __cfi_try_charge_memcg+0x10/0x10 [ 366.539947][ T6308] ? __alloc_pages_noprof+0x35f/0x7e0 [ 366.539969][ T6308] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 366.539991][ T6308] __mem_cgroup_charge+0xfc/0x420 [ 366.540014][ T6308] ? folio_add_lru+0x116/0x400 [ 366.540043][ T6308] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 366.540068][ T6308] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 366.540101][ T6308] ? put_swap_device+0x130/0x130 [ 366.540130][ T6308] ? shmem_huge_global_enabled+0x2da/0x360 [ 366.540159][ T6308] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 366.540188][ T6308] ? __kasan_check_write+0x18/0x20 [ 366.540212][ T6308] ? _raw_spin_lock+0x92/0x120 [ 366.540237][ T6308] shmem_get_folio_gfp+0x607/0x1390 [ 366.540267][ T6308] ? shmem_get_folio+0xc0/0xc0 [ 366.540293][ T6308] ? follow_page_pte+0x90f/0xbc0 [ 366.540314][ T6308] ? inode_to_bdi+0x6d/0x100 [ 366.540336][ T6308] shmem_write_begin+0xf4/0x270 [ 366.540366][ T6308] generic_perform_write+0x32b/0x970 [ 366.540390][ T6308] ? __cfi_generic_perform_write+0x10/0x10 [ 366.540411][ T6308] ? down_write+0xee/0x2b0 [ 366.540432][ T6308] ? file_update_time+0xa3/0x210 [ 366.540454][ T6308] shmem_file_write_iter+0x105/0x130 [ 366.540476][ T6308] __kernel_write_iter+0x42f/0x8a0 [ 366.540502][ T6308] ? __cfi___kernel_write_iter+0x10/0x10 [ 366.540526][ T6308] ? get_dump_page+0x165/0x220 [ 366.540545][ T6308] ? __asan_memset+0x39/0x50 [ 366.540569][ T6308] ? iov_iter_bvec+0xc0/0x180 [ 366.540594][ T6308] dump_user_range+0xb8b/0xe60 [ 366.540621][ T6308] ? __cfi_dump_user_range+0x10/0x10 [ 366.540646][ T6308] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 366.540679][ T6308] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 366.540707][ T6308] ? elf_core_dump+0x24c0/0x3960 [ 366.540737][ T6308] elf_core_dump+0x2e7e/0x3960 [ 366.540770][ T6308] ? __cfi_elf_core_dump+0x10/0x10 [ 366.540806][ T6308] ? dump_interrupted+0xf0/0xf0 [ 366.540830][ T6308] ? filp_open+0x199/0x1f0 [ 366.540849][ T6308] ? 0xffffffffff600000 [ 366.540867][ T6308] do_coredump+0x208a/0x2fe0 [ 366.540894][ T6308] ? __cfi_do_coredump+0x10/0x10 [ 366.540916][ T6308] ? asm_exc_page_fault+0x2b/0x30 [ 366.540947][ T6308] ? __kasan_slab_free+0x6a/0x80 [ 366.540975][ T6308] ? kmem_cache_free+0x1bd/0x4f0 [ 366.541000][ T6308] ? get_signal+0xa74/0x14e0 [ 366.541025][ T6308] get_signal+0x11f8/0x14e0 [ 366.541051][ T6308] arch_do_signal_or_restart+0xbc/0x760 [ 366.541081][ T6308] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 366.541111][ T6308] ? __kasan_check_write+0x18/0x20 [ 366.541136][ T6308] irqentry_exit_to_user_mode+0x4d/0xb0 [ 366.541158][ T6308] irqentry_exit+0x16/0x60 [ 366.541178][ T6308] exc_page_fault+0x65/0xc0 [ 366.541196][ T6308] asm_exc_page_fault+0x2b/0x30 [ 366.541219][ T6308] RIP: 0033:0x7f97b1d9aeb9 [ 366.541239][ T6308] Code: Unable to access opcode bytes at 0x7f97b1d9ae8f. [ 366.541250][ T6308] RSP: 002b:000000000000ffd0 EFLAGS: 00010206 [ 366.541267][ T6308] RAX: 0000000000000000 RBX: 00007f97b2016090 RCX: 00007f97b1d9aeb9 [ 366.541283][ T6308] RDX: 0000000000000000 RSI: 000000000000ffd0 RDI: 0000000000002000 [ 366.541296][ T6308] RBP: 00007f97b1e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 366.541310][ T6308] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 366.541324][ T6308] R13: 00007f97b2016128 R14: 00007f97b2016090 R15: 00007ffe591aece8 [ 366.541342][ T6308] [ 366.541350][ T6308] memory: usage 307196kB, limit 307200kB, failcnt 15018 [ 366.984511][ T6308] memory+swap: usage 431900kB, limit 9007199254740988kB, failcnt 0 [ 366.992775][ T6308] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 367.000992][ T6308] Memory cgroup stats for /syz4: [ 367.001129][ T6308] cache 314150912 [ 367.009870][ T6308] rss 118784 [ 367.013157][ T6308] rss_huge 0 [ 367.016385][ T6308] shmem 314150912 [ 367.020255][ T6308] mapped_file 0 [ 367.023817][ T6308] dirty 0 [ 367.026777][ T6308] writeback 0 [ 367.030101][ T6308] workingset_refault_anon 908 [ 367.039186][ T6308] workingset_refault_file 32 [ 367.044723][ T6308] swap 127692800 [ 367.048556][ T6308] swapcached 303104 [ 367.052904][ T6308] pgpgin 187621 [ 367.056413][ T6308] pgpgout 111332 [ 367.060008][ T6308] pgfault 89537 [ 367.063939][ T6308] pgmajfault 129 [ 367.066670][ T36] audit: type=1400 audit(2000004544.946:895): avc: denied { write } for pid=6483 comm="syz.0.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 367.068349][ T6308] inactive_anon 264679424 [ 367.092566][ T6308] active_anon 49893376 [ 367.096664][ T6308] inactive_file 0 [ 367.100304][ T6308] active_file 0 [ 367.104044][ T6308] unevictable 0 [ 367.105975][ T36] audit: type=1400 audit(2000004544.966:896): avc: denied { mounton } for pid=6486 comm="syz.0.1998" path="/349/file0" dev="ramfs" ino=40757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 367.132076][ T36] audit: type=1400 audit(2000004544.966:897): avc: denied { ioctl } for pid=6486 comm="syz.0.1998" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 367.143838][ T6308] hierarchical_memory_limit 314572800 [ 367.162300][ T6308] hierarchical_memsw_limit 9223372036854771712 [ 367.168478][ T6308] total_cache 314150912 [ 367.172843][ T6308] total_rss 118784 [ 367.176578][ T6308] total_rss_huge 0 [ 367.180311][ T6308] total_shmem 314150912 [ 367.180812][ T36] audit: type=1400 audit(2000004544.996:898): avc: denied { map } for pid=6485 comm="syz.5.1997" path="pipe:[29281]" dev="pipefs" ino=29281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 367.185120][ T6308] total_mapped_file 0 [ 367.211258][ T6308] total_dirty 0 [ 367.214773][ T6308] total_writeback 0 [ 367.218588][ T6308] total_workingset_refault_anon 908 [ 367.223823][ T6308] total_workingset_refault_file 32 [ 367.228936][ T6308] total_swap 127692800 [ 367.233097][ T6308] total_swapcached 303104 [ 367.237539][ T6308] total_pgpgin 187621 [ 367.241534][ T6308] total_pgpgout 111332 [ 367.245643][ T6308] total_pgfault 89537 [ 367.249629][ T6308] total_pgmajfault 129 [ 367.254011][ T6308] total_inactive_anon 264679424 [ 367.258881][ T6308] total_active_anon 49893376 [ 367.263518][ T6308] total_inactive_file 0 [ 367.267687][ T6308] total_active_file 0 [ 367.271728][ T6308] total_unevictable 0 [ 367.275758][ T6308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.646,pid=2169,uid=0 [ 367.291653][ T6308] Memory cgroup out of memory: Killed process 2169 (syz.4.646) total-vm:90340kB, anon-rss:1208kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 367.326209][ T6467] syz.4.1990 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 367.348062][ T6467] CPU: 0 UID: 0 PID: 6467 Comm: syz.4.1990 Not tainted syzkaller #0 5d18be0d7d8d5053dc4a903978481071267b1302 [ 367.348093][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 367.348116][ T6467] Call Trace: [ 367.348123][ T6467] [ 367.348132][ T6467] __dump_stack+0x21/0x30 [ 367.348162][ T6467] dump_stack_lvl+0x140/0x1c0 [ 367.348186][ T6467] ? __cfi_dump_stack_lvl+0x10/0x10 [ 367.348211][ T6467] ? ___ratelimit+0x40e/0x5b0 [ 367.348239][ T6467] dump_stack+0x19/0x20 [ 367.348261][ T6467] dump_header+0xd6/0x490 [ 367.348282][ T6467] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 367.348302][ T6467] oom_kill_process+0x35d/0x640 [ 367.348340][ T6467] out_of_memory+0x624/0xa30 [ 367.348368][ T6467] ? __cfi_out_of_memory+0x10/0x10 [ 367.348395][ T6467] ? mutex_lock_killable+0x115/0x1d0 [ 367.348414][ T6467] ? __cfi_mutex_lock_killable+0x10/0x10 [ 367.348434][ T6467] mem_cgroup_out_of_memory+0x2c8/0x390 [ 367.348460][ T6467] ? css_next_descendant_pre+0x202/0x230 [ 367.348481][ T6467] ? drain_obj_stock+0xed0/0xed0 [ 367.348506][ T6467] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 367.348529][ T6467] try_charge_memcg+0x91c/0xe10 [ 367.348549][ T6467] ? gfp_to_alloc_flags_cma+0x40/0x1c0 [ 367.348575][ T6467] ? __cfi_try_charge_memcg+0x10/0x10 [ 367.348595][ T6467] ? __alloc_pages_noprof+0x35f/0x7e0 [ 367.348616][ T6467] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 367.348639][ T6467] __mem_cgroup_charge+0xfc/0x420 [ 367.348661][ T6467] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 367.348685][ T6467] folio_prealloc+0x67/0x220 [ 367.348714][ T6467] do_pte_missing+0x1e80/0x44f0 [ 367.348747][ T6467] ? pte_marker_clear+0x1b0/0x1b0 [ 367.348776][ T6467] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 367.348807][ T6467] ? __pte_offset_map+0x1b0/0x230 [ 367.348830][ T6467] ? pte_offset_map_rw_nolock+0xba/0x110 [ 367.348854][ T6467] handle_mm_fault+0x11b8/0x1bf0 [ 367.348884][ T6467] ? __cfi_handle_mm_fault+0x10/0x10 [ 367.348910][ T6467] ? lock_vma_under_rcu+0x4d1/0x590 [ 367.348940][ T6467] ? __se_sys_futex+0x13c/0x320 [ 367.348964][ T6467] do_user_addr_fault+0x963/0x11e0 [ 367.348993][ T6467] ? arch_exit_to_user_mode_prepare+0x22/0xa0 [ 367.349021][ T6467] exc_page_fault+0x58/0xc0 [ 367.349041][ T6467] asm_exc_page_fault+0x2b/0x30 [ 367.349064][ T6467] RIP: 0033:0x7f97b1c4f776 [ 367.349080][ T6467] Code: 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b <41> 88 3c 10 31 c0 49 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 [ 367.349096][ T6467] RSP: 002b:00007ffe591aed28 EFLAGS: 00010246 [ 367.349113][ T6467] RAX: 000000008470f79d RBX: ffffffff8470f79d RCX: 0000000000000000 [ 367.349126][ T6467] RDX: 000000000000179d RSI: ffffffff8470f79d RDI: 0000000000000000 [ 367.349139][ T6467] RBP: 0000000000000000 R08: 00007f97b2000000 R09: 00007f97b2002000 [ 367.349151][ T6467] R10: 000000008470f7a1 R11: 0000000000000000 R12: 00007f97b2016038 [ 367.349163][ T6467] R13: 0000000000000003 R14: ffffffff8470f79d R15: 00007f97b2b45720 [ 367.349177][ T6467] ? __sock_create+0x2d/0x810 [ 367.349193][ T6467] ? __sock_create+0x2d/0x810 [ 367.349208][ T6467] ? __sock_create+0x2d/0x810 [ 367.349224][ T6467] [ 367.349357][ T6467] memory: usage 307200kB, limit 307200kB, failcnt 15135 [ 367.383232][ T36] audit: type=1400 audit(2000004545.286:899): avc: denied { mounton } for pid=6501 comm="syz.5.2003" path="/134/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 367.387091][ T6467] memory+swap: usage 431792kB, limit 9007199254740988kB, failcnt 0 [ 367.392147][ T6503] bpf: Bad value for 'gid' [ 367.397129][ T6467] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 367.425666][ T36] audit: type=1400 audit(2000004545.326:900): avc: denied { unmount } for pid=4228 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 367.431707][ T6467] Memory cgroup stats for /syz4: [ 367.723481][ T6467] cache 314150912 [ 367.732182][ T6467] rss 118784 [ 367.735407][ T6467] rss_huge 0 [ 367.738610][ T6467] shmem 314150912 [ 367.742460][ T6467] mapped_file 0 [ 367.745948][ T6467] dirty 0 [ 367.749997][ T6467] writeback 0 [ 367.755082][ T6467] workingset_refault_anon 908 [ 367.759782][ T6467] workingset_refault_file 32 [ 367.766810][ T6467] swap 127692800 [ 367.770517][ T6467] swapcached 303104 [ 367.774372][ T6467] pgpgin 187621 [ 367.777840][ T6467] pgpgout 111332 [ 367.781374][ T6467] pgfault 89537 [ 367.784877][ T338] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 367.792501][ T6467] pgmajfault 129 [ 367.796139][ T6467] inactive_anon 264679424 [ 367.800499][ T6467] active_anon 49893376 [ 367.804608][ T6467] inactive_file 0 [ 367.808252][ T6467] active_file 0 [ 367.811735][ T6467] unevictable 0 [ 367.815196][ T6467] hierarchical_memory_limit 314572800 [ 367.820553][ T6467] hierarchical_memsw_limit 9223372036854771712 [ 367.826769][ T6467] total_cache 314150912 [ 367.831025][ T6467] total_rss 118784 [ 367.834781][ T6467] total_rss_huge 0 [ 367.838511][ T6467] total_shmem 314150912 [ 367.842697][ T6467] total_mapped_file 0 [ 367.846685][ T6467] total_dirty 0 [ 367.850144][ T6467] total_writeback 0 [ 367.854007][ T6467] total_workingset_refault_anon 908 [ 367.859215][ T6467] total_workingset_refault_file 32 [ 367.864519][ T6467] total_swap 127692800 [ 367.868669][ T6467] total_swapcached 303104 [ 367.873032][ T6467] total_pgpgin 187621 [ 367.877026][ T6467] total_pgpgout 111332 [ 367.881085][ T6467] total_pgfault 89537 [ 367.885096][ T6467] total_pgmajfault 129 [ 367.889169][ T6467] total_inactive_anon 264679424 [ 367.894038][ T6467] total_active_anon 49893376 [ 367.898642][ T6467] total_inactive_file 0 [ 367.903113][ T6467] total_active_file 0 [ 367.907105][ T6467] total_unevictable 0 [ 367.911080][ T6467] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1978,pid=6302,uid=0 [ 367.926338][ T6467] Memory cgroup out of memory: Killed process 6302 (syz.4.1978) total-vm:49264kB, anon-rss:0kB, file-rss:27392kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 [ 367.942852][ T338] usb 2-1: Using ep0 maxpacket: 16 [ 367.959914][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.970820][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.981518][ T338] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 367.990707][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.999568][ T338] usb 2-1: config 0 descriptor?? [ 368.050053][ T6314] syz.4.1978 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 368.073162][ T6314] CPU: 0 UID: 0 PID: 6314 Comm: syz.4.1978 Not tainted syzkaller #0 5d18be0d7d8d5053dc4a903978481071267b1302 [ 368.073194][ T6314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 368.073207][ T6314] Call Trace: [ 368.073213][ T6314] [ 368.073221][ T6314] __dump_stack+0x21/0x30 [ 368.073250][ T6314] dump_stack_lvl+0x140/0x1c0 [ 368.073272][ T6314] ? __cfi_dump_stack_lvl+0x10/0x10 [ 368.073299][ T6314] ? ___ratelimit+0x40e/0x5b0 [ 368.073327][ T6314] dump_stack+0x19/0x20 [ 368.073350][ T6314] dump_header+0xd6/0x490 [ 368.073373][ T6314] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 368.073394][ T6314] oom_kill_process+0x35d/0x640 [ 368.073423][ T6314] out_of_memory+0x624/0xa30 [ 368.073451][ T6314] ? __cfi_out_of_memory+0x10/0x10 [ 368.073479][ T6314] ? mutex_lock_killable+0x115/0x1d0 [ 368.073499][ T6314] ? __cfi_mutex_lock_killable+0x10/0x10 [ 368.073519][ T6314] mem_cgroup_out_of_memory+0x2c8/0x390 [ 368.073553][ T6314] ? css_next_descendant_pre+0x202/0x230 [ 368.073577][ T6314] ? drain_obj_stock+0xed0/0xed0 [ 368.073603][ T6314] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 368.073628][ T6314] try_charge_memcg+0x91c/0xe10 [ 368.073650][ T6314] ? __cfi_try_charge_memcg+0x10/0x10 [ 368.073671][ T6314] ? __alloc_pages_noprof+0x35f/0x7e0 [ 368.073694][ T6314] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 368.073717][ T6314] __mem_cgroup_charge+0xfc/0x420 [ 368.073740][ T6314] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 368.073764][ T6314] ? do_pte_missing+0x1937/0x44f0 [ 368.073797][ T6314] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 368.073829][ T6314] ? put_swap_device+0x130/0x130 [ 368.073859][ T6314] ? shmem_huge_global_enabled+0x2da/0x360 [ 368.073888][ T6314] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 368.073916][ T6314] ? __kasan_check_write+0x18/0x20 [ 368.073939][ T6314] ? _raw_spin_lock+0x92/0x120 [ 368.073964][ T6314] shmem_get_folio_gfp+0x607/0x1390 [ 368.073994][ T6314] ? shmem_get_folio+0xc0/0xc0 [ 368.074020][ T6314] ? follow_page_pte+0x90f/0xbc0 [ 368.074041][ T6314] ? inode_to_bdi+0x6d/0x100 [ 368.074063][ T6314] shmem_write_begin+0xf4/0x270 [ 368.074093][ T6314] generic_perform_write+0x32b/0x970 [ 368.074116][ T6314] ? __cfi_generic_perform_write+0x10/0x10 [ 368.074137][ T6314] ? down_write+0xee/0x2b0 [ 368.074157][ T6314] ? file_update_time+0xa3/0x210 [ 368.074177][ T6314] shmem_file_write_iter+0x105/0x130 [ 368.074198][ T6314] __kernel_write_iter+0x42f/0x8a0 [ 368.074222][ T6314] ? __cfi___kernel_write_iter+0x10/0x10 [ 368.074245][ T6314] ? get_dump_page+0x165/0x220 [ 368.074265][ T6314] ? __asan_memset+0x39/0x50 [ 368.074287][ T6314] ? iov_iter_bvec+0xc0/0x180 [ 368.074313][ T6314] dump_user_range+0xb8b/0xe60 [ 368.074339][ T6314] ? __cfi_dump_user_range+0x10/0x10 [ 368.074364][ T6314] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 368.074393][ T6314] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 368.074420][ T6314] ? elf_core_dump+0x24c0/0x3960 [ 368.074450][ T6314] elf_core_dump+0x2e7e/0x3960 [ 368.074482][ T6314] ? __cfi_elf_core_dump+0x10/0x10 [ 368.074517][ T6314] ? dump_interrupted+0xf0/0xf0 [ 368.074546][ T6314] ? filp_open+0x199/0x1f0 [ 368.074564][ T6314] ? 0xffffffffff600000 [ 368.074581][ T6314] do_coredump+0x208a/0x2fe0 [ 368.074607][ T6314] ? __cfi_do_coredump+0x10/0x10 [ 368.074630][ T6314] ? asm_exc_page_fault+0x2b/0x30 [ 368.074660][ T6314] ? __kasan_slab_free+0x6a/0x80 [ 368.074688][ T6314] ? kmem_cache_free+0x1bd/0x4f0 [ 368.074713][ T6314] ? get_signal+0xa74/0x14e0 [ 368.074737][ T6314] get_signal+0x11f8/0x14e0 [ 368.074763][ T6314] arch_do_signal_or_restart+0xbc/0x760 [ 368.074792][ T6314] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 368.074823][ T6314] ? __kasan_check_write+0x18/0x20 [ 368.074847][ T6314] irqentry_exit_to_user_mode+0x4d/0xb0 [ 368.074869][ T6314] irqentry_exit+0x16/0x60 [ 368.074889][ T6314] exc_page_fault+0x65/0xc0 [ 368.074908][ T6314] asm_exc_page_fault+0x2b/0x30 [ 368.074931][ T6314] RIP: 0033:0x7f97b1d9aeb9 [ 368.074951][ T6314] Code: Unable to access opcode bytes at 0x7f97b1d9ae8f. [ 368.074962][ T6314] RSP: 002b:000000000000ffd0 EFLAGS: 00010206 [ 368.074981][ T6314] RAX: 0000000000000000 RBX: 00007f97b2016090 RCX: 00007f97b1d9aeb9 [ 368.074997][ T6314] RDX: 0000000000000000 RSI: 000000000000ffd0 RDI: 0000000000002000 [ 368.075010][ T6314] RBP: 00007f97b1e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 368.075024][ T6314] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 368.075038][ T6314] R13: 00007f97b2016128 R14: 00007f97b2016090 R15: 00007ffe591aece8 [ 368.075056][ T6314] [ 368.075078][ T6314] memory: usage 307196kB, limit 307200kB, failcnt 16045 [ 368.517542][ T6314] memory+swap: usage 415968kB, limit 9007199254740988kB, failcnt 0 [ 368.525515][ T6314] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 368.526044][ T36] audit: type=1400 audit(2000004546.426:901): avc: denied { map } for pid=6511 comm="syz.4.2006" path="socket:[40827]" dev="sockfs" ino=40827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 368.537516][ T6314] Memory cgroup stats for [ 368.557059][ T338] playstation 0003:054C:05C4.0052: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 368.583807][ T6314] /syz4: [ 368.583935][ T6314] cache 295813120 [ 368.605798][ T36] audit: type=1400 audit(2000004546.426:902): avc: denied { accept } for pid=6511 comm="syz.4.2006" path="socket:[40827]" dev="sockfs" ino=40827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 368.619467][ T6314] rss 311296 [ 368.634264][ T6516] netlink: 'syz.5.2007': attribute type 12 has an invalid length. [ 368.661088][ T6314] rss_huge 0 [ 368.673807][ T6314] shmem 295813120 [ 368.685740][ T6314] mapped_file 16384 [ 368.695829][ T6314] dirty 0 [ 368.702154][ T6314] writeback 372736 [ 368.710268][ T6314] workingset_refault_anon 908 [ 368.722481][ T6314] workingset_refault_file 32 [ 368.732556][ T6314] swap 126771200 [ 368.739391][ T6314] swapcached 430080 [ 368.747616][ T6314] pgpgin 189746 [ 368.754379][ T6314] pgpgout 117856 [ 368.758310][ T338] playstation 0003:054C:05C4.0052: Invalid byte count transferred, expected 16 got 12 [ 368.763044][ T6314] pgfault 90055 [ 368.768047][ T338] playstation 0003:054C:05C4.0052: Failed to retrieve DualShock4 pairing info: -22 [ 368.780387][ T6314] pgmajfault 129 [ 368.780923][ T338] playstation 0003:054C:05C4.0052: Failed to get MAC address from DualShock4 [ 368.785426][ T6314] inactive_anon 239968256 [ 368.793466][ T338] playstation 0003:054C:05C4.0052: Failed to create dualshock4. [ 368.806577][ T6314] active_anon 56418304 [ 368.811824][ T6314] inactive_file 0 [ 368.815842][ T338] playstation 0003:054C:05C4.0052: probe with driver playstation failed with error -22 [ 368.827475][ T6314] active_file 0 [ 368.830954][ T6314] unevictable 0 [ 368.834543][ T6314] hierarchical_memory_limit 314572800 [ 368.839974][ T6314] hierarchical_memsw_limit 9223372036854771712 [ 368.846279][ T6314] total_cache 295813120 [ 368.850493][ T6314] total_rss 311296 [ 368.854352][ T6314] total_rss_huge 0 [ 368.858081][ T6314] total_shmem 295813120 [ 368.862413][ T6314] total_mapped_file 16384 [ 368.866757][ T6314] total_dirty 0 [ 368.870221][ T6314] total_writeback 372736 [ 368.874640][ T6314] total_workingset_refault_anon 908 [ 368.879849][ T6314] total_workingset_refault_file 32 [ 368.885114][ T6314] total_swap 126771200 [ 368.889193][ T6314] total_swapcached 430080 [ 368.893633][ T6314] total_pgpgin 189746 [ 368.897696][ T6314] total_pgpgout 117856 [ 368.901891][ T6314] total_pgfault 90055 [ 368.905879][ T6314] total_pgmajfault 129 [ 368.909990][ T6314] total_inactive_anon 239968256 [ 368.914981][ T6314] total_active_anon 56418304 [ 368.919599][ T6314] total_inactive_file 0 [ 368.923897][ T6314] total_active_file 0 [ 368.927889][ T6314] total_unevictable 0 [ 368.931652][ T31] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 368.932246][ T6314] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1978,pid=6304,uid=0 [ 368.954909][ T6314] Memory cgroup out of memory: Killed process 6304 (syz.4.1978) total-vm:49264kB, anon-rss:0kB, file-rss:25728kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 369.082677][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.093688][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.105632][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 369.126003][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 369.141651][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.153620][ T31] usb 6-1: config 0 descriptor?? [ 369.161035][ T31] hub 6-1:0.0: USB hub found [ 369.173309][ T6303] syz.4.1978 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 369.238559][ T6303] CPU: 0 UID: 0 PID: 6303 Comm: syz.4.1978 Not tainted syzkaller #0 5d18be0d7d8d5053dc4a903978481071267b1302 [ 369.238600][ T6303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 369.238616][ T6303] Call Trace: [ 369.238624][ T6303] [ 369.238633][ T6303] __dump_stack+0x21/0x30 [ 369.238667][ T6303] dump_stack_lvl+0x140/0x1c0 [ 369.238696][ T6303] ? __cfi_dump_stack_lvl+0x10/0x10 [ 369.238725][ T6303] ? ___ratelimit+0x40e/0x5b0 [ 369.238759][ T6303] dump_stack+0x19/0x20 [ 369.238799][ T6303] dump_header+0xd6/0x490 [ 369.238823][ T6303] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 369.238845][ T6303] oom_kill_process+0x35d/0x640 [ 369.238886][ T6303] out_of_memory+0x624/0xa30 [ 369.238915][ T6303] ? __cfi_out_of_memory+0x10/0x10 [ 369.238942][ T6303] ? mutex_lock_killable+0x115/0x1d0 [ 369.238962][ T6303] ? __cfi_mutex_lock_killable+0x10/0x10 [ 369.238984][ T6303] mem_cgroup_out_of_memory+0x2c8/0x390 [ 369.239011][ T6303] ? css_next_descendant_pre+0x202/0x230 [ 369.239033][ T6303] ? drain_obj_stock+0xed0/0xed0 [ 369.239060][ T6303] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 369.239086][ T6303] try_charge_memcg+0x91c/0xe10 [ 369.239107][ T6303] ? __cfi_try_charge_memcg+0x10/0x10 [ 369.239127][ T6303] ? __alloc_pages_noprof+0x35f/0x7e0 [ 369.239149][ T6303] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 369.239171][ T6303] __mem_cgroup_charge+0xfc/0x420 [ 369.239194][ T6303] ? folio_add_lru+0x116/0x400 [ 369.239224][ T6303] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 369.239248][ T6303] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 369.239280][ T6303] ? put_swap_device+0x130/0x130 [ 369.239309][ T6303] ? shmem_huge_global_enabled+0x2da/0x360 [ 369.239338][ T6303] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 369.239367][ T6303] ? __kasan_check_write+0x18/0x20 [ 369.239390][ T6303] ? _raw_spin_lock+0x92/0x120 [ 369.239423][ T6303] shmem_get_folio_gfp+0x607/0x1390 [ 369.239454][ T6303] ? shmem_get_folio+0xc0/0xc0 [ 369.239479][ T6303] ? follow_page_pte+0x90f/0xbc0 [ 369.239500][ T6303] ? inode_to_bdi+0x6d/0x100 [ 369.239523][ T6303] shmem_write_begin+0xf4/0x270 [ 369.239553][ T6303] generic_perform_write+0x32b/0x970 [ 369.239576][ T6303] ? __cfi_generic_perform_write+0x10/0x10 [ 369.239600][ T6303] ? down_write+0xee/0x2b0 [ 369.239622][ T6303] ? file_update_time+0xa3/0x210 [ 369.239643][ T6303] shmem_file_write_iter+0x105/0x130 [ 369.239664][ T6303] __kernel_write_iter+0x42f/0x8a0 [ 369.239690][ T6303] ? __cfi___kernel_write_iter+0x10/0x10 [ 369.239714][ T6303] ? get_dump_page+0x165/0x220 [ 369.239733][ T6303] ? __asan_memset+0x39/0x50 [ 369.239756][ T6303] ? iov_iter_bvec+0xc0/0x180 [ 369.239781][ T6303] dump_user_range+0xb8b/0xe60 [ 369.239808][ T6303] ? __cfi_dump_user_range+0x10/0x10 [ 369.239833][ T6303] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 369.239861][ T6303] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 369.239889][ T6303] ? elf_core_dump+0x24c0/0x3960 [ 369.239919][ T6303] elf_core_dump+0x2e7e/0x3960 [ 369.239952][ T6303] ? __cfi_elf_core_dump+0x10/0x10 [ 369.239988][ T6303] ? dump_interrupted+0xf0/0xf0 [ 369.240010][ T6303] ? filp_open+0x199/0x1f0 [ 369.240029][ T6303] ? 0xffffffffff600000 [ 369.240046][ T6303] do_coredump+0x208a/0x2fe0 [ 369.240072][ T6303] ? __cfi_do_coredump+0x10/0x10 [ 369.240096][ T6303] ? asm_exc_page_fault+0x2b/0x30 [ 369.240126][ T6303] ? __kasan_slab_free+0x6a/0x80 [ 369.240154][ T6303] ? kmem_cache_free+0x1bd/0x4f0 [ 369.240178][ T6303] ? get_signal+0xa74/0x14e0 [ 369.240203][ T6303] get_signal+0x11f8/0x14e0 [ 369.240229][ T6303] arch_do_signal_or_restart+0xbc/0x760 [ 369.240258][ T6303] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 369.240289][ T6303] ? __kasan_check_write+0x18/0x20 [ 369.240313][ T6303] irqentry_exit_to_user_mode+0x4d/0xb0 [ 369.240335][ T6303] irqentry_exit+0x16/0x60 [ 369.240355][ T6303] exc_page_fault+0x65/0xc0 [ 369.240374][ T6303] asm_exc_page_fault+0x2b/0x30 [ 369.240397][ T6303] RIP: 0033:0x7f97b1d9aeb9 [ 369.240424][ T6303] Code: Unable to access opcode bytes at 0x7f97b1d9ae8f. [ 369.240435][ T6303] RSP: 002b:000000000000ffd0 EFLAGS: 00010206 [ 369.240453][ T6303] RAX: 0000000000000000 RBX: 00007f97b2016090 RCX: 00007f97b1d9aeb9 [ 369.240469][ T6303] RDX: 0000000000000000 RSI: 000000000000ffd0 RDI: 0000000000002000 [ 369.240483][ T6303] RBP: 00007f97b1e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 369.240496][ T6303] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 369.240510][ T6303] R13: 00007f97b2016128 R14: 00007f97b2016090 R15: 00007ffe591aece8 [ 369.240528][ T6303] [ 369.675007][ T31] hub 6-1:0.0: 9 ports detected [ 369.683285][ T31] hub 6-1:0.0: insufficient power available to use all downstream ports [ 369.702452][ T6303] memory: usage 307200kB, limit 307200kB, failcnt 17799 [ 369.709488][ T6303] memory+swap: usage 431540kB, limit 9007199254740988kB, failcnt 0 [ 369.717426][ T6303] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 369.724350][ T6303] Memory cgroup stats for /syz4: [ 369.724478][ T6303] cache 313696256 [ 369.733102][ T6303] rss 204800 [ 369.736315][ T6303] rss_huge 0 [ 369.739520][ T6303] shmem 313696256 [ 369.743170][ T6303] mapped_file 0 [ 369.746640][ T6303] dirty 0 [ 369.749571][ T6303] writeback 0 [ 369.752876][ T6303] workingset_refault_anon 910 [ 369.757568][ T6303] workingset_refault_file 32 [ 369.762186][ T6303] swap 127324160 [ 369.765737][ T6303] swapcached 671744 [ 369.769547][ T6303] pgpgin 210306 [ 369.773020][ T6303] pgpgout 134017 [ 369.776575][ T6303] pgfault 91355 [ 369.780022][ T6303] pgmajfault 130 [ 369.783614][ T6303] inactive_anon 252620800 [ 369.787951][ T6303] active_anon 61689856 [ 369.792066][ T6303] inactive_file 0 [ 369.795715][ T6303] active_file 0 [ 369.799181][ T6303] unevictable 0 [ 369.802677][ T6303] hierarchical_memory_limit 314572800 [ 369.808060][ T6303] hierarchical_memsw_limit 9223372036854771712 [ 369.814240][ T6303] total_cache 313696256 [ 369.818411][ T6303] total_rss 204800 [ 369.822180][ T6303] total_rss_huge 0 [ 369.825916][ T6303] total_shmem 313696256 [ 369.830081][ T6303] total_mapped_file 0 [ 369.834157][ T6303] total_dirty 0 [ 369.837635][ T6303] total_writeback 0 [ 369.841466][ T6303] total_workingset_refault_anon 910 [ 369.846718][ T6303] total_workingset_refault_file 32 [ 369.851873][ T6303] total_swap 127324160 [ 369.855947][ T6303] total_swapcached 671744 [ 369.860294][ T6303] total_pgpgin 210306 [ 369.864309][ T6303] total_pgpgout 134017 [ 369.868384][ T6303] total_pgfault 91355 [ 369.872393][ T6303] total_pgmajfault 130 [ 369.876472][ T6303] total_inactive_anon 252620800 [ 369.877121][ T31] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 369.881319][ T6303] total_active_anon 61689856 [ 369.881335][ T6303] total_inactive_file 0 [ 369.881343][ T6303] total_active_file 0 [ 369.890061][ T31] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 369.892300][ T6303] total_unevictable 0 [ 369.911866][ T6303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1978,pid=6303,uid=0 [ 369.926791][ T6303] Memory cgroup out of memory: Killed process 6303 (syz.4.1978) total-vm:49264kB, anon-rss:0kB, file-rss:25984kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 370.084523][ T36] audit: type=1400 audit(2000004547.976:903): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 370.189592][ T6522] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 370.300122][ T31] usb 2-1: USB disconnect, device number 15 [ 370.321603][ T6522] CPU: 0 UID: 0 PID: 6522 Comm: syz-executor Not tainted syzkaller #0 5d18be0d7d8d5053dc4a903978481071267b1302 [ 370.321635][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 370.321648][ T6522] Call Trace: [ 370.321655][ T6522] [ 370.321663][ T6522] __dump_stack+0x21/0x30 [ 370.321694][ T6522] dump_stack_lvl+0x140/0x1c0 [ 370.321717][ T6522] ? __cfi_dump_stack_lvl+0x10/0x10 [ 370.321746][ T6522] ? ___ratelimit+0x40e/0x5b0 [ 370.321779][ T6522] dump_stack+0x19/0x20 [ 370.321802][ T6522] dump_header+0xd6/0x490 [ 370.321824][ T6522] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 370.321861][ T6522] oom_kill_process+0x35d/0x640 [ 370.321914][ T6522] out_of_memory+0x624/0xa30 [ 370.321945][ T6522] ? __cfi_out_of_memory+0x10/0x10 [ 370.321976][ T6522] ? mutex_lock_killable+0x97/0x1d0 [ 370.322005][ T6522] ? __cfi_mutex_lock_killable+0x10/0x10 [ 370.322029][ T6522] mem_cgroup_out_of_memory+0x2c8/0x390 [ 370.322058][ T6522] ? css_next_descendant_pre+0x202/0x230 [ 370.322082][ T6522] ? drain_obj_stock+0xed0/0xed0 [ 370.322112][ T6522] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 370.322140][ T6522] try_charge_memcg+0x91c/0xe10 [ 370.322169][ T6522] ? __cfi_try_charge_memcg+0x10/0x10 [ 370.322192][ T6522] ? __alloc_pages_noprof+0x35f/0x7e0 [ 370.322216][ T6522] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 370.322241][ T6522] __mem_cgroup_charge+0xfc/0x420 [ 370.322267][ T6522] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 370.322295][ T6522] folio_prealloc+0x67/0x220 [ 370.322328][ T6522] do_wp_page+0x1895/0x2e90 [ 370.322361][ T6522] ? folio_put+0x90/0x90 [ 370.322390][ T6522] ? __cfi__raw_spin_lock+0x10/0x10 [ 370.322417][ T6522] ? __pte_offset_map+0x1b0/0x230 [ 370.322443][ T6522] ? pte_offset_map_rw_nolock+0xba/0x110 [ 370.322470][ T6522] handle_mm_fault+0x103e/0x1bf0 [ 370.322504][ T6522] ? __cfi_handle_mm_fault+0x10/0x10 [ 370.322536][ T6522] ? find_vma+0xd3/0x120 [ 370.322565][ T6522] ? lock_mm_and_find_vma+0xb8/0x390 [ 370.322598][ T6522] do_user_addr_fault+0x4c9/0x11e0 [ 370.322630][ T6522] ? save_fpregs_to_fpstate+0x151/0x220 [ 370.322654][ T6522] exc_page_fault+0x58/0xc0 [ 370.322675][ T6522] asm_exc_page_fault+0x2b/0x30 [ 370.322700][ T6522] RIP: 0010:__put_user_4+0x11/0x30 [ 370.322730][ T6522] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d3 98 02 00 90 90 90 90 90 90 90 90 90 90 [ 370.322750][ T6522] RSP: 0018:ffffc900011bfef0 EFLAGS: 00050202 [ 370.322772][ T6522] RAX: 0000000000000524 RBX: 0000000000000000 RCX: 0000555582d097d0 [ 370.322789][ T6522] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88810d77cc00 [ 370.322806][ T6522] RBP: ffffc900011bff18 R08: ffff88810d77cc07 R09: 1ffff11021aef980 [ 370.322824][ T6522] R10: dffffc0000000000 R11: ffffed1021aef981 R12: 1ffff11021aefa62 [ 370.322843][ T6522] R13: 0000000000000000 R14: ffff88810d77cc00 R15: dffffc0000000000 [ 370.322863][ T6522] ? schedule_tail+0x7b/0xb0 [ 370.322888][ T6522] ret_from_fork+0x28/0xa0 [ 370.322917][ T6522] ret_from_fork_asm+0x1a/0x30 [ 370.322966][ T6522] RIP: 0033:0x7f97b1dc3952 [ 370.322988][ T6522] Code: Unable to access opcode bytes at 0x7f97b1dc3928. [ 370.323008][ T6522] RSP: 002b:00007ffe591aef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 370.323030][ T6522] RAX: 0000000000000000 RBX: 00007ffe591aef00 RCX: 00007f97b1dc3952 [ 370.323045][ T6522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 370.323060][ T6522] RBP: 00007ffe591af08c R08: 0000000000000000 R09: 0000000000000001 [ 370.323074][ T6522] R10: 0000555582d097d0 R11: 0000000000000246 R12: 0000000000000000 [ 370.323101][ T6522] R13: 00000000000927c0 R14: 0000000000059fba R15: 00007ffe591af0e0 [ 370.323118][ T6522] [ 370.501630][ T6522] memory: usage 306220kB, limit 307200kB, failcnt 21643 [ 370.761721][ T6522] memory+swap: usage 432188kB, limit 9007199254740988kB, failcnt 0 [ 370.769737][ T6522] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 370.776819][ T6522] Memory cgroup stats for /syz4: [ 370.776958][ T6522] cache 314331136 [ 370.785815][ T6522] rss 204800 [ 370.789036][ T6522] rss_huge 0 [ 370.795941][ T6522] shmem 314331136 [ 370.799605][ T6522] mapped_file 0 [ 370.811575][ T6522] dirty 0 [ 370.814535][ T6522] writeback 0 [ 370.821619][ T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 370.842023][ T6522] workingset_refault_anon 910 [ 370.846731][ T6522] workingset_refault_file 32 [ 370.858314][ T6522] swap 127987712 [ 370.862318][ T6522] swapcached 8192 [ 370.866060][ T6522] pgpgin 215958 [ 370.869531][ T6522] pgpgout 139669 [ 370.873363][ T6522] pgfault 91706 [ 370.876835][ T6522] pgmajfault 130 [ 370.880416][ T6522] inactive_anon 162230272 [ 370.885022][ T6522] active_anon 150769664 [ 370.889201][ T6522] inactive_file 0 [ 370.893175][ T6522] active_file 0 [ 370.896708][ T6522] unevictable 0 [ 370.900171][ T6522] hierarchical_memory_limit 314572800 [ 370.905758][ T6522] hierarchical_memsw_limit 9223372036854771712 [ 370.914511][ T6522] total_cache 314331136 [ 370.918698][ T6522] total_rss 204800 [ 370.922662][ T6522] total_rss_huge 0 [ 370.926398][ T6522] total_shmem 314331136 [ 370.930564][ T6522] total_mapped_file 0 [ 370.934808][ T6522] total_dirty 0 [ 370.938281][ T6522] total_writeback 0 [ 370.942264][ T6522] total_workingset_refault_anon 910 [ 370.947527][ T6522] total_workingset_refault_file 32 [ 370.953000][ T6522] total_swap 127987712 [ 370.957102][ T6522] total_swapcached 8192 [ 370.961330][ T6522] total_pgpgin 215958 [ 370.965539][ T6522] total_pgpgout 139669 [ 370.969612][ T6522] total_pgfault 91706 [ 370.973641][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 370.979070][ T6522] total_pgmajfault 130 [ 370.983491][ T6522] total_inactive_anon 162230272 [ 370.988409][ T6522] total_active_anon 150769664 [ 370.993163][ T31] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 371.001337][ T31] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 371.011861][ T31] usb 2-1: config 0 has no interface number 0 [ 371.012088][ T6522] total_inactive_file 0 [ 371.019897][ T31] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 371.023136][ T6522] total_active_file 0 [ 371.031613][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.035599][ T6522] total_unevictable 0 [ 371.043460][ T31] usb 2-1: Product: syz [ 371.047539][ T6522] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0 [ 371.051388][ T31] usb 2-1: Manufacturer: syz [ 371.051394][ T6522] ,oom_memcg= [ 371.051409][ T31] usb 2-1: SerialNumber: syz [ 371.061302][ T6522] /syz4,task_memcg=/syz4,task=syz.4.1978,pid=6319,uid=0 [ 371.077811][ T31] usb 2-1: config 0 descriptor?? [ 371.080578][ T6522] Memory cgroup out of memory: Killed process 6319 (syz.4.1978) total-vm:49264kB, anon-rss:0kB, file-rss:25600kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 371.238408][ T6318] syz.4.1978 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 371.275542][ T6318] CPU: 1 UID: 0 PID: 6318 Comm: syz.4.1978 Not tainted syzkaller #0 5d18be0d7d8d5053dc4a903978481071267b1302 [ 371.275576][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 371.275589][ T6318] Call Trace: [ 371.275596][ T6318] [ 371.275605][ T6318] __dump_stack+0x21/0x30 [ 371.275634][ T6318] dump_stack_lvl+0x140/0x1c0 [ 371.275659][ T6318] ? __cfi_dump_stack_lvl+0x10/0x10 [ 371.275683][ T6318] ? ___ratelimit+0x40e/0x5b0 [ 371.275712][ T6318] dump_stack+0x19/0x20 [ 371.275735][ T6318] dump_header+0xd6/0x490 [ 371.275756][ T6318] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 371.275776][ T6318] oom_kill_process+0x35d/0x640 [ 371.275806][ T6318] out_of_memory+0x624/0xa30 [ 371.275833][ T6318] ? __cfi_out_of_memory+0x10/0x10 [ 371.275860][ T6318] ? mutex_lock_killable+0x97/0x1d0 [ 371.275878][ T6318] ? __cfi_mutex_lock_killable+0x10/0x10 [ 371.275906][ T6318] mem_cgroup_out_of_memory+0x2c8/0x390 [ 371.275932][ T6318] ? css_next_descendant_pre+0x202/0x230 [ 371.275954][ T6318] ? drain_obj_stock+0xed0/0xed0 [ 371.275979][ T6318] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 371.276004][ T6318] try_charge_memcg+0x91c/0xe10 [ 371.276025][ T6318] ? __cfi_try_charge_memcg+0x10/0x10 [ 371.276045][ T6318] ? __alloc_pages_noprof+0x35f/0x7e0 [ 371.276066][ T6318] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 371.276088][ T6318] __mem_cgroup_charge+0xfc/0x420 [ 371.276111][ T6318] ? folio_add_lru+0x116/0x400 [ 371.276157][ T6318] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 371.276184][ T6318] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 371.276220][ T6318] ? put_swap_device+0x130/0x130 [ 371.276251][ T6318] ? shmem_huge_global_enabled+0x2da/0x360 [ 371.276281][ T6318] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 371.276321][ T6318] ? __kasan_check_write+0x18/0x20 [ 371.276344][ T6318] ? _raw_spin_lock+0x92/0x120 [ 371.276368][ T6318] shmem_get_folio_gfp+0x607/0x1390 [ 371.276398][ T6318] ? shmem_get_folio+0xc0/0xc0 [ 371.276424][ T6318] ? __kasan_check_write+0x18/0x20 [ 371.276448][ T6318] ? inode_to_bdi+0x6d/0x100 [ 371.276470][ T6318] shmem_write_begin+0xf4/0x270 [ 371.276500][ T6318] generic_perform_write+0x32b/0x970 [ 371.276521][ T6318] ? inode_update_timestamps+0x4f0/0x700 [ 371.276543][ T6318] ? __cfi_generic_perform_write+0x10/0x10 [ 371.276563][ T6318] ? down_write+0xee/0x2b0 [ 371.276582][ T6318] ? mnt_get_write_access_file+0x1af/0x3b0 [ 371.276606][ T6318] ? mnt_put_write_access_file+0xc2/0x100 [ 371.276627][ T6318] ? file_update_time+0x1de/0x210 [ 371.276647][ T6318] shmem_file_write_iter+0x105/0x130 [ 371.276669][ T6318] __kernel_write_iter+0x42f/0x8a0 [ 371.276694][ T6318] ? __cfi___kernel_write_iter+0x10/0x10 [ 371.276719][ T6318] ? get_dump_page+0x165/0x220 [ 371.276739][ T6318] ? __asan_memset+0x39/0x50 [ 371.276762][ T6318] ? iov_iter_bvec+0xc0/0x180 [ 371.276786][ T6318] dump_user_range+0xb8b/0xe60 [ 371.276812][ T6318] ? __cfi_dump_user_range+0x10/0x10 [ 371.276837][ T6318] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 371.276866][ T6318] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 371.276901][ T6318] ? elf_core_dump+0x24c0/0x3960 [ 371.276931][ T6318] elf_core_dump+0x2e7e/0x3960 [ 371.276964][ T6318] ? __cfi_elf_core_dump+0x10/0x10 [ 371.276998][ T6318] ? dump_interrupted+0xf0/0xf0 [ 371.277020][ T6318] ? filp_open+0x199/0x1f0 [ 371.277039][ T6318] ? 0xffffffffff600000 [ 371.277056][ T6318] do_coredump+0x208a/0x2fe0 [ 371.277082][ T6318] ? __cfi_do_coredump+0x10/0x10 [ 371.277105][ T6318] ? asm_exc_page_fault+0x2b/0x30 [ 371.277136][ T6318] ? __kasan_slab_free+0x6a/0x80 [ 371.277164][ T6318] ? kmem_cache_free+0x1bd/0x4f0 [ 371.277189][ T6318] ? get_signal+0xa74/0x14e0 [ 371.277212][ T6318] get_signal+0x11f8/0x14e0 [ 371.277237][ T6318] arch_do_signal_or_restart+0xbc/0x760 [ 371.277265][ T6318] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 371.277295][ T6318] ? __kasan_check_write+0x18/0x20 [ 371.277320][ T6318] irqentry_exit_to_user_mode+0x4d/0xb0 [ 371.277343][ T6318] irqentry_exit+0x16/0x60 [ 371.277363][ T6318] exc_page_fault+0x65/0xc0 [ 371.277382][ T6318] asm_exc_page_fault+0x2b/0x30 [ 371.277405][ T6318] RIP: 0033:0x7f97b1d9aeb9 [ 371.277427][ T6318] Code: Unable to access opcode bytes at 0x7f97b1d9ae8f. [ 371.277438][ T6318] RSP: 002b:000000000000ffd0 EFLAGS: 00010206 [ 371.277456][ T6318] RAX: 0000000000000000 RBX: 00007f97b2016090 RCX: 00007f97b1d9aeb9 [ 371.277471][ T6318] RDX: 0000000000000000 RSI: 000000000000ffd0 RDI: 0000000000002000 [ 371.277485][ T6318] RBP: 00007f97b1e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 371.277499][ T6318] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 371.277513][ T6318] R13: 00007f97b2016128 R14: 00007f97b2016090 R15: 00007ffe591aece8 [ 371.277531][ T6318] [ 371.279114][ T6318] memory: usage 305844kB, limit 307200kB, failcnt 24175 [ 371.301394][ T2223] usb 2-1: USB disconnect, device number 16 [ 371.310398][ T6318] memory+swap: usage 430992kB, limit 9007199254740988kB, failcnt 0 [ 371.760195][ T6318] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 371.781609][ T6318] Memory cgroup stats for /syz4: [ 371.781782][ T6318] cache 314298368 [ 371.790432][ T6318] rss 208896 [ 371.801574][ T6318] rss_huge 0 [ 371.804887][ T6318] shmem 314298368 [ 371.808526][ T6318] mapped_file 0 [ 371.821570][ T6318] dirty 0 [ 371.824632][ T6318] writeback 0 [ 371.827919][ T6318] workingset_refault_anon 911 [ 371.861594][ T6318] workingset_refault_file 32 [ 371.866259][ T6318] swap 125837312 [ 371.869817][ T6318] swapcached 4096 [ 371.881571][ T6318] pgpgin 222838 [ 371.885056][ T6318] pgpgout 146565 [ 371.901602][ T6318] pgfault 92139 [ 371.905257][ T6318] pgmajfault 131 [ 371.908818][ T6318] inactive_anon 156987392 [ 371.921590][ T6318] active_anon 157450240 [ 371.925773][ T6318] inactive_file 0 [ 371.929411][ T6318] active_file 0 [ 371.932901][ T6318] unevictable 0 [ 371.936371][ T6318] hierarchical_memory_limit 314572800 [ 371.941998][ T6318] hierarchical_memsw_limit 9223372036854771712 [ 371.948164][ T6318] total_cache 314298368 [ 371.952578][ T6318] total_rss 208896 [ 371.956306][ T6318] total_rss_huge 0 [ 371.960034][ T6318] total_shmem 314298368 [ 371.964231][ T6318] total_mapped_file 0 [ 371.968226][ T6318] total_dirty 0 [ 371.971733][ T6318] total_writeback 0 [ 371.975569][ T6318] total_workingset_refault_anon 911 [ 371.980785][ T6318] total_workingset_refault_file 32 [ 371.985966][ T6318] total_swap 125837312 [ 371.990043][ T6318] total_swapcached 4096 [ 371.994251][ T6318] total_pgpgin 222838 [ 371.998244][ T6318] total_pgpgout 146565 [ 372.002625][ T2223] usb 6-1: USB disconnect, device number 66 [ 372.012460][ T6318] total_pgfault 92139 [ 372.016470][ T6318] total_pgmajfault 131 [ 372.020550][ T6318] total_inactive_anon 156987392 [ 372.025648][ T6318] total_active_anon 157450240 [ 372.030354][ T6318] total_inactive_file 0 [ 372.034546][ T6318] total_active_file 0 [ 372.038538][ T6318] total_unevictable 0 [ 372.042635][ T6318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1978,pid=6305,uid=0 [ 372.057516][ T6318] Memory cgroup out of memory: Killed process 6305 (syz.4.1978) total-vm:49264kB, anon-rss:0kB, file-rss:26880kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 [ 372.081604][ T338] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 372.211653][ T338] usb 2-1: device descriptor read/64, error -71 [ 372.291612][ T2223] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 372.451615][ T338] usb 2-1: device descriptor read/64, error -71 [ 372.459348][ T2223] usb 6-1: unable to get BOS descriptor or descriptor too short [ 372.467447][ T2223] usb 6-1: not running at top speed; connect to a high speed hub [ 372.475983][ T2223] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 372.484233][ T2223] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 372.500426][ T2223] usb 6-1: config 4 has no interface number 0 [ 372.514522][ T2223] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 372.523632][ T2223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.531669][ T2223] usb 6-1: Product: syz [ 372.535842][ T2223] usb 6-1: SerialNumber: syz [ 372.543031][ T6318] syz.4.1978 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 372.554574][ T6318] CPU: 0 UID: 0 PID: 6318 Comm: syz.4.1978 Not tainted syzkaller #0 5d18be0d7d8d5053dc4a903978481071267b1302 [ 372.554605][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.554618][ T6318] Call Trace: [ 372.554625][ T6318] [ 372.554642][ T6318] __dump_stack+0x21/0x30 [ 372.554678][ T6318] dump_stack_lvl+0x140/0x1c0 [ 372.554705][ T6318] ? __cfi_dump_stack_lvl+0x10/0x10 [ 372.554732][ T6318] ? ___ratelimit+0x40e/0x5b0 [ 372.554772][ T6318] dump_stack+0x19/0x20 [ 372.554798][ T6318] dump_header+0xd6/0x490 [ 372.554821][ T6318] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 372.554844][ T6318] oom_kill_process+0x35d/0x640 [ 372.554875][ T6318] out_of_memory+0x624/0xa30 [ 372.554905][ T6318] ? __cfi_out_of_memory+0x10/0x10 [ 372.554935][ T6318] ? mutex_lock_killable+0x97/0x1d0 [ 372.554955][ T6318] ? __cfi_mutex_lock_killable+0x10/0x10 [ 372.554978][ T6318] mem_cgroup_out_of_memory+0x2c8/0x390 [ 372.555005][ T6318] ? css_next_descendant_pre+0x202/0x230 [ 372.555028][ T6318] ? drain_obj_stock+0xed0/0xed0 [ 372.555056][ T6318] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 372.555084][ T6318] try_charge_memcg+0x91c/0xe10 [ 372.555107][ T6318] ? __cfi_try_charge_memcg+0x10/0x10 [ 372.555129][ T6318] ? __alloc_pages_noprof+0x35f/0x7e0 [ 372.555152][ T6318] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 372.555177][ T6318] __mem_cgroup_charge+0xfc/0x420 [ 372.555202][ T6318] ? folio_add_lru+0x116/0x400 [ 372.555234][ T6318] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 372.555261][ T6318] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 372.555296][ T6318] ? put_swap_device+0x130/0x130 [ 372.555327][ T6318] ? shmem_huge_global_enabled+0x2da/0x360 [ 372.555371][ T6318] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 372.555399][ T6318] ? __kasan_check_write+0x18/0x20 [ 372.555423][ T6318] ? _raw_spin_lock+0x92/0x120 [ 372.555449][ T6318] shmem_get_folio_gfp+0x607/0x1390 [ 372.555479][ T6318] ? shmem_get_folio+0xc0/0xc0 [ 372.555505][ T6318] ? follow_page_pte+0x90f/0xbc0 [ 372.555526][ T6318] ? inode_to_bdi+0x6d/0x100 [ 372.555548][ T6318] shmem_write_begin+0xf4/0x270 [ 372.555579][ T6318] generic_perform_write+0x32b/0x970 [ 372.555602][ T6318] ? __cfi_generic_perform_write+0x10/0x10 [ 372.555623][ T6318] ? down_write+0xee/0x2b0 [ 372.555643][ T6318] ? file_update_time+0xa3/0x210 [ 372.555665][ T6318] shmem_file_write_iter+0x105/0x130 [ 372.555686][ T6318] __kernel_write_iter+0x42f/0x8a0 [ 372.555711][ T6318] ? __cfi___kernel_write_iter+0x10/0x10 [ 372.555735][ T6318] ? get_dump_page+0x165/0x220 [ 372.555754][ T6318] ? __asan_memset+0x39/0x50 [ 372.555787][ T6318] ? iov_iter_bvec+0xc0/0x180 [ 372.555812][ T6318] dump_user_range+0xb8b/0xe60 [ 372.555838][ T6318] ? __cfi_dump_user_range+0x10/0x10 [ 372.555863][ T6318] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 372.555891][ T6318] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 372.555919][ T6318] ? elf_core_dump+0x24c0/0x3960 [ 372.555949][ T6318] elf_core_dump+0x2e7e/0x3960 [ 372.555982][ T6318] ? __cfi_elf_core_dump+0x10/0x10 [ 372.556018][ T6318] ? dump_interrupted+0xf0/0xf0 [ 372.556041][ T6318] ? filp_open+0x199/0x1f0 [ 372.556060][ T6318] ? 0xffffffffff600000 [ 372.556076][ T6318] do_coredump+0x208a/0x2fe0 [ 372.556103][ T6318] ? __cfi_do_coredump+0x10/0x10 [ 372.556126][ T6318] ? asm_exc_page_fault+0x2b/0x30 [ 372.556157][ T6318] ? __kasan_slab_free+0x6a/0x80 [ 372.556185][ T6318] ? kmem_cache_free+0x1bd/0x4f0 [ 372.556210][ T6318] ? get_signal+0xa74/0x14e0 [ 372.556235][ T6318] get_signal+0x11f8/0x14e0 [ 372.556261][ T6318] arch_do_signal_or_restart+0xbc/0x760 [ 372.556290][ T6318] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 372.556320][ T6318] ? __kasan_check_write+0x18/0x20 [ 372.556345][ T6318] irqentry_exit_to_user_mode+0x4d/0xb0 [ 372.556368][ T6318] irqentry_exit+0x16/0x60 [ 372.556387][ T6318] exc_page_fault+0x65/0xc0 [ 372.556406][ T6318] asm_exc_page_fault+0x2b/0x30 [ 372.556429][ T6318] RIP: 0033:0x7f97b1d9aeb9 [ 372.556449][ T6318] Code: Unable to access opcode bytes at 0x7f97b1d9ae8f. [ 372.556460][ T6318] RSP: 002b:000000000000ffd0 EFLAGS: 00010206 [ 372.556479][ T6318] RAX: 0000000000000000 RBX: 00007f97b2016090 RCX: 00007f97b1d9aeb9 [ 372.556494][ T6318] RDX: 0000000000000000 RSI: 000000000000ffd0 RDI: 0000000000002000 [ 372.556508][ T6318] RBP: 00007f97b1e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 372.556522][ T6318] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 372.556535][ T6318] R13: 00007f97b2016128 R14: 00007f97b2016090 R15: 00007ffe591aece8 [ 372.556554][ T6318] [ 372.556585][ T6318] memory: usage 307200kB, limit 307200kB, failcnt 28225 [ 372.998511][ T6318] memory+swap: usage 432124kB, limit 9007199254740988kB, failcnt 0 [ 373.006688][ T6318] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 373.013964][ T6318] Memory cgroup stats for /syz4: [ 373.014112][ T6318] cache 314236928 [ 373.022921][ T6318] rss 262144 [ 373.026176][ T6318] rss_huge 0 [ 373.029408][ T6318] shmem 314236928 [ 373.033356][ T6318] mapped_file 0 [ 373.036878][ T6318] dirty 0 [ 373.039845][ T6318] writeback 0 [ 373.043384][ T6318] workingset_refault_anon 911 [ 373.048150][ T6318] workingset_refault_file 32 [ 373.052938][ T6318] swap 127991808 [ 373.056578][ T6318] swapcached 4096 [ 373.060256][ T6318] pgpgin 248704 [ 373.063824][ T6318] pgpgout 172432 [ 373.067426][ T6318] pgfault 93901 [ 373.070894][ T6318] pgmajfault 131 [ 373.074480][ T6318] inactive_anon 93265920 [ 373.078740][ T6318] active_anon 221151232 [ 373.083144][ T6318] inactive_file 0 [ 373.086783][ T6318] active_file 0 [ 373.090239][ T6318] unevictable 0 [ 373.093734][ T6318] hierarchical_memory_limit 314572800 [ 373.099128][ T6318] hierarchical_memsw_limit 9223372036854771712 [ 373.105582][ T6318] total_cache 314236928 [ 373.109745][ T6318] total_rss 262144 [ 373.113497][ T6318] total_rss_huge 0 [ 373.117229][ T6318] total_shmem 314236928 [ 373.121391][ T6318] total_mapped_file 0 [ 373.125451][ T6318] total_dirty 0 [ 373.128967][ T6318] total_writeback 0 [ 373.132896][ T6318] total_workingset_refault_anon 911 [ 373.140733][ T6318] total_workingset_refault_file 32 [ 373.145962][ T338] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 373.153614][ T6318] total_swap 127991808 [ 373.157770][ T6318] total_swapcached 4096 [ 373.162065][ T6318] total_pgpgin 248704 [ 373.166126][ T6318] total_pgpgout 172432 [ 373.170288][ T6318] total_pgfault 93901 [ 373.174320][ T6318] total_pgmajfault 131 [ 373.178576][ T6318] total_inactive_anon 93265920 [ 373.183622][ T6318] total_active_anon 221151232 [ 373.188366][ T6318] total_inactive_file 0 [ 373.192917][ T6318] total_active_file 0 [ 373.197191][ T6318] total_unevictable 0 [ 373.201361][ T6318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1978,pid=6311,uid=0 [ 373.216246][ T6318] Memory cgroup out of memory: Killed process 6311 (syz.4.1978) total-vm:49264kB, anon-rss:0kB, file-rss:31360kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 373.301587][ T338] usb 2-1: device descriptor read/64, error -71 [ 373.313472][ T2223] usb 6-1: Found UVC 0.00 device syz (04f2:b746) [ 373.319989][ T2223] usb 6-1: No valid video chain found. [ 373.326176][ T2223] usb 6-1: USB disconnect, device number 67 [ 373.357907][ T36] audit: type=1400 audit(2000004551.246:904): avc: denied { append } for pid=6542 comm="syz.5.2016" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 373.474813][ T6313] syz.4.1978 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 373.518324][ T6313] CPU: 1 UID: 0 PID: 6313 Comm: syz.4.1978 Not tainted syzkaller #0 5d18be0d7d8d5053dc4a903978481071267b1302 [ 373.518356][ T6313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.518370][ T6313] Call Trace: [ 373.518377][ T6313] [ 373.518385][ T6313] __dump_stack+0x21/0x30 [ 373.518416][ T6313] dump_stack_lvl+0x140/0x1c0 [ 373.518441][ T6313] ? __cfi_dump_stack_lvl+0x10/0x10 [ 373.518466][ T6313] ? ___ratelimit+0x40e/0x5b0 [ 373.518514][ T6313] dump_stack+0x19/0x20 [ 373.518539][ T6313] dump_header+0xd6/0x490 [ 373.518562][ T6313] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 373.518584][ T6313] oom_kill_process+0x35d/0x640 [ 373.518625][ T6313] out_of_memory+0x624/0xa30 [ 373.518653][ T6313] ? __cfi_out_of_memory+0x10/0x10 [ 373.518688][ T6313] ? mutex_lock_killable+0x97/0x1d0 [ 373.518708][ T6313] ? __cfi_mutex_lock_killable+0x10/0x10 [ 373.518729][ T6313] mem_cgroup_out_of_memory+0x2c8/0x390 [ 373.518755][ T6313] ? css_next_descendant_pre+0x202/0x230 [ 373.518777][ T6313] ? drain_obj_stock+0xed0/0xed0 [ 373.518804][ T6313] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 373.518829][ T6313] try_charge_memcg+0x91c/0xe10 [ 373.518851][ T6313] ? __cfi_try_charge_memcg+0x10/0x10 [ 373.518872][ T6313] ? __alloc_pages_noprof+0x35f/0x7e0 [ 373.518894][ T6313] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 373.518917][ T6313] __mem_cgroup_charge+0xfc/0x420 [ 373.518940][ T6313] ? folio_add_lru+0x116/0x400 [ 373.518970][ T6313] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 373.518996][ T6313] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 373.519029][ T6313] ? put_swap_device+0x130/0x130 [ 373.519059][ T6313] ? shmem_huge_global_enabled+0x2da/0x360 [ 373.519087][ T6313] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 373.519116][ T6313] ? __kasan_check_write+0x18/0x20 [ 373.519140][ T6313] ? _raw_spin_lock+0x92/0x120 [ 373.519165][ T6313] shmem_get_folio_gfp+0x607/0x1390 [ 373.519195][ T6313] ? shmem_get_folio+0xc0/0xc0 [ 373.519221][ T6313] ? follow_page_pte+0x90f/0xbc0 [ 373.519242][ T6313] ? inode_to_bdi+0x6d/0x100 [ 373.519263][ T6313] shmem_write_begin+0xf4/0x270 [ 373.519294][ T6313] generic_perform_write+0x32b/0x970 [ 373.519317][ T6313] ? __cfi_generic_perform_write+0x10/0x10 [ 373.519338][ T6313] ? down_write+0xee/0x2b0 [ 373.519359][ T6313] ? file_update_time+0xa3/0x210 [ 373.519380][ T6313] shmem_file_write_iter+0x105/0x130 [ 373.519402][ T6313] __kernel_write_iter+0x42f/0x8a0 [ 373.519428][ T6313] ? __cfi___kernel_write_iter+0x10/0x10 [ 373.519452][ T6313] ? get_dump_page+0x165/0x220 [ 373.519471][ T6313] ? __asan_memset+0x39/0x50 [ 373.519513][ T6313] ? iov_iter_bvec+0xc0/0x180 [ 373.519540][ T6313] dump_user_range+0xb8b/0xe60 [ 373.519568][ T6313] ? __cfi_dump_user_range+0x10/0x10 [ 373.519595][ T6313] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 373.519626][ T6313] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 373.519656][ T6313] ? elf_core_dump+0x24c0/0x3960 [ 373.519694][ T6313] elf_core_dump+0x2e7e/0x3960 [ 373.519729][ T6313] ? __cfi_elf_core_dump+0x10/0x10 [ 373.519767][ T6313] ? dump_interrupted+0xf0/0xf0 [ 373.519793][ T6313] ? filp_open+0x199/0x1f0 [ 373.519813][ T6313] ? 0xffffffffff600000 [ 373.519843][ T6313] do_coredump+0x208a/0x2fe0 [ 373.519869][ T6313] ? __cfi_do_coredump+0x10/0x10 [ 373.519892][ T6313] ? asm_exc_page_fault+0x2b/0x30 [ 373.519923][ T6313] ? __kasan_slab_free+0x6a/0x80 [ 373.519952][ T6313] ? kmem_cache_free+0x1bd/0x4f0 [ 373.519977][ T6313] ? get_signal+0xa74/0x14e0 [ 373.520002][ T6313] get_signal+0x11f8/0x14e0 [ 373.520028][ T6313] arch_do_signal_or_restart+0xbc/0x760 [ 373.520057][ T6313] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 373.520088][ T6313] ? __kasan_check_write+0x18/0x20 [ 373.520113][ T6313] irqentry_exit_to_user_mode+0x4d/0xb0 [ 373.520135][ T6313] irqentry_exit+0x16/0x60 [ 373.520154][ T6313] exc_page_fault+0x65/0xc0 [ 373.520174][ T6313] asm_exc_page_fault+0x2b/0x30 [ 373.520196][ T6313] RIP: 0033:0x7f97b1d9aeb9 [ 373.520218][ T6313] Code: Unable to access opcode bytes at 0x7f97b1d9ae8f. [ 373.520229][ T6313] RSP: 002b:000000000000ffd0 EFLAGS: 00010206 [ 373.520247][ T6313] RAX: 0000000000000000 RBX: 00007f97b2016090 RCX: 00007f97b1d9aeb9 [ 373.520262][ T6313] RDX: 0000000000000000 RSI: 000000000000ffd0 RDI: 0000000000002000 [ 373.520276][ T6313] RBP: 00007f97b1e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 373.520289][ T6313] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 373.520302][ T6313] R13: 00007f97b2016128 R14: 00007f97b2016090 R15: 00007ffe591aece8 [ 373.520320][ T6313] [ 373.520329][ T6313] memory: usage 307200kB, limit 307200kB, failcnt 30092 [ 373.541708][ T338] usb 2-1: device descriptor read/64, error -71 [ 373.601626][ T6313] memory+swap: usage 432156kB, limit 9007199254740988kB, failcnt 0 [ 373.782076][ T338] usb usb2-port1: attempt power cycle [ 373.789082][ T6313] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 373.990040][ T6313] Memory cgroup stats for /syz4: [ 373.991950][ T6313] cache 311087104 [ 374.000544][ T6313] rss 176128 [ 374.031583][ T6313] rss_huge 0 [ 374.034883][ T6313] shmem 311087104 [ 374.038537][ T6313] mapped_file 0 [ 374.060047][ T6313] dirty 0 [ 374.075029][ T6313] writeback 0 [ 374.078343][ T6313] workingset_refault_anon 911 [ 374.098813][ T6313] workingset_refault_file 32 [ 374.118946][ T6313] swap 124633088 [ 374.130352][ T6313] swapcached 4096 [ 374.140481][ T6313] pgpgin 252235 [ 374.144095][ T338] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 374.150626][ T6313] pgpgout 176722 [ 374.157485][ T6313] pgfault 94134 [ 374.163587][ T6313] pgmajfault 131 [ 374.167163][ T6313] inactive_anon 235216896 [ 374.172599][ T338] usb 2-1: device descriptor read/8, error -71 [ 374.181698][ T6313] active_anon 76066816 [ 374.185779][ T6313] inactive_file 0 [ 374.189418][ T6313] active_file 0 [ 374.201582][ T6313] unevictable 0 [ 374.211735][ T6313] hierarchical_memory_limit 314572800 [ 374.221768][ T6313] hierarchical_memsw_limit 9223372036854771712 [ 374.236060][ T6313] total_cache 311087104 [ 374.240229][ T6313] total_rss 176128 [ 374.244137][ T6313] total_rss_huge 0 [ 374.247907][ T6313] total_shmem 311087104 [ 374.252286][ T6313] total_mapped_file 0 [ 374.256280][ T6313] total_dirty 0 [ 374.269865][ T6313] total_writeback 0 [ 374.273803][ T6313] total_workingset_refault_anon 911 [ 374.279012][ T6313] total_workingset_refault_file 32 [ 374.294369][ T6313] total_swap 124633088 [ 374.298454][ T6313] total_swapcached 4096 [ 374.302817][ T6313] total_pgpgin 252235 [ 374.303155][ T338] usb 2-1: device descriptor read/8, error -71 [ 374.306963][ T6313] total_pgpgout 176722 [ 374.317285][ T6313] total_pgfault 94134 [ 374.321276][ T6313] total_pgmajfault 131 [ 374.325523][ T6313] total_inactive_anon 235216896 [ 374.330454][ T6313] total_active_anon 76066816 [ 374.335235][ T6313] total_inactive_file 0 [ 374.339411][ T6313] total_active_file 0 [ 374.343611][ T6313] total_unevictable 0 [ 374.347612][ T6313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1978,pid=6324,uid=0 [ 374.362676][ T6313] Memory cgroup out of memory: OOM victim 6324 (syz.4.1978) is already exiting. Skip killing the task [ 374.391629][ T2223] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 374.541754][ T2223] usb 6-1: Using ep0 maxpacket: 32 [ 374.548049][ T2223] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 374.556334][ T338] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 374.564013][ T2223] usb 6-1: config 0 has no interface number 0 [ 374.571654][ T2223] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 374.592439][ T338] usb 2-1: device descriptor read/8, error -71 [ 374.599368][ T2223] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 374.608540][ T2223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.618649][ T2223] usb 6-1: Product: syz [ 374.628784][ T2223] usb 6-1: Manufacturer: syz [ 374.633454][ T2223] usb 6-1: SerialNumber: syz [ 374.642692][ T2223] usb 6-1: config 0 descriptor?? [ 374.647961][ T6559] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 374.722678][ T338] usb 2-1: device descriptor read/8, error -71 [ 374.831751][ T338] usb usb2-port1: unable to enumerate USB device [ 374.855993][ T6559] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 375.261611][ T525] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 375.273973][ T6559] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2021'. [ 375.412669][ T525] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 375.421627][ T525] usb 2-1: config 1 has no interface number 0 [ 375.427749][ T525] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.441600][ T525] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 375.450686][ T525] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 375.471789][ T525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 375.484160][ T2223] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 375.492221][ T525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 375.506063][ T2223] asix 6-1:0.188: probe with driver asix failed with error -71 [ 375.507327][ T525] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 375.522995][ T525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.530800][ T2223] usb 6-1: USB disconnect, device number 68 [ 375.531013][ T525] usb 2-1: Product: syz [ 375.551471][ T525] usb 2-1: Manufacturer: syz [ 375.561590][ T525] usb 2-1: SerialNumber: syz [ 375.769268][ T6566] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 376.251626][ T45] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 376.386509][ T6566] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 376.402700][ T45] usb 6-1: config 1 has an invalid descriptor of length 124, skipping remainder of the config [ 376.416063][ T525] cdc_ncm 2-1:1.1: bind() failure [ 376.422563][ T45] usb 6-1: too many endpoints for config 1 interface 0 altsetting 252: 45, using maximum allowed: 30 [ 376.433534][ T45] usb 6-1: config 1 interface 0 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 45 [ 376.451586][ T45] usb 6-1: config 1 interface 0 has no altsetting 0 [ 376.461990][ T36] audit: type=1400 audit(2000004554.356:905): avc: denied { ioctl } for pid=6587 comm="syz.0.2031" path="socket:[42220]" dev="sockfs" ino=42220 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 376.486364][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2032'. [ 376.487809][ T45] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 376.502465][ T36] audit: type=1400 audit(2000004554.406:906): avc: denied { setattr } for pid=6590 comm="syz.4.2032" name="/" dev="configfs" ino=2115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 376.505250][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 376.535272][ T45] usb 6-1: SerialNumber: syz [ 376.550827][ T2223] usb 2-1: USB disconnect, device number 21 [ 376.562311][ T6595] fuse: Bad value for 'fd' [ 376.947752][ T45] usb 6-1: USB disconnect, device number 69 [ 377.064191][ T6598] SELinux: security_context_str_to_sid () failed with errno=-22 [ 377.064191][ T36] audit: type=1400 audit(2000004554.966:907): avc: denied { remount } for pid=6597 comm="syz.1.2034" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 378.115766][ T36] audit: type=1400 audit(2000004556.016:908): avc: denied { mounton } for pid=6628 comm="syz.1.2045" path="/proc/110/task" dev="proc" ino=41718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 378.500476][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2048'. [ 378.551835][ T2223] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 378.702739][ T2223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.712777][ T2223] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 378.725773][ T2223] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 378.734976][ T2223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.751839][ T2223] usb 2-1: config 0 descriptor?? [ 378.771577][ T487] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 378.921573][ T487] usb 6-1: Using ep0 maxpacket: 8 [ 378.927916][ T487] usb 6-1: unable to get BOS descriptor or descriptor too short [ 378.936318][ T487] usb 6-1: config 6 has an invalid interface number: 194 but max is 0 [ 378.944526][ T487] usb 6-1: config 6 has no interface number 0 [ 378.950597][ T487] usb 6-1: config 6 interface 194 has no altsetting 0 [ 378.958815][ T487] usb 6-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=32.00 [ 378.967905][ T487] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.976000][ T487] usb 6-1: Product: syz [ 378.980184][ T487] usb 6-1: Manufacturer: syz [ 378.984813][ T487] usb 6-1: SerialNumber: syz [ 379.178964][ T2223] kovaplus 0003:1E7D:2D50.0053: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 379.196465][ T487] ftdi_sio 6-1:6.194: FTDI USB Serial Device converter detected [ 379.204603][ T487] usb 6-1: Detected FT233HP [ 379.209388][ T487] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 379.217522][ T487] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 379.225165][ T487] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 379.234566][ T487] usb 6-1: USB disconnect, device number 70 [ 379.241351][ T487] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 379.251002][ T487] ftdi_sio 6-1:6.194: device disconnected [ 379.577962][ T2223] kovaplus 0003:1E7D:2D50.0053: couldn't init struct kovaplus_device [ 379.586111][ T2223] kovaplus 0003:1E7D:2D50.0053: couldn't install mouse [ 379.593631][ T2223] kovaplus 0003:1E7D:2D50.0053: probe with driver kovaplus failed with error -32 [ 379.603828][ T2223] usb 2-1: USB disconnect, device number 22 [ 379.774736][ T36] audit: type=1400 audit(2000004557.676:909): avc: denied { getopt } for pid=6673 comm="syz.4.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 380.041687][ T2223] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 380.191618][ T2223] usb 6-1: Using ep0 maxpacket: 16 [ 380.199539][ T2223] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 380.208747][ T2223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.216799][ T2223] usb 6-1: Product: syz [ 380.220977][ T2223] usb 6-1: Manufacturer: syz [ 380.225742][ T2223] usb 6-1: SerialNumber: syz [ 380.232650][ T2223] r8152-cfgselector 6-1: Unknown version 0x0000 [ 380.238941][ T2223] r8152-cfgselector 6-1: config 0 descriptor?? [ 380.647882][ T487] r8152-cfgselector 6-1: USB disconnect, device number 71 [ 381.338824][ T6707] fuse: Bad value for 'fd' [ 381.401592][ T487] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 381.551582][ T487] usb 6-1: Using ep0 maxpacket: 16 [ 381.557123][ T487] usb 6-1: too many configurations: 254, using maximum allowed: 8 [ 381.566016][ T487] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 381.573608][ T487] usb 6-1: can't read configurations, error -61 [ 381.625563][ T36] audit: type=1400 audit(2000004559.526:910): avc: denied { accept } for pid=6715 comm="syz.1.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 381.701722][ T487] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 381.851592][ T487] usb 6-1: Using ep0 maxpacket: 16 [ 381.857126][ T487] usb 6-1: too many configurations: 254, using maximum allowed: 8 [ 381.876407][ T487] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 381.884073][ T487] usb 6-1: can't read configurations, error -61 [ 381.890482][ T487] usb usb6-port1: attempt power cycle [ 381.901615][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 382.052644][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.062791][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.072471][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 382.081730][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 382.089705][ T9] usb 2-1: SerialNumber: syz [ 382.231590][ T487] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 382.251935][ T487] usb 6-1: Using ep0 maxpacket: 16 [ 382.257434][ T487] usb 6-1: too many configurations: 254, using maximum allowed: 8 [ 382.266325][ T487] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 382.273933][ T487] usb 6-1: can't read configurations, error -61 [ 382.298679][ T9] usb 2-1: 0:2 : does not exist [ 382.305855][ T9] usb 2-1: USB disconnect, device number 23 [ 382.316282][ T4540] udevd[4540]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 382.401684][ T487] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 382.419927][ T6729] tipc: Enabling of bearer rejected, already enabled [ 382.422217][ T487] usb 6-1: Using ep0 maxpacket: 16 [ 382.433201][ T487] usb 6-1: too many configurations: 254, using maximum allowed: 8 [ 382.438300][ T6729] netlink: 'syz.4.2075': attribute type 6 has an invalid length. [ 382.443011][ T487] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 382.449121][ T6729] netlink: 'syz.4.2075': attribute type 4 has an invalid length. [ 382.456523][ T487] usb 6-1: can't read configurations, error -61 [ 382.464744][ T6729] netlink: 'syz.4.2075': attribute type 6 has an invalid length. [ 382.478464][ T6729] netlink: 'syz.4.2075': attribute type 13 has an invalid length. [ 382.486405][ T487] usb usb6-port1: unable to enumerate USB device [ 382.486485][ T6729] netlink: 'syz.4.2075': attribute type 15 has an invalid length. [ 382.501987][ T6729] netlink: 'syz.4.2075': attribute type 19 has an invalid length. [ 382.510062][ T6729] netlink: 3684 bytes leftover after parsing attributes in process `syz.4.2075'. [ 382.531969][ T36] audit: type=1400 audit(2000004560.436:911): avc: denied { read write } for pid=6733 comm="syz.0.2077" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 382.555330][ T36] audit: type=1400 audit(2000004560.436:912): avc: denied { open } for pid=6733 comm="syz.0.2077" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 382.953382][ T6742] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 382.962236][ T6741] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 383.271608][ T487] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 383.422805][ T487] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 383.431511][ T487] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.441661][ T487] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 383.450524][ T487] usb 2-1: config 1 has no interface number 0 [ 383.456704][ T487] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 383.467476][ T487] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 383.481882][ T487] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 383.490953][ T487] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.498975][ T487] usb 2-1: Product: syz [ 383.503388][ T487] usb 2-1: Manufacturer: syz [ 383.507990][ T487] usb 2-1: SerialNumber: syz [ 383.917368][ T6745] fuse: Bad value for 'fd' [ 383.922394][ T487] usb 2-1: USB disconnect, device number 24 [ 383.929087][ T36] audit: type=1400 audit(2000004561.826:913): avc: denied { map } for pid=6773 comm="syz.4.2086" path="socket:[42708]" dev="sockfs" ino=42708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 384.561616][ T487] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 384.691617][ T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 384.712620][ T487] usb 6-1: config 1 interface 0 has no altsetting 0 [ 384.720552][ T487] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 384.729677][ T487] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.737733][ T487] usb 6-1: Product: syz [ 384.741981][ T487] usb 6-1: Manufacturer: syz [ 384.746588][ T487] usb 6-1: SerialNumber: syz [ 384.821612][ T31] usb 2-1: device descriptor read/64, error -71 [ 385.061599][ T31] usb 2-1: device descriptor read/64, error -71 [ 385.154702][ T487] usbhid 6-1:1.0: can't add hid device: -71 [ 385.160713][ T487] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 385.169701][ T487] usb 6-1: USB disconnect, device number 76 [ 385.187070][ T6799] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2093'. [ 385.311691][ T31] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 385.441605][ T31] usb 2-1: device descriptor read/64, error -71 [ 385.679688][ T36] audit: type=1400 audit(2000004563.576:914): avc: denied { read } for pid=6808 comm="syz.5.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 385.683582][ T31] usb 2-1: device descriptor read/64, error -71 [ 385.705435][ T36] audit: type=1400 audit(2000004563.616:915): avc: denied { shutdown } for pid=6808 comm="syz.5.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 385.811691][ T31] usb usb2-port1: attempt power cycle [ 386.151696][ T31] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 386.172708][ T31] usb 2-1: device descriptor read/8, error -71 [ 386.254144][ T36] audit: type=1400 audit(2000004564.156:916): avc: denied { read } for pid=6821 comm="syz.4.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 386.299917][ T36] audit: type=1400 audit(2000004564.196:917): avc: denied { ioctl } for pid=6825 comm="syz.4.2104" path="socket:[42775]" dev="sockfs" ino=42775 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 386.303027][ T31] usb 2-1: device descriptor read/8, error -71 [ 386.561637][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 386.582700][ T31] usb 2-1: device descriptor read/8, error -71 [ 386.712583][ T31] usb 2-1: device descriptor read/8, error -71 [ 386.821769][ T31] usb usb2-port1: unable to enumerate USB device [ 386.868584][ T36] audit: type=1400 audit(2000004564.766:918): avc: denied { connect } for pid=6834 comm="syz.4.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 387.067208][ T36] audit: type=1400 audit(2000004564.966:919): avc: denied { read } for pid=6845 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 203) OK Stopping crond: stopped /usr/sbin/crond (pid 195) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 149) [ 387.421731][ T6859] netlink: 'syz.5.2113': attribute type 1 has an invalid length. Stopping network: [ 387.521748][ T36] audit: type=1400 audit(2000004565.426:920): avc: denied { read write } for pid=6871 comm="ip" path="/dev/console" dev="rootfs" ino=1080 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 387.556604][ T36] audit: type=1400 audit(2000004565.456:921): avc: denied { unlink } for pid=150 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 OK Stopping iptables: [ 387.632909][ T36] audit: type=1400 audit(2000004565.536:922): avc: denied { read write } for pid=6878 comm="iptables" path="/dev/console" dev="rootfs" ino=1080 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK [ 387.657545][ T36] audit: type=1400 audit(2000004565.546:923): avc: denied { search } for pid=6878 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system message bus: done [ 387.841627][ T487] usb 2-1: new high-speed USB device number 29 using dummy_hcd Stopping klogd: OK Stopping acpid: [ 387.973910][ T6896] wireguard: wg2: Could not create IPv4 socket [ 387.992796][ T487] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 388.003120][ T487] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 388.016804][ T487] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.025897][ T487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 388.033992][ T487] usb 2-1: SerialNumber: syz [ 388.040546][ T487] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 388.641367][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2123'. OK Stopping syslogd: stopped /sbin/syslogd (pid 93) OK [ 389.301156][ T6937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.309710][ T6937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.465079][ T6944] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 389.469732][ T6945] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.0.208 closed by remote host. [ 390.054962][ T487] usb 2-1: USB disconnect, device number 29 Sent SIGTERM to all processes [ 390.213350][ T3320] bridge_slave_1: left allmulticast mode [ 390.219047][ T3320] bridge_slave_1: left promiscuous mode [ 390.231680][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.241803][ T3320] bridge_slave_0: left allmulticast mode [ 390.247500][ T3320] bridge_slave_0: left promiscuous mode [ 390.253887][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.383231][ T3320] tipc: Disabling bearer [ 390.388615][ T3320] tipc: Left network mode [ 390.393708][ T3320] veth1_macvtap: left promiscuous mode [ 390.399222][ T3320] veth0_vlan: left promiscuous mode [ 390.623996][ T3320] bridge_slave_1: left allmulticast mode [ 390.629741][ T3320] bridge_slave_1: left promiscuous mode [ 390.635406][ T3320] ªªªªª»: port 2(bridge_slave_1) entered disabled state [ 390.642864][ T3320] bridge_slave_0: left allmulticast mode [ 390.648499][ T3320] bridge_slave_0: left promiscuous mode [ 390.654088][ T3320] ªªªªª»: port 1(bridge_slave_0) entered disabled state [ 390.661897][ T3320] bridge_slave_1: left allmulticast mode [ 390.667531][ T3320] bridge_slave_1: left promiscuous mode [ 390.673126][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.680498][ T3320] bridge_slave_0: left allmulticast mode [ 390.686169][ T3320] bridge_slave_0: left promiscuous mode [ 390.691811][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.699310][ T3320] bridge_slave_1: left allmulticast mode [ 390.705213][ T3320] bridge_slave_1: left promiscuous mode [ 390.710814][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.718994][ T3320] bridge_slave_0: left allmulticast mode [ 390.724715][ T3320] bridge_slave_0: left promiscuous mode [ 390.730289][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.054400][ T3320] tipc: Disabling bearer [ 391.059696][ T3320] tipc: Left network mode [ 391.066188][ T3320] veth0_vlan: left promiscuous mode [ 391.071743][ T3320] veth1_macvtap: left promiscuous mode [ 391.077247][ T3320] veth0_vlan: left promiscuous mode [ 391.082615][ T3320] veth1_macvtap: left promiscuous mode [ 391.088088][ T3320] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 392.137099][ T6967] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 392.144012][ T6967] ACPI: PM: Preparing to enter system sleep state S5 [ 392.150913][ T6967] kvm: exiting hardware virtualization [ 392.156465][ T6967] reboot: Power down serialport: VM disconnected.