last executing test programs: 47.905288285s ago: executing program 2 (id=3): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e284) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x2713, 0x4, 0x7000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00009e6000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x8000000}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0xe841, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000002000), 0x800, 0x0) preadv2(r6, &(0x7f0000003240)=[{&(0x7f0000003080)=""/143, 0x8f}, {&(0x7f0000003140)=""/125, 0x7d}], 0x2, 0x5, 0x401, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000040)="b91a080000bd0f01c8653e0fc7b90e0000000f7967ac66b808008ec066ba2000b02bee66baf80cb826f68189ef66bafc0cecc4c3f908954f4b00000066ba4300b000ee66b810000f00d8", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f00000000c0)={[{0x3, 0x3, 0x2a, 0x6, 0x3, 0x40, 0xe, 0x6, 0x2, 0x2, 0x2, 0x2, 0x2}, {0x200, 0x44, 0x0, 0xd0, 0x6, 0x8, 0x16, 0xff, 0x4, 0xb4, 0x9, 0x1, 0x8000000000000001}, {0xfffffffd, 0x9, 0xab, 0xf, 0x7, 0x2, 0x7, 0x1, 0x8, 0x4b, 0xa6, 0x7, 0x32}], 0xfffff800}) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000006780)=@vmx={0x100, 0x0, 0x2080, {0xf000, 0x1000, {0x2}, 0x0, 0x5}, {"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", "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"}}) 47.365807518s ago: executing program 2 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./trace\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./trace/trace\x00', 0x0, 0x0) read(r0, &(0x7f0000000800)=""/1000, 0x3e8) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:usbmon_device_t:s0\x00', 0x9, 0x2) 47.3071567s ago: executing program 2 (id=14): prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x60) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x22000, 0x1b4) r2 = inotify_init1(0x80000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f00000000c0)) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x114000140) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, 0x0) 47.28645518s ago: executing program 2 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000000)="001e00000000000000000000000000000000000001") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x45, 0x4, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x47}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000084}]}) syz_pidfd_open(0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000300)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80100204}, 0xa, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x300, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x8000) chdir(&(0x7f00000001c0)='./bus\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000000)={0x0}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='use']) 47.231960981s ago: executing program 2 (id=16): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="14003a007f02dd"], 0x34}], 0x1}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) clock_getres(0x8, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@mcast2, 0x200000, 0x1, 0x0, 0xb, 0x7, 0x4f2}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000000)) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x582, 0xa3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xfb, 0xf0, 0x5, "", {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1ff, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x8, 0xb, {0x7, 0x25, 0x1, 0xc, 0x0, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x91, 0x0, 0xfd, {0x7, 0x25, 0x1, 0xc, 0x9, 0x107}}}}}}}}]}}, 0x0) 47.086964614s ago: executing program 2 (id=17): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="600000004200017ef0"], 0x60}], 0x1}, 0x800) (async) r1 = socket$inet6(0xa, 0xa, 0x5) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x1, 0x2, 0xfd8060ca0eff2314, 0x1bd}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x0, 0x2, 0x2}, 0x20) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) (async, rerun: 32) sendto$unix(0xffffffffffffffff, &(0x7f0000000840)="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", 0x1, 0x1, 0x0, 0x30) (async, rerun: 32) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f00000005c0)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r4, 0x400, 0x0) (async) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)={"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"}) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000540)="0f217e0f20d835200000000f22d80fc76d0fc4e37915aa05000000c50f32c4c27d0bc136660fe40066baf80cb84384ba8def66bafc0cb00cee650f419b000000809a6b8916a0c800", 0x48}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x101) ioctl$KVM_NMI(r8, 0xae9a) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r10 = getpid() fcntl$setownex(r9, 0xf, &(0x7f0000000100)={0x2, r10}) 47.086481405s ago: executing program 32 (id=17): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="600000004200017ef0"], 0x60}], 0x1}, 0x800) (async) r1 = socket$inet6(0xa, 0xa, 0x5) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x1, 0x2, 0xfd8060ca0eff2314, 0x1bd}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x0, 0x2, 0x2}, 0x20) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) (async, rerun: 32) sendto$unix(0xffffffffffffffff, &(0x7f0000000840)="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", 0x1, 0x1, 0x0, 0x30) (async, rerun: 32) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f00000005c0)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r4, 0x400, 0x0) (async) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)={"1f9d08ab04ba134eba60a14dcc42de0ddf6e2df82dcb6b93823331bf476a821ece12a0a4564e7de6d4fa21341b5b9bb2de5a3a6ff5424b11d437ce33e1acc6d33080f24f0d8221899b394cb6175e9d8a2c4fd155d93bbd2538246b532838b61c7f910e1519fe9bb24515a64de8e197271e98c1273cd41219b486c00cdd710685e4dbfc8a0a718b3963762891229104116b426493e389bcbcb81be48b2aa1698f6453f324b54995b527151653ed06e2a7a6e1762ef84f5d19e6126094a3d76b7dce04ddb0ddb113e650e5d039ff64c23e8695094128af2b8f00f1e4569ca6c23605a21387fe8934dc17d0c9a9c9363b12ae1d1acb1c9fb5e98545c6ac737e3b78c99130cc27c37cda2020b95a6f1acf71da510d0eda849a13adc24fde263d6175893bebcbdf85514b83b00b354372bfaf573cc0d830d90ec83202bfcc09ac1e2c41da684033bf888cc27b8a454c81da51cb44f0a990ce63fa402394eb41db15fe937828d9db8cf273f5feb69cc59b7459a760dbaba1696c7229c5462106c72348f057d357902cad44686cf2fc4dde97190f0b19a5c6902855a19821d27121a60c160ebe2b40e929c9b35fe1cf8ff3adcc3b5cf757b181d6bb7c358bd90ef15614c9d5ce8ca692707a21e836d8c0ead4c01c63ebe087b5c32f34e20647277323fef411ee635ed89d5bd8735986216295707d4a84e0207c92b331d9b82a50834bf8b49ce2fe9f93f1d47f34201f86b9dc5cbf8c079fef8d4f31ec40649f8d0b3286eb68c9977a0bf4594d0c37864f3d10a757dafe7150b0b6616aa30b8a9b26fb342cbd8ae37a3b2a9520f969a251a7c985fe7247d73e53e3da1bd17af8eb5803faefd4eff463a41c1d5be171602e20e8f56dc07155a4461f75a626befd0647b9436c480531f91f4f416c4afa627da27901a32bc6c899db3e817c36a0d3a913b1c799015a2727e719c38fee4e38300fabd25ce7639867fd0e61ee1fb30a07460f2d5d4a7211554d341cd1228273baa51975ac8afc0b60b9ab2401e1f51449c66fb89c19eef55212ee27a65c7329d92b848f4059a4d2ed1a945576bcfe84278bf2fac4716f3929b631b9c9482da631332af1d92bcbdb4efcacd8e7dfc8c4f7f137ab609d3ce45103739f17bc796403504ab91cf5a9f246a59bf54b3262d32c1273154a6a61fdfa848cce32344dd5c0d738aa514788a7823025b0dae6a6dd208c1f92162f3e6f9abb2e04fad42bea12bacadd4bfce2c978fdb8cadfaabf989d8f957130588c50dbf592a226b25c0170c6f711802c20350b07e881442c17030e9bcebbdb0b6bf987226800fd077cec5583647c0b89aaebf58be259e624d99014460d3f4b85c03e245a70035fa4bb78a57ca0b68d38f6137ac2bf5de21744883bddee09cc80e18d370dfd1490f4de42f2e1df7fc4b5beb4867a6890bfc82ee54b80389a"}) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000540)="0f217e0f20d835200000000f22d80fc76d0fc4e37915aa05000000c50f32c4c27d0bc136660fe40066baf80cb84384ba8def66bafc0cb00cee650f419b000000809a6b8916a0c800", 0x48}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x101) ioctl$KVM_NMI(r8, 0xae9a) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r10 = getpid() fcntl$setownex(r9, 0xf, &(0x7f0000000100)={0x2, r10}) 32.86195854s ago: executing program 3 (id=113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0xfec70000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 32.661838435s ago: executing program 3 (id=115): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [{}], {0x4, 0x1}, [], {0x10, 0x1}}, 0x2c, 0x3) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) (async) capget(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x5, 0x6, 0x5, 0x2, 0x80000000, 0x2}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)=ANY=[@ANYBLOB="72617700001000000000000000004000000000000000000000000000000000000200"/72], 0x48) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000500)=""/31, 0x1f}, 0x8000}], 0x400000000000387, 0x2102, 0x0) write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x804) getxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0xed) (async) recvmmsg(r2, &(0x7f0000004980)=[{{&(0x7f0000000080)=@caif=@util, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000200)=""/86, 0x56}, {&(0x7f00000003c0)=""/208, 0xd0}, {&(0x7f0000000580)=""/178, 0xb2}, {&(0x7f0000000640)=""/253, 0xfd}, {&(0x7f0000000740)=""/62, 0x3e}, {&(0x7f0000000780)=""/122, 0x7a}, {&(0x7f0000000800)=""/191, 0xbf}, {&(0x7f00000008c0)=""/185, 0xb9}, {&(0x7f00000009c0)=""/147, 0x93}], 0x9, &(0x7f0000000b40)=""/9, 0x9}, 0x3}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c00)=""/158, 0x9e}, {&(0x7f0000000cc0)=""/112, 0x70}, {&(0x7f0000000d40)=""/166, 0xa6}, {&(0x7f0000000e00)=""/9, 0x9}], 0x4, &(0x7f0000000e80)=""/175, 0xaf}, 0x5f0}, {{&(0x7f0000000f40)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000fc0)=""/179, 0xb3}, {&(0x7f0000001080)=""/126, 0x7e}, {&(0x7f0000001100)=""/127, 0x7f}, {&(0x7f0000001180)=""/37, 0x25}, {&(0x7f00000011c0)=""/56, 0x38}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x6, &(0x7f0000002280)=""/129, 0x81}, 0x9}, {{&(0x7f0000002340)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002400)=[{&(0x7f00000023c0)=""/22, 0x16}], 0x1, &(0x7f0000002440)=""/243, 0xf3}, 0x8}, {{&(0x7f0000002540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002680)=[{&(0x7f00000025c0)=""/170, 0xaa}], 0x1, &(0x7f00000026c0)=""/224, 0xe0}, 0x200}, {{&(0x7f00000027c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002840)=""/74, 0x4a}, {&(0x7f00000028c0)=""/178, 0xb2}, {&(0x7f0000002980)=""/36, 0x24}, {&(0x7f00000029c0)=""/150, 0x96}, {&(0x7f0000002a80)=""/32, 0x20}, {&(0x7f0000002ac0)=""/172, 0xac}, {&(0x7f0000002b80)=""/79, 0x4f}, {&(0x7f0000002c00)=""/130, 0x82}, {&(0x7f0000002cc0)=""/211, 0xd3}, {&(0x7f0000002dc0)=""/186, 0xba}], 0xa, &(0x7f0000002f40)=""/97, 0x61}, 0x9}, {{&(0x7f0000002fc0)=@xdp, 0x80, &(0x7f0000003380)=[{&(0x7f0000003040)=""/250, 0xfa}, {&(0x7f0000003140)=""/169, 0xa9}, {&(0x7f0000003200)=""/15, 0xf}, {&(0x7f0000003240)}, {&(0x7f0000003280)=""/222, 0xde}], 0x5, &(0x7f0000003400)=""/39, 0x27}, 0x6}, {{&(0x7f0000003440)=@alg, 0x80, &(0x7f00000036c0)=[{&(0x7f00000034c0)=""/125, 0x7d}, {&(0x7f0000003540)=""/250, 0xfa}, {&(0x7f0000003640)=""/109, 0x6d}], 0x3}, 0x3}, {{&(0x7f0000003700)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000004840)=[{&(0x7f0000003780)=""/133, 0x85}, {&(0x7f0000003840)=""/4096, 0x1000}], 0x2, &(0x7f0000004880)=""/229, 0xe5}, 0x7}], 0x9, 0x40, &(0x7f0000004bc0)={0x0, 0x989680}) 32.353991602s ago: executing program 3 (id=116): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000200000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 32.160420307s ago: executing program 3 (id=117): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000300ea1120000005000000", 0x29}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2f00000006"], 0x2f) 32.110889839s ago: executing program 1 (id=118): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x48100, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0xfffffffe) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000080)={0x3ff, 0x5}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000000c0)={0xd9b1, 0x7, 0x1000, 0x80a, 0x6, "6f2227d1d70e60febfbd7c51ae61edec5fdbf5", 0x2, 0xfffffff0}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x101, 0x2000) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000140)=""/88) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000200)) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x2, 0xfd, 0x7, 0x3fffc00000000, 0x2, 0x3, 0x4, 0x0, 0x40, 0x286, 0x80000000, 0x0, 0x38, 0x3, 0x0, 0x4}, [{0x0, 0x7, 0x4, 0x7, 0x7fff, 0x80000000, 0xff}, {0x3, 0xff, 0xb, 0x54e1, 0x7, 0x8, 0x8001, 0x3}, {0x5, 0x3, 0x4, 0x63ec, 0xe88, 0xfff, 0x400, 0x8}], "055a4c4124143215bf5e695f34d8a48a9bec817a843b52a60b2fe46fbfd7e7d0acca03d3f6ad10a3ab10f22618cbc96e3f6b0dfc93d144a37a8381bb89c802477ac2e8a62fdc7fa553599d0455ac19013a438d7b7e4efdf9e409f37eba35cf11370968aa37bfc9cae5dd560b1facaffd45bd139e27c60020b213dab5a6bf02bfe0fa9fdd81f962fe3d0d03b74f7bc59836951415ae296ff4d54fe220a6e1aa2e4957202cf4e70c1dbdc8b4640d4381480f59da6e9619bc1dca5b64f39e97e508e2d27765be16619f38a94cd024bc74497ef341e942cf88292f83c573bb81f5b870f0b97879a70dde70f527c26553c61e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9d8) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000c40)="65dd91939bfff99aa2856998fe1215ad", 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x404000, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000cc0)=""/54) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000d00)) r4 = dup3(r0, r3, 0x80000) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000e40)={r4, &(0x7f0000000d40)='$,@\x00', 0x8042, &(0x7f0000000d80)={@align=0xcd6, {0x4, 0x3, 0x1, 0x101}}, 0x6, &(0x7f0000000dc0)={@_ha_fsid}, &(0x7f0000000e00)=0x9}) r6 = dup(r2) getsockopt$SO_NETNS_COOKIE(r4, 0x1, 0x47, &(0x7f0000000e80), &(0x7f0000000ec0)=0x8) fstat(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000)=0x0) lstat(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r5, &(0x7f0000001100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = geteuid() lstat(&(0x7f0000003140)='./file0\x00', &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000003200)='./file0\x00', 0x800, 0x400, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003400)='./file0\x00', &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f00000034c0)='./file0\x00', 0x1000, 0x200, &(0x7f0000003500)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000003780)={0x488, 0xfffffffffffffff5, 0x0, [{{0x6, 0x2, 0x80000001, 0x7ff, 0x2, 0x69, {0x5, 0xfffffffffffffff7, 0x2, 0x59, 0xed4, 0x1ff, 0x2, 0x10000, 0xfffffff6, 0x6000, 0x70000000, r7, r8, 0x33, 0x40}}, {0x2, 0x3ff, 0x1, 0x6, '\x00'}}, {{0x0, 0x3, 0x5, 0x80, 0x4, 0x212d66e7, {0x6, 0xfffffffffffffff8, 0x3, 0x7fffffff, 0x9, 0xa, 0xd, 0xfffffffe, 0xffff, 0xa000, 0x8, r9, r10, 0x2000, 0x4}}, {0x1, 0x3, 0x3, 0x6, '#%+'}}, {{0x4, 0x2, 0x540, 0x2, 0xfff, 0x8, {0x3, 0x30, 0x3, 0x7, 0x1cf, 0x1aa, 0x1, 0x7f, 0x3, 0x6000, 0x7, r11, 0xee01, 0x0, 0x1}}, {0x1, 0x2, 0xa, 0x5, '/dev/ptmx\x00'}}, {{0x2, 0x0, 0x80000000, 0x401, 0x4, 0xffff8000, {0x4, 0x8, 0x7, 0x1, 0x7, 0x80000001, 0xfff, 0x1, 0x80000000, 0xa000, 0x80000000, r12, r13, 0xfea, 0x5}}, {0x2, 0x3ff, 0xd, 0x4, '/dev/net/tun\x00'}}, {{0x4, 0x2, 0x7c6d, 0x57, 0x1, 0xd851, {0x4, 0x8001, 0x80000000, 0x6, 0x5, 0xad, 0xfff, 0x8, 0x1000, 0xc000, 0x2, r14, r15, 0x6, 0x4}}, {0x0, 0x6, 0x5, 0x100, '@:--]'}}, {{0x6, 0x1, 0x7, 0x1, 0x7, 0x5, {0x5, 0x1, 0x7, 0x7, 0x5, 0x222e347d, 0xe, 0x5, 0x8de, 0xa000, 0x1, r16, 0x0, 0x0, 0x3}}, {0x4, 0x600000000000, 0x1, 0x3, '\x00'}}, {{0x4, 0x0, 0x80000001, 0xffffffffffffffff, 0x1000, 0x9, {0x6, 0x1, 0x2, 0x1f, 0x6, 0x230, 0x6, 0x1, 0x7, 0x2000, 0x2, 0x0, 0x0, 0x8, 0x3ff}}, {0x3, 0x5, 0xa, 0x0, '/dev/ptmx\x00'}}]}, 0x488) 32.109769739s ago: executing program 3 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @ipv4={'\x00', '\xff\xff', @empty}, 0x3, 0x8, 0x6, 0x700, 0x8, 0x100020}) (async, rerun: 64) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/disk\x00', 0x1, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) write(r2, &(0x7f0000000300)='r\x00\x00\x00\x00\x00\x00\x00', 0x8) (async) close(r1) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x644, 0x800e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0xa, 0xfffffff2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x8, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x49d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x1, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2}}}}}}}}]}}, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000440)='./file0\x00', 0x88) (async) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) mount$incfs(&(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f00000007c0), 0x2094030, &(0x7f00000008c0)={[{@rlog_pages={'rlog_pages', 0x3d, 0x401}}], [{@euid_lt={'euid<', r5}}]}) (async) r6 = openat$cgroup_int(r4, &(0x7f0000000500)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000240)=0x7, 0x3) (async) ptrace(0x10, r3) (async, rerun: 32) ptrace$peeksig(0x4209, r3, &(0x7f0000000000)={0x2, 0x1}, 0x0) (rerun: 32) r7 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x602, 0x0, 0x0, 0x0, 0x8, 0x79, 0x1801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0xa0, {0x9, 0x21, 0x1, 0xe, 0x1, {0x22, 0x3c5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x60, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0x80}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x1e, 0x51, 0x3, 0x10, 0x2}, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="050f08000103100b1fdf8ed002b117e889681f426949fcb8eacbe61f226f54e6030e9c770a24c92db1df5717c46e7a65e9c7e8f2524471b1e9feea8d21a060c51a1847b75ce1a7472eb196624afd190420d37cfd46eb69b56ad97f871f7b399f02c8e86456e242f5acf4b42ea6bead5a469047701194e47c2ed4fd4ae1cc2e3715aacc9c66bc9980023ddffb13dc9581b520f2f1bb6373da8bd1defecfba5f00"/169], 0x2, [{0x85, &(0x7f00000001c0)=@string={0x85, 0x3, "4515f90bec2264047dfcbd4c1fc728afe49f14062ec3c79c672cb6a807dc2e2e4b5ba1aa9fdaf1a3575749d3e0e764a78c1d5622583ffffc1950c00c1d4b5fce07aa9b71669e3c12803adb97833d41f5144e1afadf8296b513a6aa924fbd969060774d2b2208320c319e277adbf4ca5f0afca7e52744699f35d43f6c85084048ccb9da"}}, {0x62, &(0x7f0000000900)=ANY=[@ANYBLOB="6203ff641c905b6cc40f4acb80ecda7ff77a0174c84c34d6dd6aedf2de736885373ee8fcd48b8f5b6de4effe2eb2c285c5947e46b1db28c4b3e9e3498dc4845da2f347e394104f159c061c68ec3220a090c546b25a9830ba279070c90d25880ed4db01e276357d95473b353f"]}]}) (async) fchdir(r1) r8 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) lseek(r8, 0x8000003, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000000980)={{0x0, 0x4, 0xfa8, 0x8, 0x1, 0x2, 0x1, 0x0, 0x20f4, 0xb1, 0x40, 0x3, 0x6, 0x2, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64) syz_usb_control_io$hid(r7, &(0x7f0000000440)={0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="000b2200000022134eddd0be0058198a9ca4f842ac80"], &(0x7f0000000380)=ANY=[@ANYBLOB="0001040000000403200d"], &(0x7f00000003c0)=ANY=[@ANYBLOB="00220a0000002b9279e82b2bc60afa98"], &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0x8a4}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x40, 0x10, 0x67, "68812397cf77b7d79ddbaaae76876143ec5b7544b42d4b9c45eaa1a1a194d20fad3bdde3133409f5782155bc485cd30cbf909acd66d517e0c08d66ff761159a770bb5a41b980e7e98cfa1babf9ffca597f3d9b3024aba574839104f380d7bda4e0cf565e9f916c"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000580)={0x20, 0x1, 0xc7, "303a4e6ae4df278f5f220fd7a3d4f9298fa5fc09b160a879a06f1bf0e3ea097be3f8f42392af2c236a6b476fc43800662e621e18668a09c130f886b2a70dcc0b401248aa2f295d883eda20216415304224fa0f7161966c64c300e6712ed84cfaba76b579d2c956af991241835bb46a8b92ea20ac7492efb1ffbd4e14a5fc7a078d16858bfd47bc2c1cfc7471c07b266dd6441ed06358f5589ffe2fa9d27c6e8cbe0660a24715a33e094bc989a38f0fcef63c1fdc45f8f9dea6ef94a08570308a2b4db82051d599"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x5}}) 32.087488249s ago: executing program 1 (id=120): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42) syz_ublk_setup_io_uring(0x54e2, &(0x7f0000000140)={0x0, 0x39ee, 0x10000, 0x2, 0x23d}, &(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) setxattr$security_capability(&(0x7f0000000600)='./mnt\x00', &(0x7f0000000480), &(0x7f0000000640)=@v3={0x3000000, [{0x1000, 0x80008000}, {0x40000002, 0x8000}]}, 0x18, 0x1) syz_io_uring_setup(0x12ae, &(0x7f00000002c0)={0x0, 0x3dbf, 0x200, 0x2, 0x2aa}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x8000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c040e610012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r6 = dup(r4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)=0x0) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000500)={0x2e, 0x14, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@new_dev={0x3, 0x39f, 0x0, 0x0, 0x1000, 0xffffffff, r7, 0x0, 0x1}}}, &(0x7f0000000580)) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) copy_file_range(r8, 0x0, r8, &(0x7f00000004c0)=0x100, 0x9, 0x0) 31.919518263s ago: executing program 1 (id=121): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000001400)="17000000020001000003be8c5e687a8a12002bf3010100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df018000000000010000000166f938e91b9c7328401400000080c457681f009cee4a5acb3dac00001fb73150338c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./mnt\x00', 0x1ff) mount(&(0x7f0000000b00)=@nullb, &(0x7f0000000c00)='./mnt\x00', &(0x7f0000000d00)='ext4\x00', 0x0, &(0x7f0000000e00)='dax\x00') mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x18410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10, 0x80000) sendto$inet(r0, &(0x7f0000000500)="db8bd1718db0699ab0739b0f1c664798a05b3a702ec4a61f62e66932f6be522c5b4758374195a3a0bc5a534d99cb78a979749411cd91ed1989ee612da9f503d2b3245bd091639692b2b1529c3d74929e68f857e1f84e7c0489adbd2b7d5fa0e23265ccd807047d1f3e608dd65930eae37fac1687c867f74d5ce40d9296af93c646dbfbf951d6bb87929fde837b634ba9fad3bd4258fec5ce120f61428216d4735855e2bbe338d0a95fc4d550", 0xac, 0x8000, &(0x7f00000005c0)={0x2, 0x4e20, @local}, 0x10) recvmsg(r1, &(0x7f0000002a80)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000280)=""/51, 0x33}, {&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/128, 0x80}, {&(0x7f00000026c0)=""/139, 0x8b}, {&(0x7f0000002780)=""/1, 0x1}, {&(0x7f00000027c0)=""/5, 0x5}, {&(0x7f0000002800)=""/141, 0x8d}, {&(0x7f00000028c0)=""/28, 0x1c}], 0xa, &(0x7f00000029c0)=""/190, 0xbe}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x942, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') 31.831343855s ago: executing program 1 (id=122): openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000002a40), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0xb42018, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) mount$fuseblk(&(0x7f0000000040), &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140), 0x20b1008, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@max_read={'max_read', 0x3d, 0x5}}, {@max_read={'max_read', 0x3d, 0x294}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}], [{@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, './binderfs\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'proc\x00'}}, {@fowner_lt={'fowner<', r3}}, {@smackfshat}, {@smackfsroot={'smackfsroot', 0x3d, '\xb2.{)(-@^@-&'}}]}}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000600)) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x629f9000) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x4d802, 0x0) read$FUSE(r6, &(0x7f0000006280)={0x2020}, 0xffffffca) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000180)) r7 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000680), &(0x7f0000000700)=0x60, 0xc0000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, &(0x7f0000000740)=0x183, 0x4) ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, &(0x7f00000005c0)={0x7, 0x2, 0x4, 0xff}) 31.589245612s ago: executing program 1 (id=123): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x800000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='onf', 0x3) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) 31.548101053s ago: executing program 3 (id=124): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="3626430f0136652ea6363e420f01c82665f30f1efb66b83e000f00d036460f09b9a5020000b802000000ba000000000f30260fc73266baf80cb8c80ee082ef66bafc0c66ed66b801008ee8", 0x8}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 31.342972828s ago: executing program 1 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) socket$inet_udp(0x2, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) r2 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000580)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x29}, 0x48, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f00000002c0)={@id={0x2, 0x0, @b}, 0x40, r2, '\x00', @b}) getdents64(r0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x60) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)={0x2c, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x2d, 0x0, 0x0, @u32=0x6}]}]}, 0x2c}], 0x1}, 0x4004080) bind$inet6(r3, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 21.64722623s ago: executing program 4 (id=144): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0x0, 0x0) read(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000040)={0x20, 0x16, 0x5, "28da91db87"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00101c"], 0x0, 0x0, 0x0, 0x0, 0x0}) 16.374535261s ago: executing program 33 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) socket$inet_udp(0x2, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) r2 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000580)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x29}, 0x48, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f00000002c0)={@id={0x2, 0x0, @b}, 0x40, r2, '\x00', @b}) getdents64(r0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x60) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)={0x2c, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x2d, 0x0, 0x0, @u32=0x6}]}]}, 0x2c}], 0x1}, 0x4004080) bind$inet6(r3, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 16.368768911s ago: executing program 34 (id=124): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="3626430f0136652ea6363e420f01c82665f30f1efb66b83e000f00d036460f09b9a5020000b802000000ba000000000f30260fc73266baf80cb8c80ee082ef66bafc0c66ed66b801008ee8", 0x8}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 13.958777001s ago: executing program 4 (id=167): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001000)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c0000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0003006a0500003f000000000000000000000005010905a101050919010300000025017501950a8102950175068103c0"], 0x135) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000100)={0xc, {0xa0, "10c4e9d80000f9915199b2eb0eff0f0005e37e4602000000000001000a5ec7858045e472ea45deeb1f00000000000000000000000000912e5f7d46237ec7d67c659145f3c49cbb674977dd42c1778b3b1b9e2275b115b0aa642c9b2b9fee9cc390ee6fee4eb66d106b6a43006c7b77dbabed1370f61dd0c876a6c9b651c72fd6"}}, 0x86) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="0362", 0x2}], 0x1) 12.239745455s ago: executing program 4 (id=178): syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0x2, 0x101}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000200)=0xa4) syz_usb_connect$midi(0x1, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010200e83d140000089904241040000102030109022500010108b005090400000001033004132403020606010b3906080300020e09"], &(0x7f0000000000)={0xffffffffffffffde, 0x0, 0x0, 0x0, 0x1, [{0x56, 0x0}]}) 9.168291951s ago: executing program 4 (id=202): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0x30003, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4d040, &(0x7f0000001100)={0xa, 0x1, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40010162, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x1115}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) 5.357573836s ago: executing program 0 (id=237): syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_connect$cdc_ncm(0x5, 0xae, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x2, 0x1, 0x7, 0x28, 0x4a, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "9b5e5f"}, {0x5, 0x24, 0x0, 0x744}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7, 0x100, 0x1}, {0x6, 0x24, 0x1a, 0x4, 0x21}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0xc5}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x1, 0x5, 0x33}, @country_functional={0xe, 0x24, 0x7, 0x0, 0x6, [0xa, 0x9, 0x4, 0x3]}, @network_terminal={0x7, 0x24, 0xa, 0xa, 0x2, 0xed, 0x1a}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x9, 0x3, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xff, 0x80, 0x8f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x1b, 0x3b}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x5}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x88, 0x91, 0x9, 0x20, 0x63}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x7f, 0xa153}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x2, 0x9}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x142e}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2c09}}]}) 4.070069288s ago: executing program 4 (id=238): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x9cc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x362c, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f00000004c0)) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000380)=@ethtool_sset_info={0x37, 0x8000, 0xfffffffffffffffa}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x95, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0xc, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x64c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x66, 0x0, 0xfc}}}}}]}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000180)=@string={0x2}}]}) 3.859226893s ago: executing program 6 (id=240): openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000002a40), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0xb42018, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) mount$fuseblk(&(0x7f0000000040), &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140), 0x20b1008, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@max_read={'max_read', 0x3d, 0x5}}, {@max_read={'max_read', 0x3d, 0x294}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}], [{@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, './binderfs\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'proc\x00'}}, {@fowner_lt={'fowner<', r3}}, {@smackfshat}, {@smackfsroot={'smackfsroot', 0x3d, '\xb2.{)(-@^@-&'}}]}}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x4d802, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f00000005c0)={0x7, 0x2, 0x4, 0xff}) 3.857326624s ago: executing program 6 (id=241): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000fbff00bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 3.827828154s ago: executing program 6 (id=242): mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') 3.792491215s ago: executing program 6 (id=243): landlock_create_ruleset(&(0x7f0000000080)={0xcddc, 0x5, 0x1, 0x220, 0x4}, 0x30, 0x1) (async) landlock_create_ruleset(&(0x7f0000000080)={0xcddc, 0x5, 0x1, 0x220, 0x4}, 0x30, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) link(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='./file7\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x100}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x6}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000004c0)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x18}}], 0x1, 0x8090) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000400)=@hci, 0x80, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0xf5ffffff}, 0x61) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="f00000001000010400000000fddbdf2500000000000000000000000000000001fc0200000000000000000000000000014e251234000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d23300000000000000000000000000000000000001ffffffffbfff7fffffffffffffffffffffffffffffdfffffffffffffffffffffffffffffffffffff0000000000000000ffffffffffffffff0200000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000001000000000a000000000000000000000055e2ec07b3dcfc7691c0ebd5554fec52f160f206974d4ae80b8ca436929360"], 0xf0}, 0x1, 0x0, 0x0, 0xc9e1682944c3ff88}, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0xec) (async) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0xec) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', 0x0, 0x80400, 0x0) 3.695102198s ago: executing program 6 (id=245): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/kvm/mmu_shadow_zapped\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0', 0x1) 3.694880748s ago: executing program 6 (id=246): socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x24, 0x18, 0x15, 0x70bd24, 0xfefffc00, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0xe5}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x40800}, 0x88004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010100000000206a05360300000000000109022400010000c0060904004003030003000921fcff0f0122060009058103"], 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, &(0x7f0000000100)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x1}}, {@readahead={'readahead', 0x3d, 0x8}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x4}}, {@rlog_pages}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x3}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x8}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x2c0000}}, {@no_bf_cache}], [{@appraise_type}, {@context={'context', 0x3d, 'sysadm_u'}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000900)=ANY=[@ANYBLOB="0001bc"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x24, 0x18, 0x15, 0x70bd24, 0xfefffc00, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0xe5}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x40800}, 0x88004) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010100000000206a05360300000000000109022400010000c0060904004003030003000921fcff0f0122060009058103"], 0x0) (async) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, &(0x7f0000000100)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x1}}, {@readahead={'readahead', 0x3d, 0x8}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x4}}, {@rlog_pages}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x3}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x8}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x2c0000}}, {@no_bf_cache}], [{@appraise_type}, {@context={'context', 0x3d, 'sysadm_u'}}]}) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000900)=ANY=[@ANYBLOB="0001bc"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 3.671244408s ago: executing program 35 (id=246): socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x24, 0x18, 0x15, 0x70bd24, 0xfefffc00, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0xe5}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x40800}, 0x88004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010100000000206a05360300000000000109022400010000c0060904004003030003000921fcff0f0122060009058103"], 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, &(0x7f0000000100)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x1}}, {@readahead={'readahead', 0x3d, 0x8}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x4}}, {@rlog_pages}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x3}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x8}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x2c0000}}, {@no_bf_cache}], [{@appraise_type}, {@context={'context', 0x3d, 'sysadm_u'}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000900)=ANY=[@ANYBLOB="0001bc"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x24, 0x18, 0x15, 0x70bd24, 0xfefffc00, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0xe5}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x40800}, 0x88004) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010100000000206a05360300000000000109022400010000c0060904004003030003000921fcff0f0122060009058103"], 0x0) (async) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, &(0x7f0000000100)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x1}}, {@readahead={'readahead', 0x3d, 0x8}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x4}}, {@rlog_pages}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x3}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x8}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x2c0000}}, {@no_bf_cache}], [{@appraise_type}, {@context={'context', 0x3d, 'sysadm_u'}}]}) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000900)=ANY=[@ANYBLOB="0001bc"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 3.463178263s ago: executing program 5 (id=248): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x11) ioctl$TCSETSF2(r1, 0x8910, 0x0) userfaultfd(0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f00001ab000/0x1000)=nil}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r4, r5, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$loop(&(0x7f0000000180), 0x5d, 0x8e880) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x224}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, 0x0) syz_io_uring_setup(0x400048be, &(0x7f0000000340)={0x0, 0xfffffffb, 0x20, 0xfffffff7, 0x182}, &(0x7f0000000300), &(0x7f0000ff4000), 0x0) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, 0x0) sendfile(r6, r7, &(0x7f0000000100)=0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000470000/0x4000)=nil, 0x4000}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 2.239129484s ago: executing program 0 (id=249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) close(0xffffffffffffffff) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setrlimit(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0xfd7f, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0xff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x10}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r1, &(0x7f0000000400), 0x1000) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r4, &(0x7f0000000210)="01", 0x1) read(r3, &(0x7f0000800000)=""/8, 0x8) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x0, 0x0}, 0x14) 2.238849124s ago: executing program 5 (id=250): openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000002a40), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0xb42018, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) mount$fuseblk(&(0x7f0000000040), &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140), 0x20b1008, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@max_read={'max_read', 0x3d, 0x5}}, {@max_read={'max_read', 0x3d, 0x294}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}], [{@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, './binderfs\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'proc\x00'}}, {@fowner_lt={'fowner<', r3}}, {@smackfshat}, {@smackfsroot={'smackfsroot', 0x3d, '\xb2.{)(-@^@-&'}}]}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x4d802, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f00000005c0)={0x7, 0x2, 0x4, 0xff}) 2.152736976s ago: executing program 0 (id=251): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') 2.152455106s ago: executing program 5 (id=253): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) r1 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r1, 0x88, 0xe, 0x0, &(0x7f00000004c0)=0xfffffffffffffddd) fcntl$setlease(r0, 0x400, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x150, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13e, 0x1, 0x1, 0xd9, 0x50, 0x1, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0xb, {{0x5}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x99, 0x7835, 0xff, 0xf7}, [@mdlm_detail={0x103, 0x24, 0x13, 0x92, "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"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x13, 0x37, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x5b, 0x7}}}}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) openat2(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x240, 0x60, 0x8}, 0x18) 2.149095696s ago: executing program 0 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x16d942, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r2, 0x400, 0x1) r3 = syz_open_dev$MSR(&(0x7f0000000980), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, 0x0) unshare(0x60000600) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f00000001000132428bd700000000000e0000001000000000000000000000000ac1e0101000000000000000000000000030000004e"], 0xf0}}, 0x804) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001b66fb1b313ba36db000a0000000400000014000100fd010000000000000000000000000001150006"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x80) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000200)={0xf8c8, 0x8001ff, 0x4, 0x7ffb, 0x27, "ea710000000000f9000000024200000200", 0x4000000, 0x40000400}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000001600)=0x1000000) r7 = dup(0xffffffffffffffff) write$UHID_DESTROY(r7, &(0x7f0000000700), 0x28) mmap(&(0x7f0000aa7000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2.148987856s ago: executing program 7 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/kvm/mmu_shadow_zapped\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0', 0x1) 2.120681947s ago: executing program 7 (id=256): unshare(0x60000600) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042402000000ff02000300000000", 0x1e5) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000083512038240000102030109026900030180e007080b0101010a20000904000000010120000924010200030900b2090401000001022000090401010101022000090501094000050400082501810c09020009040200000102200009040201010102200009058209ff0eb276feec830e37f54f753ed20304041008250183302a020054e0dcca8a97cbefab916484beb4c677eddf2ea26c72cbef95b838d55b9f9ace01ac"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f00000000c0), 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'tunl0\x00', 0x2}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x50, 0x1, "", [{{0x9, 0x4, 0x0, 0x56, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf3, 0x1, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x75, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x3, 0x81, 0x0, 0xff, 0xd6}, 0x32, &(0x7f00000002c0)={0x5, 0xf, 0x32, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x61, 0x3, 0x0, 0xf00f, 0xf, [0xff00c0, 0xf, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x44, 0x80, 0x5, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x2c, 0x7f}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x280a}}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r5, 0x541c, &(0x7f0000000380)={0x6, 0x6}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x44299208}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x20014) fcntl$notify(r4, 0x402, 0x80000003) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r4, &(0x7f0000001840)={@void, @val={0x1, 0x3, 0x1c, 0x3, 0x14, 0x6}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x33, 0x801c, 0x67, 0x0, 0xfd, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "414dc1c90728557ded5995abd8c2dd746ed1b8e7b953b5e7039ee546652f979f45a699fe21e64016"}}, 0xfdef) syz_open_pts(r3, 0x680001) 1.908859772s ago: executing program 0 (id=257): r0 = socket$netlink(0x10, 0x3, 0x0) flock(r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000007c0)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 294.927193ms ago: executing program 5 (id=258): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5dc) 253.199974ms ago: executing program 4 (id=259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1}, 0x40) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000640)={0x0, 0x7fff, 0x0, 0x1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000a40)={{r2}, r3, 0x8, @unused=[0x2, 0x6, 0x0, 0x7], @devid=r4}) syslog(0x4, 0xfffffffffffffffe, 0xff14) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000800)="b5", 0x1}, {0x0}], 0x2, 0x7fffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235110000160000302e40a435080000000f22d8c4e18173b53866baf80c662666400f388007ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x4b}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 179.773475ms ago: executing program 5 (id=260): openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x82, 0x143082) ioctl$XFS_IOC_GETBMAP(r0, 0x40044581, 0x0) (async) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80442, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000140)={0x34, {0x2b, 0x2, 0x8, 0x1ff, 0x87, 0x4}}) 179.383805ms ago: executing program 5 (id=261): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f000000046f0103dc1a2fcd1200b34070f4"], 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setresgid(r6, r5, r6) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000002300)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000099000000fb040dfe203a73a8ae39a05520e62f2a369625ce1f03aad26d3d84ba6add7a176fbfd8138c04f07d16a288bbd7f8b4190111786f37319fc10a83866b9ca263244b04c4f185808617be2e354249aaf7f50e3a114b047de349a530ef12ef33eb92bebf69288c023194aeccb4abf63159d5ccfd97e4a8f46317f84c1d8d502be4318f3a8661c88e64ce735f060d063bf90b1764dd6065b758"], &(0x7f00000023c0)=0xbd) r7 = syz_pidfd_open(r4, 0x0) setns(r7, 0x10000000) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000080)={0x9, 0x2}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_clone(0x48000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r9, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) read$FUSE(r8, &(0x7f00000002c0)={0x2020}, 0x2020) socket$inet(0x2, 0x5, 0x106) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r10, 0x402c542d, &(0x7f0000000200)={0x5, 0x1801, 0xffa8, 0xb, 0x59, "766f0000000000110b8e230900000000000005", 0xffffffff, 0x44f31bb9}) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000040)=0xdf) io_setup(0x2278, 0x0) 153.425936ms ago: executing program 7 (id=262): openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000002a40), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0xb42018, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) mount$fuseblk(&(0x7f0000000040), &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140), 0x20b1008, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@max_read={'max_read', 0x3d, 0x5}}, {@max_read={'max_read', 0x3d, 0x294}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}], [{@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, './binderfs\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'proc\x00'}}, {@fowner_lt={'fowner<', r3}}, {@smackfshat}, {@smackfsroot={'smackfsroot', 0x3d, '\xb2.{)(-@^@-&'}}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x4d802, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f00000005c0)={0x7, 0x2, 0x4, 0xff}) 125.191787ms ago: executing program 7 (id=263): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') 83.860168ms ago: executing program 7 (id=264): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/kvm/mmu_shadow_zapped\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0', 0x1) 8.58386ms ago: executing program 7 (id=265): syz_usb_connect(0x6, 0x32, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect(0x6, 0x32, &(0x7f0000000000)=ANY=[], 0x0) (async) 0s ago: executing program 0 (id=266): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x190, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x190, 0x4) write(r0, &(0x7f0000000000)="01", 0x1) (async) write(r0, &(0x7f0000000000)="01", 0x1) kernel console output (not intermixed with test programs): pox_socket permissive=1 [ 49.488627][ T569] hierarchical_memsw_limit 9223372036854771712 [ 49.494806][ T569] total_cache 314290176 [ 49.525028][ T569] total_rss 8192 [ 49.528588][ T569] total_rss_huge 0 [ 49.532281][ T569] total_shmem 314257408 [ 49.545026][ T36] audit: type=1400 audit(1791509660.539:296): avc: denied { read } for pid=861 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.584379][ T569] total_mapped_file 0 [ 49.594480][ T569] total_dirty 0 [ 49.604582][ T569] total_writeback 0 [ 49.614688][ T36] audit: type=1400 audit(1791509660.589:297): avc: denied { create } for pid=864 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 49.635012][ T569] total_workingset_refault_anon 88 [ 49.640110][ T569] total_workingset_refault_file 22843 [ 49.667076][ T569] total_swap 127721472 [ 49.671147][ T569] total_swapcached 274432 [ 49.695144][ T569] total_pgpgin 161100 [ 49.699128][ T569] total_pgpgout 84300 [ 49.703084][ T569] total_pgfault 11570 [ 49.727295][ T569] total_pgmajfault 560 [ 49.731364][ T569] total_inactive_anon 306008064 [ 49.755028][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 49.765766][ T569] total_active_anon 8531968 [ 49.782820][ T569] total_inactive_file 0 [ 49.793033][ T569] total_active_file 32768 [ 49.813139][ T569] total_unevictable 0 [ 49.823249][ T569] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.51,pid=589,uid=0 [ 49.874998][ T569] Memory cgroup out of memory: Killed process 589 (syz.4.51) total-vm:90672kB, anon-rss:1312kB, file-rss:25060kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 49.914977][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 49.949903][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 49.964977][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.002175][ T9] usb 1-1: Product: syz [ 50.014978][ T9] usb 1-1: Manufacturer: syz [ 50.029835][ T9] usb 1-1: SerialNumber: syz [ 50.253812][ T573] syz.4.51 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 50.297026][ T9] usb 1-1: USB disconnect, device number 19 [ 50.442058][ T573] CPU: 0 UID: 0 PID: 573 Comm: syz.4.51 Not tainted syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d [ 50.442081][ T573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 50.442089][ T573] Call Trace: [ 50.442093][ T573] [ 50.442097][ T573] __dump_stack+0x21/0x30 [ 50.442117][ T573] dump_stack_lvl+0x140/0x1c0 [ 50.442132][ T573] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.442146][ T573] ? ___ratelimit+0x41c/0x5c0 [ 50.442157][ T573] ? __kasan_check_write+0x18/0x20 [ 50.442172][ T573] dump_stack+0x19/0x20 [ 50.442186][ T573] dump_header+0xd9/0x460 [ 50.442199][ T573] oom_kill_process+0x35d/0x640 [ 50.442215][ T573] out_of_memory+0x5d1/0xa20 [ 50.442229][ T573] ? __cfi_out_of_memory+0x10/0x10 [ 50.442243][ T573] ? mutex_lock_killable+0x115/0x1d0 [ 50.442255][ T573] ? __cfi_mutex_lock_killable+0x10/0x10 [ 50.442267][ T573] mem_cgroup_out_of_memory+0x2c5/0x390 [ 50.442281][ T573] ? css_next_descendant_pre+0x1ec/0x210 [ 50.442297][ T573] ? __kasan_check_write+0x18/0x20 [ 50.442310][ T573] ? drain_obj_stock+0xec0/0xec0 [ 50.442324][ T573] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 50.442338][ T573] try_charge_memcg+0x925/0xe10 [ 50.442349][ T573] ? static_key_count+0x45/0x70 [ 50.442360][ T573] ? lruvec_init+0x201/0x280 [ 50.442374][ T573] ? __cfi_try_charge_memcg+0x10/0x10 [ 50.442388][ T573] ? __alloc_pages_noprof+0x35a/0x7e0 [ 50.442400][ T573] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 50.442412][ T573] __mem_cgroup_charge+0xfc/0x420 [ 50.442425][ T573] ? folio_add_lru+0x116/0x400 [ 50.442434][ T573] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 50.442448][ T573] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 50.442458][ T573] ? shmem_replace_folio+0x9b0/0x9b0 [ 50.442468][ T573] ? shmem_huge_global_enabled+0x2da/0x360 [ 50.442482][ T573] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 50.442497][ T573] ? __kasan_check_write+0x18/0x20 [ 50.442509][ T573] ? _raw_spin_lock+0x92/0x120 [ 50.442523][ T573] shmem_get_folio_gfp+0x5cd/0x12e0 [ 50.442539][ T573] ? shmem_get_folio+0xc0/0xc0 [ 50.442552][ T573] ? follow_page_pte+0x8fb/0xba0 [ 50.442563][ T573] ? inode_to_bdi+0x6d/0x100 [ 50.442574][ T573] shmem_write_begin+0xf4/0x260 [ 50.442584][ T573] generic_perform_write+0x329/0x970 [ 50.442595][ T573] ? __cfi_generic_perform_write+0x10/0x10 [ 50.442606][ T573] ? generic_write_checks_count+0x426/0x540 [ 50.442617][ T573] ? file_update_time+0xa3/0x210 [ 50.442629][ T573] shmem_file_write_iter+0x105/0x130 [ 50.442640][ T573] __kernel_write_iter+0x45f/0x900 [ 50.442654][ T573] ? __cfi___kernel_write_iter+0x10/0x10 [ 50.442668][ T573] ? get_dump_page+0x165/0x220 [ 50.442678][ T573] ? __asan_memset+0x39/0x50 [ 50.442690][ T573] ? iov_iter_bvec+0xc0/0x180 [ 50.442702][ T573] dump_user_range+0xb8b/0xe60 [ 50.442717][ T573] ? __cfi_dump_user_range+0x10/0x10 [ 50.442731][ T573] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 50.442741][ T573] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 50.442757][ T573] ? elf_core_dump+0x23cf/0x3840 [ 50.442767][ T573] elf_core_dump+0x2d61/0x3840 [ 50.442778][ T573] ? __cfi_elf_core_dump+0x10/0x10 [ 50.442788][ T573] ? mas_next_slot+0xf01/0xfd0 [ 50.442802][ T573] ? dump_interrupted+0xf0/0xf0 [ 50.442815][ T573] ? filp_open+0x199/0x1f0 [ 50.442826][ T573] ? 0xffffffffff600000 [ 50.442834][ T573] do_coredump+0x20d5/0x3050 [ 50.442849][ T573] ? __cfi_do_coredump+0x10/0x10 [ 50.442861][ T573] ? asm_exc_page_fault+0x2b/0x30 [ 50.442877][ T573] ? __kasan_slab_free+0x6a/0x80 [ 50.442892][ T573] ? get_signal+0xa2a/0x1490 [ 50.442907][ T573] get_signal+0x11bf/0x1490 [ 50.442922][ T573] arch_do_signal_or_restart+0xbc/0x700 [ 50.442933][ T573] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 50.442944][ T573] ? __bad_area_nosemaphore+0x2fb/0x680 [ 50.442956][ T573] irqentry_exit_to_user_mode+0x4d/0xb0 [ 50.442969][ T573] irqentry_exit+0x16/0x60 [ 50.442981][ T573] exc_page_fault+0x65/0xc0 [ 50.442992][ T573] asm_exc_page_fault+0x2b/0x30 [ 50.443003][ T573] RIP: 0033:0x7f5c36b9e1e1 [ 50.443013][ T573] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 50.443021][ T573] RSP: 002b:fffffffffffffda0 EFLAGS: 00010217 [ 50.443032][ T573] RAX: 0000000000000000 RBX: 00007f5c36e26270 RCX: 00007f5c36b9e1d9 [ 50.443039][ T573] RDX: 0000000000000000 RSI: fffffffffffffda0 RDI: 0000000001228000 [ 50.443046][ T573] RBP: 00007f5c36c35888 R08: 0000000000000000 R09: 0000000000000000 [ 50.443053][ T573] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 50.443059][ T573] R13: 00007f5c36e26308 R14: 00007f5c36e26270 R15: 00007ffc0bed9d88 [ 50.443068][ T573] [ 50.443072][ T573] memory: usage 307200kB, limit 307200kB, failcnt 56186 [ 51.865003][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 51.939323][ T573] memory+swap: usage 431600kB, limit 9007199254740988kB, failcnt 0 [ 51.967905][ T573] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 51.974766][ T573] Memory cgroup stats for /syz4: [ 51.974846][ T573] cache 313909248 [ 52.005739][ T573] rss 53248 [ 52.013760][ T573] rss_huge 0 [ 52.023870][ T573] shmem 313896960 [ 52.034721][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.055057][ T573] mapped_file 0 [ 52.065200][ T573] dirty 0 [ 52.068172][ T573] writeback 0 [ 52.071799][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 52.081003][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.099202][ T573] workingset_refault_anon 98 [ 52.103785][ T573] workingset_refault_file 22970 [ 52.124971][ T9] usb 1-1: Product: syz [ 52.135018][ T573] swap 127385600 [ 52.138558][ T573] swapcached 610304 [ 52.142383][ T9] usb 1-1: Manufacturer: syz [ 52.147166][ T9] usb 1-1: SerialNumber: syz [ 52.162577][ T573] pgpgin 165679 [ 52.177043][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 52.194918][ T573] pgpgout 88879 [ 52.198434][ T573] pgfault 11883 [ 52.201869][ T573] pgmajfault 577 [ 52.214997][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 52.227993][ T573] inactive_anon 288944128 [ 52.238082][ T573] active_anon 25616384 [ 52.242161][ T573] inactive_file 12288 [ 52.275029][ T573] active_file 0 [ 52.278506][ T573] unevictable 0 [ 52.281943][ T573] hierarchical_memory_limit 314572800 [ 52.307613][ T573] hierarchical_memsw_limit 9223372036854771712 [ 52.313773][ T573] total_cache 313909248 [ 52.338170][ T573] total_rss 53248 [ 52.341844][ T573] total_rss_huge 0 [ 52.364993][ T573] total_shmem 313896960 [ 52.375170][ T573] total_mapped_file 0 [ 52.388540][ T36] audit: type=1400 audit(1791509663.519:298): avc: denied { read write } for pid=872 comm="syz.0.145" name="cdc-wdm0" dev="devtmpfs" ino=478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 52.415029][ T573] total_dirty 0 [ 52.418499][ T573] total_writeback 0 [ 52.422287][ T573] total_workingset_refault_anon 98 [ 52.465034][ T573] total_workingset_refault_file 22970 [ 52.475132][ T36] audit: type=1400 audit(1791509663.519:299): avc: denied { open } for pid=872 comm="syz.0.145" path="/dev/cdc-wdm0" dev="devtmpfs" ino=478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 52.505030][ T573] total_swap 127385600 [ 52.515206][ T573] total_swapcached 610304 [ 52.529826][ T573] total_pgpgin 165679 [ 52.533826][ T573] total_pgpgout 88879 [ 52.559973][ T573] total_pgfault 11883 [ 52.563968][ T573] total_pgmajfault 577 [ 52.580160][ T36] audit: type=1400 audit(1791509663.519:300): avc: denied { getopt } for pid=872 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.600431][ T573] total_inactive_anon 288944128 [ 52.615132][ T573] total_active_anon 25616384 [ 52.619723][ T573] total_inactive_file 12288 [ 52.644561][ T573] total_active_file 0 [ 52.664596][ T573] total_unevictable 0 [ 52.684768][ T573] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.51,pid=568,uid=0 [ 52.729691][ T573] Memory cgroup out of memory: Killed process 568 (syz.4.51) total-vm:90672kB, anon-rss:1300kB, file-rss:25576kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 52.846559][ T9] usb 1-1: USB disconnect, device number 20 [ 53.126294][ T551] syz.4.51 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 53.206401][ T551] CPU: 0 UID: 0 PID: 551 Comm: syz.4.51 Not tainted syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d [ 53.206422][ T551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 53.206430][ T551] Call Trace: [ 53.206434][ T551] [ 53.206438][ T551] __dump_stack+0x21/0x30 [ 53.206464][ T551] dump_stack_lvl+0x140/0x1c0 [ 53.206478][ T551] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.206493][ T551] ? ___ratelimit+0x41c/0x5c0 [ 53.206504][ T551] ? __kasan_check_write+0x18/0x20 [ 53.206519][ T551] dump_stack+0x19/0x20 [ 53.206533][ T551] dump_header+0xd9/0x460 [ 53.206547][ T551] oom_kill_process+0x35d/0x640 [ 53.206562][ T551] out_of_memory+0x5d1/0xa20 [ 53.206576][ T551] ? __cfi_out_of_memory+0x10/0x10 [ 53.206590][ T551] ? mutex_lock_killable+0x115/0x1d0 [ 53.206603][ T551] ? __cfi_mutex_lock_killable+0x10/0x10 [ 53.206615][ T551] mem_cgroup_out_of_memory+0x2c5/0x390 [ 53.206629][ T551] ? css_next_descendant_pre+0x1ec/0x210 [ 53.206648][ T551] ? __kasan_check_write+0x18/0x20 [ 53.206661][ T551] ? drain_obj_stock+0xec0/0xec0 [ 53.206675][ T551] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 53.206689][ T551] try_charge_memcg+0x925/0xe10 [ 53.206699][ T551] ? static_key_count+0x45/0x70 [ 53.206710][ T551] ? lruvec_init+0x201/0x280 [ 53.206724][ T551] ? __cfi_try_charge_memcg+0x10/0x10 [ 53.206736][ T551] ? __alloc_pages_noprof+0x35a/0x7e0 [ 53.206747][ T551] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 53.206759][ T551] __mem_cgroup_charge+0xfc/0x420 [ 53.206772][ T551] ? folio_add_lru+0x116/0x400 [ 53.206782][ T551] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 53.206795][ T551] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 53.206806][ T551] ? shmem_replace_folio+0x9b0/0x9b0 [ 53.206815][ T551] ? shmem_huge_global_enabled+0x2da/0x360 [ 53.206830][ T551] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 53.206844][ T551] ? __kasan_check_write+0x18/0x20 [ 53.206856][ T551] ? _raw_spin_lock+0x92/0x120 [ 53.206871][ T551] shmem_get_folio_gfp+0x5cd/0x12e0 [ 53.206886][ T551] ? shmem_get_folio+0xc0/0xc0 [ 53.206899][ T551] ? __kasan_check_write+0x18/0x20 [ 53.206911][ T551] ? inode_to_bdi+0x6d/0x100 [ 53.206923][ T551] shmem_write_begin+0xf4/0x260 [ 53.206932][ T551] generic_perform_write+0x329/0x970 [ 53.206943][ T551] ? inode_update_timestamps+0x4d1/0x6e0 [ 53.206956][ T551] ? __cfi_generic_perform_write+0x10/0x10 [ 53.206966][ T551] ? generic_write_checks_count+0x426/0x540 [ 53.206978][ T551] ? mnt_get_write_access_file+0x1af/0x3b0 [ 53.206990][ T551] ? mnt_put_write_access_file+0xc2/0x100 [ 53.207001][ T551] ? file_update_time+0x1de/0x210 [ 53.207013][ T551] shmem_file_write_iter+0x105/0x130 [ 53.207024][ T551] __kernel_write_iter+0x45f/0x900 [ 53.207037][ T551] ? __cfi___kernel_write_iter+0x10/0x10 [ 53.207051][ T551] ? get_dump_page+0x165/0x220 [ 53.207061][ T551] ? __asan_memset+0x39/0x50 [ 53.207074][ T551] ? iov_iter_bvec+0xc0/0x180 [ 53.207086][ T551] dump_user_range+0xb8b/0xe60 [ 53.207101][ T551] ? __cfi_dump_user_range+0x10/0x10 [ 53.207115][ T551] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 53.207125][ T551] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 53.207141][ T551] ? elf_core_dump+0x23cf/0x3840 [ 53.207152][ T551] elf_core_dump+0x2d61/0x3840 [ 53.207163][ T551] ? __cfi_elf_core_dump+0x10/0x10 [ 53.207172][ T551] ? mas_next_slot+0xf01/0xfd0 [ 53.207187][ T551] ? dump_interrupted+0xf0/0xf0 [ 53.207199][ T551] ? filp_open+0x199/0x1f0 [ 53.207210][ T551] ? 0xffffffffff600000 [ 53.207218][ T551] do_coredump+0x20d5/0x3050 [ 53.207233][ T551] ? __cfi_do_coredump+0x10/0x10 [ 53.207245][ T551] ? asm_exc_page_fault+0x2b/0x30 [ 53.207260][ T551] ? __kasan_slab_free+0x6a/0x80 [ 53.207270][ T551] ? get_signal+0xa2a/0x1490 [ 53.207284][ T551] get_signal+0x11bf/0x1490 [ 53.207299][ T551] arch_do_signal_or_restart+0xbc/0x700 [ 53.207310][ T551] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 53.207322][ T551] ? __bad_area_nosemaphore+0x2fb/0x680 [ 53.207333][ T551] irqentry_exit_to_user_mode+0x4d/0xb0 [ 53.207346][ T551] irqentry_exit+0x16/0x60 [ 53.207357][ T551] exc_page_fault+0x65/0xc0 [ 53.207369][ T551] asm_exc_page_fault+0x2b/0x30 [ 53.207380][ T551] RIP: 0033:0x7f5c36b9e1e1 [ 53.207389][ T551] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 53.207398][ T551] RSP: 002b:fffffffffffffda0 EFLAGS: 00010217 [ 53.207408][ T551] RAX: 0000000000000000 RBX: 00007f5c36e26270 RCX: 00007f5c36b9e1d9 [ 53.207416][ T551] RDX: 0000000000000000 RSI: fffffffffffffda0 RDI: 0000000001228000 [ 53.207423][ T551] RBP: 00007f5c36c35888 R08: 0000000000000000 R09: 0000000000000000 [ 53.207429][ T551] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 53.207436][ T551] R13: 00007f5c36e26308 R14: 00007f5c36e26270 R15: 00007ffc0bed9d88 [ 53.207444][ T551] [ 53.208698][ T551] memory: usage 307200kB, limit 307200kB, failcnt 57936 [ 53.984985][ T36] audit: type=1400 audit(1791509665.079:301): avc: denied { mount } for pid=875 comm="syz.0.146" name="/" dev="ramfs" ino=9303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 54.708378][ T36] audit: type=1400 audit(1791509665.849:302): avc: denied { search } for pid=880 comm="syz.0.148" name="/" dev="configfs" ino=2504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.794922][ T36] audit: type=1400 audit(1791509665.849:303): avc: denied { write } for pid=880 comm="syz.0.148" name="c.1" dev="configfs" ino=3473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.894989][ T36] audit: type=1400 audit(1791509665.849:304): avc: denied { add_name } for pid=880 comm="syz.0.148" name="ecm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.920528][ T551] memory+swap: usage 431772kB, limit 9007199254740988kB, failcnt 0 [ 54.955170][ T551] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 54.974622][ T551] Memory cgroup stats for /syz4: [ 54.974709][ T551] cache 314212352 [ 55.000722][ T551] rss 53248 [ 55.013283][ T551] rss_huge 0 [ 55.025255][ T551] shmem 314208256 [ 55.038263][ T551] mapped_file 0 [ 55.051943][ T551] dirty 0 [ 55.062844][ T551] writeback 0 [ 55.074980][ T551] workingset_refault_anon 98 [ 55.092963][ T551] workingset_refault_file 23276 [ 55.112492][ T551] swap 127561728 [ 55.126944][ T551] swapcached 307200 [ 55.141182][ T551] pgpgin 171378 [ 55.153310][ T551] pgpgout 94578 [ 55.164970][ T551] pgfault 12239 [ 55.178655][ T551] pgmajfault 591 [ 55.190822][ T551] inactive_anon 301817856 [ 55.212579][ T551] active_anon 12750848 [ 55.228562][ T551] inactive_file 0 [ 55.241591][ T551] active_file 4096 [ 55.256349][ T551] unevictable 0 [ 55.268399][ T551] hierarchical_memory_limit 314572800 [ 55.288667][ T551] hierarchical_memsw_limit 9223372036854771712 [ 55.312234][ T551] total_cache 314212352 [ 55.329433][ T551] total_rss 53248 [ 55.343313][ T551] total_rss_huge 0 [ 55.356365][ T551] total_shmem 314208256 [ 55.373862][ T551] total_mapped_file 0 [ 55.388649][ T551] total_dirty 0 [ 55.401628][ T551] total_writeback 0 [ 55.415923][ T551] total_workingset_refault_anon 98 [ 55.434130][ T551] total_workingset_refault_file 23276 [ 55.457248][ T551] total_swap 127561728 [ 55.506123][ T36] audit: type=1400 audit(1791509666.639:305): avc: denied { read write } for pid=890 comm="syz.0.151" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 55.533052][ T551] total_swapcached 307200 [ 55.575069][ T551] total_pgpgin 171378 [ 55.604339][ T551] total_pgpgout 94578 [ 55.640654][ T551] total_pgfault 12239 [ 55.666882][ T904] mmap: syz.0.154 (904) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.685404][ T551] total_pgmajfault 591 [ 55.715010][ T551] total_inactive_anon 301817856 [ 55.735010][ T36] audit: type=1400 audit(1791509666.639:306): avc: denied { open } for pid=890 comm="syz.0.151" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 55.761459][ T551] total_active_anon 12750848 [ 55.805023][ T551] total_inactive_file 0 [ 55.821631][ T13] bridge_slave_1: left allmulticast mode [ 55.828500][ T13] bridge_slave_1: left promiscuous mode [ 55.834316][ T551] total_active_file 4096 [ 55.860476][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.868038][ T551] total_unevictable 0 [ 55.877645][ T551] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.51,pid=561,uid=0 [ 55.896726][ T13] bridge_slave_0: left allmulticast mode [ 55.903732][ T36] audit: type=1400 audit(1791509666.979:307): avc: denied { map } for pid=905 comm="syz.0.155" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.926859][ T13] bridge_slave_0: left promiscuous mode [ 55.936989][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.944495][ T551] Memory cgroup out of memory: Killed process 561 (syz.4.51) total-vm:90672kB, anon-rss:1308kB, file-rss:26972kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 55.980046][ T36] audit: type=1400 audit(1791509666.996:308): avc: denied { setopt } for pid=905 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.040257][ T912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.157'. [ 56.062493][ T36] audit: type=1400 audit(1791509667.146:309): avc: denied { create } for pid=911 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 56.130933][ T13] veth1_macvtap: left promiscuous mode [ 56.146934][ T13] veth0_vlan: left promiscuous mode [ 56.257983][ T921] netlink: 80 bytes leftover after parsing attributes in process `syz.0.159'. [ 56.279310][ T908] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.298173][ T921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.159'. [ 56.307070][ T908] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.314569][ T555] syz.4.51 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 56.324583][ T908] bridge_slave_0: entered allmulticast mode [ 56.340932][ T908] bridge_slave_0: entered promiscuous mode [ 56.364904][ T907] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.374978][ T907] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.382058][ T907] bridge_slave_0: entered allmulticast mode [ 56.401201][ T907] bridge_slave_0: entered promiscuous mode [ 56.425789][ T908] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.438548][ T934] 9pnet: Could not find request transport: xen [ 56.450375][ T908] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.458698][ T555] CPU: 0 UID: 0 PID: 555 Comm: syz.4.51 Not tainted syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d [ 56.458718][ T555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 56.458726][ T555] Call Trace: [ 56.458730][ T555] [ 56.458733][ T555] __dump_stack+0x21/0x30 [ 56.458760][ T555] dump_stack_lvl+0x140/0x1c0 [ 56.458774][ T555] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.458789][ T555] ? ___ratelimit+0x41c/0x5c0 [ 56.458800][ T555] ? __kasan_check_write+0x18/0x20 [ 56.458814][ T555] dump_stack+0x19/0x20 [ 56.458828][ T555] dump_header+0xd9/0x460 [ 56.458842][ T555] oom_kill_process+0x35d/0x640 [ 56.458857][ T555] out_of_memory+0x5d1/0xa20 [ 56.458871][ T555] ? __cfi_out_of_memory+0x10/0x10 [ 56.458885][ T555] ? mutex_lock_killable+0x115/0x1d0 [ 56.458897][ T555] ? __cfi_mutex_lock_killable+0x10/0x10 [ 56.458909][ T555] mem_cgroup_out_of_memory+0x2c5/0x390 [ 56.458924][ T555] ? css_next_descendant_pre+0x1ec/0x210 [ 56.458940][ T555] ? __kasan_check_write+0x18/0x20 [ 56.458954][ T555] ? drain_obj_stock+0xec0/0xec0 [ 56.458969][ T555] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 56.458984][ T555] try_charge_memcg+0x925/0xe10 [ 56.458995][ T555] ? static_key_count+0x45/0x70 [ 56.459006][ T555] ? lruvec_init+0x201/0x280 [ 56.459020][ T555] ? __cfi_try_charge_memcg+0x10/0x10 [ 56.459032][ T555] ? __alloc_pages_noprof+0x35a/0x7e0 [ 56.459044][ T555] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 56.459056][ T555] __mem_cgroup_charge+0xfc/0x420 [ 56.459068][ T555] ? folio_add_lru+0x116/0x400 [ 56.459078][ T555] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 56.459091][ T555] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 56.459103][ T555] ? shmem_replace_folio+0x9b0/0x9b0 [ 56.459112][ T555] ? shmem_huge_global_enabled+0x2da/0x360 [ 56.459127][ T555] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 56.459141][ T555] ? __kasan_check_write+0x18/0x20 [ 56.459154][ T555] ? _raw_spin_lock+0x92/0x120 [ 56.459168][ T555] shmem_get_folio_gfp+0x5cd/0x12e0 [ 56.459184][ T555] ? shmem_get_folio+0xc0/0xc0 [ 56.459197][ T555] ? follow_page_pte+0x8fb/0xba0 [ 56.459209][ T555] ? inode_to_bdi+0x6d/0x100 [ 56.459220][ T555] shmem_write_begin+0xf4/0x260 [ 56.459230][ T555] generic_perform_write+0x329/0x970 [ 56.459242][ T555] ? __cfi_generic_perform_write+0x10/0x10 [ 56.459252][ T555] ? generic_write_checks_count+0x426/0x540 [ 56.459264][ T555] ? file_update_time+0xa3/0x210 [ 56.459276][ T555] shmem_file_write_iter+0x105/0x130 [ 56.459287][ T555] __kernel_write_iter+0x45f/0x900 [ 56.459301][ T555] ? __cfi___kernel_write_iter+0x10/0x10 [ 56.459314][ T555] ? get_dump_page+0x165/0x220 [ 56.459324][ T555] ? __asan_memset+0x39/0x50 [ 56.459337][ T555] ? iov_iter_bvec+0xc0/0x180 [ 56.459349][ T555] dump_user_range+0xb8b/0xe60 [ 56.459364][ T555] ? __cfi_dump_user_range+0x10/0x10 [ 56.459378][ T555] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 56.459388][ T555] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 56.459404][ T555] ? elf_core_dump+0x23cf/0x3840 [ 56.459415][ T555] elf_core_dump+0x2d61/0x3840 [ 56.459426][ T555] ? __cfi_elf_core_dump+0x10/0x10 [ 56.459435][ T555] ? mas_next_slot+0xf01/0xfd0 [ 56.459450][ T555] ? dump_interrupted+0xf0/0xf0 [ 56.459462][ T555] ? filp_open+0x199/0x1f0 [ 56.459473][ T555] ? 0xffffffffff600000 [ 56.459481][ T555] do_coredump+0x20d5/0x3050 [ 56.459496][ T555] ? __cfi_do_coredump+0x10/0x10 [ 56.459509][ T555] ? asm_exc_page_fault+0x2b/0x30 [ 56.459523][ T555] ? __kasan_slab_free+0x6a/0x80 [ 56.459533][ T555] ? get_signal+0xa2a/0x1490 [ 56.459548][ T555] get_signal+0x11bf/0x1490 [ 56.459563][ T555] arch_do_signal_or_restart+0xbc/0x700 [ 56.459575][ T555] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 56.459585][ T555] ? __bad_area_nosemaphore+0x2fb/0x680 [ 56.459597][ T555] irqentry_exit_to_user_mode+0x4d/0xb0 [ 56.459611][ T555] irqentry_exit+0x16/0x60 [ 56.459622][ T555] exc_page_fault+0x65/0xc0 [ 56.459634][ T555] asm_exc_page_fault+0x2b/0x30 [ 56.459644][ T555] RIP: 0033:0x7f5c36b9e1e1 [ 56.459653][ T555] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 56.459662][ T555] RSP: 002b:fffffffffffffda0 EFLAGS: 00010217 [ 56.459673][ T555] RAX: 0000000000000000 RBX: 00007f5c36e26270 RCX: 00007f5c36b9e1d9 [ 56.459681][ T555] RDX: 0000000000000000 RSI: fffffffffffffda0 RDI: 0000000001228000 [ 56.459688][ T555] RBP: 00007f5c36c35888 R08: 0000000000000000 R09: 0000000000000000 [ 56.459695][ T555] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 56.459701][ T555] R13: 00007f5c36e26308 R14: 00007f5c36e26270 R15: 00007ffc0bed9d88 [ 56.459710][ T555] [ 56.459714][ T555] memory: usage 307200kB, limit 307200kB, failcnt 59346 [ 56.931962][ T908] bridge_slave_1: entered allmulticast mode [ 56.938245][ T908] bridge_slave_1: entered promiscuous mode [ 56.971540][ T908] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.978633][ T908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.985897][ T908] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.992915][ T908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.021715][ T908] veth0_vlan: entered promiscuous mode [ 57.027462][ T36] audit: type=1400 audit(1791509668.076:310): avc: denied { read } for pid=932 comm="syz.0.160" path="socket:[9651]" dev="sockfs" ino=9651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.059385][ T908] veth1_macvtap: entered promiscuous mode [ 57.074689][ T907] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.081835][ T907] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.088933][ T907] bridge_slave_1: entered allmulticast mode [ 57.095267][ T907] bridge_slave_1: entered promiscuous mode [ 57.129729][ T907] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.136806][ T907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.144040][ T907] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.151073][ T907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.181423][ T907] veth0_vlan: entered promiscuous mode [ 57.193130][ T907] veth1_macvtap: entered promiscuous mode [ 57.275589][ T13] bridge_slave_1: left allmulticast mode [ 57.281296][ T13] bridge_slave_1: left promiscuous mode [ 57.293464][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.316635][ T13] bridge_slave_0: left allmulticast mode [ 57.336283][ T555] memory+swap: usage 431612kB, limit 9007199254740988kB, failcnt 0 [ 57.354354][ T13] bridge_slave_0: left promiscuous mode [ 57.366866][ T555] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 57.373721][ T555] Memory cgroup stats for /syz4: [ 57.373815][ T555] cache 313868288 [ 57.383044][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.413124][ T555] rss 106496 [ 57.426042][ T555] rss_huge 0 [ 57.435308][ T555] shmem 313868288 [ 57.442975][ T555] mapped_file 0 [ 57.453341][ T555] dirty 0 [ 57.459007][ T555] writeback 0 [ 57.462802][ T944] netlink: 'syz.0.162': attribute type 3 has an invalid length. [ 57.471020][ T555] workingset_refault_anon 99 [ 57.477286][ T13] veth1_macvtap: left promiscuous mode [ 57.482774][ T13] veth0_vlan: left promiscuous mode [ 57.488050][ T312] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.496409][ T555] workingset_refault_file 23536 [ 57.511188][ T555] swap 127397888 [ 57.524254][ T555] swapcached 598016 [ 57.536694][ T555] pgpgin 177410 [ 57.546763][ T555] pgpgout 100610 [ 57.558986][ T555] pgfault 12647 [ 57.571564][ T555] pgmajfault 601 [ 57.583380][ T555] inactive_anon 13840384 [ 57.597662][ T555] active_anon 300732416 [ 57.607959][ T555] inactive_file 0 [ 57.614818][ T555] active_file 0 [ 57.625814][ T555] unevictable 0 [ 57.633589][ T555] hierarchical_memory_limit 314572800 [ 57.644685][ T555] hierarchical_memsw_limit 9223372036854771712 [ 57.651258][ T312] usb 7-1: Using ep0 maxpacket: 32 [ 57.662963][ T312] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 57.674343][ T555] total_cache 313868288 [ 57.680597][ T312] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.691731][ T555] total_rss 106496 [ 57.698886][ T555] total_rss_huge 0 [ 57.702676][ T312] usb 7-1: Product: syz [ 57.707201][ T555] total_shmem 313868288 [ 57.711390][ T312] usb 7-1: Manufacturer: syz [ 57.720243][ T555] total_mapped_file 0 [ 57.724285][ T312] usb 7-1: SerialNumber: syz [ 57.729164][ T555] total_dirty 0 [ 57.733100][ T555] total_writeback 0 [ 57.741385][ T555] total_workingset_refault_anon 99 [ 57.746972][ T555] total_workingset_refault_file 23536 [ 57.752457][ T555] total_swap 127397888 [ 57.758770][ T555] total_swapcached 598016 [ 57.763165][ T555] total_pgpgin 177410 [ 57.767750][ T555] total_pgpgout 100610 [ 57.771850][ T555] total_pgfault 12647 [ 57.776194][ T555] total_pgmajfault 601 [ 57.780275][ T555] total_inactive_anon 13840384 [ 57.785449][ T555] total_active_anon 300732416 [ 57.790190][ T555] total_inactive_file 0 [ 57.794358][ T555] total_active_file 0 [ 57.798632][ T555] total_unevictable 0 [ 57.802680][ T555] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.51,pid=556,uid=0 [ 57.819841][ T555] Memory cgroup out of memory: Killed process 556 (syz.4.51) total-vm:90668kB, anon-rss:1336kB, file-rss:27348kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 57.906852][ T551] syz.4.51 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 57.916645][ T551] CPU: 0 UID: 0 PID: 551 Comm: syz.4.51 Not tainted syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d [ 57.916663][ T551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 57.916673][ T551] Call Trace: [ 57.916676][ T551] [ 57.916681][ T551] __dump_stack+0x21/0x30 [ 57.916700][ T551] dump_stack_lvl+0x140/0x1c0 [ 57.916714][ T551] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.916729][ T551] ? ___ratelimit+0x41c/0x5c0 [ 57.916740][ T551] ? __kasan_check_write+0x18/0x20 [ 57.916754][ T551] dump_stack+0x19/0x20 [ 57.916767][ T551] dump_header+0xd9/0x460 [ 57.916781][ T551] oom_kill_process+0x35d/0x640 [ 57.916797][ T551] out_of_memory+0x5d1/0xa20 [ 57.916810][ T551] ? __cfi_out_of_memory+0x10/0x10 [ 57.916824][ T551] ? mutex_lock_killable+0x115/0x1d0 [ 57.916837][ T551] ? __cfi_mutex_lock_killable+0x10/0x10 [ 57.916849][ T551] mem_cgroup_out_of_memory+0x2c5/0x390 [ 57.916863][ T551] ? css_next_descendant_pre+0x1ec/0x210 [ 57.916878][ T551] ? __kasan_check_write+0x18/0x20 [ 57.916890][ T551] ? drain_obj_stock+0xec0/0xec0 [ 57.916904][ T551] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 57.916918][ T551] try_charge_memcg+0x925/0xe10 [ 57.916928][ T551] ? static_key_count+0x45/0x70 [ 57.916939][ T551] ? lruvec_init+0x201/0x280 [ 57.916953][ T551] ? __cfi_try_charge_memcg+0x10/0x10 [ 57.916964][ T551] ? __alloc_pages_noprof+0x35a/0x7e0 [ 57.916976][ T551] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 57.916988][ T551] __mem_cgroup_charge+0xfc/0x420 [ 57.917001][ T551] ? folio_add_lru+0x116/0x400 [ 57.917010][ T551] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 57.917024][ T551] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 57.917034][ T551] ? shmem_replace_folio+0x9b0/0x9b0 [ 57.917043][ T551] ? shmem_huge_global_enabled+0x2da/0x360 [ 57.917058][ T551] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 57.917072][ T551] ? __kasan_check_write+0x18/0x20 [ 57.917084][ T551] ? _raw_spin_lock+0x92/0x120 [ 57.917099][ T551] shmem_get_folio_gfp+0x5cd/0x12e0 [ 57.917114][ T551] ? shmem_get_folio+0xc0/0xc0 [ 57.917127][ T551] ? follow_page_pte+0x8fb/0xba0 [ 57.917139][ T551] ? inode_to_bdi+0x6d/0x100 [ 57.917155][ T551] shmem_write_begin+0xf4/0x260 [ 57.917165][ T551] generic_perform_write+0x329/0x970 [ 57.917177][ T551] ? __cfi_generic_perform_write+0x10/0x10 [ 57.917187][ T551] ? generic_write_checks_count+0x426/0x540 [ 57.917199][ T551] ? file_update_time+0xa3/0x210 [ 57.917211][ T551] shmem_file_write_iter+0x105/0x130 [ 57.917222][ T551] __kernel_write_iter+0x45f/0x900 [ 57.917235][ T551] ? __cfi___kernel_write_iter+0x10/0x10 [ 57.917248][ T551] ? get_dump_page+0x165/0x220 [ 57.917258][ T551] ? __asan_memset+0x39/0x50 [ 57.917271][ T551] ? iov_iter_bvec+0xc0/0x180 [ 57.917283][ T551] dump_user_range+0xb8b/0xe60 [ 57.917298][ T551] ? __cfi_dump_user_range+0x10/0x10 [ 57.917312][ T551] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 57.917322][ T551] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 57.917338][ T551] ? elf_core_dump+0x23cf/0x3840 [ 57.917349][ T551] elf_core_dump+0x2d61/0x3840 [ 57.917360][ T551] ? __cfi_elf_core_dump+0x10/0x10 [ 57.917369][ T551] ? mas_next_slot+0xf01/0xfd0 [ 57.917384][ T551] ? dump_interrupted+0xf0/0xf0 [ 57.917396][ T551] ? filp_open+0x199/0x1f0 [ 57.917407][ T551] ? 0xffffffffff600000 [ 57.917415][ T551] do_coredump+0x20d5/0x3050 [ 57.917429][ T551] ? __cfi_do_coredump+0x10/0x10 [ 57.917442][ T551] ? asm_exc_page_fault+0x2b/0x30 [ 57.917457][ T551] ? __kasan_slab_free+0x6a/0x80 [ 57.917466][ T551] ? get_signal+0xa2a/0x1490 [ 57.917480][ T551] get_signal+0x11bf/0x1490 [ 57.917495][ T551] arch_do_signal_or_restart+0xbc/0x700 [ 57.917506][ T551] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 57.917517][ T551] ? __bad_area_nosemaphore+0x2fb/0x680 [ 57.917529][ T551] irqentry_exit_to_user_mode+0x4d/0xb0 [ 57.917542][ T551] irqentry_exit+0x16/0x60 [ 57.917554][ T551] exc_page_fault+0x65/0xc0 [ 57.917565][ T551] asm_exc_page_fault+0x2b/0x30 [ 57.917575][ T551] RIP: 0033:0x7f5c36b9e1e1 [ 57.917584][ T551] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 57.917593][ T551] RSP: 002b:fffffffffffffda0 EFLAGS: 00010217 [ 57.917603][ T551] RAX: 0000000000000000 RBX: 00007f5c36e26270 RCX: 00007f5c36b9e1d9 [ 57.917611][ T551] RDX: 0000000000000000 RSI: fffffffffffffda0 RDI: 0000000001228000 [ 57.917618][ T551] RBP: 00007f5c36c35888 R08: 0000000000000000 R09: 0000000000000000 [ 57.917624][ T551] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 57.917630][ T551] R13: 00007f5c36e26308 R14: 00007f5c36e26270 R15: 00007ffc0bed9d88 [ 57.917639][ T551] [ 57.917678][ T551] memory: usage 307200kB, limit 307200kB, failcnt 59836 [ 58.428848][ T312] usb 7-1: USB disconnect, device number 2 [ 58.519553][ T965] syz.0.168 uses obsolete (PF_INET,SOCK_PACKET) [ 58.763141][ T551] memory+swap: usage 432032kB, limit 9007199254740988kB, failcnt 0 [ 58.771244][ T551] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 58.778438][ T551] Memory cgroup stats for /syz4: [ 58.778516][ T551] cache 314318848 [ 58.787270][ T312] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 58.795761][ T551] rss 86016 [ 58.798939][ T551] rss_huge 0 [ 58.802181][ T551] shmem 314302464 [ 58.806347][ T551] mapped_file 0 [ 58.809854][ T551] dirty 0 [ 58.812868][ T551] writeback 0 [ 58.816518][ T551] workingset_refault_anon 99 [ 58.821170][ T551] workingset_refault_file 23709 [ 58.826243][ T551] swap 127827968 [ 58.829877][ T551] swapcached 167936 [ 58.833704][ T551] pgpgin 184827 [ 58.837314][ T551] pgpgout 108027 [ 58.840961][ T551] pgfault 13164 [ 58.844473][ T551] pgmajfault 613 [ 58.848263][ T551] inactive_anon 24879104 [ 58.852589][ T551] active_anon 289677312 [ 58.857062][ T551] inactive_file 12288 [ 58.861055][ T551] active_file 4096 [ 58.864821][ T551] unevictable 0 [ 58.868755][ T551] hierarchical_memory_limit 314572800 [ 58.874145][ T551] hierarchical_memsw_limit 9223372036854771712 [ 58.880716][ T551] total_cache 314318848 [ 58.884903][ T551] total_rss 86016 [ 58.889638][ T551] total_rss_huge 0 [ 58.893460][ T551] total_shmem 314302464 [ 58.898018][ T551] total_mapped_file 0 [ 58.902032][ T551] total_dirty 0 [ 58.905772][ T551] total_writeback 0 [ 58.909592][ T551] total_workingset_refault_anon 99 [ 58.914704][ T551] total_workingset_refault_file 23709 [ 58.920648][ T551] total_swap 127827968 [ 58.924768][ T551] total_swapcached 167936 [ 58.929258][ T504] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.944130][ T551] total_pgpgin 184827 [ 58.952615][ T551] total_pgpgout 108027 [ 58.958408][ T312] usb 1-1: not running at top speed; connect to a high speed hub [ 58.969226][ T312] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.980927][ T551] total_pgfault 13164 [ 58.988537][ T312] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 58.998305][ T551] total_pgmajfault 613 [ 59.006833][ T551] total_inactive_anon 24879104 [ 59.016080][ T312] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 59.027058][ T551] total_active_anon 289677312 [ 59.032218][ T551] total_inactive_file 12288 [ 59.037574][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.046032][ T551] total_active_file 4096 [ 59.050700][ T551] total_unevictable 0 [ 59.058041][ T551] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.51,pid=557,uid=0 [ 59.074326][ T551] Memory cgroup out of memory: Killed process 557 (syz.4.51) total-vm:90668kB, anon-rss:1336kB, file-rss:32388kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 59.091248][ T504] usb 6-1: Using ep0 maxpacket: 32 [ 59.102356][ T504] usb 6-1: unable to get BOS descriptor or descriptor too short [ 59.113587][ T504] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.127084][ T1001] overlayfs: failed to resolve './bus': -2 [ 59.133977][ T504] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.151654][ T1001] overlay: filesystem on ./file0 not supported as upperdir [ 59.166443][ T504] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 59.176844][ T1001] overlay: filesystem on ./file0 not supported as upperdir [ 59.187811][ T504] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.206682][ T504] usb 6-1: Product: syz [ 59.216988][ T1001] overlay: filesystem on ./file0 not supported as upperdir [ 59.226085][ T504] usb 6-1: Manufacturer: syz [ 59.236091][ T504] usb 6-1: SerialNumber: syz [ 59.253026][ T504] usb 6-1: selecting invalid altsetting 1 [ 59.273301][ T504] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 59.283359][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 59.283369][ T36] audit: type=1400 audit(1791509670.426:315): avc: denied { read write } for pid=962 comm="syz.4.167" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.315856][ T10] wacom 0003:056A:003F.0003: unknown main item tag 0x0 [ 59.324017][ T1001] overlay: Unknown parameter './tracing' [ 59.335011][ T10] wacom 0003:056A:003F.0003: unknown main item tag 0x0 [ 59.353557][ T1001] overlay: Unknown parameter './tracing' [ 59.360552][ T493] udevd[493]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.376539][ T10] wacom 0003:056A:003F.0003: unknown main item tag 0x0 [ 59.387638][ T1001] overlay: Unknown parameter './tracing' [ 59.397727][ T10] wacom 0003:056A:003F.0003: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 59.413378][ T36] audit: type=1400 audit(1791509670.456:316): avc: denied { open } for pid=962 comm="syz.4.167" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.449395][ T1001] overlay: Unknown parameter './tracing' [ 59.458991][ T9] usb 6-1: USB disconnect, device number 2 [ 59.479765][ T1001] overlay: Unknown parameter './tracing' [ 59.498321][ T1001] overlay: Unknown parameter './tracing' [ 59.514276][ T1001] overlay: Unknown parameter './tracing' [ 59.524491][ T1001] overlay: Unknown parameter './tracing' [ 59.534634][ T1001] overlay: Unknown parameter './tracing' [ 59.551206][ T1001] overlay: Unknown parameter './tracing' [ 59.561283][ T1001] overlay: Unknown parameter './tracing' [ 59.571359][ T1001] overlay: Unknown parameter './tracing' [ 59.582804][ T36] audit: type=1400 audit(1791509670.726:317): avc: denied { compute_member } for pid=962 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 59.603739][ T1001] overlay: Unknown parameter './tracing' [ 59.618191][ T1001] overlay: Unknown parameter './tracing' [ 59.631231][ T1001] overlay: Unknown parameter './tracing' [ 59.645169][ T1001] overlay: Unknown parameter './tracing' [ 59.655186][ T1001] overlay: Unknown parameter './tracing' [ 59.667343][ T1001] overlay: Unknown parameter './tracing' [ 59.682865][ T1001] overlay: Unknown parameter './tracing' [ 59.692937][ T1001] overlay: Unknown parameter './tracing' [ 59.705130][ T1001] overlay: Unknown parameter './tracing' [ 59.721045][ T1001] overlay: Unknown parameter './tracing' [ 59.728472][ T1001] overlay: Unknown parameter './tracing' [ 59.743136][ T1001] overlay: Unknown parameter './tracing' [ 59.753215][ T1001] overlay: Unknown parameter './tracing' [ 59.765163][ T1001] overlay: Unknown parameter './tracing' [ 59.779452][ T312] usb 1-1: string descriptor 0 read error: -71 [ 59.794389][ T312] usb 1-1: Found UVC 1.00 device (046d:0825) [ 59.811771][ T1001] overlay: Unknown parameter './tracing' [ 59.824997][ T36] audit: type=1400 audit(1791509670.966:318): avc: denied { setopt } for pid=1010 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.847203][ T1008] syz.4.178 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 59.857024][ T312] usb 1-1: No valid video chain found. [ 59.863497][ T1001] overlay: Unknown parameter './tracing' [ 59.876834][ T312] usb 1-1: USB disconnect, device number 21 [ 59.885105][ T1001] overlay: Unknown parameter './tracing' [ 59.908680][ T1001] overlay: Unknown parameter './tracing' [ 59.923175][ T1001] overlay: Unknown parameter './tracing' [ 59.942907][ T1001] overlay: Unknown parameter './tracing' [ 59.956728][ T1008] CPU: 0 UID: 0 PID: 1008 Comm: syz.4.178 Not tainted syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d [ 59.956748][ T1008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 59.956756][ T1008] Call Trace: [ 59.956759][ T1008] [ 59.956763][ T1008] __dump_stack+0x21/0x30 [ 59.956784][ T1008] dump_stack_lvl+0x140/0x1c0 [ 59.956799][ T1008] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.956813][ T1008] ? ___ratelimit+0x41c/0x5c0 [ 59.956824][ T1008] ? __kasan_check_write+0x18/0x20 [ 59.956839][ T1008] dump_stack+0x19/0x20 [ 59.956853][ T1008] dump_header+0xd9/0x460 [ 59.956867][ T1008] oom_kill_process+0x35d/0x640 [ 59.956882][ T1008] out_of_memory+0x5d1/0xa20 [ 59.956896][ T1008] ? __cfi_out_of_memory+0x10/0x10 [ 59.956910][ T1008] ? mutex_lock_killable+0x97/0x1d0 [ 59.956922][ T1008] ? __cfi_mutex_lock_killable+0x10/0x10 [ 59.956934][ T1008] mem_cgroup_out_of_memory+0x2c5/0x390 [ 59.956949][ T1008] ? css_next_descendant_pre+0x1ec/0x210 [ 59.956964][ T1008] ? __kasan_check_write+0x18/0x20 [ 59.956977][ T1008] ? drain_obj_stock+0xec0/0xec0 [ 59.956991][ T1008] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 59.957005][ T1008] try_charge_memcg+0x925/0xe10 [ 59.957016][ T1008] ? static_key_count+0x45/0x70 [ 59.957026][ T1008] ? lruvec_init+0x201/0x280 [ 59.957048][ T1008] ? __cfi_try_charge_memcg+0x10/0x10 [ 59.957059][ T1008] ? __alloc_pages_noprof+0x35a/0x7e0 [ 59.957072][ T1008] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 59.957084][ T1008] __mem_cgroup_charge+0xfc/0x420 [ 59.957097][ T1008] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 59.957110][ T1008] folio_prealloc+0x67/0x220 [ 59.957121][ T1008] do_pte_missing+0x16af/0x4440 [ 59.957131][ T1008] ? __kasan_check_write+0x18/0x20 [ 59.957143][ T1008] ? _raw_spin_lock+0x92/0x120 [ 59.957158][ T1008] ? pte_marker_clear+0x1b0/0x1b0 [ 59.957168][ T1008] ? __pmd_alloc+0x5a6/0x9a0 [ 59.957178][ T1008] handle_mm_fault+0x1189/0x1ba0 [ 59.957189][ T1008] ? __cfi_handle_mm_fault+0x10/0x10 [ 59.957197][ T1008] ? lock_vma_under_rcu+0x4cf/0x590 [ 59.957207][ T1008] ? __kasan_check_write+0x18/0x20 [ 59.957225][ T1008] ? __se_sys_futex+0x13c/0x320 [ 59.957236][ T1008] do_user_addr_fault+0x951/0x1230 [ 59.957246][ T1008] ? fpregs_restore_userregs+0x11c/0x260 [ 59.957260][ T1008] exc_page_fault+0x58/0xc0 [ 59.957272][ T1008] asm_exc_page_fault+0x2b/0x30 [ 59.957283][ T1008] RIP: 0033:0x7f5c36a67745 [ 59.957293][ T1008] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 74 24 10 48 0f ce 48 89 74 24 10 48 83 f8 01 0f 85 f0 02 00 00 48 8b 44 24 18 48 8b 54 24 10 <48> 89 10 e9 5a fe ff ff 48 8b 44 24 20 48 0b 44 24 28 75 30 48 8b [ 59.957302][ T1008] RSP: 002b:00007ffc0bed9eb0 EFLAGS: 00010246 [ 59.957312][ T1008] RAX: 0000200000000040 RBX: 0000000000000008 RCX: 0000000000000000 [ 59.957319][ T1008] RDX: 000000000000000b RSI: 0000000000000000 RDI: 000055558ba5b3d8 [ 59.957326][ T1008] RBP: 00007ffc0bed9fd0 R08: 0000000000000000 R09: 0000000000000000 [ 59.957332][ T1008] R10: 000000000000000b R11: 0000000000000000 R12: 00007ffc0beda010 [ 59.957339][ T1008] R13: 00007f5c36e25fac R14: 000000000000e94e R15: 00007ffc0bed9ff0 [ 59.957347][ T1008] [ 59.957351][ T1008] memory: usage 307200kB, limit 307200kB, failcnt 65107 [ 60.324579][ T36] audit: type=1400 audit(1791509671.446:319): avc: denied { map } for pid=1033 comm="syz.6.187" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 60.380923][ T1008] memory+swap: usage 432040kB, limit 9007199254740988kB, failcnt 0 [ 60.389137][ T1008] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 60.396206][ T1008] Memory cgroup stats for /syz4: [ 60.396285][ T1008] cache 314310656 [ 60.405554][ T1008] rss 102400 [ 60.408802][ T1008] rss_huge 0 [ 60.412020][ T1008] shmem 314286080 [ 60.416157][ T1008] mapped_file 0 [ 60.419660][ T1008] dirty 0 [ 60.422614][ T1008] writeback 0 [ 60.426312][ T1008] workingset_refault_anon 102 [ 60.431065][ T1008] workingset_refault_file 24244 [ 60.436045][ T1008] swap 127836160 [ 60.439656][ T1008] swapcached 159744 [ 60.443485][ T1008] pgpgin 194204 [ 60.447131][ T1008] pgpgout 117404 [ 60.450735][ T1008] pgfault 13853 [ 60.454214][ T1008] pgmajfault 643 [ 60.458164][ T1008] inactive_anon 23375872 [ 60.462495][ T1008] active_anon 291172352 [ 60.466925][ T1008] inactive_file 12288 [ 60.470911][ T1008] active_file 12288 [ 60.474767][ T1008] unevictable 0 [ 60.478416][ T1008] hierarchical_memory_limit 314572800 [ 60.483807][ T1008] hierarchical_memsw_limit 9223372036854771712 [ 60.490893][ T1008] total_cache 314310656 [ 60.495181][ T1008] total_rss 102400 [ 60.498921][ T1008] total_rss_huge 0 [ 60.502763][ T1008] total_shmem 314286080 [ 60.507225][ T1008] total_mapped_file 0 [ 60.511229][ T1008] total_dirty 0 [ 60.514787][ T1008] total_writeback 0 [ 60.518818][ T1008] total_workingset_refault_anon 102 [ 60.524027][ T1008] total_workingset_refault_file 24244 [ 60.529757][ T1008] total_swap 127836160 [ 60.533837][ T1008] total_swapcached 159744 [ 60.538433][ T1008] total_pgpgin 194204 [ 60.542578][ T1008] total_pgpgout 117404 [ 60.546842][ T1008] total_pgfault 13853 [ 60.550838][ T1008] total_pgmajfault 643 [ 60.555119][ T1008] total_inactive_anon 23375872 [ 60.559901][ T1008] total_active_anon 291172352 [ 60.564582][ T1008] total_inactive_file 12288 [ 60.569355][ T1008] total_active_file 12288 [ 60.573696][ T1008] total_unevictable 0 [ 60.577810][ T1008] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.51,pid=552,uid=0 [ 60.592395][ T10] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 60.599895][ T312] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 60.608215][ T1008] Memory cgroup out of memory: Killed process 552 (syz.4.51) total-vm:90668kB, anon-rss:1340kB, file-rss:31468kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 60.755346][ T10] usb 7-1: too many configurations: 57, using maximum allowed: 8 [ 60.764912][ T10] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 98 [ 60.773670][ T10] usb 7-1: can't read configurations, error -22 [ 60.780015][ T312] usb 1-1: Using ep0 maxpacket: 32 [ 60.790632][ T312] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 60.799923][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.813352][ T312] usb 1-1: Product: syz [ 60.821862][ T312] usb 1-1: Manufacturer: syz [ 60.831813][ T312] usb 1-1: SerialNumber: syz [ 60.915019][ T10] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 60.965909][ T588] syz.4.51 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 61.063137][ T312] usb 1-1: USB disconnect, device number 22 [ 61.075299][ T10] usb 7-1: too many configurations: 57, using maximum allowed: 8 [ 61.088883][ T10] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 98 [ 61.097735][ T10] usb 7-1: can't read configurations, error -22 [ 61.111892][ T10] usb usb7-port1: attempt power cycle [ 61.143666][ T588] CPU: 0 UID: 0 PID: 588 Comm: syz.4.51 Not tainted syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d [ 61.143687][ T588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 61.143694][ T588] Call Trace: [ 61.143698][ T588] [ 61.143702][ T588] __dump_stack+0x21/0x30 [ 61.143722][ T588] dump_stack_lvl+0x140/0x1c0 [ 61.143736][ T588] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.143751][ T588] ? ___ratelimit+0x41c/0x5c0 [ 61.143762][ T588] ? __kasan_check_write+0x18/0x20 [ 61.143777][ T588] dump_stack+0x19/0x20 [ 61.143790][ T588] dump_header+0xd9/0x460 [ 61.143804][ T588] oom_kill_process+0x35d/0x640 [ 61.143820][ T588] out_of_memory+0x5d1/0xa20 [ 61.143834][ T588] ? __cfi_out_of_memory+0x10/0x10 [ 61.143890][ T588] ? mutex_lock_killable+0x97/0x1d0 [ 61.143903][ T588] ? __cfi_mutex_lock_killable+0x10/0x10 [ 61.143915][ T588] mem_cgroup_out_of_memory+0x2c5/0x390 [ 61.143930][ T588] ? css_next_descendant_pre+0x1ec/0x210 [ 61.143946][ T588] ? __kasan_check_write+0x18/0x20 [ 61.143959][ T588] ? drain_obj_stock+0xec0/0xec0 [ 61.143972][ T588] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 61.143986][ T588] try_charge_memcg+0x925/0xe10 [ 61.143997][ T588] ? static_key_count+0x45/0x70 [ 61.144008][ T588] ? lruvec_init+0x201/0x280 [ 61.144022][ T588] ? __cfi_try_charge_memcg+0x10/0x10 [ 61.144033][ T588] ? __alloc_pages_noprof+0x35a/0x7e0 [ 61.144045][ T588] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 61.144057][ T588] __mem_cgroup_charge+0xfc/0x420 [ 61.144069][ T588] ? __schedule+0x1706/0x23d0 [ 61.144079][ T588] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 61.144092][ T588] ? irqentry_exit+0x4a/0x60 [ 61.144104][ T588] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 61.144114][ T588] ? xas_load+0x155/0x3d0 [ 61.144124][ T588] ? shmem_replace_folio+0x9b0/0x9b0 [ 61.144134][ T588] ? shmem_huge_global_enabled+0x2da/0x360 [ 61.144148][ T588] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 61.144163][ T588] ? __kasan_check_write+0x18/0x20 [ 61.144175][ T588] ? _raw_spin_lock+0x92/0x120 [ 61.144190][ T588] shmem_get_folio_gfp+0x5cd/0x12e0 [ 61.144205][ T588] ? shmem_get_folio+0xc0/0xc0 [ 61.144218][ T588] ? __kasan_check_write+0x18/0x20 [ 61.144230][ T588] ? inode_to_bdi+0x6d/0x100 [ 61.144242][ T588] shmem_write_begin+0xf4/0x260 [ 61.144252][ T588] generic_perform_write+0x329/0x970 [ 61.144263][ T588] ? inode_update_timestamps+0x4d1/0x6e0 [ 61.144275][ T588] ? __cfi_generic_perform_write+0x10/0x10 [ 61.144286][ T588] ? generic_write_checks_count+0x426/0x540 [ 61.144297][ T588] ? mnt_get_write_access_file+0x1af/0x3b0 [ 61.144308][ T588] ? mnt_put_write_access_file+0xc2/0x100 [ 61.144320][ T588] ? file_update_time+0x1de/0x210 [ 61.144331][ T588] shmem_file_write_iter+0x105/0x130 [ 61.144342][ T588] __kernel_write_iter+0x45f/0x900 [ 61.144356][ T588] ? __cfi___kernel_write_iter+0x10/0x10 [ 61.144369][ T588] ? get_dump_page+0x165/0x220 [ 61.144380][ T588] ? __asan_memset+0x39/0x50 [ 61.144393][ T588] ? iov_iter_bvec+0xc0/0x180 [ 61.144404][ T588] dump_user_range+0xb8b/0xe60 [ 61.144419][ T588] ? __cfi_dump_user_range+0x10/0x10 [ 61.144433][ T588] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 61.144443][ T588] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 61.144458][ T588] ? elf_core_dump+0x23cf/0x3840 [ 61.144469][ T588] elf_core_dump+0x2d61/0x3840 [ 61.144480][ T588] ? __cfi_elf_core_dump+0x10/0x10 [ 61.144489][ T588] ? mas_next_slot+0xf01/0xfd0 [ 61.144503][ T588] ? dump_interrupted+0xf0/0xf0 [ 61.144516][ T588] ? filp_open+0x199/0x1f0 [ 61.144526][ T588] ? 0xffffffffff600000 [ 61.144535][ T588] do_coredump+0x20d5/0x3050 [ 61.144549][ T588] ? __cfi_do_coredump+0x10/0x10 [ 61.144561][ T588] ? asm_exc_page_fault+0x2b/0x30 [ 61.144576][ T588] ? __kasan_slab_free+0x6a/0x80 [ 61.144586][ T588] ? get_signal+0xa2a/0x1490 [ 61.144600][ T588] get_signal+0x11bf/0x1490 [ 61.144615][ T588] arch_do_signal_or_restart+0xbc/0x700 [ 61.144626][ T588] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 61.144637][ T588] ? __bad_area_nosemaphore+0x2fb/0x680 [ 61.144648][ T588] irqentry_exit_to_user_mode+0x4d/0xb0 [ 61.144661][ T588] irqentry_exit+0x16/0x60 [ 61.144672][ T588] exc_page_fault+0x65/0xc0 [ 61.144684][ T588] asm_exc_page_fault+0x2b/0x30 [ 61.144694][ T588] RIP: 0033:0x7f5c36b9e1e1 [ 61.144703][ T588] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 61.144712][ T588] RSP: 002b:fffffffffffffda0 EFLAGS: 00010217 [ 61.144722][ T588] RAX: 0000000000000000 RBX: 00007f5c36e26270 RCX: 00007f5c36b9e1d9 [ 61.144730][ T588] RDX: 0000000000000000 RSI: fffffffffffffda0 RDI: 0000000001228000 [ 61.144737][ T588] RBP: 00007f5c36c35888 R08: 0000000000000000 R09: 0000000000000000 [ 61.144743][ T588] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 61.144750][ T588] R13: 00007f5c36e26308 R14: 00007f5c36e26270 R15: 00007ffc0bed9d88 [ 61.144758][ T588] [ 61.144762][ T588] memory: usage 307200kB, limit 307200kB, failcnt 68218 [ 61.638714][ T504] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 61.658473][ T1048] fuse: Unknown parameter '' [ 61.690817][ T36] audit: type=1400 audit(1791509672.826:320): avc: denied { write } for pid=1053 comm="syz.5.194" path="socket:[10858]" dev="sockfs" ino=10858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.738447][ T588] memory+swap: usage 432176kB, limit 9007199254740988kB, failcnt 0 [ 61.746624][ T588] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 61.753611][ T588] Memory cgroup stats for /syz4: [ 61.753731][ T588] cache 314351616 [ 61.762797][ T588] rss 217088 [ 61.766282][ T588] rss_huge 0 [ 61.769459][ T588] shmem 314335232 [ 61.773121][ T588] mapped_file 0 [ 61.776801][ T588] dirty 0 [ 61.779722][ T588] writeback 0 [ 61.782995][ T588] workingset_refault_anon 104 [ 61.787905][ T588] workingset_refault_file 25760 [ 61.792737][ T588] swap 127975424 [ 61.796411][ T588] swapcached 12288 [ 61.800208][ T588] pgpgin 204638 [ 61.803664][ T588] pgpgout 127838 [ 61.807400][ T588] pgfault 14601 [ 61.810947][ T588] pgmajfault 713 [ 61.814471][ T588] inactive_anon 25288704 [ 61.818890][ T588] active_anon 289267712 [ 61.823128][ T588] inactive_file 16384 [ 61.827505][ T588] active_file 0 [ 61.830945][ T588] unevictable 0 [ 61.834492][ T588] hierarchical_memory_limit 314572800 [ 61.840024][ T588] hierarchical_memsw_limit 9223372036854771712 [ 61.846404][ T588] total_cache 314351616 [ 61.850547][ T588] total_rss 217088 [ 61.854614][ T588] total_rss_huge 0 [ 61.858627][ T588] total_shmem 314335232 [ 61.862768][ T588] total_mapped_file 0 [ 61.866908][ T588] total_dirty 0 [ 61.870461][ T588] total_writeback 0 [ 61.874241][ T588] total_workingset_refault_anon 104 [ 61.879740][ T588] total_workingset_refault_file 25760 [ 61.885160][ T504] usb 5-1: device descriptor read/64, error -71 [ 61.891609][ T588] total_swap 127975424 [ 61.895937][ T588] total_swapcached 12288 [ 61.900160][ T588] total_pgpgin 204638 [ 61.904245][ T588] total_pgpgout 127838 [ 61.908501][ T588] total_pgfault 14601 [ 61.912461][ T588] total_pgmajfault 713 [ 61.916729][ T588] total_inactive_anon 25288704 [ 61.921477][ T588] total_active_anon 289267712 [ 61.926345][ T588] total_inactive_file 16384 [ 61.930997][ T588] total_active_file 0 [ 61.935021][ T10] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 61.942833][ T588] total_unevictable 0 [ 61.946908][ T588] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.51,pid=547,uid=0 [ 61.961497][ T64] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.969561][ T588] Memory cgroup out of memory: Killed process 547 (syz.4.51) total-vm:90668kB, anon-rss:1340kB, file-rss:32408kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 61.986428][ T10] usb 7-1: too many configurations: 57, using maximum allowed: 8 [ 61.994775][ T10] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 98 [ 62.003384][ T10] usb 7-1: can't read configurations, error -22 [ 62.115949][ T64] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 62.126065][ T64] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 21 [ 62.139404][ T504] usb 5-1: device descriptor read/64, error -71 [ 62.145767][ T10] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 62.169423][ T1060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'. [ 62.185736][ T64] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.194895][ T10] usb 7-1: too many configurations: 57, using maximum allowed: 8 [ 62.203530][ T10] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 98 [ 62.212255][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 62.221133][ T10] usb 7-1: can't read configurations, error -22 [ 62.245622][ T10] usb usb7-port1: unable to enumerate USB device [ 62.252092][ T64] usb 6-1: SerialNumber: syz [ 62.282546][ T1054] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 62.384979][ T504] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 62.395781][ T36] audit: type=1400 audit(1791509673.536:321): avc: denied { bind } for pid=1066 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.433254][ T36] audit: type=1400 audit(1791509673.556:322): avc: denied { name_bind } for pid=1066 comm="syz.0.200" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 62.454455][ T1069] incfs: Error accessing: ./proc/thread-self/fail-nth. [ 62.491950][ T1069] incfs: mount failed -2 [ 62.496657][ T1054] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 62.505089][ T36] audit: type=1400 audit(1791509673.556:323): avc: denied { node_bind } for pid=1066 comm="syz.0.200" saddr=0.0.0.164 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 62.532954][ T1069] incfs: Error accessing: ./proc/thread-self/fail-nth. [ 62.562644][ T1069] incfs: mount failed -2 [ 62.577576][ T36] audit: type=1400 audit(1791509673.596:324): avc: denied { mounton } for pid=1068 comm="syz.0.201" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 62.601308][ T504] usb 5-1: device descriptor read/64, error -71 [ 62.609440][ T566] syz.4.51 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 62.619348][ T1069] incfs: Error accessing: ./proc/thread-self/fail-nth. [ 62.637517][ T1069] incfs: mount failed -2 [ 62.656969][ T1069] incfs: Error accessing: ./proc/thread-self/fail-nth. [ 62.693299][ T1069] incfs: mount failed -2 [ 62.713249][ T1069] incfs: Error accessing: ./proc/thread-self/fail-nth. [ 62.748601][ T566] CPU: 0 UID: 0 PID: 566 Comm: syz.4.51 Not tainted syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d [ 62.748625][ T566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 62.748632][ T566] Call Trace: [ 62.748636][ T566] [ 62.748640][ T566] __dump_stack+0x21/0x30 [ 62.748660][ T566] dump_stack_lvl+0x140/0x1c0 [ 62.748674][ T566] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.748689][ T566] ? ___ratelimit+0x41c/0x5c0 [ 62.748707][ T566] ? __kasan_check_write+0x18/0x20 [ 62.748721][ T566] dump_stack+0x19/0x20 [ 62.748735][ T566] dump_header+0xd9/0x460 [ 62.748749][ T566] oom_kill_process+0x35d/0x640 [ 62.748764][ T566] out_of_memory+0x5d1/0xa20 [ 62.748778][ T566] ? __cfi_out_of_memory+0x10/0x10 [ 62.748792][ T566] ? mutex_lock_killable+0x97/0x1d0 [ 62.748804][ T566] ? __cfi_mutex_lock_killable+0x10/0x10 [ 62.748816][ T566] mem_cgroup_out_of_memory+0x2c5/0x390 [ 62.748830][ T566] ? css_next_descendant_pre+0x1ec/0x210 [ 62.748846][ T566] ? __kasan_check_write+0x18/0x20 [ 62.748859][ T566] ? drain_obj_stock+0xec0/0xec0 [ 62.748873][ T566] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 62.748887][ T566] try_charge_memcg+0x925/0xe10 [ 62.748897][ T566] ? static_key_count+0x45/0x70 [ 62.748908][ T566] ? lruvec_init+0x201/0x280 [ 62.748922][ T566] ? __cfi_try_charge_memcg+0x10/0x10 [ 62.748933][ T566] ? __alloc_pages_noprof+0x35a/0x7e0 [ 62.748945][ T566] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 62.748960][ T566] __mem_cgroup_charge+0xfc/0x420 [ 62.748972][ T566] ? do_pte_missing+0x3894/0x4440 [ 62.748983][ T566] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 62.748996][ T566] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 62.749007][ T566] ? shmem_replace_folio+0x9b0/0x9b0 [ 62.749016][ T566] ? shmem_huge_global_enabled+0x2da/0x360 [ 62.749031][ T566] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 62.749045][ T566] ? __kasan_check_write+0x18/0x20 [ 62.749058][ T566] ? _raw_spin_lock+0x92/0x120 [ 62.749072][ T566] shmem_get_folio_gfp+0x5cd/0x12e0 [ 62.749087][ T566] ? shmem_get_folio+0xc0/0xc0 [ 62.749101][ T566] ? __kasan_check_write+0x18/0x20 [ 62.749113][ T566] ? inode_to_bdi+0x6d/0x100 [ 62.749125][ T566] shmem_write_begin+0xf4/0x260 [ 62.749134][ T566] generic_perform_write+0x329/0x970 [ 62.749145][ T566] ? inode_update_timestamps+0x4d1/0x6e0 [ 62.749157][ T566] ? __cfi_generic_perform_write+0x10/0x10 [ 62.749168][ T566] ? generic_write_checks_count+0x426/0x540 [ 62.749179][ T566] ? mnt_get_write_access_file+0x1af/0x3b0 [ 62.749190][ T566] ? mnt_put_write_access_file+0xc2/0x100 [ 62.749202][ T566] ? file_update_time+0x1de/0x210 [ 62.749213][ T566] shmem_file_write_iter+0x105/0x130 [ 62.749224][ T566] __kernel_write_iter+0x45f/0x900 [ 62.749238][ T566] ? __cfi___kernel_write_iter+0x10/0x10 [ 62.749251][ T566] ? get_dump_page+0x165/0x220 [ 62.749262][ T566] ? __asan_memset+0x39/0x50 [ 62.749275][ T566] ? iov_iter_bvec+0xc0/0x180 [ 62.749287][ T566] dump_user_range+0xb8b/0xe60 [ 62.749302][ T566] ? __cfi_dump_user_range+0x10/0x10 [ 62.749316][ T566] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 62.749326][ T566] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 62.749342][ T566] ? elf_core_dump+0x23cf/0x3840 [ 62.749352][ T566] elf_core_dump+0x2d61/0x3840 [ 62.749364][ T566] ? __cfi_elf_core_dump+0x10/0x10 [ 62.749373][ T566] ? mas_next_slot+0xf01/0xfd0 [ 62.749388][ T566] ? dump_interrupted+0xf0/0xf0 [ 62.749400][ T566] ? filp_open+0x199/0x1f0 [ 62.749411][ T566] ? 0xffffffffff600000 [ 62.749420][ T566] do_coredump+0x20d5/0x3050 [ 62.749434][ T566] ? __cfi_do_coredump+0x10/0x10 [ 62.749447][ T566] ? asm_exc_page_fault+0x2b/0x30 [ 62.749462][ T566] ? __kasan_slab_free+0x6a/0x80 [ 62.749472][ T566] ? get_signal+0xa2a/0x1490 [ 62.749486][ T566] get_signal+0x11bf/0x1490 [ 62.749501][ T566] arch_do_signal_or_restart+0xbc/0x700 [ 62.749513][ T566] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 62.749524][ T566] ? __bad_area_nosemaphore+0x2fb/0x680 [ 62.749535][ T566] irqentry_exit_to_user_mode+0x4d/0xb0 [ 62.749548][ T566] irqentry_exit+0x16/0x60 [ 62.749560][ T566] exc_page_fault+0x65/0xc0 [ 62.749571][ T566] asm_exc_page_fault+0x2b/0x30 [ 62.749582][ T566] RIP: 0033:0x7f5c36b9e1e1 [ 62.749592][ T566] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 62.749601][ T566] RSP: 002b:fffffffffffffda0 EFLAGS: 00010217 [ 62.749611][ T566] RAX: 0000000000000000 RBX: 00007f5c36e26270 RCX: 00007f5c36b9e1d9 [ 62.749619][ T566] RDX: 0000000000000000 RSI: fffffffffffffda0 RDI: 0000000001228000 [ 62.749626][ T566] RBP: 00007f5c36c35888 R08: 0000000000000000 R09: 0000000000000000 [ 62.749633][ T566] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 62.749639][ T566] R13: 00007f5c36e26308 R14: 00007f5c36e26270 R15: 00007ffc0bed9d88 [ 62.749647][ T566] [ 62.749661][ T566] memory: usage 307200kB, limit 307200kB, failcnt 72341 [ 63.236971][ T1069] incfs: mount failed -2 [ 63.245921][ T1069] incfs: Error accessing: ./proc/thread-self/fail-nth. [ 63.255972][ T64] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 63.270815][ T1069] incfs: mount failed -2 [ 63.294402][ T1077] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 63.302402][ T1077] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.379337][ T566] memory+swap: usage 432172kB, limit 9007199254740988kB, failcnt 0 [ 63.402039][ T566] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 63.422593][ T566] Memory cgroup stats for /syz4: [ 63.422678][ T566] cache 314490880 [ 63.457570][ T9] usb 6-1: USB disconnect, device number 3 [ 63.463825][ T9] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 63.485070][ T566] rss 77824 [ 63.488208][ T566] rss_huge 0 [ 63.503897][ T566] shmem 314482688 [ 63.516024][ T1110] netlink: 12 bytes leftover after parsing attributes in process `syz.6.211'. [ 63.527733][ T566] mapped_file 0 [ 63.531191][ T566] dirty 0 [ 63.534100][ T566] writeback 0 [ 63.548054][ T566] workingset_refault_anon 113 [ 63.552739][ T566] workingset_refault_file 27359 [ 63.574978][ T64] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 63.584839][ T566] swap 127971328 [ 63.616531][ T566] swapcached 24576 [ 63.620263][ T566] pgpgin 214659 [ 63.639720][ T566] pgpgout 137859 [ 63.643275][ T566] pgfault 15144 [ 63.666983][ T566] pgmajfault 748 [ 63.670628][ T566] inactive_anon 304582656 [ 63.689418][ T566] active_anon 9981952 [ 63.693496][ T566] inactive_file 8192 [ 63.715021][ T566] active_file 0 [ 63.723243][ T566] unevictable 0 [ 63.735064][ T566] hierarchical_memory_limit 314572800 [ 63.745717][ T64] usb 1-1: unable to get BOS descriptor or descriptor too short [ 63.754066][ T64] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 63.770912][ T566] hierarchical_memsw_limit 9223372036854771712 [ 63.787268][ T566] total_cache 314490880 [ 63.792554][ T64] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 63.822436][ T566] total_rss 77824 [ 63.826285][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.834267][ T64] usb 1-1: Product: syz [ 63.842274][ T566] total_rss_huge 0 [ 63.848602][ T566] total_shmem 314482688 [ 63.852780][ T566] total_mapped_file 0 [ 63.864500][ T64] usb 1-1: Manufacturer: syz [ 63.872890][ T566] total_dirty 0 [ 63.876860][ T64] usb 1-1: SerialNumber: syz [ 63.881501][ T566] total_writeback 0 [ 63.888001][ T566] total_workingset_refault_anon 113 [ 63.893313][ T566] total_workingset_refault_file 27359 [ 63.902957][ T566] total_swap 127971328 [ 63.907263][ T566] total_swapcached 24576 [ 63.911516][ T566] total_pgpgin 214659 [ 63.915700][ T566] total_pgpgout 137859 [ 63.919824][ T566] total_pgfault 15144 [ 63.923816][ T566] total_pgmajfault 748 [ 63.928140][ T566] total_inactive_anon 304582656 [ 63.933066][ T566] total_active_anon 9981952 [ 63.937812][ T566] total_inactive_file 8192 [ 63.942220][ T566] total_active_file 0 [ 63.946987][ T566] total_unevictable 0 [ 63.951005][ T566] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.51,pid=588,uid=0 [ 63.965886][ T566] Memory cgroup out of memory: Killed process 588 (syz.4.51) total-vm:90672kB, anon-rss:1312kB, file-rss:38336kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 64.048035][ T1141] rust_binder: 1140:1141 failed to claim space for a BINDER_TYPE_PTR (offset: 120, limit: 120, size: 4) [ 64.059235][ T1141] rust_binder: 1140:1141 error while translating object: EINVAL [ 64.066947][ T1141] rust_binder: Failure in copy_transaction_data: EINVAL [ 64.066963][ T1141] rust_binder: 1140:1141 transaction call to 1140:0 failed EINVAL, code 0 size 96-24 line thread.rs:913 [ 64.103398][ T64] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 64.145005][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 64.182929][ T573] syz.4.51 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 64.245524][ T1143] SELinux: security_context_str_to_sid (sytem_uÝGйÿÿ) failed with errno=-22 [ 64.296214][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 64.304054][ T64] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 64.314159][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 64.314169][ T36] audit: type=1400 audit(1791509675.456:347): avc: denied { nlmsg_write } for pid=1146 comm="syz.5.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 64.344951][ T1148] netlink: 64 bytes leftover after parsing attributes in process `syz.5.219'. [ 64.353848][ T10] usb 7-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 64.364956][ T64] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 64.372727][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.385009][ T573] CPU: 0 UID: 0 PID: 573 Comm: syz.4.51 Not tainted syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d [ 64.385027][ T573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 64.385035][ T573] Call Trace: [ 64.385038][ T573] [ 64.385043][ T573] __dump_stack+0x21/0x30 [ 64.385062][ T573] dump_stack_lvl+0x140/0x1c0 [ 64.385079][ T573] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.385093][ T573] ? ___ratelimit+0x41c/0x5c0 [ 64.385104][ T573] ? __kasan_check_write+0x18/0x20 [ 64.385120][ T573] dump_stack+0x19/0x20 [ 64.385133][ T573] dump_header+0xd9/0x460 [ 64.385147][ T573] oom_kill_process+0x35d/0x640 [ 64.385163][ T573] out_of_memory+0x5d1/0xa20 [ 64.385177][ T573] ? __cfi_out_of_memory+0x10/0x10 [ 64.385191][ T573] ? mutex_lock_killable+0x115/0x1d0 [ 64.385203][ T573] ? __cfi_mutex_lock_killable+0x10/0x10 [ 64.385216][ T573] mem_cgroup_out_of_memory+0x2c5/0x390 [ 64.385230][ T573] ? css_next_descendant_pre+0x1ec/0x210 [ 64.385246][ T573] ? __kasan_check_write+0x18/0x20 [ 64.385259][ T573] ? drain_obj_stock+0xec0/0xec0 [ 64.385273][ T573] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 64.385287][ T573] try_charge_memcg+0x925/0xe10 [ 64.385297][ T573] ? static_key_count+0x45/0x70 [ 64.385308][ T573] ? lruvec_init+0x201/0x280 [ 64.385322][ T573] ? __cfi_try_charge_memcg+0x10/0x10 [ 64.385334][ T573] ? __alloc_pages_noprof+0x35a/0x7e0 [ 64.385347][ T573] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 64.385359][ T573] __mem_cgroup_charge+0xfc/0x420 [ 64.385371][ T573] ? folio_add_lru+0x116/0x400 [ 64.385381][ T573] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 64.385395][ T573] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 64.385406][ T573] ? shmem_replace_folio+0x9b0/0x9b0 [ 64.385415][ T573] ? shmem_huge_global_enabled+0x2da/0x360 [ 64.385430][ T573] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 64.385444][ T573] ? __kasan_check_write+0x18/0x20 [ 64.385457][ T573] ? _raw_spin_lock+0x92/0x120 [ 64.385471][ T573] shmem_get_folio_gfp+0x5cd/0x12e0 [ 64.385486][ T573] ? shmem_get_folio+0xc0/0xc0 [ 64.385500][ T573] ? __kasan_check_write+0x18/0x20 [ 64.385513][ T573] ? inode_to_bdi+0x6d/0x100 [ 64.385524][ T573] shmem_write_begin+0xf4/0x260 [ 64.385534][ T573] generic_perform_write+0x329/0x970 [ 64.385544][ T573] ? inode_update_timestamps+0x4d1/0x6e0 [ 64.385557][ T573] ? __cfi_generic_perform_write+0x10/0x10 [ 64.385568][ T573] ? generic_write_checks_count+0x426/0x540 [ 64.385579][ T573] ? mnt_get_write_access_file+0x1af/0x3b0 [ 64.385590][ T573] ? mnt_put_write_access_file+0xc2/0x100 [ 64.385602][ T573] ? file_update_time+0x1de/0x210 [ 64.385613][ T573] shmem_file_write_iter+0x105/0x130 [ 64.385624][ T573] __kernel_write_iter+0x45f/0x900 [ 64.385643][ T573] ? __cfi___kernel_write_iter+0x10/0x10 [ 64.385657][ T573] ? get_dump_page+0x165/0x220 [ 64.385667][ T573] ? __asan_memset+0x39/0x50 [ 64.385680][ T573] ? iov_iter_bvec+0xc0/0x180 [ 64.385692][ T573] dump_user_range+0xb8b/0xe60 [ 64.385707][ T573] ? __cfi_dump_user_range+0x10/0x10 [ 64.385720][ T573] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 64.385731][ T573] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 64.385747][ T573] ? elf_core_dump+0x23cf/0x3840 [ 64.385757][ T573] elf_core_dump+0x2d61/0x3840 [ 64.385768][ T573] ? __cfi_elf_core_dump+0x10/0x10 [ 64.385778][ T573] ? mas_next_slot+0xf01/0xfd0 [ 64.385793][ T573] ? dump_interrupted+0xf0/0xf0 [ 64.385805][ T573] ? filp_open+0x199/0x1f0 [ 64.385816][ T573] ? 0xffffffffff600000 [ 64.385824][ T573] do_coredump+0x20d5/0x3050 [ 64.385838][ T573] ? __cfi_do_coredump+0x10/0x10 [ 64.385851][ T573] ? asm_exc_page_fault+0x2b/0x30 [ 64.385866][ T573] ? __kasan_slab_free+0x6a/0x80 [ 64.385875][ T573] ? get_signal+0xa2a/0x1490 [ 64.385890][ T573] get_signal+0x11bf/0x1490 [ 64.385904][ T573] arch_do_signal_or_restart+0xbc/0x700 [ 64.385916][ T573] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 64.385927][ T573] ? __bad_area_nosemaphore+0x2fb/0x680 [ 64.385939][ T573] irqentry_exit_to_user_mode+0x4d/0xb0 [ 64.385952][ T573] irqentry_exit+0x16/0x60 [ 64.385964][ T573] exc_page_fault+0x65/0xc0 [ 64.385975][ T573] asm_exc_page_fault+0x2b/0x30 [ 64.385986][ T573] RIP: 0033:0x7f5c36b9e1e1 [ 64.385995][ T573] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 64.386004][ T573] RSP: 002b:fffffffffffffda0 EFLAGS: 00010217 [ 64.386015][ T573] RAX: 0000000000000000 RBX: 00007f5c36e26270 RCX: 00007f5c36b9e1d9 [ 64.386022][ T573] RDX: 0000000000000000 RSI: fffffffffffffda0 RDI: 0000000001228000 [ 64.386030][ T573] RBP: 00007f5c36c35888 R08: 0000000000000000 R09: 0000000000000000 [ 64.386036][ T573] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 64.386043][ T573] R13: 00007f5c36e26308 R14: 00007f5c36e26270 R15: 00007ffc0bed9d88 [ 64.386051][ T573] [ 64.386064][ T573] memory: usage 307200kB, limit 307200kB, failcnt 73594 [ 64.872642][ T10] usb 7-1: Product: syz [ 64.876878][ T10] usb 7-1: Manufacturer: syz [ 64.881458][ T10] usb 7-1: SerialNumber: syz [ 64.911610][ T573] memory+swap: usage 431960kB, limit 9007199254740988kB, failcnt 0 [ 64.919793][ T573] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 64.926790][ T573] Memory cgroup stats for /syz4: [ 64.926879][ T573] cache 314478592 [ 64.935731][ T573] rss 94208 [ 64.938832][ T573] rss_huge 0 [ 64.942010][ T573] shmem 314470400 [ 64.945902][ T573] mapped_file 0 [ 64.949460][ T573] dirty 0 [ 64.952421][ T573] writeback 0 [ 64.956269][ T573] workingset_refault_anon 113 [ 64.960964][ T573] workingset_refault_file 28119 [ 64.966151][ T573] swap 127754240 [ 64.969732][ T573] swapcached 20480 [ 64.973456][ T573] pgpgin 221563 [ 64.977243][ T573] pgpgout 144763 [ 64.980935][ T573] pgfault 15405 [ 64.984395][ T573] pgmajfault 766 [ 64.988301][ T573] inactive_anon 32890880 [ 64.992586][ T573] active_anon 281673728 [ 64.996908][ T573] inactive_file 8192 [ 65.000877][ T573] active_file 0 [ 65.004354][ T573] unevictable 0 [ 65.008253][ T573] hierarchical_memory_limit 314572800 [ 65.013695][ T573] hierarchical_memsw_limit 9223372036854771712 [ 65.020028][ T573] total_cache 314478592 [ 65.024256][ T573] total_rss 94208 [ 65.028054][ T573] total_rss_huge 0 [ 65.031806][ T573] total_shmem 314470400 [ 65.036152][ T573] total_mapped_file 0 [ 65.040126][ T573] total_dirty 0 [ 65.043612][ T573] total_writeback 0 [ 65.047719][ T573] total_workingset_refault_anon 113 [ 65.052905][ T573] total_workingset_refault_file 28119 [ 65.058510][ T573] total_swap 127754240 [ 65.062568][ T573] total_swapcached 20480 [ 65.066949][ T573] total_pgpgin 221563 [ 65.071023][ T573] total_pgpgout 144763 [ 65.075380][ T573] total_pgfault 15405 [ 65.079367][ T573] total_pgmajfault 766 [ 65.083507][ T573] total_inactive_anon 32890880 [ 65.088558][ T64] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 65.097143][ T64] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 65.107560][ T573] total_active_anon 281673728 [ 65.112263][ T573] total_inactive_file 8192 [ 65.116851][ T573] total_active_file 0 [ 65.120915][ T573] total_unevictable 0 [ 65.124886][ T573] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.51,pid=573,uid=0 [ 65.139825][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 65.147438][ T573] Memory cgroup out of memory: Killed process 573 (syz.4.51) total-vm:90672kB, anon-rss:1300kB, file-rss:35664kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000 [ 65.275746][ T569] syz.4.51 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 65.297636][ T64] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 65.308192][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 65.314798][ T9] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.328028][ T10] usb 7-1: unit 4 not found! [ 65.332629][ T10] usb 7-1: unit 14 not found! [ 65.346577][ T64] usb 1-1: USB disconnect, device number 23 [ 65.355639][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 65.362266][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 65.375896][ T10] usb 7-1: USB disconnect, device number 7 [ 65.397795][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.411404][ T493] udevd[493]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 65.437834][ T9] usb 6-1: config 0 descriptor?? [ 65.453028][ T569] CPU: 0 UID: 0 PID: 569 Comm: syz.4.51 Not tainted syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d [ 65.453050][ T569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 65.453058][ T569] Call Trace: [ 65.453062][ T569] [ 65.453066][ T569] __dump_stack+0x21/0x30 [ 65.453086][ T569] dump_stack_lvl+0x140/0x1c0 [ 65.453101][ T569] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.453115][ T569] ? ___ratelimit+0x41c/0x5c0 [ 65.453127][ T569] ? __kasan_check_write+0x18/0x20 [ 65.453142][ T569] dump_stack+0x19/0x20 [ 65.453156][ T569] dump_header+0xd9/0x460 [ 65.453170][ T569] oom_kill_process+0x35d/0x640 [ 65.453185][ T569] out_of_memory+0x5d1/0xa20 [ 65.453200][ T569] ? __cfi_out_of_memory+0x10/0x10 [ 65.453214][ T569] ? mutex_lock_killable+0x97/0x1d0 [ 65.453226][ T569] ? __cfi_mutex_lock_killable+0x10/0x10 [ 65.453238][ T569] mem_cgroup_out_of_memory+0x2c5/0x390 [ 65.453253][ T569] ? css_next_descendant_pre+0x1ec/0x210 [ 65.453269][ T569] ? __kasan_check_write+0x18/0x20 [ 65.453282][ T569] ? drain_obj_stock+0xec0/0xec0 [ 65.453296][ T569] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 65.453310][ T569] try_charge_memcg+0x925/0xe10 [ 65.453321][ T569] ? static_key_count+0x45/0x70 [ 65.453332][ T569] ? lruvec_init+0x201/0x280 [ 65.453346][ T569] ? __cfi_try_charge_memcg+0x10/0x10 [ 65.453358][ T569] ? __alloc_pages_noprof+0x35a/0x7e0 [ 65.453370][ T569] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 65.453382][ T569] __mem_cgroup_charge+0xfc/0x420 [ 65.453395][ T569] ? folio_add_lru+0x116/0x400 [ 65.453404][ T569] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 65.453418][ T569] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 65.453429][ T569] ? shmem_replace_folio+0x9b0/0x9b0 [ 65.453438][ T569] ? shmem_huge_global_enabled+0x2da/0x360 [ 65.453453][ T569] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 65.453468][ T569] ? __kasan_check_write+0x18/0x20 [ 65.453480][ T569] ? _raw_spin_lock+0x92/0x120 [ 65.453494][ T569] shmem_get_folio_gfp+0x5cd/0x12e0 [ 65.453510][ T569] ? shmem_get_folio+0xc0/0xc0 [ 65.453523][ T569] ? follow_page_pte+0x8fb/0xba0 [ 65.453534][ T569] ? inode_to_bdi+0x6d/0x100 [ 65.453551][ T569] shmem_write_begin+0xf4/0x260 [ 65.453561][ T569] generic_perform_write+0x329/0x970 [ 65.453573][ T569] ? __cfi_generic_perform_write+0x10/0x10 [ 65.453584][ T569] ? generic_write_checks_count+0x426/0x540 [ 65.453596][ T569] ? file_update_time+0xa3/0x210 [ 65.453608][ T569] shmem_file_write_iter+0x105/0x130 [ 65.453619][ T569] __kernel_write_iter+0x45f/0x900 [ 65.453633][ T569] ? __cfi___kernel_write_iter+0x10/0x10 [ 65.453647][ T569] ? get_dump_page+0x165/0x220 [ 65.453657][ T569] ? __asan_memset+0x39/0x50 [ 65.453670][ T569] ? iov_iter_bvec+0xc0/0x180 [ 65.453682][ T569] dump_user_range+0xb8b/0xe60 [ 65.453698][ T569] ? __cfi_dump_user_range+0x10/0x10 [ 65.453712][ T569] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 65.453722][ T569] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 65.453738][ T569] ? elf_core_dump+0x23cf/0x3840 [ 65.453749][ T569] elf_core_dump+0x2d61/0x3840 [ 65.453760][ T569] ? __cfi_elf_core_dump+0x10/0x10 [ 65.453770][ T569] ? mas_next_slot+0xf01/0xfd0 [ 65.453784][ T569] ? dump_interrupted+0xf0/0xf0 [ 65.453797][ T569] ? filp_open+0x199/0x1f0 [ 65.453808][ T569] ? 0xffffffffff600000 [ 65.453816][ T569] do_coredump+0x20d5/0x3050 [ 65.453831][ T569] ? __cfi_do_coredump+0x10/0x10 [ 65.453843][ T569] ? asm_exc_page_fault+0x2b/0x30 [ 65.453858][ T569] ? __kasan_slab_free+0x6a/0x80 [ 65.453868][ T569] ? get_signal+0xa2a/0x1490 [ 65.453882][ T569] get_signal+0x11bf/0x1490 [ 65.453897][ T569] arch_do_signal_or_restart+0xbc/0x700 [ 65.453909][ T569] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 65.453920][ T569] ? __bad_area_nosemaphore+0x2fb/0x680 [ 65.453932][ T569] irqentry_exit_to_user_mode+0x4d/0xb0 [ 65.453946][ T569] irqentry_exit+0x16/0x60 [ 65.453957][ T569] exc_page_fault+0x65/0xc0 [ 65.453969][ T569] asm_exc_page_fault+0x2b/0x30 [ 65.453980][ T569] RIP: 0033:0x7f5c36b9e1e1 [ 65.453989][ T569] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 65.453998][ T569] RSP: 002b:fffffffffffffda0 EFLAGS: 00010217 [ 65.454009][ T569] RAX: 0000000000000000 RBX: 00007f5c36e26270 RCX: 00007f5c36b9e1d9 [ 65.454017][ T569] RDX: 0000000000000000 RSI: fffffffffffffda0 RDI: 0000000001228000 [ 65.454024][ T569] RBP: 00007f5c36c35888 R08: 0000000000000000 R09: 0000000000000000 [ 65.454030][ T569] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 65.454036][ T569] R13: 00007f5c36e26308 R14: 00007f5c36e26270 R15: 00007ffc0bed9d88 [ 65.454045][ T569] [ 65.454049][ T569] memory: usage 301524kB, limit 307200kB, failcnt 74314 [ 66.001734][ T569] memory+swap: usage 413740kB, limit 9007199254740988kB, failcnt 0 [ 66.010370][ T569] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 66.017666][ T569] Memory cgroup stats for /syz4: [ 66.017745][ T569] cache 295350272 [ 66.039147][ T36] audit: type=1400 audit(1791509677.176:348): avc: denied { write } for pid=1153 comm="syz.6.221" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.087020][ T569] rss 98304 [ 66.126981][ T569] rss_huge 0 [ 66.130215][ T569] shmem 291090432 [ 66.142124][ T569] mapped_file 4194304 [ 66.152115][ T569] dirty 0 [ 66.155228][ T569] writeback 0 [ 66.162110][ T569] workingset_refault_anon 119 [ 66.172114][ T569] workingset_refault_file 29157 [ 66.182109][ T569] swap 127950848 [ 66.192107][ T569] swapcached 45056 [ 66.197420][ T9] logitech 0003:046D:C219.0004: ignoring exceeding usage max [ 66.206718][ T9] logitech 0003:046D:C219.0004: unknown main item tag 0x2 [ 66.222174][ T9] logitech 0003:046D:C219.0004: hidraw0: USB HID v0.01 Device [HID 046d:c219] on usb-dummy_hcd.5-1/input0 [ 66.258397][ T569] pgpgin 223704 [ 66.270321][ T9] logitech 0003:046D:C219.0004: no inputs found [ 66.279922][ T569] pgpgout 151568 [ 66.307758][ T569] pgfault 15483 [ 66.313421][ T36] audit: type=1400 audit(1791509677.446:349): avc: denied { nlmsg_read } for pid=1179 comm="syz.0.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.336750][ T569] pgmajfault 771 [ 66.340379][ T569] inactive_anon 57286656 [ 66.345909][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 66.373673][ T569] active_anon 233922560 [ 66.384786][ T36] audit: type=1400 audit(1791509677.526:350): avc: denied { getopt } for pid=1185 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.418644][ T569] inactive_file 8192 [ 66.429063][ T569] active_file 4251648 [ 66.440157][ T569] unevictable 0 [ 66.448024][ T569] hierarchical_memory_limit 314572800 [ 66.455899][ T36] audit: type=1400 audit(1791509677.546:351): avc: denied { lock } for pid=1185 comm="syz.0.234" path="/dev/binderfs/features/freeze_notification" dev="binder" ino=1048619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.484305][ T569] hierarchical_memsw_limit 9223372036854771712 [ 66.491419][ T569] total_cache 295350272 [ 66.501430][ T569] total_rss 98304 [ 66.505378][ T569] total_rss_huge 0 [ 66.509226][ T569] total_shmem 291090432 [ 66.513505][ T36] audit: type=1400 audit(1791509677.566:352): avc: denied { write } for pid=1187 comm="syz.0.235" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 66.536336][ T569] total_mapped_file 4194304 [ 66.540861][ T10] usb 7-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 66.553271][ T569] total_dirty 0 [ 66.556829][ T569] total_writeback 0 [ 66.560607][ T569] total_workingset_refault_anon 119 [ 66.566198][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.576524][ T569] total_workingset_refault_file 29157 [ 66.581918][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 66.594940][ T36] audit: type=1400 audit(1791509677.566:353): avc: denied { open } for pid=1187 comm="syz.0.235" path="/77/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 66.618747][ T569] total_swap 127950848 [ 66.622838][ T569] total_swapcached 45056 [ 66.627396][ T569] total_pgpgin 223704 [ 66.631533][ T569] total_pgpgout 151568 [ 66.635909][ T569] total_pgfault 15483 [ 66.639982][ T569] total_pgmajfault 771 [ 66.644287][ T36] audit: type=1400 audit(1791509677.566:354): avc: denied { read } for pid=1187 comm="syz.0.235" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 66.667088][ T569] total_inactive_anon 57286656 [ 66.672044][ T10] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 66.681530][ T569] total_active_anon 233922560 [ 66.686527][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.694870][ T569] total_inactive_file 8192 [ 66.699357][ T569] total_active_file 4251648 [ 66.704049][ T10] usb 7-1: Product: syz [ 66.708374][ T569] total_unevictable 0 [ 66.712437][ T10] usb 7-1: Manufacturer: syz [ 66.717162][ T569] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.51,pid=567,uid=0 [ 66.731862][ T10] usb 7-1: SerialNumber: syz [ 66.737069][ T10] usb 7-1: config 0 descriptor?? [ 66.743679][ T569] Memory cgroup out of memory: Killed process 567 (syz.4.51) total-vm:90672kB, anon-rss:1300kB, file-rss:40476kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 66.760546][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 66.768659][ T10] usb-storage 7-1:0.0: USB Mass Storage device detected [ 66.777637][ T10] usb-storage 7-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 66.831842][ T36] audit: type=1400 audit(1791509677.966:355): avc: denied { setopt } for pid=1074 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.868110][ T36] audit: type=1400 audit(1791509677.996:356): avc: denied { write } for pid=1074 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.891617][ T1198] rust_binder: 1074:1198 got transaction to invalid handle 1 [ 66.904973][ T9] usb 1-1: device descriptor read/64, error -71 [ 66.934006][ T555] syz.4.51 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 66.957914][ T1199] rust_binder: 1074:1199 got transaction to invalid handle 1 [ 66.971401][ T64] usb 7-1: USB disconnect, device number 8 [ 67.004973][ T1198] rust_binder: 1074:1198 transaction async to 0:0 failed ENOENT, code 0 size 72-0 line process.rs:950 [ 67.043234][ T1199] rust_binder: 1074:1199 transaction async to 0:0 failed ENOENT, code 0 size 0-24 line process.rs:950 [ 67.060914][ T555] CPU: 0 UID: 0 PID: 555 Comm: syz.4.51 Not tainted syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d [ 67.060936][ T555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 67.060944][ T555] Call Trace: [ 67.060948][ T555] [ 67.060952][ T555] __dump_stack+0x21/0x30 [ 67.060972][ T555] dump_stack_lvl+0x140/0x1c0 [ 67.060989][ T555] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.061003][ T555] ? ___ratelimit+0x41c/0x5c0 [ 67.061015][ T555] ? __kasan_check_write+0x18/0x20 [ 67.061030][ T555] dump_stack+0x19/0x20 [ 67.061043][ T555] dump_header+0xd9/0x460 [ 67.061057][ T555] oom_kill_process+0x35d/0x640 [ 67.061073][ T555] out_of_memory+0x5d1/0xa20 [ 67.061087][ T555] ? __cfi_out_of_memory+0x10/0x10 [ 67.061101][ T555] ? mutex_lock_killable+0x97/0x1d0 [ 67.061113][ T555] ? __cfi_mutex_lock_killable+0x10/0x10 [ 67.061125][ T555] mem_cgroup_out_of_memory+0x2c5/0x390 [ 67.061140][ T555] ? css_next_descendant_pre+0x1ec/0x210 [ 67.061156][ T555] ? __kasan_check_write+0x18/0x20 [ 67.061169][ T555] ? drain_obj_stock+0xec0/0xec0 [ 67.061183][ T555] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 67.061197][ T555] try_charge_memcg+0x925/0xe10 [ 67.061208][ T555] ? static_key_count+0x45/0x70 [ 67.061219][ T555] ? lruvec_init+0x201/0x280 [ 67.061233][ T555] ? __cfi_try_charge_memcg+0x10/0x10 [ 67.061252][ T555] ? __alloc_pages_noprof+0x35a/0x7e0 [ 67.061264][ T555] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 67.061275][ T555] ? _raw_spin_lock+0x92/0x120 [ 67.061290][ T555] __mem_cgroup_charge+0xfc/0x420 [ 67.061303][ T555] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 67.061316][ T555] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 67.061327][ T555] ? xas_load+0x155/0x3d0 [ 67.061336][ T555] ? shmem_replace_folio+0x9b0/0x9b0 [ 67.061346][ T555] ? shmem_huge_global_enabled+0x2da/0x360 [ 67.061361][ T555] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 67.061375][ T555] ? __kasan_check_write+0x18/0x20 [ 67.061388][ T555] ? _raw_spin_lock+0x92/0x120 [ 67.061402][ T555] shmem_get_folio_gfp+0x5cd/0x12e0 [ 67.061421][ T555] ? shmem_get_folio+0xc0/0xc0 [ 67.061434][ T555] ? follow_page_pte+0x8fb/0xba0 [ 67.061446][ T555] ? inode_to_bdi+0x6d/0x100 [ 67.061457][ T555] shmem_write_begin+0xf4/0x260 [ 67.061467][ T555] generic_perform_write+0x329/0x970 [ 67.061479][ T555] ? __cfi_generic_perform_write+0x10/0x10 [ 67.061489][ T555] ? generic_write_checks_count+0x426/0x540 [ 67.061501][ T555] ? file_update_time+0xa3/0x210 [ 67.061513][ T555] shmem_file_write_iter+0x105/0x130 [ 67.061525][ T555] __kernel_write_iter+0x45f/0x900 [ 67.061538][ T555] ? __cfi___kernel_write_iter+0x10/0x10 [ 67.061552][ T555] ? get_dump_page+0x165/0x220 [ 67.061562][ T555] ? __asan_memset+0x39/0x50 [ 67.061575][ T555] ? iov_iter_bvec+0xc0/0x180 [ 67.061588][ T555] dump_user_range+0xb8b/0xe60 [ 67.061603][ T555] ? __cfi_dump_user_range+0x10/0x10 [ 67.061618][ T555] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 67.061628][ T555] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 67.061645][ T555] ? elf_core_dump+0x23cf/0x3840 [ 67.061655][ T555] elf_core_dump+0x2d61/0x3840 [ 67.061667][ T555] ? __cfi_elf_core_dump+0x10/0x10 [ 67.061677][ T555] ? mas_next_slot+0xf01/0xfd0 [ 67.061692][ T555] ? dump_interrupted+0xf0/0xf0 [ 67.061705][ T555] ? filp_open+0x199/0x1f0 [ 67.061717][ T555] ? 0xffffffffff600000 [ 67.061725][ T555] do_coredump+0x20d5/0x3050 [ 67.061740][ T555] ? __cfi_do_coredump+0x10/0x10 [ 67.061753][ T555] ? asm_exc_page_fault+0x2b/0x30 [ 67.061768][ T555] ? __kasan_slab_free+0x6a/0x80 [ 67.061777][ T555] ? get_signal+0xa2a/0x1490 [ 67.061792][ T555] get_signal+0x11bf/0x1490 [ 67.061807][ T555] arch_do_signal_or_restart+0xbc/0x700 [ 67.061819][ T555] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 67.061831][ T555] ? __bad_area_nosemaphore+0x2fb/0x680 [ 67.061842][ T555] irqentry_exit_to_user_mode+0x4d/0xb0 [ 67.061856][ T555] irqentry_exit+0x16/0x60 [ 67.061868][ T555] exc_page_fault+0x65/0xc0 [ 67.061880][ T555] asm_exc_page_fault+0x2b/0x30 [ 67.061891][ T555] RIP: 0033:0x7f5c36b9e1e1 [ 67.061901][ T555] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 67.061910][ T555] RSP: 002b:fffffffffffffda0 EFLAGS: 00010217 [ 67.061921][ T555] RAX: 0000000000000000 RBX: 00007f5c36e26270 RCX: 00007f5c36b9e1d9 [ 67.061929][ T555] RDX: 0000000000000000 RSI: fffffffffffffda0 RDI: 0000000001228000 [ 67.061936][ T555] RBP: 00007f5c36c35888 R08: 0000000000000000 R09: 0000000000000000 [ 67.061943][ T555] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 67.061950][ T555] R13: 00007f5c36e26308 R14: 00007f5c36e26270 R15: 00007ffc0bed9d88 [ 67.061958][ T555] [ 67.061999][ T555] memory: usage 307036kB, limit 307200kB, failcnt 77152 [ 67.594985][ T9] usb 1-1: device descriptor read/64, error -71 [ 67.760702][ T64] rust_binder: 1074: undelivered TRANSACTION_ERROR: 29201 [ 67.774412][ T64] rust_binder: 1074: undelivered TRANSACTION_ERROR: 29201 [ 67.819101][ T555] memory+swap: usage 432156kB, limit 9007199254740988kB, failcnt 0 [ 67.827340][ T555] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 67.834281][ T555] Memory cgroup stats for /syz4: [ 67.834363][ T555] cache 314466304 [ 67.843035][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 67.851158][ T555] rss 94208 [ 67.854524][ T555] rss_huge 0 [ 67.857972][ T555] shmem 314462208 [ 67.861802][ T555] mapped_file 0 [ 67.865462][ T555] dirty 0 [ 67.868451][ T555] writeback 0 [ 67.871854][ T555] workingset_refault_anon 120 [ 67.876858][ T555] workingset_refault_file 30744 [ 67.881768][ T555] swap 127954944 [ 67.885605][ T555] swapcached 40960 [ 67.889398][ T555] pgpgin 246022 [ 67.892923][ T555] pgpgout 169222 [ 67.900170][ T64] usb 6-1: USB disconnect, device number 4 [ 67.925125][ T555] pgfault 15803 [ 67.928676][ T555] pgmajfault 794 [ 67.932201][ T555] inactive_anon 198844416 [ 67.945041][ T555] active_anon 115724288 [ 67.979576][ T555] inactive_file 0 [ 67.985002][ T9] usb 1-1: device descriptor read/64, error -71 [ 67.997661][ T555] active_file 4096 [ 68.014770][ T555] unevictable 0 [ 68.032494][ T555] hierarchical_memory_limit 314572800 [ 68.054972][ T555] hierarchical_memsw_limit 9223372036854771712 [ 68.081565][ T1213] overlay: filesystem on ./bus not supported as upperdir [ 68.088732][ T555] total_cache 314466304 [ 68.092886][ T555] total_rss 94208 [ 68.106164][ T555] total_rss_huge 0 [ 68.114118][ T555] total_shmem 314462208 [ 68.129026][ T555] total_mapped_file 0 [ 68.144961][ T555] total_dirty 0 [ 68.148424][ T555] total_writeback 0 [ 68.152207][ T555] total_workingset_refault_anon 120 [ 68.175185][ T555] total_workingset_refault_file 30744 [ 68.201584][ T555] total_swap 127954944 [ 68.210927][ T555] total_swapcached 40960 [ 68.217830][ T555] total_pgpgin 246022 [ 68.224991][ T9] usb 1-1: device descriptor read/64, error -71 [ 68.235019][ T555] total_pgpgout 169222 [ 68.239104][ T555] total_pgfault 15803 [ 68.251628][ T555] total_pgmajfault 794 [ 68.258293][ T555] total_inactive_anon 198844416 [ 68.268195][ T555] total_active_anon 115724288 [ 68.277202][ T555] total_inactive_file 0 [ 68.285695][ T555] total_active_file 4096 [ 68.294306][ T555] total_unevictable 0 [ 68.302658][ T555] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.51,pid=560,uid=0 [ 68.329254][ T12] bridge_slave_1: left allmulticast mode [ 68.335028][ T12] bridge_slave_1: left promiscuous mode [ 68.340830][ T9] usb usb1-port1: attempt power cycle [ 68.347107][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.357580][ T555] Memory cgroup out of memory: Killed process 560 (syz.4.51) total-vm:90672kB, anon-rss:1308kB, file-rss:34536kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 68.375033][ T12] bridge_slave_0: left allmulticast mode [ 68.380673][ T12] bridge_slave_0: left promiscuous mode [ 68.394409][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.462677][ T1224] can0: slcan on ttynull. [ 68.468710][ T12] veth1_macvtap: left promiscuous mode [ 68.493994][ T12] veth0_vlan: left promiscuous mode [ 68.630597][ T1222] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.652288][ T1222] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.675801][ T1222] bridge_slave_0: entered allmulticast mode [ 68.694980][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 68.705265][ T1222] bridge_slave_0: entered promiscuous mode [ 68.718408][ T1222] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.735045][ T1222] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.745007][ T9] usb 1-1: device descriptor read/8, error -71 [ 68.756664][ T1222] bridge_slave_1: entered allmulticast mode [ 68.769391][ T1222] bridge_slave_1: entered promiscuous mode [ 68.850919][ T1222] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.858017][ T1222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.865277][ T1222] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.872282][ T1222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.898096][ T9] usb 1-1: device descriptor read/8, error -71 [ 68.911630][ T548] syz.4.51 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 68.935012][ T312] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 68.951030][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.963725][ T548] CPU: 0 UID: 0 PID: 548 Comm: syz.4.51 Not tainted syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d [ 68.963746][ T548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 68.963754][ T548] Call Trace: [ 68.963757][ T548] [ 68.963762][ T548] __dump_stack+0x21/0x30 [ 68.963782][ T548] dump_stack_lvl+0x140/0x1c0 [ 68.963797][ T548] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.963812][ T548] ? ___ratelimit+0x41c/0x5c0 [ 68.963825][ T548] ? __kasan_check_write+0x18/0x20 [ 68.963845][ T548] dump_stack+0x19/0x20 [ 68.963859][ T548] dump_header+0xd9/0x460 [ 68.963874][ T548] oom_kill_process+0x35d/0x640 [ 68.963890][ T548] out_of_memory+0x5d1/0xa20 [ 68.963904][ T548] ? __cfi_out_of_memory+0x10/0x10 [ 68.963918][ T548] ? mutex_lock_killable+0x97/0x1d0 [ 68.963931][ T548] ? __cfi_mutex_lock_killable+0x10/0x10 [ 68.963943][ T548] mem_cgroup_out_of_memory+0x2c5/0x390 [ 68.963958][ T548] ? css_next_descendant_pre+0x1ec/0x210 [ 68.963974][ T548] ? __kasan_check_write+0x18/0x20 [ 68.963987][ T548] ? drain_obj_stock+0xec0/0xec0 [ 68.964002][ T548] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 68.964016][ T548] try_charge_memcg+0x925/0xe10 [ 68.964027][ T548] ? static_key_count+0x45/0x70 [ 68.964039][ T548] ? lruvec_init+0x201/0x280 [ 68.964053][ T548] ? __cfi_try_charge_memcg+0x10/0x10 [ 68.964065][ T548] ? __alloc_pages_noprof+0x35a/0x7e0 [ 68.964077][ T548] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 68.964090][ T548] __mem_cgroup_charge+0xfc/0x420 [ 68.964103][ T548] ? folio_add_lru+0x116/0x400 [ 68.964113][ T548] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 68.964127][ T548] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 68.964139][ T548] ? shmem_replace_folio+0x9b0/0x9b0 [ 68.964149][ T548] ? shmem_huge_global_enabled+0x2da/0x360 [ 68.964164][ T548] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 68.964178][ T548] ? __kasan_check_write+0x18/0x20 [ 68.964192][ T548] ? _raw_spin_lock+0x92/0x120 [ 68.964206][ T548] shmem_get_folio_gfp+0x5cd/0x12e0 [ 68.964222][ T548] ? shmem_get_folio+0xc0/0xc0 [ 68.964235][ T548] ? follow_page_pte+0x8fb/0xba0 [ 68.964247][ T548] ? inode_to_bdi+0x6d/0x100 [ 68.964259][ T548] shmem_write_begin+0xf4/0x260 [ 68.964268][ T548] generic_perform_write+0x329/0x970 [ 68.964281][ T548] ? __cfi_generic_perform_write+0x10/0x10 [ 68.964291][ T548] ? generic_write_checks_count+0x426/0x540 [ 68.964303][ T548] ? file_update_time+0xa3/0x210 [ 68.964315][ T548] shmem_file_write_iter+0x105/0x130 [ 68.964327][ T548] __kernel_write_iter+0x45f/0x900 [ 68.964341][ T548] ? __cfi___kernel_write_iter+0x10/0x10 [ 68.964354][ T548] ? get_dump_page+0x165/0x220 [ 68.964365][ T548] ? __asan_memset+0x39/0x50 [ 68.964378][ T548] ? iov_iter_bvec+0xc0/0x180 [ 68.964390][ T548] dump_user_range+0xb8b/0xe60 [ 68.964405][ T548] ? __cfi_dump_user_range+0x10/0x10 [ 68.964419][ T548] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 68.964430][ T548] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 68.964446][ T548] ? elf_core_dump+0x23cf/0x3840 [ 68.964457][ T548] elf_core_dump+0x2d61/0x3840 [ 68.964469][ T548] ? __cfi_elf_core_dump+0x10/0x10 [ 68.964479][ T548] ? mas_next_slot+0xf01/0xfd0 [ 68.964493][ T548] ? dump_interrupted+0xf0/0xf0 [ 68.964507][ T548] ? filp_open+0x199/0x1f0 [ 68.964518][ T548] ? 0xffffffffff600000 [ 68.964526][ T548] do_coredump+0x20d5/0x3050 [ 68.964541][ T548] ? __cfi_do_coredump+0x10/0x10 [ 68.964554][ T548] ? asm_exc_page_fault+0x2b/0x30 [ 68.964569][ T548] ? __kasan_slab_free+0x6a/0x80 [ 68.964579][ T548] ? get_signal+0xa2a/0x1490 [ 68.964594][ T548] get_signal+0x11bf/0x1490 [ 68.964609][ T548] arch_do_signal_or_restart+0xbc/0x700 [ 68.964621][ T548] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 68.964633][ T548] ? __bad_area_nosemaphore+0x2fb/0x680 [ 68.964645][ T548] irqentry_exit_to_user_mode+0x4d/0xb0 [ 68.964662][ T548] irqentry_exit+0x16/0x60 [ 68.964674][ T548] exc_page_fault+0x65/0xc0 [ 68.964686][ T548] asm_exc_page_fault+0x2b/0x30 [ 68.964697][ T548] RIP: 0033:0x7f5c36b9e1e1 [ 68.964707][ T548] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 68.964716][ T548] RSP: 002b:fffffffffffffda0 EFLAGS: 00010217 [ 68.964727][ T548] RAX: 0000000000000000 RBX: 00007f5c36e26270 RCX: 00007f5c36b9e1d9 [ 68.964735][ T548] RDX: 0000000000000000 RSI: fffffffffffffda0 RDI: 0000000001228000 [ 68.964742][ T548] RBP: 00007f5c36c35888 R08: 0000000000000000 R09: 0000000000000000 [ 68.964749][ T548] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 68.964755][ T548] R13: 00007f5c36e26308 R14: 00007f5c36e26270 R15: 00007ffc0bed9d88 [ 68.964764][ T548] [ 68.964792][ T548] memory: usage 307200kB, limit 307200kB, failcnt 81049 [ 69.435918][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.461389][ T1222] veth0_vlan: entered promiscuous mode [ 69.470816][ T1222] veth1_macvtap: entered promiscuous mode [ 69.488972][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.496038][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.503898][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 69.503909][ T36] audit: type=1400 audit(1791509680.626:358): avc: denied { mount } for pid=1222 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.532486][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.539550][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.553513][ T1223] can0 (unregistered): slcan off ttynull. [ 69.562679][ T1225] overlayfs: statfs failed on './file0' [ 69.663521][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 69.671685][ T36] audit: type=1400 audit(1791509680.786:359): avc: denied { read } for pid=1257 comm="syz.0.254" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.716094][ T1258] netlink: 9 bytes leftover after parsing attributes in process `syz.0.254'. [ 69.733992][ T1258] gretap0: entered promiscuous mode [ 69.745035][ T36] audit: type=1400 audit(1791509680.796:360): avc: denied { open } for pid=1257 comm="syz.0.254" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.786003][ T1258] netlink: 5 bytes leftover after parsing attributes in process `syz.0.254'. [ 69.794837][ T36] audit: type=1400 audit(1791509680.796:361): avc: denied { ioctl } for pid=1257 comm="syz.0.254" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.832011][ T1258] 0ªî{X¹¦: renamed from gretap0 [ 69.839043][ T1258] 0ªî{X¹¦: left promiscuous mode [ 69.854046][ T1258] 0ªî{X¹¦: entered allmulticast mode [ 69.860523][ T1258] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 69.893585][ T36] audit: type=1400 audit(1791509681.026:362): avc: denied { lock } for pid=1266 comm="syz.0.257" path="socket:[12143]" dev="sockfs" ino=12143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 69.922258][ T36] audit: type=1400 audit(1791509681.026:363): avc: denied { write } for pid=1266 comm="syz.0.257" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 69.959276][ T548] memory+swap: usage 432160kB, limit 9007199254740988kB, failcnt 0 [ 69.973880][ T548] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 69.981220][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 69.998832][ T548] Memory cgroup stats for /syz4 [ 69.998922][ T312] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.016296][ T548] : [ 70.016361][ T548] cache 314413056 [ 70.032124][ T548] rss 151552 [ 70.037583][ T312] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.052625][ T548] rss_huge 0 [ 70.058076][ T548] shmem 314413056 [ 70.073121][ T548] mapped_file 0 [ 70.076682][ T64] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 70.088801][ T548] dirty 0 [ 70.093976][ T312] usb 5-1: config 0 interface 0 has no altsetting 0 [ 70.106241][ T548] writeback 0 [ 70.111764][ T548] workingset_refault_anon 120 [ 70.123575][ T312] usb 5-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 70.135045][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 70.143217][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 70.152215][ T548] workingset_refault_file 30747 [ 70.157224][ T9] usb 1-1: device not accepting address 27, error -71 [ 70.164257][ T9] usb usb1-port1: unable to enumerate USB device [ 70.171532][ T10] usb 6-1: config 1 has an invalid descriptor of length 163, skipping remainder of the config [ 70.184162][ T548] swap 127959040 [ 70.188078][ T10] usb 6-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.203076][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.212574][ T548] swapcached 36864 [ 70.217726][ T548] pgpgin 255309 [ 70.226375][ T312] usb 5-1: Device is not authorized for usage [ 70.232630][ T548] pgpgout 178509 [ 70.239613][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 70.246646][ T64] usb 8-1: Using ep0 maxpacket: 8 [ 70.256005][ T548] pgfault 15957 [ 70.262239][ T64] usb 8-1: config 1 has an invalid descriptor of length 236, skipping remainder of the config [ 70.275005][ T548] pgmajfault 797 [ 70.282024][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.292258][ T64] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 178, changing to 7 [ 70.303586][ T548] inactive_anon 76365824 [ 70.308347][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.318579][ T548] active_anon 238206976 [ 70.326961][ T548] inactive_file 0 [ 70.331730][ T10] usb 6-1: Product: syz [ 70.339806][ T64] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1791, setting to 1024 [ 70.351083][ T548] active_file 0 [ 70.358137][ T10] usb 6-1: Manufacturer: syz [ 70.362872][ T548] unevictable 0 [ 70.370776][ T548] hierarchical_memory_limit 314572800 [ 70.376422][ T10] usb 6-1: SerialNumber: syz [ 70.383600][ T64] usb 8-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 70.396700][ T548] hierarchical_memsw_limit 9223372036854771712 [ 70.407450][ T64] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.417701][ T548] total_cache 314413056 [ 70.424003][ T548] total_rss 151552 [ 70.430028][ T64] usb 8-1: Product: syz [ 70.436379][ T548] total_rss_huge 0 [ 70.444280][ T64] usb 8-1: Manufacturer: syz [ 70.451126][ T548] total_shmem 314413056 [ 70.461879][ T64] usb 8-1: SerialNumber: syz [ 70.466680][ T548] total_mapped_file 0 [ 70.473541][ T548] total_dirty 0 [ 70.478347][ T548] total_writeback 0 [ 70.482264][ T548] total_workingset_refault_anon 120 [ 70.489704][ T548] total_workingset_refault_file 30747 [ 70.497358][ T548] total_swap 127959040 [ 70.501469][ T548] total_swapcached 36864 [ 70.506107][ T548] total_pgpgin 255309 [ 70.510138][ T548] total_pgpgout 178509 [ 70.514251][ T548] total_pgfault 15957 [ 70.518441][ T548] total_pgmajfault 797 [ 70.522569][ T548] total_inactive_anon 76365824 [ 70.527511][ T548] total_active_anon 238206976 [ 70.532215][ T548] total_inactive_file 0 [ 70.536539][ T548] total_active_file 0 [ 70.540543][ T548] total_unevictable 0 [ 70.544553][ T548] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.51,pid=569,uid=0 [ 70.559447][ T548] Memory cgroup out of memory: Killed process 569 (syz.4.51) total-vm:90672kB, anon-rss:1300kB, file-rss:35060kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 70.605698][ T10] cdc_ether 6-1:1.0: skipping garbage [ 70.613333][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 70.635793][ T10] usb 6-1: USB disconnect, device number 5 [ 70.679530][ T1264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.691854][ T1264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.904046][ T566] syz.4.51 invoked oom-killer: gfp_mask=0x2100cca(GFP_HIGHUSER_MOVABLE|__GFP_CMA), order=0, oom_score_adj=1000 [ 70.935273][ T566] CPU: 0 UID: 0 PID: 566 Comm: syz.4.51 Not tainted syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d [ 70.935294][ T566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 70.935302][ T566] Call Trace: [ 70.935306][ T566] [ 70.935313][ T566] __dump_stack+0x21/0x30 [ 70.935333][ T566] dump_stack_lvl+0x140/0x1c0 [ 70.935348][ T566] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.935363][ T566] ? ___ratelimit+0x41c/0x5c0 [ 70.935374][ T566] ? __kasan_check_write+0x18/0x20 [ 70.935389][ T566] dump_stack+0x19/0x20 [ 70.935403][ T566] dump_header+0xd9/0x460 [ 70.935417][ T566] oom_kill_process+0x35d/0x640 [ 70.935433][ T566] out_of_memory+0x5d1/0xa20 [ 70.935447][ T566] ? __cfi_out_of_memory+0x10/0x10 [ 70.935461][ T566] ? mutex_lock_killable+0x97/0x1d0 [ 70.935474][ T566] ? __cfi_mutex_lock_killable+0x10/0x10 [ 70.935486][ T566] mem_cgroup_out_of_memory+0x2c5/0x390 [ 70.935501][ T566] ? css_next_descendant_pre+0x1ec/0x210 [ 70.935517][ T566] ? __kasan_check_write+0x18/0x20 [ 70.935530][ T566] ? drain_obj_stock+0xec0/0xec0 [ 70.935544][ T566] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 70.935559][ T566] try_charge_memcg+0x925/0xe10 [ 70.935570][ T566] ? __cfi_try_charge_memcg+0x10/0x10 [ 70.935583][ T566] mem_cgroup_swapin_charge_folio+0x1b3/0x3e0 [ 70.935597][ T566] __read_swap_cache_async+0x496/0x860 [ 70.935613][ T566] ? __cfi___read_swap_cache_async+0x10/0x10 [ 70.935628][ T566] ? kasan_save_alloc_info+0x3a/0x50 [ 70.935641][ T566] ? __asan_memset+0x39/0x50 [ 70.935654][ T566] swap_cluster_readahead+0x321/0x570 [ 70.935670][ T566] ? __cfi_swap_cluster_readahead+0x10/0x10 [ 70.935686][ T566] swapin_readahead+0x102/0x840 [ 70.935695][ T566] ? __kasan_check_write+0x18/0x20 [ 70.935709][ T566] ? __cfi___filemap_get_folio+0x10/0x10 [ 70.935719][ T566] ? __cfi_swapin_readahead+0x10/0x10 [ 70.935728][ T566] ? __kasan_check_read+0x15/0x20 [ 70.935741][ T566] ? __folio_batch_add_and_move+0x25b/0x320 [ 70.935751][ T566] ? __cfi_lru_add+0x10/0x10 [ 70.935761][ T566] ? get_swap_device+0x10f/0x290 [ 70.935771][ T566] do_swap_page+0x4bc/0x4b30 [ 70.935792][ T566] ? __cfi_folio_add_lru+0x10/0x10 [ 70.935802][ T566] ? shmem_inode_acct_blocks+0x361/0x470 [ 70.935817][ T566] ? __cfi_do_swap_page+0x10/0x10 [ 70.935832][ T566] ? __cfi_default_wake_function+0x10/0x10 [ 70.935847][ T566] ? shmem_replace_folio+0x9b0/0x9b0 [ 70.935857][ T566] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 70.935871][ T566] handle_mm_fault+0x1238/0x1ba0 [ 70.935880][ T566] ? __kasan_check_write+0x18/0x20 [ 70.935895][ T566] ? __cfi_handle_mm_fault+0x10/0x10 [ 70.935904][ T566] ? follow_page_pte+0x4b2/0xba0 [ 70.935916][ T566] ? gup_must_unshare+0x1e0/0x1e0 [ 70.935927][ T566] ? vma_is_secretmem+0x11/0x50 [ 70.935939][ T566] ? check_vma_flags+0x337/0x3a0 [ 70.935950][ T566] __get_user_pages+0x114b/0x22d0 [ 70.935961][ T566] ? __kasan_check_write+0x18/0x20 [ 70.935976][ T566] ? populate_vma_page_range+0x220/0x220 [ 70.935987][ T566] ? __kernel_write_iter+0x6ff/0x900 [ 70.936001][ T566] get_dump_page+0x10c/0x220 [ 70.936012][ T566] ? __cfi_get_dump_page+0x10/0x10 [ 70.936022][ T566] ? __asan_memset+0x39/0x50 [ 70.936035][ T566] dump_user_range+0x18b/0xe60 [ 70.936051][ T566] ? __cfi_dump_user_range+0x10/0x10 [ 70.936065][ T566] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 70.936075][ T566] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 70.936092][ T566] ? elf_core_dump+0x23cf/0x3840 [ 70.936103][ T566] elf_core_dump+0x2d61/0x3840 [ 70.936114][ T566] ? __cfi_elf_core_dump+0x10/0x10 [ 70.936124][ T566] ? mas_next_slot+0xf01/0xfd0 [ 70.936139][ T566] ? dump_interrupted+0xf0/0xf0 [ 70.936152][ T566] ? filp_open+0x199/0x1f0 [ 70.936163][ T566] ? 0xffffffffff600000 [ 70.936172][ T566] do_coredump+0x20d5/0x3050 [ 70.936187][ T566] ? __cfi_do_coredump+0x10/0x10 [ 70.936199][ T566] ? asm_exc_page_fault+0x2b/0x30 [ 70.936215][ T566] ? __kasan_slab_free+0x6a/0x80 [ 70.936224][ T566] ? get_signal+0xa2a/0x1490 [ 70.936239][ T566] get_signal+0x11bf/0x1490 [ 70.936254][ T566] arch_do_signal_or_restart+0xbc/0x700 [ 70.936266][ T566] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 70.936277][ T566] ? __bad_area_nosemaphore+0x2fb/0x680 [ 70.936289][ T566] irqentry_exit_to_user_mode+0x4d/0xb0 [ 70.936302][ T566] irqentry_exit+0x16/0x60 [ 70.936314][ T566] exc_page_fault+0x65/0xc0 [ 70.936326][ T566] asm_exc_page_fault+0x2b/0x30 [ 70.936337][ T566] RIP: 0033:0x7f5c36b9e1e1 [ 70.936347][ T566] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 70.936356][ T566] RSP: 002b:fffffffffffffda0 EFLAGS: 00010217 [ 70.936367][ T566] RAX: 0000000000000000 RBX: 00007f5c36e26270 RCX: 00007f5c36b9e1d9 [ 70.936376][ T566] RDX: 0000000000000000 RSI: fffffffffffffda0 RDI: 0000000001228000 [ 70.936384][ T566] RBP: 00007f5c36c35888 R08: 0000000000000000 R09: 0000000000000000 [ 70.936391][ T566] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 70.936397][ T566] R13: 00007f5c36e26308 R14: 00007f5c36e26270 R15: 00007ffc0bed9d88 [ 70.936406][ T566] [ 70.936420][ T566] memory: usage 307200kB, limit 307200kB, failcnt 82545 [ 71.454790][ T566] memory+swap: usage 430780kB, limit 9007199254740988kB, failcnt 0 [ 71.463865][ T566] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 71.471118][ T566] Memory cgroup stats for /syz4: [ 71.471197][ T566] cache 312963072 [ 71.480118][ T566] rss 253952 [ 71.483339][ T566] rss_huge 0 [ 71.486690][ T566] shmem 312963072 [ 71.490379][ T566] mapped_file 0 [ 71.493898][ T566] dirty 0 [ 71.497134][ T566] writeback 0 [ 71.500544][ T566] workingset_refault_anon 155 [ 71.505511][ T566] workingset_refault_file 30747 [ 71.510369][ T566] swap 126545920 [ 71.514032][ T566] swapcached 1449984 [ 71.518304][ T566] pgpgin 262737 [ 71.521763][ T566] pgpgout 185937 [ 71.526901][ T566] pgfault 16098 [ 71.530401][ T566] pgmajfault 813 [ 71.533933][ T566] inactive_anon 193212416 [ 71.538621][ T566] active_anon 121360384 [ 71.542891][ T566] inactive_file 0 [ 71.546769][ T566] active_file 0 [ 71.550295][ T566] unevictable 0 [ 71.562705][ T36] audit: type=1400 audit(1791509682.696:364): avc: denied { wake_alarm } for pid=1294 comm="syz.5.258" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.586815][ T312] usb 5-1: USB disconnect, device number 7 [ 71.595455][ T566] hierarchical_memory_limit 314572800 [ 71.604214][ T566] hierarchical_memsw_limit 9223372036854771712 [ 71.611514][ T566] total_cache 312963072 [ 71.618146][ T566] total_rss 253952 [ 71.634019][ T566] total_rss_huge 0 [ 71.643584][ T566] total_shmem 312963072 [ 71.651458][ T566] total_mapped_file 0 [ 71.661107][ T566] total_dirty 0 [ 71.664587][ T566] total_writeback 0 [ 71.669049][ T566] total_workingset_refault_anon 155 [ 71.674470][ T566] total_workingset_refault_file 30747 [ 71.681526][ T566] total_swap 126545920 [ 71.686012][ T566] total_swapcached 1449984 [ 71.690459][ T566] total_pgpgin 262737 [ 71.694459][ T566] total_pgpgout 185937 [ 71.721409][ T64] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 71.732922][ T566] total_pgfault 16098 [ 71.743029][ T64] usb 8-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 71.766157][ T566] total_pgmajfault 813 [ 71.780537][ T566] total_inactive_anon 193212416 [ 71.794690][ T566] total_active_anon 121360384 [ 71.799839][ T64] usb 8-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 71.807690][ T566] total_inactive_file 0 [ 71.811845][ T566] total_active_file 0 [ 71.817198][ T64] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 71.826525][ T566] total_unevictable 0 [ 71.830510][ T566] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.51,pid=566,uid=0 [ 71.865929][ T1313] ------------[ cut here ]------------ [ 71.871412][ T1313] skb_assert_len [ 71.877193][ T64] usb 8-1: USB disconnect, device number 2 [ 71.885012][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 71.895354][ T493] udevd[493]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.912806][ T566] Memory cgroup out of memory: Killed process 566 (syz.4.51) total-vm:90672kB, anon-rss:1300kB, file-rss:34604kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 71.930150][ T1313] WARNING: CPU: 0 PID: 1313 at include/linux/skbuff.h:2720 __dev_queue_xmit+0x1e1d/0x3780 [ 71.940101][ T1313] Modules linked in: [ 71.943988][ T1313] CPU: 0 UID: 0 PID: 1313 Comm: syz.0.266 Not tainted syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d [ 71.955489][ T1313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 71.965582][ T1313] RIP: 0010:__dev_queue_xmit+0x1e1d/0x3780 [ 71.971384][ T1313] Code: 00 00 00 fc ff df e9 ea e6 ff ff e8 1d 1c 04 fd c6 05 4a a4 e0 03 01 48 c7 c7 a0 8a 8b 86 48 c7 c6 bb 27 1b 87 e8 f3 1a 7f fc <0f> 0b 80 3d 2f a4 e0 03 01 0f 84 af e3 ff ff e8 ef 1b 04 fd c6 05 [ 71.991059][ T1313] RSP: 0018:ffffc900044b7500 EFLAGS: 00010246 [ 71.997245][ T1313] RAX: ac0dcf3ef4bad300 RBX: ffff88811b654a70 RCX: ffff88811ebf2780 [ 72.005266][ T1313] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 72.013254][ T1313] RBP: ffffc900044b77e0 R08: 0000000000000003 R09: 0000000000000004 [ 72.021227][ T1313] R10: dffffc0000000000 R11: fffffbfff0f9f334 R12: 1ffff110236ca942 [ 72.029204][ T1313] R13: ffff88811b654a00 R14: 0000000000000000 R15: dffffc0000000000 [ 72.037174][ T1313] FS: 00007f4eaf0f56c0(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 72.046173][ T1313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.052782][ T1313] CR2: 00007ffcfa22e860 CR3: 000000012259a000 CR4: 00000000003526b0 [ 72.060759][ T1313] Call Trace: [ 72.064021][ T1313] [ 72.066969][ T1313] ? __kasan_check_write+0x18/0x20 [ 72.072068][ T1313] ? alloc_skb_with_frags+0x80b/0x8b0 [ 72.077535][ T1313] ? __cfi___dev_queue_xmit+0x10/0x10 [ 72.082908][ T1313] ? __kasan_check_write+0x18/0x20 [ 72.088065][ T1313] ? skb_set_owner_w+0x280/0x3d0 [ 72.093007][ T1313] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 72.098434][ T1313] ? packet_parse_headers+0x7f0/0xb10 [ 72.103795][ T1313] ? packet_parse_headers+0x883/0xb10 [ 72.109190][ T1313] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 72.114892][ T1313] ? skb_setup_tx_timestamp+0x210/0x210 [ 72.120458][ T1313] packet_xmit+0x76/0x360 [ 72.124770][ T1313] ? is_vmalloc_addr+0x11/0x40 [ 72.129532][ T1313] packet_sendmsg+0x228b/0x56b0 [ 72.134377][ T1313] ? avc_has_perm_noaudit+0x26b/0x360 [ 72.139756][ T1313] ? __cfi_packet_sendmsg+0x10/0x10 [ 72.144954][ T1313] ? avc_has_perm+0x155/0x240 [ 72.149614][ T1313] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 72.154880][ T1313] ? security_socket_sendmsg+0x3d/0x100 [ 72.160428][ T1313] ? __cfi_packet_sendmsg+0x10/0x10 [ 72.165645][ T1313] sock_write_iter+0x445/0x490 [ 72.170391][ T1313] ? __cfi_sock_write_iter+0x10/0x10 [ 72.175685][ T1313] ? __cfi_futex_wait+0x10/0x10 [ 72.180527][ T1313] ? selinux_socket_setsockopt+0x324/0x3d0 [ 72.186359][ T1313] vfs_write+0x75f/0xfd0 [ 72.190586][ T1313] ? __cfi_vfs_write+0x10/0x10 [ 72.195459][ T1313] ksys_write+0x145/0x260 [ 72.199816][ T1313] ? xfd_validate_state+0x68/0x140 [ 72.204914][ T1313] ? __cfi_ksys_write+0x10/0x10 [ 72.209785][ T1313] ? __kasan_check_write+0x18/0x20 [ 72.214875][ T1313] ? fpregs_restore_userregs+0x11c/0x260 [ 72.220516][ T1313] __x64_sys_write+0x7f/0x90 [ 72.225106][ T1313] x64_sys_call+0x271c/0x2ee0 [ 72.229765][ T1313] do_syscall_64+0x57/0xf0 [ 72.234155][ T1313] ? clear_bhb_loop+0x50/0xa0 [ 72.238832][ T1313] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.244702][ T1313] RIP: 0033:0x7f4eae19e1d9 [ 72.249133][ T1313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.268736][ T1313] RSP: 002b:00007f4eaf0f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.277147][ T1313] RAX: ffffffffffffffda RBX: 00007f4eae425fa0 RCX: 00007f4eae19e1d9 [ 72.285115][ T1313] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 72.293075][ T1313] RBP: 00007f4eae235888 R08: 0000000000000000 R09: 0000000000000000 [ 72.301151][ T1313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.309165][ T1313] R13: 00007f4eae426038 R14: 00007f4eae425fa0 R15: 00007fff3f026198 [ 72.317225][ T1313] [ 72.320237][ T1313] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 72.375014][ T36] audit: type=1400 audit(1791509683.476:365): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2819]" dev="pipefs" ino=2819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 72.665562][ T309] bridge_slave_1: left allmulticast mode [ 72.671228][ T309] bridge_slave_1: left promiscuous mode [ 72.695043][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.745653][ T309] bridge_slave_0: left allmulticast mode [ 72.751312][ T309] bridge_slave_0: left promiscuous mode [ 72.775218][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.782368][ T10] usb 6-1: device descriptor read/all, error -71 [ 72.916856][ T309] veth1_macvtap: left promiscuous mode [ 72.922363][ T309] veth0_vlan: left promiscuous mode [ 72.995466][ T1313] skb len=0 headroom=128 headlen=0 tailroom=256 [ 72.995466][ T1313] mac=(128,0) mac_len=0 net=(128,-1) trans=-1 [ 72.995466][ T1313] shinfo(txflags=64 nr_frags=0 gso(size=0 type=0 segs=0)) [ 72.995466][ T1313] csum(0x0 start=0 offset=0 ip_summed=0 complete_sw=0 valid=0 level=0) [ 72.995466][ T1313] hash(0x0 sw=0 l4=0) proto=0x0003 pkttype=0 iif=0 [ 72.995466][ T1313] priority=0x0 mark=0x0 alloc_cpu=0 vlan_all=0x0 [ 72.995466][ T1313] encapsulation=0 inner(proto=0x0000, mac=0, net=0, trans=0) [ 73.102049][ T1313] dev name=tunl0 feat=0x00000006401d4869 [ 73.109074][ T1313] sk family=17 type=2 proto=0 [ 73.176107][ T309] bridge_slave_1: left allmulticast mode [ 73.181762][ T309] bridge_slave_1: left promiscuous mode [ 73.205043][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.225085][ T309] bridge_slave_0: left allmulticast mode [ 73.230729][ T309] bridge_slave_0: left promiscuous mode [ 73.238145][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.245909][ T309] bridge_slave_1: left allmulticast mode [ 73.251554][ T309] bridge_slave_1: left promiscuous mode [ 73.257399][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.264779][ T309] bridge_slave_0: left allmulticast mode [ 73.270648][ T309] bridge_slave_0: left promiscuous mode [ 73.276334][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.387731][ T309] veth1_macvtap: left promiscuous mode [ 73.393254][ T309] veth0_vlan: left promiscuous mode [ 73.405157][ T309] veth1_macvtap: left promiscuous mode [ 73.410648][ T309] veth0_vlan: left promiscuous mode [ 73.586035][ T309] bridge_slave_1: left allmulticast mode [ 73.591689][ T309] bridge_slave_1: left promiscuous mode [ 73.600895][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.608716][ T309] bridge_slave_0: left allmulticast mode [ 73.614342][ T309] bridge_slave_0: left promiscuous mode [ 73.620135][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.666380][ T309] veth1_macvtap: left promiscuous mode [ 73.671885][ T309] veth0_vlan: left promiscuous mode [ 73.776661][ T309] ------------[ cut here ]------------ [ 73.782142][ T309] WARNING: CPU: 0 PID: 309 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 73.792155][ T309] Modules linked in: [ 73.796059][ T309] CPU: 0 UID: 0 PID: 309 Comm: kworker/u8:3 Tainted: G W syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d [ 73.809174][ T309] Tainted: [W]=WARN [ 73.813042][ T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 73.823095][ T309] Workqueue: netns cleanup_net [ 73.827861][ T309] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 73.833822][ T309] Code: e8 01 25 d5 fc 4b 83 3c 3e 00 75 19 e8 a5 af 7b fc 49 81 ff f8 07 00 00 74 1b e8 97 af 7b fc 49 83 c7 08 eb c9 e8 8c af 7b fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 73.853426][ T309] RSP: 0018:ffffc9000b7ffb90 EFLAGS: 00010293 [ 73.859491][ T309] RAX: ffffffff850d9d34 RBX: ffff88812f5391c0 RCX: ffff88812ff92780 [ 73.867472][ T309] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881037407e8 [ 73.875520][ T309] RBP: ffffc9000b7ffbb0 R08: 0000000000000003 R09: 0000000000000004 [ 73.883478][ T309] R10: dffffc0000000000 R11: fffff520016fff04 R12: dffffc0000000000 [ 73.891441][ T309] R13: dffffc0000000000 R14: ffff888103740000 R15: 00000000000007e8 [ 73.899404][ T309] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 73.908327][ T309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.914898][ T309] CR2: 0000564099494af8 CR3: 0000000007caa000 CR4: 00000000003526b0 [ 73.922869][ T309] Call Trace: [ 73.926154][ T309] [ 73.929070][ T309] cleanup_net+0x6bd/0xc90 [ 73.933471][ T309] ? __cfi_cleanup_net+0x10/0x10 [ 73.938400][ T309] ? kick_pool+0xb9/0x540 [ 73.942708][ T309] process_scheduled_works+0x7f7/0x1060 [ 73.948245][ T309] worker_thread+0xc99/0x13f0 [ 73.952900][ T309] kthread+0x2c7/0x360 [ 73.956960][ T309] ? __cfi_worker_thread+0x10/0x10 [ 73.962057][ T309] ? __cfi_kthread+0x10/0x10 [ 73.966654][ T309] ret_from_fork+0x67/0xa0 [ 73.971053][ T309] ? __cfi_kthread+0x10/0x10 [ 73.975632][ T309] ret_from_fork_asm+0x1a/0x30 [ 73.980372][ T309] [ 73.983382][ T309] ---[ end trace 0000000000000000 ]--- [ 73.989890][ T309] ------------[ cut here ]------------ [ 73.995361][ T309] WARNING: CPU: 0 PID: 309 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 74.005446][ T309] Modules linked in: [ 74.009339][ T309] CPU: 0 UID: 0 PID: 309 Comm: kworker/u8:3 Tainted: G W syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d [ 74.022447][ T309] Tainted: [W]=WARN [ 74.026239][ T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.036297][ T309] Workqueue: netns cleanup_net [ 74.041052][ T309] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 74.047123][ T309] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 50 af 7b fc 49 81 ff f8 07 00 00 74 1b e8 42 af 7b fc 49 83 c7 08 eb c5 e8 37 af 7b fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 27 af 7b fc 5b 41 5c 41 5e 41 [ 74.066714][ T309] RSP: 0018:ffffc9000b7ffb90 EFLAGS: 00010293 [ 74.072757][ T309] RAX: ffffffff850d9d89 RBX: ffff888103740800 RCX: ffff88812ff92780 [ 74.080725][ T309] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888103740808 [ 74.088700][ T309] RBP: ffffc9000b7ffbb0 R08: 0000000000000003 R09: 0000000000000004 [ 74.096658][ T309] R10: dffffc0000000000 R11: fffff520016fff04 R12: dffffc0000000000 [ 74.104606][ T309] R13: dffffc0000000000 R14: ffff888103740000 R15: 0000000000000008 [ 74.112582][ T309] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 74.121517][ T309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.128087][ T309] CR2: 0000564099494af8 CR3: 000000010cbd4000 CR4: 00000000003526b0 [ 74.136058][ T309] Call Trace: [ 74.139317][ T309] [ 74.142242][ T309] cleanup_net+0x6bd/0xc90 [ 74.146656][ T309] ? __cfi_cleanup_net+0x10/0x10 [ 74.151574][ T309] ? kick_pool+0xb9/0x540 [ 74.155912][ T309] process_scheduled_works+0x7f7/0x1060 [ 74.161437][ T309] worker_thread+0xc99/0x13f0 [ 74.166100][ T309] kthread+0x2c7/0x360 [ 74.170147][ T309] ? __cfi_worker_thread+0x10/0x10 [ 74.175250][ T309] ? __cfi_kthread+0x10/0x10 [ 74.179822][ T309] ret_from_fork+0x67/0xa0 [ 74.184227][ T309] ? __cfi_kthread+0x10/0x10 [ 74.188816][ T309] ret_from_fork_asm+0x1a/0x30 [ 74.193560][ T309] [ 74.196565][ T309] ---[ end trace 0000000000000000 ]--- [ 74.204460][ T309] ------------[ cut here ]------------ [ 74.209936][ T309] WARNING: CPU: 0 PID: 309 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 74.219416][ T309] Modules linked in: [ 74.223286][ T309] CPU: 0 UID: 0 PID: 309 Comm: kworker/u8:3 Tainted: G W syzkaller #0 ca35313610c8ed713bced2230d6c22219bd85c1d [ 74.236387][ T309] Tainted: [W]=WARN [ 74.240166][ T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.250252][ T309] Workqueue: netns cleanup_net [ 74.255017][ T309] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 74.260547][ T309] Code: 3c 20 00 74 08 48 89 df e8 5f f5 ef fc 48 8b 3b e8 97 e5 da fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 b8 b7 00 cc e8 f2 7f 96 fc <0f> 0b e9 b0 fd ff ff e8 e6 7f 96 fc 0f 0b e9 18 fe ff ff e8 da 7f [ 74.280233][ T309] RSP: 0018:ffffc9000b7ffb70 EFLAGS: 00010293 [ 74.286295][ T309] RAX: ffffffff84f2ccce RBX: ffff88812f5391c0 RCX: ffff88812ff92780 [ 74.294243][ T309] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88812ff92780 [ 74.302320][ T309] RBP: ffffc9000b7ffb98 R08: ffffffff8854ae47 R09: 1ffffffff10a95c8 [ 74.310299][ T309] R10: dffffc0000000000 R11: fffffbfff10a95c9 R12: 1ffffffff10a931c [ 74.318260][ T309] R13: dffffc0000000000 R14: ffff88812f539dc0 R15: dffffc0000000000 [ 74.326223][ T309] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 74.335151][ T309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.341799][ T309] CR2: 0000564099494af8 CR3: 000000010cbd4000 CR4: 00000000003526b0 [ 74.349764][ T309] Call Trace: [ 74.353036][ T309] [ 74.355961][ T309] xfrm_net_exit+0x31/0x80 [ 74.360363][ T309] cleanup_net+0x6bd/0xc90 [ 74.364760][ T309] ? __cfi_cleanup_net+0x10/0x10 [ 74.369690][ T309] ? kick_pool+0xb9/0x540 [ 74.374000][ T309] process_scheduled_works+0x7f7/0x1060 [ 74.379541][ T309] worker_thread+0xc99/0x13f0 [ 74.384197][ T309] kthread+0x2c7/0x360 [ 74.388258][ T309] ? __cfi_worker_thread+0x10/0x10 [ 74.393350][ T309] ? __cfi_kthread+0x10/0x10 [ 74.397932][ T309] ret_from_fork+0x67/0xa0 [ 74.402330][ T309] ? __cfi_kthread+0x10/0x10 [ 74.406978][ T309] ret_from_fork_asm+0x1a/0x30 [ 74.411725][ T309] [ 74.414723][ T309] ---[ end trace 0000000000000000 ]---