last executing test programs: 26.358379259s ago: executing program 1 (id=695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) madvise(&(0x7f0000153000/0x3000)=nil, 0x3000, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setpriority(0x0, r1, 0x2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20401, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x25) ioctl$KVM_CREATE_VM(r4, 0xae03, 0xb) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r5, 0xa, 0x21) fcntl$setlease(r5, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r5, 0x400, 0x2) syz_emit_ethernet(0xfdef, 0x0, 0x0) 20.733714723s ago: executing program 1 (id=703): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_flowlabel\x00') prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 16.563661429s ago: executing program 3 (id=706): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) splice(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x9, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) ptrace$ARCH_GET_FS(0x1e, r4, &(0x7f0000000180), 0x1003) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '-\\}{'}]}, 0x80b) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r6, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) 16.415421592s ago: executing program 1 (id=707): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fsync(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x2000008, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 15.014804148s ago: executing program 3 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 14.630773168s ago: executing program 2 (id=711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) madvise(&(0x7f0000153000/0x3000)=nil, 0x3000, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setpriority(0x0, r1, 0x2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20401, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x25) ioctl$KVM_CREATE_VM(r4, 0xae03, 0xb) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r5, 0xa, 0x21) fcntl$setlease(r5, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r5, 0x400, 0x2) io_submit(0x0, 0x0, &(0x7f0000002680)) 13.096500487s ago: executing program 2 (id=712): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) 13.084508568s ago: executing program 0 (id=713): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1, 0x2) vmsplice(r2, &(0x7f00000004c0)=[{&(0x7f0000000100)="b5", 0x1}], 0x1, 0x3) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(r0, 0x0, 0x0) 12.716826257s ago: executing program 0 (id=714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8881f5c0a000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 12.033137214s ago: executing program 0 (id=715): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_flowlabel\x00') prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 10.897408223s ago: executing program 1 (id=716): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x280, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x70bd2d, 0x0, {0x80, 0x20, 0x10, 0x0, 0x0, 0x11, 0x0, 0xa, 0x300}, [@RTA_SPORT={0x6, 0x1c, 0x4e23}, @RTA_SRC={0x8, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000002c00)=@buf) unshare(0x22020600) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000007880)='ns/cgroup\x00') setns(r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x7, 0xf728, 0x3d0a, 0x979, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}}}}}) r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f041}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') pread64(r7, &(0x7f0000000600)=""/4091, 0xffb, 0x12c) 9.84359457s ago: executing program 3 (id=717): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_mount_image$fuse(&(0x7f0000001040), &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x28c000, &(0x7f0000004040)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x1, 0x0, 0x0) 7.703271134s ago: executing program 2 (id=718): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f0000000b00), 0x64) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) close(r3) 7.319759084s ago: executing program 0 (id=719): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x6000000}, 0x0) 7.032598961s ago: executing program 0 (id=720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) madvise(&(0x7f0000153000/0x3000)=nil, 0x3000, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setpriority(0x0, r1, 0x2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20401, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x25) ioctl$KVM_CREATE_VM(r4, 0xae03, 0xb) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r5, 0xa, 0x21) fcntl$setlease(r5, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) io_submit(0x0, 0x0, &(0x7f0000002680)) 5.543374509s ago: executing program 0 (id=721): syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a44000010203010902"], 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 5.10268049s ago: executing program 3 (id=722): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000240)=ANY=[], 0xfd, 0x150c, &(0x7f0000002d40)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x64) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000001840)='./file2\x00', 0x210081, &(0x7f0000000400)=ANY=[], 0xf7, 0x1501, &(0x7f0000001980)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.931468045s ago: executing program 2 (id=723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8881f5c0a000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 4.153456765s ago: executing program 1 (id=724): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fsync(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x2000008, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4.152364065s ago: executing program 3 (id=725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019440)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4.092589296s ago: executing program 2 (id=726): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e8000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.15297103s ago: executing program 1 (id=727): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_flowlabel\x00') prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 2.151790646s ago: executing program 3 (id=728): mkdir(&(0x7f0000000100)='./debug\x00', 0x186) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) iopl(0x3) r0 = semget$private(0x0, 0x7, 0x191) semctl$SETALL(r0, 0x0, 0x11, 0x0) iopl(0x8) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read(r1, &(0x7f0000000500)=""/4096, 0x1000) read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x80900, 0x0, 0x2, 0x0, &(0x7f0000000280)=0x6}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000001c0)={[{@minixdf}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0xe3}}, {@grpjquota, 0x2e}, {@nouser_xattr}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4ab, &(0x7f0000000740)="$eJzs3M1vFOUfAPDvTF94p4UfP5UXZRWNjWhLCyoHD2g04WJiogc81lIJUsDQmgghUo3Bo/EvUI8mJp68eNLEGPWk8ap3Y0IMF9CDqZndmXa23ZbtdttV9/NJdnmemWf2eb4z8+w+Mw/TALpWJXtLIrZHxM8RMVDL1heo1P65ffPqxB83r04kMTf34u9Jtdytm1cniqLFdtvyzFAakb6bxP4G9U5fvnJufGpq8lKeH5k5//rI9OUrj509P35m8szkhbHjx48dHX3yibHH2xJnFtetfW9dPLD35MsfPD8xF69892nW3u35+nIcNYNrrrMSlZjLLSztr74/tOZP/2fZUUonvR1sCKvSExHZ4eqr9v+B6ImFgzcQz70zn/m6Qw0E1k3227RrydKe/N90/vcL+C9K9HHoUsUvfnb9W7w2cvzRaTeezt4nq/Hfzl+1Nb2RZteyg7Ur9uUuaU+ssf7tEXFq9s8Ps1c0vA8BANBeX2bjn0cbjf/SuKtUbmc+hzIYEYcjYndE/C8i9kTE/yOqZe+OiHtWWX9lUX7p+OfHLS0F1qRs/PdUPrdVP/5L8xLJfG5HNf6+5NWzU5NH8n0yFH2bsvzoCnV89exP7y+3rlIa/2WvrP5iLJi347feTfXbnB6fGV9DyHVuvB2xr7dR/Mn8mDfbA3sjYl8Ln5/ts7OPfHIgS+/ctnT9neNfQRvmmeY+jni4dvxnY1H8haRW03LzkyObY2ryyEhxViz1/Q/XXyjn+0rpuvg3NxfT5laDbSA7/lsbnv95/EU3KOZrp1dfx/Vf3lv2mmbp8U/i1Gy5RO38T0tLsvO/P3mpmu7Pl705PjNzaTSiP19Qt3xsYdsiX5TP4h861Lj/747466N8u/0RkZ3E90bEfRFxMG/7/RHxQEQcWiH+b5958LWV91CL538bZPGfXun4Rwwm5fn6FhI95775Yrn6m/v+O1ZNDeVLmvn+a7aBa9l3AAAA8G+RVuegk3S4SJduTu2JrenUxemZw5V448Lp2lz1YPSlxZ2ugdL90NH83nCRH1uUPxoRu6r/02hLNT88cXFqRycDB6rP6tT1/0jT4eHaul97Ot06YN2tah6t/HTgZ5+3vzHAhvK8JnQv/R+6l/4P3Uv/h+7VqP9fi7jdgaYAG8zvP3Qv/R+6l/4P3Uv/h6609JH44s+ttPKk/0Ji98k1bb7uibmBdfnk2dVv1bNOkUb5j3Ysm0giorUqIl25TH8TtXcskd6xzIkWd8sqEgfzxKaIaHaraxu2Vzv7vQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAufwcAAP//eDnc9Q==") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) clock_settime(0x0, 0x0) 0s ago: executing program 2 (id=729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) madvise(&(0x7f0000153000/0x3000)=nil, 0x3000, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setpriority(0x0, r1, 0x2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20401, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x25) ioctl$KVM_CREATE_VM(r4, 0xae03, 0xb) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r5, 0xa, 0x21) fcntl$setlease(r5, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) io_submit(0x0, 0x0, &(0x7f0000002680)) kernel console output (not intermixed with test programs): T9] cfg80211: failed to load regulatory.db [ 92.695652][ T6031] svc: failed to register nfsdv3 RPC service (errno 111). [ 92.742293][ T6031] svc: failed to register nfsaclv3 RPC service (errno 111). [ 92.762230][ T6037] syzkaller1: entered allmulticast mode [ 93.070189][ T6045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.135769][ T6045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.148418][ T6045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.475915][ T6063] svc: failed to register nfsdv3 RPC service (errno 111). [ 93.485797][ T6063] svc: failed to register nfsaclv3 RPC service (errno 111). [ 93.626647][ T6065] syzkaller1: entered allmulticast mode [ 95.914238][ T6090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.993101][ T6095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.015245][ T6090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.781761][ T6115] svc: failed to register nfsdv3 RPC service (errno 111). [ 96.791087][ T6115] svc: failed to register nfsaclv3 RPC service (errno 111). [ 97.258319][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.303010][ T8] wlan1: authenticate with 08:02:11:00:00:00 [ 97.319099][ T8] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 97.345219][ T6135] fuse: Unknown parameter 'group_id00000000000000000000' [ 97.357282][ T11] wlan1: authenticated [ 97.359261][ T6137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.377861][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.385689][ T174] mac80211_hwsim hwsim9 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 98.782772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 98.834358][ T3565] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 98.954837][ T1137] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 99.065641][ T11] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 99.104822][ T6143] svc: failed to register nfsdv3 RPC service (errno 111). [ 99.123512][ T6143] svc: failed to register nfsaclv3 RPC service (errno 111). [ 99.184387][ T11] wlan1: association with 08:02:11:00:00:00 timed out [ 101.689373][ T6180] syzkaller1: entered allmulticast mode [ 101.693136][ T6181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.728767][ T8] wlan1: authenticate with 08:02:11:00:00:00 [ 101.750302][ T8] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 101.781478][ T1137] wlan1: authenticated [ 101.786073][ T788] mac80211_hwsim hwsim9 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 101.799307][ T6182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.824265][ T11] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 101.844039][ T6181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.857252][ T11] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 101.868128][ T11] wlan1: associated [ 103.667299][ T6195] fuse: Unknown parameter 'group_id00000000000000000000' [ 104.381923][ T6211] syzkaller1: entered allmulticast mode [ 106.064017][ T6220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.112204][ T6225] fuse: Bad value for 'user_id' [ 106.144767][ T6220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.167119][ T6220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.404926][ T6232] loop1: detected capacity change from 0 to 8 [ 106.483979][ T6232] SQUASHFS error: Unable to read inode 0x11f [ 107.431193][ T6243] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 107.779753][ T6257] syzkaller1: entered allmulticast mode [ 107.804446][ T6259] fuse: Bad value for 'user_id' [ 109.022723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 112.905160][ T5787] Bluetooth: hci0: unexpected cc 0x0c05 length: 4 > 1 [ 113.602845][ T6296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.682435][ T6296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.714827][ T6296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.716500][ T6299] syz.0.177 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 113.741040][ T6299] CPU: 0 PID: 6299 Comm: syz.0.177 Not tainted syzkaller #0 [ 113.748494][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.758681][ T6299] Call Trace: [ 113.761995][ T6299] [ 113.764965][ T6299] dump_stack_lvl+0x18c/0x250 [ 113.769709][ T6299] ? show_regs_print_info+0x20/0x20 [ 113.774947][ T6299] ? load_image+0x420/0x420 [ 113.779508][ T6299] ? ___ratelimit+0x478/0x610 [ 113.784336][ T6299] ? radix_tree_cpu_dead+0x160/0x160 [ 113.789693][ T6299] dump_header+0xd8/0x820 [ 113.794203][ T6299] oom_kill_process+0x390/0x580 [ 113.799130][ T6299] out_of_memory+0xe0e/0x1200 [ 113.804140][ T6299] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 113.809821][ T6299] ? mutex_lock_nested+0x20/0x20 [ 113.814918][ T6299] ? unregister_oom_notifier+0x20/0x20 [ 113.820454][ T6299] mem_cgroup_out_of_memory+0x2c2/0x390 [ 113.826226][ T6299] ? try_charge_memcg+0xc91/0x17c0 [ 113.831384][ T6299] ? drain_local_stock+0x630/0x630 [ 113.836566][ T6299] ? do_raw_spin_unlock+0x121/0x230 [ 113.842023][ T6299] try_charge_memcg+0xca1/0x17c0 [ 113.847100][ T6299] ? xfd_validate_state+0x6d/0x150 [ 113.852278][ T6299] ? folio_flags+0x120/0x120 [ 113.856886][ T6299] ? percpu_ref_tryget+0x15/0x180 [ 113.862014][ T6299] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 113.868075][ T6299] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 113.874104][ T6299] ? percpu_ref_tryget+0x15/0x180 [ 113.879601][ T6299] ? percpu_ref_tryget+0x15/0x180 [ 113.884731][ T6299] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 113.890641][ T6299] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 113.896418][ T6299] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 113.902249][ T6299] obj_cgroup_charge+0x36e/0x630 [ 113.907216][ T6299] ? get_obj_cgroup_from_current+0xd4/0x280 [ 113.913181][ T6299] ? obj_cgroup_charge+0xed/0x630 [ 113.918273][ T6299] ? mod_objcg_mlstate+0x320/0x320 [ 113.923442][ T6299] ? get_obj_cgroup_from_current+0xd4/0x280 [ 113.929439][ T6299] ? get_obj_cgroup_from_current+0xd4/0x280 [ 113.935616][ T6299] slab_pre_alloc_hook+0x2e2/0x300 [ 113.940860][ T6299] kmem_cache_alloc+0x5a/0x2c0 [ 113.945649][ T6299] ? vm_area_dup+0x27/0x270 [ 113.950170][ T6299] vm_area_dup+0x27/0x270 [ 113.954538][ T6299] __split_vma+0x1a8/0xc20 [ 113.958980][ T6299] ? mmap_write_unlock+0x160/0x160 [ 113.964144][ T6299] ? preempt_schedule+0xc0/0xd0 [ 113.969077][ T6299] ? _raw_spin_unlock+0x40/0x40 [ 113.973965][ T6299] do_vmi_align_munmap+0x310/0x16a0 [ 113.979212][ T6299] ? do_vmi_munmap+0x2d0/0x2d0 [ 113.984006][ T6299] ? mtree_range_walk+0x68c/0x7b0 [ 113.989065][ T6299] ? mas_find_setup+0x47f/0x590 [ 113.993935][ T6299] __se_sys_brk+0x79b/0xd00 [ 113.998555][ T6299] ? __x64_sys_brk+0x40/0x40 [ 114.003165][ T6299] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 114.009173][ T6299] ? lockdep_hardirqs_on+0x98/0x150 [ 114.014479][ T6299] do_syscall_64+0x55/0xb0 [ 114.018910][ T6299] ? clear_bhb_loop+0x40/0x90 [ 114.023598][ T6299] ? clear_bhb_loop+0x40/0x90 [ 114.028290][ T6299] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.034196][ T6299] RIP: 0033:0x7f55f679e019 [ 114.038626][ T6299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.058255][ T6299] RSP: 002b:00007f55f7692028 EFLAGS: 00000246 ORIG_RAX: 000000000000000c [ 114.066861][ T6299] RAX: ffffffffffffffda RBX: 00007f55f6a25fa0 RCX: 00007f55f679e019 [ 114.075108][ T6299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001000 [ 114.083100][ T6299] RBP: 00007f55f683500c R08: 0000000000000000 R09: 0000000000000000 [ 114.091199][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.099287][ T6299] R13: 00007f55f6a26038 R14: 00007f55f6a25fa0 R15: 00007fffc902d758 [ 114.107294][ T6299] [ 114.147623][ T6299] memory: usage 0kB, limit 0kB, failcnt 19 [ 114.166210][ T6299] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 114.189431][ T6299] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 114.214767][ T6299] Memory cgroup stats for /syz0/test: [ 114.215209][ T6299] cache 0 [ 114.230532][ T6299] rss 0 [ 114.234335][ T6299] rss_huge 0 [ 114.238061][ T6299] shmem 0 [ 114.241161][ T6299] mapped_file 0 [ 114.246081][ T6299] dirty 0 [ 114.249149][ T6299] writeback 0 [ 114.253092][ T6299] workingset_refault_anon 0 [ 114.257703][ T6299] workingset_refault_file 0 [ 114.262295][ T6299] swap 0 [ 114.270962][ T6299] pgpgin 0 [ 114.278033][ T6299] pgpgout 0 [ 114.281789][ T6299] pgfault 0 [ 114.308251][ T6299] pgmajfault 0 [ 114.311795][ T6299] inactive_anon 0 [ 114.322836][ T6299] active_anon 0 [ 114.326942][ T6299] inactive_file 0 [ 114.335241][ T6299] active_file 0 [ 114.343453][ T6299] unevictable 0 [ 114.357716][ T6299] hierarchical_memory_limit 0 [ 114.362547][ T6299] hierarchical_memsw_limit 9223372036854771712 [ 114.369554][ T6299] total_cache 0 [ 114.373404][ T6299] total_rss 0 [ 114.385734][ T6299] total_rss_huge 0 [ 114.392832][ T6299] total_shmem 0 [ 114.412808][ T6299] total_mapped_file 0 [ 114.439540][ T6299] total_dirty 0 [ 114.485144][ T6299] total_writeback 0 [ 114.495736][ T6299] total_workingset_refault_anon 0 [ 114.507135][ T6299] total_workingset_refault_file 0 [ 114.534788][ T6299] total_swap 0 [ 114.538268][ T6299] total_pgpgin 0 [ 114.541849][ T6299] total_pgpgout 0 [ 114.608289][ T6299] total_pgfault 0 [ 114.618812][ T6299] total_pgmajfault 0 [ 114.632370][ T6299] total_inactive_anon 0 [ 114.642348][ T6299] total_active_anon 0 [ 114.655064][ T6299] total_inactive_file 0 [ 114.682363][ T6299] total_active_file 0 [ 114.702748][ T6299] total_unevictable 0 [ 114.706989][ T6299] anon_cost 0 [ 114.710393][ T6299] file_cost 0 [ 114.745484][ T6299] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.177,pid=6298,uid=0 [ 114.770837][ T6299] Memory cgroup out of memory: Killed process 6298 (syz.0.177) total-vm:102244kB, anon-rss:1372kB, file-rss:22912kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 116.450385][ T6332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.519728][ T6335] fuse: Bad value for 'fd' [ 116.522810][ T6332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.538593][ T6332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.748808][ T6359] syz.0.197 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 118.783142][ T6359] CPU: 1 PID: 6359 Comm: syz.0.197 Not tainted syzkaller #0 [ 118.790619][ T6359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.800981][ T6359] Call Trace: [ 118.804306][ T6359] [ 118.807273][ T6359] dump_stack_lvl+0x18c/0x250 [ 118.812201][ T6359] ? show_regs_print_info+0x20/0x20 [ 118.817628][ T6359] ? load_image+0x420/0x420 [ 118.822326][ T6359] ? ___ratelimit+0x478/0x610 [ 118.827632][ T6359] ? radix_tree_cpu_dead+0x160/0x160 [ 118.833114][ T6359] dump_header+0xd8/0x820 [ 118.837468][ T6359] oom_kill_process+0x390/0x580 [ 118.842433][ T6359] out_of_memory+0xe0e/0x1200 [ 118.847132][ T6359] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 118.853078][ T6359] ? print_unlock_imbalance_bug+0x160/0x160 [ 118.859115][ T6359] ? mutex_lock_nested+0x20/0x20 [ 118.864620][ T6359] ? unregister_oom_notifier+0x20/0x20 [ 118.870144][ T6359] mem_cgroup_out_of_memory+0x2c2/0x390 [ 118.876062][ T6359] ? try_charge_memcg+0xc91/0x17c0 [ 118.881289][ T6359] ? drain_local_stock+0x630/0x630 [ 118.886520][ T6359] ? do_raw_spin_unlock+0x121/0x230 [ 118.891832][ T6359] try_charge_memcg+0xca1/0x17c0 [ 118.896896][ T6359] ? folio_flags+0x120/0x120 [ 118.901680][ T6359] ? percpu_ref_tryget+0x15/0x180 [ 118.906722][ T6359] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 118.912484][ T6359] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 118.918575][ T6359] ? percpu_ref_tryget+0x15/0x180 [ 118.924057][ T6359] ? percpu_ref_tryget+0x15/0x180 [ 118.929449][ T6359] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 118.935397][ T6359] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 118.941571][ T6359] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 118.947484][ T6359] obj_cgroup_charge+0x36e/0x630 [ 118.952446][ T6359] ? get_obj_cgroup_from_current+0xd4/0x280 [ 118.958470][ T6359] ? obj_cgroup_charge+0xed/0x630 [ 118.963542][ T6359] ? mod_objcg_mlstate+0x320/0x320 [ 118.968766][ T6359] ? get_obj_cgroup_from_current+0xd4/0x280 [ 118.974761][ T6359] ? get_obj_cgroup_from_current+0xd4/0x280 [ 118.980675][ T6359] slab_pre_alloc_hook+0x2e2/0x300 [ 118.985905][ T6359] kmem_cache_alloc+0x5a/0x2c0 [ 118.990951][ T6359] ? vm_area_dup+0x27/0x270 [ 118.995498][ T6359] vm_area_dup+0x27/0x270 [ 119.000156][ T6359] __split_vma+0x1a8/0xc20 [ 119.004741][ T6359] ? mmap_write_unlock+0x160/0x160 [ 119.009896][ T6359] ? schedule+0xc7/0x170 [ 119.014195][ T6359] do_vmi_align_munmap+0x310/0x16a0 [ 119.019630][ T6359] ? futex_wait_setup+0x270/0x270 [ 119.024688][ T6359] ? do_vmi_munmap+0x2d0/0x2d0 [ 119.029509][ T6359] ? mtree_range_walk+0x68c/0x7b0 [ 119.034626][ T6359] ? mas_find_setup+0x47f/0x590 [ 119.039612][ T6359] __se_sys_brk+0x79b/0xd00 [ 119.044327][ T6359] ? __x64_sys_brk+0x40/0x40 [ 119.048940][ T6359] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 119.054953][ T6359] ? lockdep_hardirqs_on+0x98/0x150 [ 119.060352][ T6359] do_syscall_64+0x55/0xb0 [ 119.065490][ T6359] ? clear_bhb_loop+0x40/0x90 [ 119.070202][ T6359] ? clear_bhb_loop+0x40/0x90 [ 119.074907][ T6359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.081189][ T6359] RIP: 0033:0x7f55f679e019 [ 119.085654][ T6359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.105395][ T6359] RSP: 002b:00007f55f7692028 EFLAGS: 00000246 ORIG_RAX: 000000000000000c [ 119.113836][ T6359] RAX: ffffffffffffffda RBX: 00007f55f6a25fa0 RCX: 00007f55f679e019 [ 119.121937][ T6359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001000 [ 119.129970][ T6359] RBP: 00007f55f683500c R08: 0000000000000000 R09: 0000000000000000 [ 119.138509][ T6359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.147130][ T6359] R13: 00007f55f6a26038 R14: 00007f55f6a25fa0 R15: 00007fffc902d758 [ 119.155365][ T6359] [ 119.179275][ T6359] memory: usage 0kB, limit 0kB, failcnt 55 [ 119.185635][ T6359] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 119.198882][ T6359] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 119.230843][ T6359] Memory cgroup stats for /syz0/test: [ 119.230996][ T6359] cache 0 [ 119.240169][ T6359] rss 0 [ 119.257631][ T6359] rss_huge 0 [ 119.261212][ T6359] shmem 0 [ 119.271003][ T6359] mapped_file 0 [ 119.279777][ T6359] dirty 0 [ 119.288477][ T6359] writeback 0 [ 119.297111][ T6361] loop2: detected capacity change from 0 to 128 [ 119.310340][ T6359] workingset_refault_anon 0 [ 119.342692][ T6359] workingset_refault_file 0 [ 119.347609][ T6359] swap 0 [ 119.352738][ T6359] pgpgin 0 [ 119.363289][ T6359] pgpgout 0 [ 119.366834][ T6359] pgfault 2 [ 119.369945][ T6361] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.373022][ T6359] pgmajfault 0 [ 119.405890][ T6359] inactive_anon 0 [ 119.414035][ T6359] active_anon 0 [ 119.426279][ T6359] inactive_file 0 [ 119.437615][ T6359] active_file 0 [ 119.451591][ T6359] unevictable 0 [ 119.461740][ T6359] hierarchical_memory_limit 0 [ 119.463348][ T6361] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.476894][ T6359] hierarchical_memsw_limit 9223372036854771712 [ 119.505161][ T6359] total_cache 0 [ 119.514731][ T6359] total_rss 0 [ 119.520882][ T6359] total_rss_huge 0 [ 119.541933][ T6359] total_shmem 0 [ 119.562803][ T6359] total_mapped_file 0 [ 119.567970][ T27] audit: type=1804 audit(1785834117.727:2): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.187" name="/newroot/42/file1/bus" dev="loop2" ino=1048742 res=1 errno=0 [ 119.573107][ T6359] total_dirty 0 [ 119.606250][ T6359] total_writeback 0 [ 119.610164][ T6359] total_workingset_refault_anon 0 [ 119.627960][ T6359] total_workingset_refault_file 0 [ 119.635396][ T6359] total_swap 0 [ 119.639129][ T6359] total_pgpgin 0 [ 119.662552][ T6359] total_pgpgout 0 [ 119.666515][ T6359] total_pgfault 2 [ 119.670375][ T6359] total_pgmajfault 0 [ 119.722373][ T6359] total_inactive_anon 0 [ 119.752725][ T6359] total_active_anon 0 [ 119.768548][ T6374] fuse: Bad value for 'fd' [ 119.783687][ T6359] total_inactive_file 0 [ 119.788185][ T6359] total_active_file 0 [ 119.792531][ T6359] total_unevictable 0 [ 119.796826][ T6359] anon_cost 0 [ 119.800363][ T6359] file_cost 0 [ 119.803852][ T6359] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.197,pid=6358,uid=0 [ 119.821681][ T6359] Memory cgroup out of memory: Killed process 6358 (syz.0.197) total-vm:102244kB, anon-rss:1372kB, file-rss:22784kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 121.651856][ T49] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 121.675795][ T6385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.740623][ T6385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.774852][ T6385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.457162][ T6400] fuse: Bad value for 'fd' [ 122.510198][ T6402] syz.0.209 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 122.520776][ T6402] CPU: 1 PID: 6402 Comm: syz.0.209 Not tainted syzkaller #0 [ 122.528102][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.538340][ T6402] Call Trace: [ 122.541630][ T6402] [ 122.544582][ T6402] dump_stack_lvl+0x18c/0x250 [ 122.549317][ T6402] ? show_regs_print_info+0x20/0x20 [ 122.554682][ T6402] ? load_image+0x420/0x420 [ 122.559499][ T6402] ? ___ratelimit+0x478/0x610 [ 122.564196][ T6402] ? radix_tree_cpu_dead+0x160/0x160 [ 122.569588][ T6402] dump_header+0xd8/0x820 [ 122.573986][ T6402] oom_kill_process+0x390/0x580 [ 122.579441][ T6402] out_of_memory+0xe0e/0x1200 [ 122.584178][ T6402] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 122.590383][ T6402] ? print_unlock_imbalance_bug+0x160/0x160 [ 122.596309][ T6402] ? mutex_lock_nested+0x20/0x20 [ 122.601361][ T6402] ? unregister_oom_notifier+0x20/0x20 [ 122.606878][ T6402] mem_cgroup_out_of_memory+0x2c2/0x390 [ 122.612561][ T6402] ? try_charge_memcg+0xc91/0x17c0 [ 122.617817][ T6402] ? drain_local_stock+0x630/0x630 [ 122.622977][ T6402] ? do_raw_spin_unlock+0x121/0x230 [ 122.628206][ T6402] try_charge_memcg+0xca1/0x17c0 [ 122.633202][ T6402] ? folio_flags+0x120/0x120 [ 122.637848][ T6402] ? percpu_ref_tryget+0x15/0x180 [ 122.643025][ T6402] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 122.648961][ T6402] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 122.654987][ T6402] ? percpu_ref_tryget+0x15/0x180 [ 122.660058][ T6402] ? percpu_ref_tryget+0x15/0x180 [ 122.665137][ T6402] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 122.670928][ T6402] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 122.676844][ T6402] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 122.682785][ T6402] obj_cgroup_charge+0x36e/0x630 [ 122.687859][ T6402] ? get_obj_cgroup_from_current+0xd4/0x280 [ 122.693873][ T6402] ? obj_cgroup_charge+0xed/0x630 [ 122.699347][ T6402] ? mod_objcg_mlstate+0x320/0x320 [ 122.704565][ T6402] ? get_obj_cgroup_from_current+0xd4/0x280 [ 122.710825][ T6402] ? get_obj_cgroup_from_current+0xd4/0x280 [ 122.716832][ T6402] slab_pre_alloc_hook+0x2e2/0x300 [ 122.722061][ T6402] kmem_cache_alloc+0x5a/0x2c0 [ 122.727112][ T6402] ? vm_area_dup+0x27/0x270 [ 122.731664][ T6402] vm_area_dup+0x27/0x270 [ 122.736172][ T6402] __split_vma+0x1a8/0xc20 [ 122.740635][ T6402] ? mmap_write_unlock+0x160/0x160 [ 122.745786][ T6402] ? schedule+0xc7/0x170 [ 122.750106][ T6402] do_vmi_align_munmap+0x310/0x16a0 [ 122.755390][ T6402] ? futex_wait_setup+0x270/0x270 [ 122.760573][ T6402] ? do_vmi_munmap+0x2d0/0x2d0 [ 122.765479][ T6402] ? mtree_range_walk+0x68c/0x7b0 [ 122.770653][ T6402] ? mas_find_setup+0x47f/0x590 [ 122.775561][ T6402] __se_sys_brk+0x79b/0xd00 [ 122.780237][ T6402] ? __x64_sys_brk+0x40/0x40 [ 122.784916][ T6402] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 122.791185][ T6402] ? lockdep_hardirqs_on+0x98/0x150 [ 122.796682][ T6402] do_syscall_64+0x55/0xb0 [ 122.801154][ T6402] ? clear_bhb_loop+0x40/0x90 [ 122.806592][ T6402] ? clear_bhb_loop+0x40/0x90 [ 122.811721][ T6402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.817978][ T6402] RIP: 0033:0x7f55f679e019 [ 122.822523][ T6402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.843818][ T6402] RSP: 002b:00007f55f7692028 EFLAGS: 00000246 ORIG_RAX: 000000000000000c [ 122.852616][ T6402] RAX: ffffffffffffffda RBX: 00007f55f6a25fa0 RCX: 00007f55f679e019 [ 122.860963][ T6402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001000 [ 122.869682][ T6402] RBP: 00007f55f683500c R08: 0000000000000000 R09: 0000000000000000 [ 122.877944][ T6402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.886364][ T6402] R13: 00007f55f6a26038 R14: 00007f55f6a25fa0 R15: 00007fffc902d758 [ 122.894719][ T6402] [ 123.024416][ T6402] memory: usage 0kB, limit 0kB, failcnt 91 [ 124.382683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 125.858091][ T6402] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 125.896490][ T6402] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 125.923397][ T6402] Memory cgroup stats for /syz0/test: [ 125.923545][ T6402] cache 0 [ 125.932044][ T6402] rss 0 [ 125.987378][ T6402] rss_huge 0 [ 125.990687][ T6402] shmem 0 [ 125.994508][ T6402] mapped_file 0 [ 126.002991][ T6402] dirty 0 [ 126.006089][ T6402] writeback 0 [ 126.009514][ T6402] workingset_refault_anon 0 [ 126.033436][ T6402] workingset_refault_file 0 [ 126.038138][ T6402] swap 0 [ 126.041917][ T6402] pgpgin 0 [ 126.046414][ T6402] pgpgout 0 [ 126.049631][ T6402] pgfault 7 [ 126.183894][ T6415] loop3: detected capacity change from 0 to 512 [ 126.275986][ T6415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.289223][ T6415] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.347996][ T6402] pgmajfault 0 [ 126.393122][ T6402] inactive_anon 0 [ 126.436535][ T6402] active_anon 0 [ 126.490906][ T6402] inactive_file 0 [ 126.531847][ T6402] active_file 0 [ 126.575752][ T6402] unevictable 0 [ 126.631245][ T6402] hierarchical_memory_limit 0 [ 126.657385][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.667680][ T6402] hierarchical_memsw_limit 9223372036854771712 [ 126.682694][ T6402] total_cache 0 [ 126.686509][ T6402] total_rss 0 [ 126.689867][ T6402] total_rss_huge 0 [ 126.716810][ T6402] total_shmem 0 [ 126.720366][ T6402] total_mapped_file 0 [ 126.732885][ T6402] total_dirty 0 [ 126.736421][ T6402] total_writeback 0 [ 126.749505][ T6402] total_workingset_refault_anon 0 [ 126.762790][ T6402] total_workingset_refault_file 0 [ 126.767906][ T6402] total_swap 0 [ 126.771325][ T6402] total_pgpgin 0 [ 126.812187][ T6402] total_pgpgout 0 [ 126.816206][ T6402] total_pgfault 7 [ 126.820195][ T6402] total_pgmajfault 0 [ 126.842744][ T6402] total_inactive_anon 0 [ 126.847078][ T6402] total_active_anon 0 [ 126.851102][ T6402] total_inactive_file 0 [ 126.877467][ T6402] total_active_file 0 [ 126.881548][ T6402] total_unevictable 0 [ 126.898295][ T6402] anon_cost 0 [ 126.901675][ T6402] file_cost 0 [ 126.906277][ T6402] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.209,pid=6401,uid=0 [ 126.933649][ T6402] Memory cgroup out of memory: Killed process 6401 (syz.0.209) total-vm:102244kB, anon-rss:1372kB, file-rss:22912kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 126.983264][ T6420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.072902][ T6422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.093429][ T6420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.530076][ T6438] fuse: Bad value for 'fd' [ 127.714360][ T6443] loop1: detected capacity change from 0 to 256 [ 127.723391][ T6443] exfat: Deprecated parameter 'namecase' [ 127.729410][ T6443] exfat: Bad value for 'uid' [ 129.519871][ T6451] syz.0.224 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 129.548713][ T6451] CPU: 1 PID: 6451 Comm: syz.0.224 Not tainted syzkaller #0 [ 129.556099][ T6451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.566300][ T6451] Call Trace: [ 129.569627][ T6451] [ 129.572704][ T6451] dump_stack_lvl+0x18c/0x250 [ 129.577462][ T6451] ? show_regs_print_info+0x20/0x20 [ 129.582729][ T6451] ? load_image+0x420/0x420 [ 129.587299][ T6451] ? ___ratelimit+0x478/0x610 [ 129.592038][ T6451] ? radix_tree_cpu_dead+0x160/0x160 [ 129.597476][ T6451] dump_header+0xd8/0x820 [ 129.601873][ T6451] oom_kill_process+0x390/0x580 [ 129.606784][ T6451] out_of_memory+0xe0e/0x1200 [ 129.611525][ T6451] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 129.617246][ T6451] ? print_unlock_imbalance_bug+0x160/0x160 [ 129.623461][ T6451] ? mutex_lock_nested+0x20/0x20 [ 129.628459][ T6451] ? unregister_oom_notifier+0x20/0x20 [ 129.634680][ T6451] mem_cgroup_out_of_memory+0x2c2/0x390 [ 129.640313][ T6451] ? try_charge_memcg+0xc91/0x17c0 [ 129.645483][ T6451] ? drain_local_stock+0x630/0x630 [ 129.650829][ T6451] ? do_raw_spin_unlock+0x121/0x230 [ 129.656188][ T6451] try_charge_memcg+0xca1/0x17c0 [ 129.661535][ T6451] ? folio_flags+0x120/0x120 [ 129.666188][ T6451] ? percpu_ref_tryget+0x15/0x180 [ 129.671278][ T6451] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 129.677100][ T6451] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 129.683318][ T6451] ? percpu_ref_tryget+0x15/0x180 [ 129.688509][ T6451] ? percpu_ref_tryget+0x15/0x180 [ 129.693763][ T6451] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 129.699534][ T6451] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 129.705305][ T6451] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 129.711270][ T6451] obj_cgroup_charge+0x36e/0x630 [ 129.716294][ T6451] ? get_obj_cgroup_from_current+0xd4/0x280 [ 129.722440][ T6451] ? obj_cgroup_charge+0xed/0x630 [ 129.727615][ T6451] ? mod_objcg_mlstate+0x320/0x320 [ 129.732796][ T6451] ? get_obj_cgroup_from_current+0xd4/0x280 [ 129.738998][ T6451] ? get_obj_cgroup_from_current+0xd4/0x280 [ 129.745037][ T6451] slab_pre_alloc_hook+0x2e2/0x300 [ 129.750235][ T6451] kmem_cache_alloc+0x5a/0x2c0 [ 129.755147][ T6451] ? vm_area_dup+0x27/0x270 [ 129.759688][ T6451] vm_area_dup+0x27/0x270 [ 129.764062][ T6451] __split_vma+0x1a8/0xc20 [ 129.768533][ T6451] ? mmap_write_unlock+0x160/0x160 [ 129.773705][ T6451] ? schedule+0xc7/0x170 [ 129.778007][ T6451] do_vmi_align_munmap+0x310/0x16a0 [ 129.783448][ T6451] ? futex_wait_setup+0x270/0x270 [ 129.788494][ T6451] ? do_vmi_munmap+0x2d0/0x2d0 [ 129.793430][ T6451] ? mtree_range_walk+0x68c/0x7b0 [ 129.798584][ T6451] ? mas_find_setup+0x47f/0x590 [ 129.803477][ T6451] __se_sys_brk+0x79b/0xd00 [ 129.808010][ T6451] ? __x64_sys_brk+0x40/0x40 [ 129.812618][ T6451] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 129.818627][ T6451] ? lockdep_hardirqs_on+0x98/0x150 [ 129.824109][ T6451] do_syscall_64+0x55/0xb0 [ 129.828538][ T6451] ? clear_bhb_loop+0x40/0x90 [ 129.833231][ T6451] ? clear_bhb_loop+0x40/0x90 [ 129.837922][ T6451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.843825][ T6451] RIP: 0033:0x7f55f679e019 [ 129.848446][ T6451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.868160][ T6451] RSP: 002b:00007f55f7692028 EFLAGS: 00000246 ORIG_RAX: 000000000000000c [ 129.876618][ T6451] RAX: ffffffffffffffda RBX: 00007f55f6a25fa0 RCX: 00007f55f679e019 [ 129.884630][ T6451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001000 [ 129.892715][ T6451] RBP: 00007f55f683500c R08: 0000000000000000 R09: 0000000000000000 [ 129.900700][ T6451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.908876][ T6451] R13: 00007f55f6a26038 R14: 00007f55f6a25fa0 R15: 00007fffc902d758 [ 129.916905][ T6451] [ 129.946576][ T6458] fuse: Bad value for 'fd' [ 129.962915][ T6451] memory: usage 0kB, limit 0kB, failcnt 127 [ 129.969094][ T6451] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 129.981492][ T6451] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 129.991621][ T6451] Memory cgroup stats for /syz0/test: [ 129.991772][ T6451] cache 0 [ 130.029665][ T6451] rss 0 [ 130.032543][ T6451] rss_huge 0 [ 130.047639][ T6451] shmem 0 [ 130.050660][ T6451] mapped_file 0 [ 131.545999][ T6451] dirty 0 [ 131.549095][ T6451] writeback 0 [ 131.553208][ T6451] workingset_refault_anon 0 [ 131.565775][ T6451] workingset_refault_file 0 [ 131.570361][ T6451] swap 0 [ 131.574274][ T6451] pgpgin 0 [ 131.577345][ T6451] pgpgout 0 [ 131.580492][ T6451] pgfault 7 [ 131.584270][ T6451] pgmajfault 0 [ 131.587682][ T6451] inactive_anon 0 [ 131.591428][ T6451] active_anon 0 [ 131.613101][ T6451] inactive_file 0 [ 131.616929][ T6451] active_file 0 [ 131.620417][ T6451] unevictable 0 [ 131.657676][ T6451] hierarchical_memory_limit 0 [ 131.662455][ T6451] hierarchical_memsw_limit 9223372036854771712 [ 131.672817][ T6451] total_cache 0 [ 131.676351][ T6451] total_rss 0 [ 131.679667][ T6451] total_rss_huge 0 [ 131.723514][ T6451] total_shmem 0 [ 131.727242][ T6451] total_mapped_file 0 [ 131.731260][ T6451] total_dirty 0 [ 133.124283][ T6451] total_writeback 0 [ 133.128345][ T6451] total_workingset_refault_anon 0 [ 133.133845][ T6451] total_workingset_refault_file 0 [ 133.138938][ T6451] total_swap 0 [ 133.142395][ T6451] total_pgpgin 0 [ 133.148703][ T6451] total_pgpgout 0 [ 133.152434][ T6451] total_pgfault 7 [ 133.156808][ T6451] total_pgmajfault 0 [ 133.160761][ T6451] total_inactive_anon 0 [ 133.165490][ T6451] total_active_anon 0 [ 133.169653][ T6451] total_inactive_file 0 [ 133.174291][ T6451] total_active_file 0 [ 133.178343][ T6451] total_unevictable 0 [ 133.185090][ T6451] anon_cost 0 [ 133.188469][ T6451] file_cost 0 [ 133.192143][ T6451] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.224,pid=6449,uid=0 [ 133.209087][ T6451] Memory cgroup out of memory: Killed process 6449 (syz.0.224) total-vm:102244kB, anon-rss:1244kB, file-rss:22784kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 133.322182][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.329034][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.081853][ T6482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.150447][ T6482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.191215][ T6482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.304981][ T6487] fuse: Bad value for 'fd' [ 136.802840][ T6526] fuse: Invalid rootmode [ 139.742663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 140.076431][ T6537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.159571][ T6539] syz.1.241 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 140.173161][ T6537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.203078][ T6537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.212999][ T6539] CPU: 0 PID: 6539 Comm: syz.1.241 Not tainted syzkaller #0 [ 140.220611][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.230805][ T6539] Call Trace: [ 140.234131][ T6539] [ 140.237272][ T6539] dump_stack_lvl+0x18c/0x250 [ 140.242000][ T6539] ? show_regs_print_info+0x20/0x20 [ 140.247429][ T6539] ? load_image+0x420/0x420 [ 140.251994][ T6539] ? ___ratelimit+0x478/0x610 [ 140.256748][ T6539] ? radix_tree_cpu_dead+0x160/0x160 [ 140.262203][ T6539] dump_header+0xd8/0x820 [ 140.266611][ T6539] oom_kill_process+0x390/0x580 [ 140.271544][ T6539] out_of_memory+0xe0e/0x1200 [ 140.276293][ T6539] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 140.281977][ T6539] ? print_unlock_imbalance_bug+0x160/0x160 [ 140.288021][ T6539] ? mutex_lock_nested+0x20/0x20 [ 140.293035][ T6539] ? unregister_oom_notifier+0x20/0x20 [ 140.298596][ T6539] mem_cgroup_out_of_memory+0x2c2/0x390 [ 140.304184][ T6539] ? try_charge_memcg+0xc91/0x17c0 [ 140.309414][ T6539] ? drain_local_stock+0x630/0x630 [ 140.314557][ T6539] ? do_raw_spin_unlock+0x121/0x230 [ 140.319795][ T6539] try_charge_memcg+0xca1/0x17c0 [ 140.324773][ T6539] ? folio_flags+0x120/0x120 [ 140.329378][ T6539] ? percpu_ref_tryget+0x15/0x180 [ 140.334424][ T6539] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 140.340196][ T6539] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 140.346262][ T6539] ? percpu_ref_tryget+0x15/0x180 [ 140.351348][ T6539] ? percpu_ref_tryget+0x15/0x180 [ 140.356431][ T6539] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 140.362273][ T6539] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 140.368108][ T6539] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 140.374144][ T6539] obj_cgroup_charge+0x36e/0x630 [ 140.379214][ T6539] ? get_obj_cgroup_from_current+0xd4/0x280 [ 140.385129][ T6539] ? obj_cgroup_charge+0xed/0x630 [ 140.390166][ T6539] ? mod_objcg_mlstate+0x320/0x320 [ 140.395314][ T6539] ? get_obj_cgroup_from_current+0xd4/0x280 [ 140.401310][ T6539] ? get_obj_cgroup_from_current+0xd4/0x280 [ 140.407347][ T6539] slab_pre_alloc_hook+0x2e2/0x300 [ 140.412575][ T6539] kmem_cache_alloc+0x5a/0x2c0 [ 140.417417][ T6539] ? vm_area_dup+0x27/0x270 [ 140.421956][ T6539] vm_area_dup+0x27/0x270 [ 140.426455][ T6539] __split_vma+0x1a8/0xc20 [ 140.430922][ T6539] ? mmap_write_unlock+0x160/0x160 [ 140.436104][ T6539] ? schedule+0xc7/0x170 [ 140.440382][ T6539] do_vmi_align_munmap+0x310/0x16a0 [ 140.445618][ T6539] ? futex_wait_setup+0x270/0x270 [ 140.450660][ T6539] ? do_vmi_munmap+0x2d0/0x2d0 [ 140.455537][ T6539] ? mtree_range_walk+0x68c/0x7b0 [ 140.460593][ T6539] ? mas_find_setup+0x47f/0x590 [ 140.465469][ T6539] __se_sys_brk+0x79b/0xd00 [ 140.470019][ T6539] ? __x64_sys_brk+0x40/0x40 [ 140.474715][ T6539] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 140.480723][ T6539] ? lockdep_hardirqs_on+0x98/0x150 [ 140.485949][ T6539] do_syscall_64+0x55/0xb0 [ 140.490390][ T6539] ? clear_bhb_loop+0x40/0x90 [ 140.495097][ T6539] ? clear_bhb_loop+0x40/0x90 [ 140.499791][ T6539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.505704][ T6539] RIP: 0033:0x7f857579e019 [ 140.510139][ T6539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.529781][ T6539] RSP: 002b:00007f85766ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000000c [ 140.538320][ T6539] RAX: ffffffffffffffda RBX: 00007f8575a25fa0 RCX: 00007f857579e019 [ 140.546322][ T6539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001000 [ 140.554501][ T6539] RBP: 00007f857583500c R08: 0000000000000000 R09: 0000000000000000 [ 140.562503][ T6539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.570578][ T6539] R13: 00007f8575a26038 R14: 00007f8575a25fa0 R15: 00007ffd4fbc4888 [ 140.578596][ T6539] [ 140.602763][ T6539] memory: usage 0kB, limit 0kB, failcnt 19 [ 140.608802][ T6539] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 140.617678][ T6539] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 140.635909][ T6539] Memory cgroup stats for /syz1/test: [ 140.636064][ T6539] cache 0 [ 140.665732][ T6539] rss 0 [ 140.668644][ T6539] rss_huge 0 [ 140.713060][ T6539] shmem 0 [ 140.716094][ T6539] mapped_file 0 [ 140.719591][ T6539] dirty 0 [ 140.742792][ T6539] writeback 0 [ 140.746159][ T6539] workingset_refault_anon 0 [ 140.750689][ T6539] workingset_refault_file 0 [ 140.772636][ T6539] swap 0 [ 140.775562][ T6539] pgpgin 0 [ 140.778622][ T6539] pgpgout 0 [ 140.781762][ T6539] pgfault 2 [ 140.802639][ T6539] pgmajfault 0 [ 140.806086][ T6539] inactive_anon 0 [ 140.809748][ T6539] active_anon 0 [ 140.822850][ T6539] inactive_file 0 [ 140.826650][ T6539] active_file 0 [ 140.830232][ T6539] unevictable 0 [ 140.852617][ T6539] hierarchical_memory_limit 0 [ 140.857365][ T6539] hierarchical_memsw_limit 9223372036854771712 [ 140.872779][ T6539] total_cache 0 [ 140.876406][ T6539] total_rss 0 [ 140.879719][ T6539] total_rss_huge 0 [ 140.902778][ T6539] total_shmem 0 [ 140.906415][ T6539] total_mapped_file 0 [ 140.910442][ T6539] total_dirty 0 [ 140.922758][ T6539] total_writeback 0 [ 140.926641][ T6539] total_workingset_refault_anon 0 [ 140.932045][ T6539] total_workingset_refault_file 0 [ 140.952662][ T6539] total_swap 0 [ 140.956135][ T6539] total_pgpgin 0 [ 140.959713][ T6539] total_pgpgout 0 [ 140.982850][ T6539] total_pgfault 2 [ 140.986584][ T6539] total_pgmajfault 0 [ 140.990682][ T6539] total_inactive_anon 0 [ 141.012645][ T6539] total_active_anon 0 [ 141.016717][ T6539] total_inactive_file 0 [ 141.021089][ T6539] total_active_file 0 [ 141.032673][ T6539] total_unevictable 0 [ 141.036737][ T6539] anon_cost 0 [ 141.040166][ T6539] file_cost 0 [ 141.062817][ T6539] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.241,pid=6538,uid=0 [ 141.095874][ T6539] Memory cgroup out of memory: Killed process 6538 (syz.1.241) total-vm:102244kB, anon-rss:1216kB, file-rss:22912kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 141.469578][ T6559] loop1: detected capacity change from 0 to 16 [ 141.486839][ T6559] erofs: (device loop1): mounted with root inode @ nid 36. [ 141.495245][ T42] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 142.153956][ T6562] zero sized request [ 143.031790][ T42] usb 3-1: too many endpoints for config 0 interface 0 altsetting 3: 255, using maximum allowed: 30 [ 143.084879][ T42] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.114072][ T42] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 143.138047][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 143.156325][ T42] usb 3-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 143.178657][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.226582][ T42] usb 3-1: config 0 descriptor?? [ 143.266698][ T6565] fuse: Invalid rootmode [ 143.303617][ T6567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.367058][ T6567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.393461][ T6567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.500244][ T6569] syz.0.263 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 143.510366][ T6569] CPU: 0 PID: 6569 Comm: syz.0.263 Not tainted syzkaller #0 [ 143.517700][ T6569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.527926][ T6569] Call Trace: [ 143.531246][ T6569] [ 143.534217][ T6569] dump_stack_lvl+0x18c/0x250 [ 143.538954][ T6569] ? show_regs_print_info+0x20/0x20 [ 143.544206][ T6569] ? load_image+0x420/0x420 [ 143.548940][ T6569] ? ___ratelimit+0x478/0x610 [ 143.553914][ T6569] ? radix_tree_cpu_dead+0x160/0x160 [ 143.559226][ T6569] dump_header+0xd8/0x820 [ 143.563586][ T6569] oom_kill_process+0x390/0x580 [ 143.568461][ T6569] out_of_memory+0xe0e/0x1200 [ 143.573172][ T6569] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 143.578829][ T6569] ? print_unlock_imbalance_bug+0x160/0x160 [ 143.584744][ T6569] ? mutex_lock_nested+0x20/0x20 [ 143.589720][ T6569] ? unregister_oom_notifier+0x20/0x20 [ 143.595311][ T6569] mem_cgroup_out_of_memory+0x2c2/0x390 [ 143.600881][ T6569] ? try_charge_memcg+0xc91/0x17c0 [ 143.606123][ T6569] ? drain_local_stock+0x630/0x630 [ 143.611619][ T6569] ? do_raw_spin_unlock+0x121/0x230 [ 143.616848][ T6569] try_charge_memcg+0xca1/0x17c0 [ 143.621828][ T6569] ? folio_flags+0x120/0x120 [ 143.626439][ T6569] ? percpu_ref_tryget+0x15/0x180 [ 143.631502][ T6569] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 143.637330][ T6569] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 143.643767][ T6569] ? percpu_ref_tryget+0x15/0x180 [ 143.648822][ T6569] ? percpu_ref_tryget+0x15/0x180 [ 143.653869][ T6569] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 143.659870][ T6569] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 143.665623][ T6569] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 143.671469][ T6569] obj_cgroup_charge+0x36e/0x630 [ 143.676432][ T6569] ? get_obj_cgroup_from_current+0xd4/0x280 [ 143.682433][ T6569] ? obj_cgroup_charge+0xed/0x630 [ 143.687484][ T6569] ? mod_objcg_mlstate+0x320/0x320 [ 143.692621][ T6569] ? get_obj_cgroup_from_current+0xd4/0x280 [ 143.698526][ T6569] ? get_obj_cgroup_from_current+0xd4/0x280 [ 143.704458][ T6569] slab_pre_alloc_hook+0x2e2/0x300 [ 143.709867][ T6569] kmem_cache_alloc+0x5a/0x2c0 [ 143.714655][ T6569] ? vm_area_dup+0x27/0x270 [ 143.719174][ T6569] vm_area_dup+0x27/0x270 [ 143.723540][ T6569] __split_vma+0x1a8/0xc20 [ 143.728014][ T6569] ? mmap_write_unlock+0x160/0x160 [ 143.733180][ T6569] ? schedule+0xc7/0x170 [ 143.737644][ T6569] do_vmi_align_munmap+0x310/0x16a0 [ 143.742963][ T6569] ? futex_wait_setup+0x270/0x270 [ 143.748016][ T6569] ? do_vmi_munmap+0x2d0/0x2d0 [ 143.752816][ T6569] ? mtree_range_walk+0x68c/0x7b0 [ 143.757892][ T6569] ? mas_find_setup+0x47f/0x590 [ 143.762774][ T6569] __se_sys_brk+0x79b/0xd00 [ 143.767349][ T6569] ? __x64_sys_brk+0x40/0x40 [ 143.771959][ T6569] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 143.778058][ T6569] ? lockdep_hardirqs_on+0x98/0x150 [ 143.783367][ T6569] do_syscall_64+0x55/0xb0 [ 143.787971][ T6569] ? clear_bhb_loop+0x40/0x90 [ 143.792684][ T6569] ? clear_bhb_loop+0x40/0x90 [ 143.797402][ T6569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.803406][ T6569] RIP: 0033:0x7f55f679e019 [ 143.807869][ T6569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.827576][ T6569] RSP: 002b:00007f55f7692028 EFLAGS: 00000246 ORIG_RAX: 000000000000000c [ 143.836290][ T6569] RAX: ffffffffffffffda RBX: 00007f55f6a25fa0 RCX: 00007f55f679e019 [ 143.844363][ T6569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001000 [ 143.852347][ T6569] RBP: 00007f55f683500c R08: 0000000000000000 R09: 0000000000000000 [ 143.860331][ T6569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.868324][ T6569] R13: 00007f55f6a26038 R14: 00007f55f6a25fa0 R15: 00007fffc902d758 [ 143.876333][ T6569] [ 143.891516][ T6569] memory: usage 0kB, limit 0kB, failcnt 163 [ 143.900026][ T6569] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 143.918064][ T6569] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 143.946114][ T6569] Memory cgroup stats for /syz0/test: [ 143.946266][ T6569] cache 0 [ 143.950589][ T42] logitech-hidpp-device 0003:046D:C088.0001: unknown main item tag 0x6 [ 143.962760][ T6569] rss 0 [ 143.966068][ T6569] rss_huge 0 [ 143.967625][ T42] logitech-hidpp-device 0003:046D:C088.0001: item fetching failed at offset 5/6 [ 143.978537][ T6569] shmem 0 [ 143.980144][ T42] logitech-hidpp-device 0003:046D:C088.0001: hidpp_probe:parse failed [ 143.981632][ T6569] mapped_file 0 [ 143.996072][ T42] logitech-hidpp-device: probe of 0003:046D:C088.0001 failed with error -22 [ 144.016664][ T6569] dirty 0 [ 144.026837][ T6569] writeback 0 [ 144.037512][ T6569] workingset_refault_anon 0 [ 144.042275][ T6569] workingset_refault_file 0 [ 144.047880][ T6569] swap 0 [ 144.050796][ T6569] pgpgin 0 [ 144.059142][ T6569] pgpgout 0 [ 144.062372][ T6569] pgfault 9 [ 144.066102][ T6569] pgmajfault 0 [ 144.069691][ T6569] inactive_anon 0 [ 144.078595][ T6569] active_anon 0 [ 144.082310][ T6569] inactive_file 0 [ 144.089549][ T6569] active_file 0 [ 144.099622][ T6569] unevictable 0 [ 144.105806][ T6569] hierarchical_memory_limit 0 [ 144.110638][ T6569] hierarchical_memsw_limit 9223372036854771712 [ 144.122060][ T6569] total_cache 0 [ 144.126243][ T6569] total_rss 0 [ 144.129839][ T6569] total_rss_huge 0 [ 144.138833][ T6569] total_shmem 0 [ 144.142530][ T6569] total_mapped_file 0 [ 144.147600][ T6569] total_dirty 0 [ 144.151557][ T6569] total_writeback 0 [ 144.160126][ T42] usb 3-1: USB disconnect, device number 2 [ 144.160785][ T6569] total_workingset_refault_anon 0 [ 144.191613][ T6569] total_workingset_refault_file 0 [ 144.199847][ T6569] total_swap 0 [ 144.208306][ T6569] total_pgpgin 0 [ 144.211926][ T6569] total_pgpgout 0 [ 144.222182][ T6569] total_pgfault 9 [ 144.228969][ T6569] total_pgmajfault 0 [ 144.236144][ T6569] total_inactive_anon 0 [ 144.240494][ T6569] total_active_anon 0 [ 144.248416][ T6569] total_inactive_file 0 [ 144.256715][ T6569] total_active_file 0 [ 144.260926][ T6569] total_unevictable 0 [ 144.267891][ T6569] anon_cost 0 [ 144.271330][ T6569] file_cost 0 [ 144.277610][ T6569] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.263,pid=6568,uid=0 [ 144.299403][ T6569] Memory cgroup out of memory: Killed process 6568 (syz.0.263) total-vm:102244kB, anon-rss:1372kB, file-rss:22784kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 145.124901][ T6583] zero sized request [ 146.166160][ T6589] fuse: Invalid rootmode [ 146.269265][ T6593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.348074][ T6595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.379713][ T6593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.398983][ T6597] syz.0.274 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 146.416574][ T6597] CPU: 1 PID: 6597 Comm: syz.0.274 Not tainted syzkaller #0 [ 146.423963][ T6597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.434671][ T6597] Call Trace: [ 146.437997][ T6597] [ 146.440975][ T6597] dump_stack_lvl+0x18c/0x250 [ 146.445793][ T6597] ? show_regs_print_info+0x20/0x20 [ 146.451138][ T6597] ? load_image+0x420/0x420 [ 146.455695][ T6597] ? ___ratelimit+0x478/0x610 [ 146.460551][ T6597] ? radix_tree_cpu_dead+0x160/0x160 [ 146.465917][ T6597] dump_header+0xd8/0x820 [ 146.470503][ T6597] oom_kill_process+0x390/0x580 [ 146.475628][ T6597] out_of_memory+0xe0e/0x1200 [ 146.480873][ T6597] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 146.486745][ T6597] ? print_unlock_imbalance_bug+0x160/0x160 [ 146.492864][ T6597] ? mutex_lock_nested+0x20/0x20 [ 146.497954][ T6597] ? unregister_oom_notifier+0x20/0x20 [ 146.503566][ T6597] mem_cgroup_out_of_memory+0x2c2/0x390 [ 146.509170][ T6597] ? try_charge_memcg+0xc91/0x17c0 [ 146.514328][ T6597] ? drain_local_stock+0x630/0x630 [ 146.519495][ T6597] ? do_raw_spin_unlock+0x121/0x230 [ 146.524769][ T6597] try_charge_memcg+0xca1/0x17c0 [ 146.529864][ T6597] ? folio_flags+0x120/0x120 [ 146.534647][ T6597] ? percpu_ref_tryget+0x15/0x180 [ 146.539689][ T6597] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 146.545434][ T6597] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 146.551518][ T6597] ? percpu_ref_tryget+0x15/0x180 [ 146.556565][ T6597] ? percpu_ref_tryget+0x15/0x180 [ 146.561693][ T6597] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 146.567433][ T6597] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 146.573188][ T6597] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 146.579145][ T6597] obj_cgroup_charge+0x36e/0x630 [ 146.584122][ T6597] ? get_obj_cgroup_from_current+0xd4/0x280 [ 146.590226][ T6597] ? obj_cgroup_charge+0xed/0x630 [ 146.595308][ T6597] ? mod_objcg_mlstate+0x320/0x320 [ 146.600719][ T6597] ? get_obj_cgroup_from_current+0xd4/0x280 [ 146.606642][ T6597] ? get_obj_cgroup_from_current+0xd4/0x280 [ 146.613215][ T6597] slab_pre_alloc_hook+0x2e2/0x300 [ 146.618360][ T6597] kmem_cache_alloc+0x5a/0x2c0 [ 146.623145][ T6597] ? vm_area_dup+0x27/0x270 [ 146.627701][ T6597] vm_area_dup+0x27/0x270 [ 146.632046][ T6597] __split_vma+0x1a8/0xc20 [ 146.636490][ T6597] ? mmap_write_unlock+0x160/0x160 [ 146.641715][ T6597] ? schedule+0xc7/0x170 [ 146.646026][ T6597] do_vmi_align_munmap+0x310/0x16a0 [ 146.651288][ T6597] ? futex_wait_setup+0x270/0x270 [ 146.656334][ T6597] ? do_vmi_munmap+0x2d0/0x2d0 [ 146.661176][ T6597] ? mtree_range_walk+0x68c/0x7b0 [ 146.666502][ T6597] ? mas_find_setup+0x47f/0x590 [ 146.671507][ T6597] __se_sys_brk+0x79b/0xd00 [ 146.676089][ T6597] ? __x64_sys_brk+0x40/0x40 [ 146.680746][ T6597] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 146.687146][ T6597] ? lockdep_hardirqs_on+0x98/0x150 [ 146.692404][ T6597] do_syscall_64+0x55/0xb0 [ 146.697389][ T6597] ? clear_bhb_loop+0x40/0x90 [ 146.702182][ T6597] ? clear_bhb_loop+0x40/0x90 [ 146.706904][ T6597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.713080][ T6597] RIP: 0033:0x7f55f679e019 [ 146.717510][ T6597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.737161][ T6597] RSP: 002b:00007f55f7692028 EFLAGS: 00000246 ORIG_RAX: 000000000000000c [ 146.745773][ T6597] RAX: ffffffffffffffda RBX: 00007f55f6a25fa0 RCX: 00007f55f679e019 [ 146.753953][ T6597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001000 [ 146.762112][ T6597] RBP: 00007f55f683500c R08: 0000000000000000 R09: 0000000000000000 [ 146.770185][ T6597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.778715][ T6597] R13: 00007f55f6a26038 R14: 00007f55f6a25fa0 R15: 00007fffc902d758 [ 146.787242][ T6597] [ 146.801334][ T6597] memory: usage 0kB, limit 0kB, failcnt 199 [ 146.815982][ T6597] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 146.828524][ T6597] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 146.838514][ T6597] Memory cgroup stats for /syz0/test: [ 146.838743][ T6597] cache 0 [ 146.847959][ T6597] rss 0 [ 146.850950][ T6597] rss_huge 0 [ 146.854636][ T6597] shmem 0 [ 146.857728][ T6597] mapped_file 0 [ 146.861442][ T6597] dirty 0 [ 146.865154][ T6597] writeback 0 [ 146.868592][ T6597] workingset_refault_anon 0 [ 146.873741][ T6597] workingset_refault_file 0 [ 146.878400][ T6597] swap 0 [ 146.881555][ T6597] pgpgin 0 [ 146.885517][ T6597] pgpgout 0 [ 146.888867][ T6597] pgfault 11 [ 146.892277][ T6597] pgmajfault 0 [ 146.897154][ T6597] inactive_anon 0 [ 146.900983][ T6597] active_anon 0 [ 146.908408][ T6597] inactive_file 0 [ 146.912536][ T6597] active_file 0 [ 146.916685][ T6597] unevictable 0 [ 146.920562][ T6597] hierarchical_memory_limit 0 [ 146.942801][ T6597] hierarchical_memsw_limit 9223372036854771712 [ 146.952695][ T6597] total_cache 0 [ 146.963255][ T6597] total_rss 0 [ 146.969293][ T6597] total_rss_huge 0 [ 146.980413][ T6597] total_shmem 0 [ 147.002733][ T6597] total_mapped_file 0 [ 147.006994][ T6597] total_dirty 0 [ 147.010671][ T6597] total_writeback 0 [ 147.035604][ T6597] total_workingset_refault_anon 0 [ 147.056848][ T6597] total_workingset_refault_file 0 [ 147.067344][ T6597] total_swap 0 [ 147.071301][ T6597] total_pgpgin 0 [ 147.075913][ T6597] total_pgpgout 0 [ 147.080514][ T6597] total_pgfault 11 [ 147.089842][ T6597] total_pgmajfault 0 [ 147.094427][ T6597] total_inactive_anon 0 [ 147.098730][ T6597] total_active_anon 0 [ 147.114164][ T6597] total_inactive_file 0 [ 147.127679][ T6597] total_active_file 0 [ 147.134409][ T6597] total_unevictable 0 [ 147.152720][ T6597] anon_cost 0 [ 147.156322][ T6597] file_cost 0 [ 147.170637][ T6597] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.274,pid=6596,uid=0 [ 147.188893][ T6597] Memory cgroup out of memory: Killed process 6596 (syz.0.274) total-vm:102244kB, anon-rss:1372kB, file-rss:22784kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 147.942765][ T6611] zero sized request [ 148.976826][ T5815] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 149.037193][ T5815] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 149.159352][ T6621] fuse: Bad value for 'rootmode' [ 149.562465][ T6625] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 149.569332][ T6625] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 149.596949][ T6625] vhci_hcd vhci_hcd.0: Device attached [ 149.625197][ T6628] usbip_core: unknown command [ 149.636460][ T6628] vhci_hcd: unknown pdu 33818886 [ 149.659614][ T6628] usbip_core: unknown command [ 149.675520][ T59] vhci_hcd: stop threads [ 149.687399][ T59] vhci_hcd: release socket [ 149.696724][ T59] vhci_hcd: disconnect device [ 149.924900][ T6633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.014563][ T6633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.048481][ T6633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.248441][ T6639] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 150.317414][ T6639] loop1: detected capacity change from 0 to 1024 [ 150.343353][ T6639] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 109951162777605)! [ 150.356453][ T6639] EXT4-fs (loop1): group descriptors corrupted! [ 150.483734][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 150.715935][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.745394][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.765852][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.802269][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.822027][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.391797][ T6650] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 152.265942][ T23] usb 3-1: config 0 descriptor?? [ 152.513029][ T6656] fuse: Bad value for 'rootmode' [ 152.689941][ T23] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 152.759167][ T23] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 153.981012][ T6674] loop3: detected capacity change from 0 to 256 [ 154.000512][ T6674] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.015170][ C1] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 154.030179][ T6674] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 154.069329][ T6674] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc4d1c548, utbl_chksum : 0xe619d30d) [ 154.085207][ T6674] exFAT-fs (loop3): failed to load alloc-bitmap [ 154.091817][ T6674] exFAT-fs (loop3): failed to recognize exfat type [ 154.206855][ T6677] loop3: detected capacity change from 0 to 256 [ 154.255155][ T6677] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 154.307608][ T27] audit: type=1800 audit(1785834152.467:3): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.297" name="file1" dev="loop3" ino=1048743 res=0 errno=0 [ 154.422093][ T6677] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 154.433858][ T6679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.436382][ T6677] exFAT-fs (loop3): Filesystem has been set read-only [ 154.525416][ T6681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.548738][ T6679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.102801][ T6684] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 156.150694][ T6689] fuse: Bad value for 'rootmode' [ 156.176904][ T23] usb 3-1: USB disconnect, device number 3 [ 157.383090][ T6705] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 158.470373][ T6713] fuse: Unknown parameter 'use00000000000000000000' [ 158.723797][ T6717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.824503][ T6717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.870598][ T6717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.900753][ T6725] loop3: detected capacity change from 0 to 2048 [ 158.972934][ T6725] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 160.746398][ T6736] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 161.853953][ T6742] fuse: Unknown parameter 'use00000000000000000000' [ 163.347902][ T6754] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 164.603680][ T6760] loop0: detected capacity change from 0 to 8192 [ 164.634960][ T6760] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.628428][ T6778] fuse: Unknown parameter 'use00000000000000000000' [ 166.202689][ T6781] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 167.037373][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 167.232824][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 167.259596][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 167.274673][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.303095][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.327948][ T8] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 167.342658][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.352048][ T8] usb 2-1: Product: syz [ 167.357658][ T8] usb 2-1: Manufacturer: syz [ 167.363934][ T8] usb 2-1: SerialNumber: syz [ 167.393442][ T6790] loop3: detected capacity change from 0 to 128 [ 167.796234][ T8] usb 2-1: cannot find UAC_HEADER [ 167.894364][ T8] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 167.917467][ T8] usb 2-1: USB disconnect, device number 2 [ 167.960113][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.827496][ T6808] loop2: detected capacity change from 0 to 2048 [ 169.904955][ T6807] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 169.918748][ T6808] ======================================================= [ 169.918748][ T6808] WARNING: The mand mount option has been deprecated and [ 169.918748][ T6808] and is ignored by this kernel. Remove the mand [ 169.918748][ T6808] option from the mount to silence this warning. [ 169.918748][ T6808] ======================================================= [ 170.094168][ T6808] UDF-fs: bad mount option "umask=0000°000000000000000002" or missing value [ 170.107489][ T6812] fuse: Unknown parameter 'user_i00000000000000000000' [ 170.527973][ T6814] syz.1.349 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 170.539216][ T6814] CPU: 1 PID: 6814 Comm: syz.1.349 Not tainted syzkaller #0 [ 170.546660][ T6814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.557091][ T6814] Call Trace: [ 170.560407][ T6814] [ 170.563374][ T6814] dump_stack_lvl+0x18c/0x250 [ 170.568183][ T6814] ? show_regs_print_info+0x20/0x20 [ 170.573762][ T6814] ? load_image+0x420/0x420 [ 170.578278][ T6814] ? ___ratelimit+0x478/0x610 [ 170.583134][ T6814] ? radix_tree_cpu_dead+0x160/0x160 [ 170.588559][ T6814] dump_header+0xd8/0x820 [ 170.592948][ T6814] oom_kill_process+0x390/0x580 [ 170.597860][ T6814] out_of_memory+0xe0e/0x1200 [ 170.603456][ T6814] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 170.609143][ T6814] ? mutex_lock_nested+0x20/0x20 [ 170.614138][ T6814] ? unregister_oom_notifier+0x20/0x20 [ 170.619649][ T6814] mem_cgroup_out_of_memory+0x2c2/0x390 [ 170.625528][ T6814] ? try_charge_memcg+0xc91/0x17c0 [ 170.630658][ T6814] ? drain_local_stock+0x630/0x630 [ 170.635837][ T6814] ? do_raw_spin_unlock+0x121/0x230 [ 170.641203][ T6814] try_charge_memcg+0xca1/0x17c0 [ 170.646361][ T6814] ? folio_flags+0x120/0x120 [ 170.651176][ T6814] ? percpu_ref_tryget+0x15/0x180 [ 170.656266][ T6814] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 170.662047][ T6814] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 170.668257][ T6814] ? percpu_ref_tryget+0x15/0x180 [ 170.673735][ T6814] ? percpu_ref_tryget+0x15/0x180 [ 170.678778][ T6814] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 170.684555][ T6814] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 170.690383][ T6814] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 170.696303][ T6814] obj_cgroup_charge+0x36e/0x630 [ 170.701467][ T6814] ? obj_cgroup_charge+0xed/0x630 [ 170.706624][ T6814] ? mod_objcg_mlstate+0x320/0x320 [ 170.712193][ T6814] ? percpu_ref_put+0x12/0x100 [ 170.717089][ T6814] ? percpu_ref_put+0x12/0x100 [ 170.721920][ T6814] slab_pre_alloc_hook+0x2e2/0x300 [ 170.727081][ T6814] ? slab_pre_alloc_hook+0xb1/0x300 [ 170.733006][ T6814] kmem_cache_alloc_lru+0x4d/0x2b0 [ 170.738318][ T6814] ? sock_alloc_inode+0x28/0xc0 [ 170.743291][ T6814] sock_alloc_inode+0x28/0xc0 [ 170.748093][ T6814] ? sockfs_init_fs_context+0xb0/0xb0 [ 170.753691][ T6814] new_inode_pseudo+0x63/0x1d0 [ 170.758495][ T6814] __sock_create+0x12d/0x940 [ 170.763127][ T6814] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 170.769425][ T6814] __sys_socket+0xd7/0x1b0 [ 170.773889][ T6814] __x64_sys_socket+0x7a/0x90 [ 170.778848][ T6814] do_syscall_64+0x55/0xb0 [ 170.783376][ T6814] ? clear_bhb_loop+0x40/0x90 [ 170.788246][ T6814] ? clear_bhb_loop+0x40/0x90 [ 170.793289][ T6814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.799460][ T6814] RIP: 0033:0x7f857579e019 [ 170.804328][ T6814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.824553][ T6814] RSP: 002b:00007f85766ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 170.833162][ T6814] RAX: ffffffffffffffda RBX: 00007f8575a25fa0 RCX: 00007f857579e019 [ 170.841333][ T6814] RDX: 0000000000000000 RSI: 0800000000000002 RDI: 000000000000000a [ 170.849403][ T6814] RBP: 00007f857583500c R08: 0000000000000000 R09: 0000000000000000 [ 170.857736][ T6814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.865717][ T6814] R13: 00007f8575a26038 R14: 00007f8575a25fa0 R15: 00007ffd4fbc4888 [ 170.873749][ T6814] [ 171.331464][ T6814] memory: usage 0kB, limit 0kB, failcnt 74 [ 171.730980][ T6814] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 171.738855][ T6814] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 171.762875][ T6814] Memory cgroup stats for /syz1/test: [ 171.763128][ T6814] cache 0 [ 171.771598][ T6814] rss 0 [ 171.790882][ T6814] rss_huge 0 [ 171.798477][ T6814] shmem 0 [ 171.808931][ T6814] mapped_file 0 [ 171.812449][ T6814] dirty 0 [ 171.827856][ T6814] writeback 0 [ 171.831419][ T6814] workingset_refault_anon 0 [ 171.851901][ T6814] workingset_refault_file 0 [ 171.870360][ T6814] swap 0 [ 171.876121][ T6814] pgpgin 0 [ 171.879207][ T6814] pgpgout 0 [ 171.896523][ T6814] pgfault 3 [ 171.899724][ T6814] pgmajfault 0 [ 171.915020][ T6814] inactive_anon 0 [ 171.919125][ T6814] active_anon 0 [ 171.965717][ T6814] inactive_file 0 [ 171.969459][ T6814] active_file 0 [ 172.027503][ T6814] unevictable 0 [ 172.031066][ T6814] hierarchical_memory_limit 0 [ 172.037456][ T6814] hierarchical_memsw_limit 9223372036854771712 [ 172.078191][ T6814] total_cache 0 [ 172.085428][ T6814] total_rss 0 [ 172.095240][ T6814] total_rss_huge 0 [ 172.102493][ T6814] total_shmem 0 [ 172.117561][ T6814] total_mapped_file 0 [ 172.122076][ T6814] total_dirty 0 [ 172.135143][ T6814] total_writeback 0 [ 172.152077][ T6814] total_workingset_refault_anon 0 [ 172.197292][ T6814] total_workingset_refault_file 0 [ 172.215046][ T6814] total_swap 0 [ 172.222008][ T6814] total_pgpgin 0 [ 172.233149][ T6814] total_pgpgout 0 [ 172.242962][ T6814] total_pgfault 3 [ 172.256032][ T6814] total_pgmajfault 0 [ 172.262258][ T6814] total_inactive_anon 0 [ 172.281483][ T6814] total_active_anon 0 [ 173.022696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 173.273686][ T6814] total_inactive_file 0 [ 173.277893][ T6814] total_active_file 0 [ 173.281866][ T6814] total_unevictable 0 [ 173.322691][ T6814] anon_cost 0 [ 173.326084][ T6814] file_cost 0 [ 173.342686][ T6814] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.349,pid=6813,uid=0 [ 173.422432][ T6814] Memory cgroup out of memory: Killed process 6814 (syz.1.349) total-vm:102376kB, anon-rss:1372kB, file-rss:22784kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 173.484237][ T6814] socket: no more sockets [ 178.142672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 179.593310][ T6853] loop0: detected capacity change from 0 to 512 [ 179.699930][ T6853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.714986][ T6853] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.788229][ T6853] EXT4-fs error (device loop0): ext4_get_first_dir_block:3584: inode #12: comm syz.0.357: Attempting to read directory block (0) that is past i_size (3) [ 179.812693][ T6853] EXT4-fs (loop0): Remounting filesystem read-only [ 179.950890][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.662660][ T6870] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 181.892751][ T5833] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 181.946590][ T6883] loop1: detected capacity change from 0 to 1024 [ 182.064689][ T6883] hfsplus: invalid length 32517 has been corrected to 255 [ 182.160817][ T5833] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 182.195448][ T5833] usb 1-1: config 4 has no interface number 0 [ 182.201650][ T5833] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.209200][ T27] audit: type=1800 audit(1785834180.347:4): pid=6883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.365" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 182.275628][ T6883] hfsplus: b-tree write err: -5, ino 20 [ 182.306642][ T5833] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.378773][ T5833] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 182.389101][ T6883] hfsplus: invalid length 32517 has been corrected to 255 [ 182.413426][ T6883] hfsplus: cannot replace xattr [ 182.424107][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.456823][ T5833] hub 1-1:4.128: USB hub found [ 182.590227][ T3565] hfsplus: b-tree write err: -5, ino 4 [ 182.611007][ T3565] hfsplus: b-tree write err: -5, ino 25 [ 182.636263][ T3565] hfsplus: b-tree write err: -5, ino 2 [ 182.668816][ T3565] hfsplus: invalid length 32517 has been corrected to 255 [ 182.669521][ T5833] hub 1-1:4.128: config failed, hub has too many ports! (err -19) [ 182.697760][ T3565] hfsplus: b-tree write err: -5, ino 20 [ 183.063052][ T5833] usb 1-1: USB disconnect, device number 2 [ 184.949199][ T6907] loop0: detected capacity change from 0 to 1024 [ 185.515385][ T6910] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 186.351502][ T6907] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.413436][ T6907] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.480300][ T6907] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 186.518051][ T6907] System zones: 0-1, 3-36 [ 186.615609][ T6907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.680638][ T42] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 186.871528][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.912315][ T42] usb 2-1: unable to get BOS descriptor or descriptor too short [ 186.922479][ T42] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.952650][ T42] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.975864][ T42] usb 2-1: string descriptor 0 read error: -22 [ 186.991406][ T42] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 187.015070][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.038601][ T6917] loop0: detected capacity change from 0 to 256 [ 187.072253][ T6917] exfat: Deprecated parameter 'namecase' [ 187.076126][ T42] usb 2-1: selecting invalid altsetting 1 [ 187.089875][ T6917] exfat: Bad value for 'uid' [ 187.108914][ T42] usb 2-1: unit 6 not found! [ 187.157107][ T6917] syz.0.374 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 187.175482][ T6917] CPU: 0 PID: 6917 Comm: syz.0.374 Not tainted syzkaller #0 [ 187.182860][ T6917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.192972][ T6917] Call Trace: [ 187.196309][ T6917] [ 187.199291][ T6917] dump_stack_lvl+0x18c/0x250 [ 187.204109][ T6917] ? show_regs_print_info+0x20/0x20 [ 187.209342][ T6917] ? load_image+0x420/0x420 [ 187.213904][ T6917] ? ___ratelimit+0x478/0x610 [ 187.219177][ T6917] ? radix_tree_cpu_dead+0x160/0x160 [ 187.224502][ T6917] dump_header+0xd8/0x820 [ 187.228865][ T6917] oom_kill_process+0x390/0x580 [ 187.233757][ T6917] out_of_memory+0xe0e/0x1200 [ 187.238546][ T6917] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 187.244204][ T6917] ? print_unlock_imbalance_bug+0x160/0x160 [ 187.250117][ T6917] ? mutex_lock_nested+0x20/0x20 [ 187.255082][ T6917] ? unregister_oom_notifier+0x20/0x20 [ 187.260666][ T6917] mem_cgroup_out_of_memory+0x2c2/0x390 [ 187.266244][ T6917] ? try_charge_memcg+0xc91/0x17c0 [ 187.271380][ T6917] ? drain_local_stock+0x630/0x630 [ 187.276717][ T6917] ? do_raw_spin_unlock+0x121/0x230 [ 187.282035][ T6917] try_charge_memcg+0xca1/0x17c0 [ 187.287009][ T6917] ? folio_flags+0x120/0x120 [ 187.291622][ T6917] ? percpu_ref_tryget+0x15/0x180 [ 187.296669][ T6917] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 187.302497][ T6917] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 187.308503][ T6917] ? percpu_ref_tryget+0x15/0x180 [ 187.313543][ T6917] ? percpu_ref_tryget+0x15/0x180 [ 187.318587][ T6917] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 187.324518][ T6917] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 187.330258][ T6917] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 187.336088][ T6917] obj_cgroup_charge+0x36e/0x630 [ 187.341053][ T6917] ? obj_cgroup_charge+0xed/0x630 [ 187.346115][ T6917] ? mod_objcg_mlstate+0x320/0x320 [ 187.351269][ T6917] ? percpu_ref_put+0x12/0x100 [ 187.356574][ T6917] ? percpu_ref_put+0x12/0x100 [ 187.361819][ T6917] slab_pre_alloc_hook+0x2e2/0x300 [ 187.367390][ T6917] ? slab_pre_alloc_hook+0xb1/0x300 [ 187.372999][ T6917] kmem_cache_alloc_lru+0x4d/0x2b0 [ 187.378475][ T6917] ? sock_alloc_inode+0x28/0xc0 [ 187.383726][ T6917] sock_alloc_inode+0x28/0xc0 [ 187.388749][ T6917] ? sockfs_init_fs_context+0xb0/0xb0 [ 187.394254][ T6917] new_inode_pseudo+0x63/0x1d0 [ 187.399155][ T6917] __sock_create+0x12d/0x940 [ 187.403781][ T6917] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 187.409813][ T6917] __sys_socket+0xd7/0x1b0 [ 187.414259][ T6917] __x64_sys_socket+0x7a/0x90 [ 187.418954][ T6917] do_syscall_64+0x55/0xb0 [ 187.423667][ T6917] ? clear_bhb_loop+0x40/0x90 [ 187.429316][ T6917] ? clear_bhb_loop+0x40/0x90 [ 187.434193][ T6917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.440108][ T6917] RIP: 0033:0x7f55f679e019 [ 187.444572][ T6917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.464376][ T6917] RSP: 002b:00007f55f7692028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 187.472903][ T6917] RAX: ffffffffffffffda RBX: 00007f55f6a25fa0 RCX: 00007f55f679e019 [ 187.481069][ T6917] RDX: 0000000000000000 RSI: 0800000000000002 RDI: 000000000000000a [ 187.489077][ T6917] RBP: 00007f55f683500c R08: 0000000000000000 R09: 0000000000000000 [ 187.497085][ T6917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.505251][ T6917] R13: 00007f55f6a26038 R14: 00007f55f6a25fa0 R15: 00007fffc902d758 [ 187.513255][ T6917] [ 187.664999][ T6917] memory: usage 0kB, limit 0kB, failcnt 240 [ 187.671636][ T6917] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 187.702756][ T6917] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 187.720773][ T6917] Memory cgroup stats for /syz0/test: [ 187.720959][ T6917] cache 0 [ 187.740660][ T6917] rss 0 [ 187.743969][ T6917] rss_huge 0 [ 187.747278][ T6917] shmem 0 [ 187.761275][ T6917] mapped_file 0 [ 187.777386][ T6917] dirty 0 [ 187.780796][ T6917] writeback 0 [ 187.837028][ T6917] workingset_refault_anon 0 [ 187.841629][ T6917] workingset_refault_file 0 [ 187.862653][ T6917] swap 0 [ 187.865578][ T6917] pgpgin 0 [ 187.868640][ T6917] pgpgout 0 [ 187.871946][ T6917] pgfault 14 [ 187.892679][ T6917] pgmajfault 0 [ 187.896205][ T6917] inactive_anon 0 [ 187.899871][ T6917] active_anon 0 [ 187.912662][ T6917] inactive_file 0 [ 187.916427][ T6917] active_file 0 [ 187.919986][ T6917] unevictable 0 [ 187.933026][ T6917] hierarchical_memory_limit 0 [ 187.937758][ T6917] hierarchical_memsw_limit 9223372036854771712 [ 187.959699][ T6917] total_cache 0 [ 187.975309][ T6917] total_rss 0 [ 187.978764][ T6917] total_rss_huge 0 [ 188.001278][ T6917] total_shmem 0 [ 188.015622][ T6917] total_mapped_file 0 [ 188.020195][ T6917] total_dirty 0 [ 188.042706][ T6917] total_writeback 0 [ 188.059440][ T6917] total_workingset_refault_anon 0 [ 188.069969][ T6917] total_workingset_refault_file 0 [ 188.082812][ T6917] total_swap 0 [ 188.086389][ T6917] total_pgpgin 0 [ 188.090609][ T6917] total_pgpgout 0 [ 188.099647][ T6917] total_pgfault 14 [ 188.104037][ T6917] total_pgmajfault 0 [ 188.108571][ T6917] total_inactive_anon 0 [ 188.118688][ T6917] total_active_anon 0 [ 188.123490][ T6917] total_inactive_file 0 [ 188.128054][ T6917] total_active_file 0 [ 188.132339][ T6917] total_unevictable 0 [ 188.141755][ T6917] anon_cost 0 [ 188.147630][ T6917] file_cost 0 [ 188.151034][ T6917] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.374,pid=6916,uid=0 [ 188.199874][ T6917] Memory cgroup out of memory: Killed process 6916 (syz.0.374) total-vm:102376kB, anon-rss:1372kB, file-rss:23168kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 188.231532][ T6917] socket: no more sockets [ 188.378962][ T6925] loop3: detected capacity change from 0 to 256 [ 188.409252][ T6925] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.450263][ T42] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 188.462706][ T6925] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 188.471908][ T6930] loop2: detected capacity change from 0 to 2048 [ 188.526361][ T42] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 188.558154][ T6925] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 188.577211][ T42] usb 2-1: USB disconnect, device number 3 [ 188.614768][ T6925] exFAT-fs (loop3): failed to load alloc-bitmap [ 188.615541][ T6930] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.631601][ T6925] exFAT-fs (loop3): failed to recognize exfat type [ 192.210064][ T6976] loop1: detected capacity change from 0 to 256 [ 192.272955][ T6931] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.562754][ T42] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 192.612728][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 192.742671][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 192.750332][ T42] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.761457][ T42] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.771657][ T42] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 192.787087][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 192.797335][ T42] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 192.806708][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.817937][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 192.827226][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.837005][ T42] usb 2-1: config 0 descriptor?? [ 193.062988][ T23] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 193.602601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 194.402595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 194.452605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 194.742601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 195.039721][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.047373][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.116505][ T42] hid (null): bogus close delimiter [ 195.234555][ T42] usb 1-1: USB disconnect, device number 3 [ 195.296598][ T788] usb 2-1: USB disconnect, device number 4 [ 195.475722][ T6995] loop2: detected capacity change from 0 to 4096 [ 195.498082][ T6995] EXT4-fs (loop2): Test dummy encryption mode enabled [ 195.561353][ T6995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.822530][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.064908][ T7014] netlink: 160 bytes leftover after parsing attributes in process `syz.2.400'. [ 199.688557][ T174] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 199.722812][ T174] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.829671][ T7042] loop2: detected capacity change from 0 to 4096 [ 199.924379][ T7042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.141153][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.612208][ T7058] loop1: detected capacity change from 0 to 256 [ 200.669669][ T7058] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 201.170993][ T7058] syz.1.414: attempt to access beyond end of device [ 201.170993][ T7058] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 201.208454][ T7058] syz.1.414: attempt to access beyond end of device [ 201.208454][ T7058] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 201.264171][ T7063] exFAT-fs (loop1): invalid start cluster (12296) [ 201.274097][ T7058] syz.1.414: attempt to access beyond end of device [ 201.274097][ T7058] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 201.302016][ T27] audit: type=1800 audit(1785834199.457:5): pid=7058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.414" name="file1" dev="loop1" ino=1048748 res=0 errno=0 [ 201.346923][ T7058] syz.1.414: attempt to access beyond end of device [ 201.346923][ T7058] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 201.391363][ T27] audit: type=1800 audit(1785834199.547:6): pid=7058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.414" name="file1" dev="loop1" ino=1048748 res=0 errno=0 [ 201.703723][ T7078] loop1: detected capacity change from 0 to 4096 [ 201.733740][ T7078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.765884][ T7078] EXT4-fs warning (device loop1): ext4_resize_fs:2025: can't read last block, resize aborted [ 201.836251][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.925841][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 201.934239][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 201.942057][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 202.229154][ T27] audit: type=1326 audit(1785834200.387:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.3.421" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f058af9e019 code=0x0 [ 203.524504][ T42] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 204.057364][ T42] usb 2-1: config 1 has an invalid interface number: 13 but max is 0 [ 204.140178][ T42] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.264275][ T42] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 204.283655][ T42] usb 2-1: config 1 has no interface number 1 [ 204.290702][ T42] usb 2-1: config 1 interface 13 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 204.301887][ T42] usb 2-1: config 1 interface 13 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 204.322833][ T42] usb 2-1: config 1 interface 13 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 204.336478][ T42] usb 2-1: config 1 interface 13 has no altsetting 0 [ 204.348369][ T42] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 204.357991][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.367453][ T42] usb 2-1: Product: syz [ 204.371747][ T42] usb 2-1: Manufacturer: syz [ 204.377461][ T42] usb 2-1: SerialNumber: syz [ 204.388937][ T42] usb-storage 2-1:1.0: USB Mass Storage device detected [ 204.437580][ T42] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 204.454911][ T7105] loop0: detected capacity change from 0 to 2048 [ 204.464605][ T42] scsi host1: usb-storage 2-1:1.0 [ 204.503039][ T42] usb-storage 2-1:1.13: USB Mass Storage device detected [ 204.521883][ T42] usb-storage 2-1:1.13: Quirks match for vid 174c pid 55aa: 400000 [ 204.537987][ T7105] loop0: p1 < > p4 [ 204.537987][ T7105] p4: [ 204.583343][ T7105] loop0: p4 size 722688 extends beyond EOD, truncated [ 204.598248][ T7114] loop2: detected capacity change from 0 to 256 [ 204.607345][ T7114] exfat: Deprecated parameter 'namecase' [ 204.613444][ T7114] exfat: Bad value for 'uid' [ 206.819259][ T7129] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 206.933802][ T42] usb 2-1: USB disconnect, device number 5 [ 213.127932][ T7154] loop3: detected capacity change from 0 to 256 [ 213.192769][ T7154] exfat: Deprecated parameter 'namecase' [ 213.198729][ T7154] exfat: Bad value for 'uid' [ 215.500840][ T7174] loop1: detected capacity change from 0 to 512 [ 216.452102][ T7174] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.496451][ T7174] EXT4-fs (loop1): Test dummy encryption mode enabled [ 216.554393][ T7174] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.790505][ T7174] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 218.419376][ T5776] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 220.039515][ T7202] loop2: detected capacity change from 0 to 256 [ 220.068930][ T7202] exfat: Deprecated parameter 'namecase' [ 220.089452][ T7204] loop1: detected capacity change from 0 to 1024 [ 220.112798][ T7202] exfat: Bad value for 'uid' [ 220.114539][ T7204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.159569][ T7204] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 220.244812][ T7204] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 220.271253][ T7204] System zones: 0-1, 3-36 [ 220.307870][ T7204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.642123][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.702950][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 220.905132][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.927026][ T9] usb 3-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.965571][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 220.975759][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.993292][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.032660][ T9] usb 3-1: Product: syz [ 221.036998][ T9] usb 3-1: Manufacturer: syz [ 221.041633][ T9] usb 3-1: SerialNumber: syz [ 222.744941][ T9] usb 3-1: bad CDC descriptors [ 222.774185][ T9] usb 3-1: USB disconnect, device number 4 [ 223.929492][ T7219] binder: BINDER_SET_CONTEXT_MGR already set [ 223.935831][ T7219] binder: 7218:7219 ioctl 4018620d 200000004a80 returned -16 [ 225.633085][ T42] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 225.906096][ T42] usb 1-1: device descriptor read/64, error -71 [ 227.894640][ T7239] loop0: detected capacity change from 0 to 256 [ 227.904434][ T7238] warning: `syz.1.463' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 227.917966][ T7239] exfat: Deprecated parameter 'namecase' [ 227.932831][ T7239] exfat: Bad value for 'uid' [ 229.574534][ T7245] loop0: detected capacity change from 0 to 8 [ 229.639144][ T7245] SQUASHFS error: lzo decompression failed, data probably corrupt [ 229.672784][ T7245] SQUASHFS error: Failed to read block 0x0: -5 [ 229.679703][ T7245] SQUASHFS error: lzo decompression failed, data probably corrupt [ 229.697563][ T7247] loop1: detected capacity change from 0 to 1024 [ 229.750162][ T7245] SQUASHFS error: Failed to read block 0x0: -5 [ 229.801098][ T27] audit: type=1800 audit(1785834227.957:8): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.464" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 233.230588][ T7264] loop0: detected capacity change from 0 to 1024 [ 234.969973][ T7272] loop2: detected capacity change from 0 to 256 [ 234.986842][ T7272] FAT-fs (loop2): bogus sectors per cluster 0 [ 234.993116][ T7272] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 235.002282][ T7272] FAT-fs (loop2): Can't find a valid FAT filesystem [ 236.528798][ T7276] loop0: detected capacity change from 0 to 128 [ 236.621997][ T7276] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.689545][ T7276] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 236.968856][ T5777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.179985][ T7285] loop1: detected capacity change from 0 to 1024 [ 237.250120][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 241.568345][ T7303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.483'. [ 245.747201][ T7329] loop3: detected capacity change from 0 to 256 [ 245.850864][ T7329] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 246.047484][ T7331] syz.3.482: attempt to access beyond end of device [ 246.047484][ T7331] loop3: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 246.104440][ T7331] syz.3.482: attempt to access beyond end of device [ 246.104440][ T7331] loop3: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 246.136397][ T7329] exFAT-fs (loop3): invalid start cluster (12296) [ 246.153853][ T7331] syz.3.482: attempt to access beyond end of device [ 246.153853][ T7331] loop3: rw=0, sector=280, nr_sectors = 8 limit=256 [ 246.184366][ T27] audit: type=1800 audit(1785834244.347:9): pid=7331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.482" name="file1" dev="loop3" ino=1048756 res=0 errno=0 [ 246.221224][ T7329] syz.3.482: attempt to access beyond end of device [ 246.221224][ T7329] loop3: rw=0, sector=280, nr_sectors = 8 limit=256 [ 246.247334][ T7338] loop2: detected capacity change from 0 to 16 [ 246.260478][ T27] audit: type=1800 audit(1785834244.417:10): pid=7329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.482" name="file1" dev="loop3" ino=1048756 res=0 errno=0 [ 246.350155][ T7338] erofs: (device loop2): mounted with root inode @ nid 36. [ 246.853247][ T5833] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 247.001826][ T7350] loop3: detected capacity change from 0 to 512 [ 247.140035][ T7350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.153155][ T7350] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.328105][ T5833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 247.375982][ T5833] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 247.390748][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.410343][ T5833] usb 3-1: config 0 descriptor?? [ 247.460027][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.294910][ T5833] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x1 [ 250.306280][ T5833] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x5 [ 250.314935][ T5833] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x6 [ 250.322044][ T5833] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 250.329686][ T5833] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 250.338144][ T5833] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 250.362920][ T5833] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 250.370070][ T5833] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 250.402694][ T5833] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 250.409855][ T5833] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 250.446036][ T5833] hid-led: probe of 0003:0FC5:B080.0006 failed with error -71 [ 250.483251][ T5833] usb 3-1: USB disconnect, device number 5 [ 250.847793][ T7372] loop0: detected capacity change from 0 to 16 [ 251.946556][ T6931] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 252.289516][ T7379] loop2: detected capacity change from 0 to 512 [ 252.479312][ T7379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.492735][ T7379] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.657984][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.317523][ T7394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.498'. [ 256.213330][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.223496][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.867426][ T7402] loop3: detected capacity change from 0 to 512 [ 257.026949][ T7402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.269690][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.591768][ T7417] mmap: syz.2.507 (7417): VmData 37462016 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 258.773364][ C1] sched: RT throttling activated [ 265.102676][ T5833] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 265.318066][ T5833] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 265.339334][ T5833] usb 4-1: config 179 has no interface number 0 [ 265.362819][ T5833] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 265.401826][ T5833] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 265.432386][ T5833] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 265.476140][ T5833] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 265.508135][ T5833] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 265.582628][ T5833] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 265.591784][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.616188][ T7450] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 265.627161][ T7450] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 266.505234][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 266.513601][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 266.547076][ T5833] usb 4-1: USB disconnect, device number 2 [ 269.576576][ T7473] loop0: detected capacity change from 0 to 256 [ 269.674207][ T7473] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 269.919616][ T7473] syz.0.531: attempt to access beyond end of device [ 269.919616][ T7473] loop0: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 269.964477][ T7473] syz.0.531: attempt to access beyond end of device [ 269.964477][ T7473] loop0: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 269.988882][ T7475] exFAT-fs (loop0): invalid start cluster (12296) [ 270.039921][ T7473] syz.0.531: attempt to access beyond end of device [ 270.039921][ T7473] loop0: rw=0, sector=280, nr_sectors = 8 limit=256 [ 270.093883][ T27] audit: type=1800 audit(1785834268.257:11): pid=7473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.531" name="file1" dev="loop0" ino=1048764 res=0 errno=0 [ 270.094282][ T7475] syz.0.531: attempt to access beyond end of device [ 270.094282][ T7475] loop0: rw=0, sector=280, nr_sectors = 8 limit=256 [ 270.202062][ T27] audit: type=1800 audit(1785834268.357:12): pid=7475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.531" name="file1" dev="loop0" ino=1048764 res=0 errno=0 [ 270.422992][ T27] audit: type=1326 audit(1785834268.577:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.1.532" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857579e019 code=0x7ffc0000 [ 270.512837][ T27] audit: type=1326 audit(1785834268.577:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.1.532" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857579e019 code=0x7ffc0000 [ 270.588835][ T27] audit: type=1326 audit(1785834268.607:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.1.532" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857579e019 code=0x7ffc0000 [ 270.633588][ T7482] loop0: detected capacity change from 0 to 1024 [ 270.687910][ T27] audit: type=1326 audit(1785834268.607:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.1.532" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857579e019 code=0x7ffc0000 [ 270.795608][ T27] audit: type=1326 audit(1785834268.607:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.1.532" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f857579e019 code=0x7ffc0000 [ 270.840133][ T7482] hfsplus: xattr searching failed [ 270.887572][ T27] audit: type=1326 audit(1785834268.617:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.1.532" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857579e019 code=0x7ffc0000 [ 272.056081][ T27] audit: type=1326 audit(1785834268.617:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.1.532" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857579e019 code=0x7ffc0000 [ 272.170999][ T7488] loop2: detected capacity change from 0 to 512 [ 272.177503][ T27] audit: type=1326 audit(1785834268.707:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.1.532" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f857579e019 code=0x7ffc0000 [ 272.293685][ T7488] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.528: iget: bad i_size value: 38620345925642 [ 272.402712][ T7488] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.528: couldn't read orphan inode 15 (err -117) [ 272.434697][ T7488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.422768][ T7492] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 275.699748][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.046058][ T7506] loop3: detected capacity change from 0 to 4096 [ 277.059742][ T7506] EXT4-fs: Ignoring removed orlov option [ 277.075760][ T7506] EXT4-fs (loop3): Test dummy encryption mode enabled [ 277.125958][ T7506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.243189][ T7506] capability: warning: `syz.3.538' uses 32-bit capabilities (legacy support in use) [ 279.081036][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.251674][ T7523] loop2: detected capacity change from 0 to 256 [ 280.713243][ T7523] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 280.729196][ T7523] exFAT-fs (loop2): failed to load alloc-bitmap [ 282.243187][ T7523] exFAT-fs (loop2): failed to recognize exfat type [ 282.947198][ T5833] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 284.152998][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 284.184173][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.212968][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.232576][ T5833] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 284.256123][ T5833] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 284.266174][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.288000][ T5833] usb 3-1: config 0 descriptor?? [ 284.611590][ T7546] capability: warning: `syz.1.553' uses deprecated v2 capabilities in a way that may be insecure [ 284.729639][ T5833] microsoft 0003:045E:07DA.0007: item 0 4 0 11 parsing failed [ 284.756065][ T5833] microsoft 0003:045E:07DA.0007: parse failed [ 284.976358][ T5833] microsoft: probe of 0003:045E:07DA.0007 failed with error -22 [ 284.987464][ T5833] usb 3-1: USB disconnect, device number 6 [ 285.009920][ T7552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.552'. [ 286.529625][ T7557] kernel read not supported for file /file0 (pid: 7557 comm: syz.2.558) [ 287.952634][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 287.952652][ T27] audit: type=1800 audit(1785834286.107:22): pid=7557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.558" name="file0" dev="mqueue" ino=12671 res=0 errno=0 [ 288.256306][ T7564] loop2: detected capacity change from 0 to 512 [ 288.299586][ T7564] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 288.338163][ T7564] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 288.376445][ T7564] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 288.406987][ T7564] System zones: 1-12 [ 288.459061][ T7564] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 288.540533][ T7564] EXT4-fs (loop2): 1 truncate cleaned up [ 288.558890][ T7564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.610646][ T7570] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 289.942053][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.754300][ T7603] loop0: detected capacity change from 0 to 8 [ 296.812422][ T7603] SQUASHFS error: lzo decompression failed, data probably corrupt [ 296.836564][ T7603] SQUASHFS error: Failed to read block 0x144: -5 [ 296.850304][ T7603] SQUASHFS error: Unable to read metadata cache entry [142] [ 296.888356][ T7603] SQUASHFS error: Unable to read inode 0x11f [ 299.749240][ T7618] trusted_key: encrypted_key: master key parameter is missing [ 299.943862][ T7620] loop2: detected capacity change from 0 to 2048 [ 301.403244][ T7620] GPT:first_usable_lbas don't match. [ 301.408624][ T7620] GPT:34 != 290 [ 301.412118][ T7620] GPT: Use GNU Parted to correct GPT errors. [ 301.444510][ T7620] loop2: p1 p2 p3 [ 301.592694][ T7607] udevd[7607]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 301.607187][ T7585] udevd[7585]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 301.629930][ T7627] udevd[7627]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 304.283309][ T7633] dummy_hcd dummy_hcd.0: remove, state 1 [ 304.289599][ T7633] usb usb1: USB disconnect, device number 1 [ 304.660084][ T7633] dummy_hcd dummy_hcd.0: stopped [ 304.665119][ T7633] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 310.092176][ T7655] loop3: detected capacity change from 0 to 2048 [ 310.180126][ T7655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.724684][ T7665] loop2: detected capacity change from 0 to 128 [ 310.770980][ T7665] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 310.816437][ T7665] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.080538][ T7672] loop2: detected capacity change from 0 to 16 [ 311.108832][ T7672] erofs: (device loop2): mounted with root inode @ nid 36. [ 312.964591][ T7681] loop1: detected capacity change from 0 to 8 [ 313.014100][ T7681] SQUASHFS error: lzo decompression failed, data probably corrupt [ 313.022059][ T7681] SQUASHFS error: Failed to read block 0x144: -5 [ 313.072795][ T7681] SQUASHFS error: Unable to read metadata cache entry [142] [ 313.080188][ T7681] SQUASHFS error: Unable to read inode 0x11f [ 313.281907][ T7684] loop0: detected capacity change from 0 to 2048 [ 313.334314][ T7684] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 313.372077][ T7684] UDF-fs: Scanning with blocksize 512 failed [ 313.424660][ T7684] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.054015][ T7683] UDF-fs: warning (device loop0): udf_truncate_tail_extent: Too long extent after EOF in inode 818: i_size: 134745186 lbcount: 134747136 extent 0+133863424 [ 316.454544][ T7683] UDF-fs: error (device loop0): udf_truncate_tail_extent: Extent after EOF in inode 818 [ 316.656606][ T3565] kworker/u4:12: attempt to access beyond end of device [ 316.656606][ T3565] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 316.687887][ T3565] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 316.722984][ T3565] kworker/u4:12: attempt to access beyond end of device [ 316.722984][ T3565] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 316.762963][ T3565] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 316.771755][ T3565] kworker/u4:12: attempt to access beyond end of device [ 316.771755][ T3565] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 316.832625][ T3565] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 316.841365][ T3565] kworker/u4:12: attempt to access beyond end of device [ 316.841365][ T3565] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 316.882567][ T3565] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 316.891753][ T3565] kworker/u4:12: attempt to access beyond end of device [ 316.891753][ T3565] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 316.957794][ T3565] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 316.988917][ T3565] kworker/u4:12: attempt to access beyond end of device [ 316.988917][ T3565] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 317.031708][ T3565] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 317.067544][ T3565] kworker/u4:12: attempt to access beyond end of device [ 317.067544][ T3565] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 317.092905][ T3565] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 317.102381][ T3565] kworker/u4:12: attempt to access beyond end of device [ 317.102381][ T3565] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 317.142658][ T3565] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 317.176756][ T3565] kworker/u4:12: attempt to access beyond end of device [ 317.176756][ T3565] loop0: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 318.584132][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.590527][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.027914][ T7711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.599'. [ 330.997071][ T5838] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 331.192689][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 333.216701][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 333.383220][ T5838] usb 4-1: unable to get BOS descriptor or descriptor too short [ 333.422690][ T5838] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 333.430360][ T5838] usb 4-1: can't read configurations, error -71 [ 334.524467][ T7756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.608'. [ 336.188406][ T5089] Bluetooth: hci3: command 0x0406 tx timeout [ 340.451517][ T7775] syz.1.613 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 340.465581][ T7775] CPU: 0 PID: 7775 Comm: syz.1.613 Not tainted syzkaller #0 [ 340.473222][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 340.483409][ T7775] Call Trace: [ 340.486721][ T7775] [ 340.489687][ T7775] dump_stack_lvl+0x18c/0x250 [ 340.494425][ T7775] ? show_regs_print_info+0x20/0x20 [ 340.499659][ T7775] ? load_image+0x420/0x420 [ 340.504207][ T7775] ? ___ratelimit+0x478/0x610 [ 340.508928][ T7775] ? radix_tree_cpu_dead+0x160/0x160 [ 340.514260][ T7775] dump_header+0xd8/0x820 [ 340.518645][ T7775] oom_kill_process+0x390/0x580 [ 340.523547][ T7775] out_of_memory+0xe0e/0x1200 [ 340.528271][ T7775] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 340.533946][ T7775] ? print_unlock_imbalance_bug+0x160/0x160 [ 340.539893][ T7775] ? mutex_lock_nested+0x20/0x20 [ 340.544876][ T7775] ? unregister_oom_notifier+0x20/0x20 [ 340.550432][ T7775] mem_cgroup_out_of_memory+0x2c2/0x390 [ 340.556031][ T7775] ? try_charge_memcg+0xc91/0x17c0 [ 340.561185][ T7775] ? drain_local_stock+0x630/0x630 [ 340.566350][ T7775] ? do_raw_spin_unlock+0x121/0x230 [ 340.571602][ T7775] try_charge_memcg+0xca1/0x17c0 [ 340.576689][ T7775] ? folio_flags+0x120/0x120 [ 340.581297][ T7775] ? percpu_ref_tryget+0x15/0x180 [ 340.586429][ T7775] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 340.592169][ T7775] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 340.598178][ T7775] ? percpu_ref_tryget+0x15/0x180 [ 340.603221][ T7775] ? percpu_ref_tryget+0x15/0x180 [ 340.608302][ T7775] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 340.614088][ T7775] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 340.619837][ T7775] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 340.625755][ T7775] obj_cgroup_charge+0x36e/0x630 [ 340.630806][ T7775] ? obj_cgroup_charge+0xed/0x630 [ 340.635849][ T7775] ? mod_objcg_mlstate+0x320/0x320 [ 340.640982][ T7775] ? percpu_ref_put+0x12/0x100 [ 340.645769][ T7775] ? percpu_ref_put+0x12/0x100 [ 340.650566][ T7775] slab_pre_alloc_hook+0x2e2/0x300 [ 340.655701][ T7775] ? slab_pre_alloc_hook+0xb1/0x300 [ 340.660924][ T7775] kmem_cache_alloc_lru+0x4d/0x2b0 [ 340.666093][ T7775] ? sock_alloc_inode+0x28/0xc0 [ 340.670970][ T7775] sock_alloc_inode+0x28/0xc0 [ 340.675688][ T7775] ? sockfs_init_fs_context+0xb0/0xb0 [ 340.681072][ T7775] new_inode_pseudo+0x63/0x1d0 [ 340.685945][ T7775] __sock_create+0x12d/0x940 [ 340.690563][ T7775] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 340.696578][ T7775] __sys_socket+0xd7/0x1b0 [ 340.701122][ T7775] __x64_sys_socket+0x7a/0x90 [ 340.705819][ T7775] do_syscall_64+0x55/0xb0 [ 340.710341][ T7775] ? clear_bhb_loop+0x40/0x90 [ 340.715081][ T7775] ? clear_bhb_loop+0x40/0x90 [ 340.719772][ T7775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.725678][ T7775] RIP: 0033:0x7f857579e019 [ 340.730209][ T7775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.749917][ T7775] RSP: 002b:00007f85766ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 340.758356][ T7775] RAX: ffffffffffffffda RBX: 00007f8575a25fa0 RCX: 00007f857579e019 [ 340.766350][ T7775] RDX: 0000000000000000 RSI: 0800000000000002 RDI: 000000000000000a [ 340.774506][ T7775] RBP: 00007f857583500c R08: 0000000000000000 R09: 0000000000000000 [ 340.782587][ T7775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.790603][ T7775] R13: 00007f8575a26038 R14: 00007f8575a25fa0 R15: 00007ffd4fbc4888 [ 340.798780][ T7775] [ 340.869372][ T7775] memory: usage 0kB, limit 0kB, failcnt 146 [ 340.910597][ T7775] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 340.952969][ T7775] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 340.963153][ T7775] Memory cgroup stats for /syz1/test: [ 340.963301][ T7775] cache 0 [ 340.971693][ T7775] rss 0 [ 340.988945][ T7775] rss_huge 0 [ 340.992307][ T7775] shmem 0 [ 341.000091][ T7775] mapped_file 0 [ 341.077339][ T7781] x_tables: duplicate underflow at hook 1 [ 342.592372][ T7775] dirty 0 [ 342.595542][ T7775] writeback 0 [ 342.599502][ T7775] workingset_refault_anon 0 [ 342.604158][ T7775] workingset_refault_file 0 [ 342.611955][ T7775] swap 0 [ 342.615459][ T7775] pgpgin 0 [ 342.618708][ T7775] pgpgout 0 [ 342.621847][ T7775] pgfault 3 [ 342.625395][ T7775] pgmajfault 0 [ 342.628983][ T7775] inactive_anon 0 [ 342.632773][ T7775] active_anon 0 [ 342.636258][ T7775] inactive_file 0 [ 342.640393][ T7775] active_file 0 [ 342.644974][ T7775] unevictable 0 [ 342.648473][ T7775] hierarchical_memory_limit 0 [ 342.653991][ T7775] hierarchical_memsw_limit 9223372036854771712 [ 342.718319][ T7775] total_cache 0 [ 342.721879][ T7775] total_rss 0 [ 342.725415][ T7775] total_rss_huge 0 [ 342.729168][ T7775] total_shmem 0 [ 342.732704][ T7775] total_mapped_file 0 [ 342.740534][ T7775] total_dirty 0 [ 342.744146][ T7775] total_writeback 0 [ 342.747985][ T7775] total_workingset_refault_anon 0 [ 342.753109][ T7775] total_workingset_refault_file 0 [ 342.758695][ T7775] total_swap 0 [ 342.762108][ T7775] total_pgpgin 0 [ 342.767826][ T7775] total_pgpgout 0 [ 342.771518][ T7775] total_pgfault 3 [ 342.775236][ T7775] total_pgmajfault 0 [ 342.779164][ T7775] total_inactive_anon 0 [ 342.792986][ T7775] total_active_anon 0 [ 342.797081][ T7775] total_inactive_file 0 [ 342.801275][ T7775] total_active_file 0 [ 342.822711][ T7775] total_unevictable 0 [ 342.826841][ T7775] anon_cost 0 [ 342.830268][ T7775] file_cost 0 [ 344.236455][ T7775] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.613,pid=7774,uid=0 [ 344.254757][ T7775] Memory cgroup out of memory: Killed process 7774 (syz.1.613) total-vm:102376kB, anon-rss:1372kB, file-rss:22912kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 344.285249][ T7775] socket: no more sockets [ 345.342012][ T7789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.621'. [ 348.201400][ T7803] loop3: detected capacity change from 0 to 8192 [ 349.942756][ T7819] loop3: detected capacity change from 0 to 256 [ 349.950370][ T7819] exfat: Deprecated parameter 'namecase' [ 349.977147][ T7819] exfat: Bad value for 'uid' [ 350.031274][ T7649] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 356.194923][ T27] audit: type=1326 audit(1785834354.357:23): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.1.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f857579e019 code=0x0 [ 367.512043][ T7884] syz.1.642 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 367.552699][ T7884] CPU: 1 PID: 7884 Comm: syz.1.642 Not tainted syzkaller #0 [ 367.560178][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.570374][ T7884] Call Trace: [ 367.573766][ T7884] [ 367.576838][ T7884] dump_stack_lvl+0x18c/0x250 [ 367.581719][ T7884] ? show_regs_print_info+0x20/0x20 [ 367.587076][ T7884] ? load_image+0x420/0x420 [ 367.591675][ T7884] ? ___ratelimit+0x478/0x610 [ 367.596518][ T7884] ? radix_tree_cpu_dead+0x160/0x160 [ 367.601863][ T7884] dump_header+0xd8/0x820 [ 367.606340][ T7884] oom_kill_process+0x390/0x580 [ 367.611253][ T7884] out_of_memory+0xe0e/0x1200 [ 367.616064][ T7884] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 367.621815][ T7884] ? print_unlock_imbalance_bug+0x160/0x160 [ 367.627833][ T7884] ? mutex_lock_nested+0x20/0x20 [ 367.632920][ T7884] ? unregister_oom_notifier+0x20/0x20 [ 367.638442][ T7884] mem_cgroup_out_of_memory+0x2c2/0x390 [ 367.644040][ T7884] ? try_charge_memcg+0xc91/0x17c0 [ 367.649199][ T7884] ? drain_local_stock+0x630/0x630 [ 367.654365][ T7884] ? do_raw_spin_unlock+0x121/0x230 [ 367.659639][ T7884] try_charge_memcg+0xca1/0x17c0 [ 367.664684][ T7884] ? folio_flags+0x120/0x120 [ 367.669339][ T7884] ? percpu_ref_tryget+0x15/0x180 [ 367.674408][ T7884] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 367.680192][ T7884] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 367.686216][ T7884] ? percpu_ref_tryget+0x15/0x180 [ 367.691299][ T7884] ? percpu_ref_tryget+0x15/0x180 [ 367.696384][ T7884] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 367.702329][ T7884] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 367.708106][ T7884] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 367.713969][ T7884] obj_cgroup_charge+0x36e/0x630 [ 367.718958][ T7884] ? obj_cgroup_charge+0xed/0x630 [ 367.724110][ T7884] ? mod_objcg_mlstate+0x320/0x320 [ 367.729297][ T7884] ? percpu_ref_put+0x12/0x100 [ 367.734107][ T7884] ? percpu_ref_put+0x12/0x100 [ 367.738922][ T7884] slab_pre_alloc_hook+0x2e2/0x300 [ 367.744180][ T7884] ? slab_pre_alloc_hook+0xb1/0x300 [ 367.749432][ T7884] kmem_cache_alloc_lru+0x4d/0x2b0 [ 367.754673][ T7884] ? sock_alloc_inode+0x28/0xc0 [ 367.759769][ T7884] sock_alloc_inode+0x28/0xc0 [ 367.764494][ T7884] ? sockfs_init_fs_context+0xb0/0xb0 [ 367.769906][ T7884] new_inode_pseudo+0x63/0x1d0 [ 367.774739][ T7884] __sock_create+0x12d/0x940 [ 367.779369][ T7884] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 367.785486][ T7884] __sys_socket+0xd7/0x1b0 [ 367.789948][ T7884] __x64_sys_socket+0x7a/0x90 [ 367.794758][ T7884] do_syscall_64+0x55/0xb0 [ 367.799213][ T7884] ? clear_bhb_loop+0x40/0x90 [ 367.804015][ T7884] ? clear_bhb_loop+0x40/0x90 [ 367.808836][ T7884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.814769][ T7884] RIP: 0033:0x7f857579e019 [ 367.819361][ T7884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.839070][ T7884] RSP: 002b:00007f85766ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 367.847606][ T7884] RAX: ffffffffffffffda RBX: 00007f8575a25fa0 RCX: 00007f857579e019 [ 367.855813][ T7884] RDX: 0000000000000000 RSI: 0800000000000002 RDI: 000000000000000a [ 367.863842][ T7884] RBP: 00007f857583500c R08: 0000000000000000 R09: 0000000000000000 [ 367.871864][ T7884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.879884][ T7884] R13: 00007f8575a26038 R14: 00007f8575a25fa0 R15: 00007ffd4fbc4888 [ 367.887917][ T7884] [ 368.142581][ T7884] memory: usage 0kB, limit 0kB, failcnt 218 [ 368.148725][ T7884] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 368.181079][ T7884] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 368.214277][ T7884] Memory cgroup stats for /syz1/test: [ 368.214499][ T7884] cache 0 [ 368.233006][ T7884] rss 0 [ 368.235854][ T7884] rss_huge 0 [ 368.239090][ T7884] shmem 0 [ 368.242069][ T7884] mapped_file 0 [ 368.245636][ T7884] dirty 0 [ 368.263139][ T7884] writeback 0 [ 368.266513][ T7884] workingset_refault_anon 0 [ 368.271223][ T7884] workingset_refault_file 0 [ 369.794077][ T7884] swap 0 [ 369.796991][ T7884] pgpgin 0 [ 369.835929][ T7884] pgpgout 0 [ 369.843266][ T7884] pgfault 3 [ 369.846440][ T7884] pgmajfault 0 [ 369.849808][ T7884] inactive_anon 0 [ 369.907369][ T7884] active_anon 0 [ 369.923011][ T7884] inactive_file 0 [ 369.926716][ T7884] active_file 0 [ 369.972417][ T7884] unevictable 0 [ 369.977794][ T7884] hierarchical_memory_limit 0 [ 369.992801][ T7884] hierarchical_memsw_limit 9223372036854771712 [ 369.999127][ T7884] total_cache 0 [ 370.027647][ T7884] total_rss 0 [ 370.031039][ T7884] total_rss_huge 0 [ 370.060718][ T7884] total_shmem 0 [ 370.072440][ T7884] total_mapped_file 0 [ 370.077259][ T7884] total_dirty 0 [ 370.101350][ T7884] total_writeback 0 [ 370.105579][ T7884] total_workingset_refault_anon 0 [ 370.110642][ T7884] total_workingset_refault_file 0 [ 370.123731][ T7884] total_swap 0 [ 370.127270][ T7884] total_pgpgin 0 [ 370.144765][ T7884] total_pgpgout 0 [ 370.148487][ T7884] total_pgfault 3 [ 370.158174][ T7884] total_pgmajfault 0 [ 370.162147][ T7884] total_inactive_anon 0 [ 370.177025][ T7884] total_active_anon 0 [ 370.181567][ T7884] total_inactive_file 0 [ 370.196770][ T7884] total_active_file 0 [ 370.200843][ T7884] total_unevictable 0 [ 370.228798][ T7884] anon_cost 0 [ 370.232170][ T7884] file_cost 0 [ 370.272567][ T7884] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.642,pid=7883,uid=0 [ 370.287493][ T7899] loop2: detected capacity change from 0 to 256 [ 370.307757][ T7884] Memory cgroup out of memory: Killed process 7883 (syz.1.642) total-vm:102376kB, anon-rss:1372kB, file-rss:22912kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 370.375898][ T7884] socket: no more sockets [ 370.407084][ T7899] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 371.278720][ T7901] syz.2.653: attempt to access beyond end of device [ 371.278720][ T7901] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 371.336057][ T7901] syz.2.653: attempt to access beyond end of device [ 371.336057][ T7901] loop2: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 371.386645][ T7899] exFAT-fs (loop2): invalid start cluster (12296) [ 371.417874][ T7901] syz.2.653: attempt to access beyond end of device [ 371.417874][ T7901] loop2: rw=0, sector=280, nr_sectors = 8 limit=256 [ 371.453966][ T7908] syz.2.653: attempt to access beyond end of device [ 371.453966][ T7908] loop2: rw=0, sector=280, nr_sectors = 8 limit=256 [ 371.457177][ T27] audit: type=1800 audit(1785834369.617:24): pid=7901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.653" name="file1" dev="loop2" ino=1048772 res=0 errno=0 [ 371.562036][ T27] audit: type=1800 audit(1785834369.667:25): pid=7908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.653" name="file1" dev="loop2" ino=1048772 res=0 errno=0 [ 375.348709][ T7930] loop2: detected capacity change from 0 to 256 [ 375.445190][ T7930] exfat: Deprecated parameter 'namecase' [ 375.502592][ T7930] exfat: Bad value for 'uid' [ 379.677461][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.684735][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.803454][ T7967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.669'. [ 386.109773][ T7974] loop0: detected capacity change from 0 to 1024 [ 387.873937][ T7983] loop3: detected capacity change from 0 to 256 [ 387.881371][ T7983] exfat: Deprecated parameter 'namecase' [ 387.914603][ T7983] exfat: Bad value for 'uid' [ 393.415316][ T8020] loop2: detected capacity change from 0 to 1024 [ 393.433387][ T8020] hfsplus: uid requires an argument [ 393.439110][ T8020] hfsplus: unable to parse mount options [ 393.574700][ T8022] loop0: detected capacity change from 0 to 256 [ 393.683885][ T8022] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 395.290950][ T8022] syz.0.691: attempt to access beyond end of device [ 395.290950][ T8022] loop0: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 395.334274][ T8022] syz.0.691: attempt to access beyond end of device [ 395.334274][ T8022] loop0: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 395.392778][ T8027] exFAT-fs (loop0): invalid start cluster (12296) [ 395.399752][ T8022] syz.0.691: attempt to access beyond end of device [ 395.399752][ T8022] loop0: rw=0, sector=280, nr_sectors = 8 limit=256 [ 395.436684][ T8027] syz.0.691: attempt to access beyond end of device [ 395.436684][ T8027] loop0: rw=0, sector=280, nr_sectors = 8 limit=256 [ 395.442810][ T27] audit: type=1800 audit(1785834393.597:26): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.691" name="file1" dev="loop0" ino=1048779 res=0 errno=0 [ 395.542696][ T27] audit: type=1800 audit(1785834393.677:27): pid=8027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.691" name="file1" dev="loop0" ino=1048779 res=0 errno=0 [ 397.783766][ T5783] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 405.219635][ T8067] loop2: detected capacity change from 0 to 512 [ 405.230692][ T8067] EXT4-fs: Ignoring removed orlov option [ 405.249813][ T8067] EXT4-fs (loop2): Test dummy encryption mode enabled [ 405.326044][ T8067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.551888][ T8067] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 408.964541][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.822246][ T8139] loop3: detected capacity change from 0 to 256 [ 418.869895][ T8139] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 419.033832][ T8139] syz.3.722: attempt to access beyond end of device [ 419.033832][ T8139] loop3: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 419.106148][ T8143] exFAT-fs (loop3): invalid start cluster (12296) [ 419.138203][ T8139] syz.3.722: attempt to access beyond end of device [ 419.138203][ T8139] loop3: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 419.240969][ T8139] syz.3.722: attempt to access beyond end of device [ 419.240969][ T8139] loop3: rw=0, sector=280, nr_sectors = 8 limit=256 [ 419.337750][ T27] audit: type=1800 audit(1785834417.497:28): pid=8139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.722" name="file1" dev="loop3" ino=1048787 res=0 errno=0 [ 424.222735][ T8160] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 424.234841][ T8160] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 424.243360][ T8160] CPU: 0 PID: 8160 Comm: syz.0.721 Not tainted syzkaller #0 [ 424.250677][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 424.260766][ T8160] RIP: 0010:dummy_udc_start+0xcd/0x1e0 [ 424.266408][ T8160] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 8e 00 00 00 e8 f8 08 cd fa eb 0c e8 f1 08 cd fa eb 05 e8 ea 08 cd fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 44 8b 25 fb 4d 8b 36 4c 89 f7 e8 [ 424.286057][ T8160] RSP: 0018:ffffc90004fef850 EFLAGS: 00010246 [ 424.292159][ T8160] RAX: 0000000000000000 RBX: ffff88802dfd2050 RCX: 0000000000080000 [ 424.300177][ T8160] RDX: ffffc9000ce09000 RSI: 0000000000003ffd RDI: 0000000000003ffe [ 424.308201][ T8160] RBP: ffff8880260dd000 R08: ffff888030a61e00 R09: 0000000000000004 [ 424.316212][ T8160] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 424.324211][ T8160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 424.332194][ T8160] FS: 00007f55f76926c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 424.341132][ T8160] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 424.347722][ T8160] CR2: 00007f55f6787180 CR3: 000000002eb3c000 CR4: 00000000003506f0 [ 424.355712][ T8160] Call Trace: [ 424.359031][ T8160] [ 424.361974][ T8160] ? dummy_pullup+0x120/0x120 [ 424.366684][ T8160] gadget_bind_driver+0x390/0x770 [ 424.371728][ T8160] ? gadget_match_driver+0x130/0x130 [ 424.377027][ T8160] really_probe+0x247/0xae0 [ 424.381573][ T8160] ? pm_runtime_barrier+0x14b/0x1c0 [ 424.386823][ T8160] __driver_probe_device+0x1f5/0x390 [ 424.392135][ T8160] driver_probe_device+0x4f/0x420 [ 424.397270][ T8160] __driver_attach+0x444/0x6d0 [ 424.402050][ T8160] bus_for_each_dev+0x235/0x2b0 [ 424.406924][ T8160] ? driver_attach+0x50/0x50 [ 424.411529][ T8160] ? bus_remove_file+0x140/0x140 [ 424.416489][ T8160] ? do_raw_spin_unlock+0x121/0x230 [ 424.421710][ T8160] bus_add_driver+0x340/0x630 [ 424.426437][ T8160] driver_register+0x23a/0x310 [ 424.431220][ T8160] usb_gadget_register_driver_owner+0xf9/0x270 [ 424.437420][ T8160] raw_ioctl+0x1613/0x3d80 [ 424.441941][ T8160] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 424.447640][ T8160] ? tomoyo_path_number_perm+0x217/0x5e0 [ 424.453420][ T8160] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 424.458890][ T8160] ? make_qualifier+0x260/0x260 [ 424.463761][ T8160] ? __fget_files+0x28/0x460 [ 424.468382][ T8160] ? bpf_lsm_file_ioctl+0x9/0x10 [ 424.473340][ T8160] ? security_file_ioctl+0x80/0xa0 [ 424.478474][ T8160] ? make_qualifier+0x260/0x260 [ 424.483340][ T8160] __se_sys_ioctl+0xfd/0x170 [ 424.487943][ T8160] do_syscall_64+0x55/0xb0 [ 424.492370][ T8160] ? clear_bhb_loop+0x40/0x90 [ 424.497059][ T8160] ? clear_bhb_loop+0x40/0x90 [ 424.501749][ T8160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.507650][ T8160] RIP: 0033:0x7f55f679dcab [ 424.512077][ T8160] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 424.531720][ T8160] RSP: 002b:00007f55f768ff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.540235][ T8160] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f55f679dcab [ 424.548342][ T8160] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 424.556513][ T8160] RBP: 00007f55f7690fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 424.564497][ T8160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.572481][ T8160] R13: 0000200000000640 R14: 0000000000000000 R15: 0000000000000000 [ 424.580581][ T8160] [ 424.583610][ T8160] Modules linked in: [ 424.622535][ T8160] ---[ end trace 0000000000000000 ]--- [ 424.628075][ T8160] RIP: 0010:dummy_udc_start+0xcd/0x1e0 [ 424.654004][ T8160] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 8e 00 00 00 e8 f8 08 cd fa eb 0c e8 f1 08 cd fa eb 05 e8 ea 08 cd fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 44 8b 25 fb 4d 8b 36 4c 89 f7 e8 [ 424.690326][ T8160] RSP: 0018:ffffc90004fef850 EFLAGS: 00010246 [ 424.709354][ T8160] RAX: 0000000000000000 RBX: ffff88802dfd2050 RCX: 0000000000080000 [ 424.727392][ T8160] RDX: ffffc9000ce09000 RSI: 0000000000003ffd RDI: 0000000000003ffe [ 424.745817][ T8160] RBP: ffff8880260dd000 R08: ffff888030a61e00 R09: 0000000000000004 [ 424.764778][ T8160] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 424.783909][ T8160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 424.805255][ T8160] FS: 00007f55f76926c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 424.831978][ T8160] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 424.849400][ T8160] CR2: 000055556b6aca38 CR3: 000000002eb3c000 CR4: 00000000003506e0 [ 424.868366][ T8160] Kernel panic - not syncing: Fatal exception [ 424.874945][ T8160] Kernel Offset: disabled [ 424.879276][ T8160] Rebooting in 86400 seconds..