last executing test programs: 3m2.528389042s ago: executing program 3 (id=22): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x302, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0xfc, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0xa0042, 0x182) write$tcp_mem(r2, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000088, &(0x7f0000000380)={0xa, 0x4e20, 0xfffffffc, @empty, 0xfffffffe}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r1, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/49, 0x31}, 0x5}], 0x1, 0x40032003, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0006000000002e6e2f477671585717321748"], 0x0}, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000100)={0x2, "046f397036a3cfe49ee114e6f07df24c1742f52cd235e9d85cda3bc052e9a8a5d5b1f626cf5b17d597ff4efa265fcee7eb8846811033f4cd8c474f33e186d64d"}) 3m1.055293528s ago: executing program 3 (id=30): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r2 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'wg2\x00', &(0x7f0000000140)=@ethtool_eeprom={0xa, 0x3}}) (async, rerun: 64) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x4, 0x5}) (async, rerun: 64) getsockopt$inet6_tcp_int(r1, 0x6, 0x2a, 0x0, &(0x7f0000001e80)) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24000800) 3m0.926983175s ago: executing program 3 (id=31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000200)="66450fc7746e0a0fb51ef2ab400f79ac680080000066bba100ed0fc77310c4427d988c170500000074495470fb70190c190c75a854ff048fa800b6c3f9", 0x3d}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x8, 0x0, 0x2080, {0x60000, 0x1}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x448, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x434, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x2b}, {0x4}, {0x4}, {0xc}, {0x5, 0x8, {0x1}}}}, @m_ipt={0x404, 0x9, 0x0, 0x0, {{0x8}, {0x2e8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x125, 0x6, {0x8, 'security\x00', 0x10, 0x0, "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"}}, @TCA_IPT_TARG={0x17f, 0x6, {0x2000, 'mangle\x00', 0x0, 0x5, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xf5, 0x6, "a55e2efce40f6bab37f04b0caa51b6227acccbc8b6cd6ea0d2a050a52cae348912c9207ee57e8b5179dc20b7d353bf46e7a4641ed1a1391abd5ac5b4c6c28408dfedfa02fa1a9a7d0949f4ddb0f8e68235606e324dfdd5e671519129362a83445ab28010d25e7b978625a6b46839558e7e7a742d4b13aff412bb50a5a1247af7fe64c92f2aaa5f85fe5b6874cf23f3e93037bb2753a871b84b49c3e9885011d8b2a1bf0a2ea3ec616dfc7c8b6faa589c2a514ac6d52c977bebb3065d1eb8dc139ba04a72da28493d3a1ba60704f04381c5ec6b032b4ecbb1d523d1b63ccd8e5051325c5e7d32265bd45d7e94bee3998dc2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x80c1}, 0x9080) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m0.775178284s ago: executing program 3 (id=32): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000006c0)=0x3e71, 0x4) (async) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) (async, rerun: 64) sendto(r1, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) (rerun: 64) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_link_settings={0x4d, 0x5, 0x8b, 0xc, 0x5, 0xc6, 0x4, 0x81, 0x5, 0x40, [0xfffffffc, 0x8, 0xffffff5b, 0x7fffffff, 0x60c, 0xf, 0x8b68, 0x38], [0x74a]}}) 2m59.926474244s ago: executing program 3 (id=36): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async, rerun: 32) renameat2(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000100)='./file1/file0\x00', 0x4) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80000001, 0x34}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000084) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x0, 0x7, 0x78, {0x78, 0x0, "6a6433554bb22f36274b95c5b52145744ad9456fb7f28e6abfcd86b1f76389d780ef79f5298b691e6672b3db01e99873befa9cd721151ead32f3218465d5a37009c146a76ccb4f8474c6b8605b2c86081e2a83741a0db7959b891d064349cf19e8a2a9ef324959d7fd040059a64fd19bdad0afec082b"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}, &(0x7f00000001c0)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@generic={0x6, 0x10, 0x3, "758c1d"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x0, 0x54e}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x98, 0x18, 0xd, 0x1, "86d11572", "ef4e5fc2"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x70, 0xc0, 0x4, 0xce, 0x3}}}, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2m58.526937546s ago: executing program 3 (id=44): r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x1, 0x2, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x2, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x80, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0xa, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400006], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d0, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x0, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc55, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x400, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x200005, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2a, 0x90, 0xb, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0xb, {0x9, 0x21, 0x91b1, 0xf8, 0x1, {0x22, 0xc73}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x4, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x2, 0xfb, 0x5}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xbc, 0x5, 0x9, 0x50, 0x4}, 0x29, &(0x7f0000000180)={0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xa3, "f03191796bf81ddd7e12396a54e977c4"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x0, 0xff00, 0x1a, [0xc0]}]}, 0x5, [{0xd7, &(0x7f00000001c0)=@string={0xd7, 0x3, "b465e6e80712e4ba10a4a2f7710b0a7ec6a4fdc43047467bc61bf6a2514ed97cd73e12af3b17afe844a982231b690e98124c4ff59a710479bb88356ed00d5e1e3f68bbe6a9d3c2d82fd4dd86b1f65589548514dcff915bf93e55981054edbda6acb379aab8e021a87e555aa34a3b0c6a115915241fcd7fb5eac988860dc3d658ea0c687fe58680289f85e828e012cb056c3140ea705e40a21162d2318127b4f962569a4e87574481ec889ba7141ea16493cf87fa13290f84501c60a3555a1930c197fbd4154ecadb146e39b44bb04affa8d263e130"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x240a}}, {0x37, &(0x7f00000003c0)=@string={0x37, 0x3, "b9f3f89a8d011b6244c4241511186ca62061102f250ca98a836293d13f0a0dec1945d1f9f40fced8e69dd4e2088bbc33140275ee1f"}}, {0xf4, &(0x7f0000000400)=@string={0xf4, 0x3, "fac9ea451e962622a104d5dbd8a66fdc9b190d4ceaa243c55a89cd68a1e19a7192b1d9b4b0e91d41d17e4bb71ac6b45d38a44b02b05e6e70f750c24bd2ebd0a4386b4ea4603e81426d9a26e8a938eb647e51fbce714d45299aaab83ad215ffc6ea5827dbb65395461a0884af603dbd13b42b5b1725443564b05cf9d8d357b4dcc3f684874dc6ec910cc5e4a343a5aad818dd8a3354942075d2c2f4c415fdce00789a1191d2af5bd969aa1e0057c22b8c02eddcebb2680a60893ea9224a796c2fa0d0ee8c8008ce2a537b893fa0ede528097e79fba09d991a1dec593d0089fa64e65c8d60eac06e3ea2dbcf20bf5131247c17"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x81d}}]}) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xb, @string={0xb, 0x3, "d689c133dc34cfa811"}}}, 0x0) 2m43.486969243s ago: executing program 32 (id=44): r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x1, 0x2, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x2, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x80, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0xa, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400006], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d0, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x0, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc55, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x400, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x200005, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2a, 0x90, 0xb, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0xb, {0x9, 0x21, 0x91b1, 0xf8, 0x1, {0x22, 0xc73}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x4, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x2, 0xfb, 0x5}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xbc, 0x5, 0x9, 0x50, 0x4}, 0x29, &(0x7f0000000180)={0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xa3, "f03191796bf81ddd7e12396a54e977c4"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x0, 0xff00, 0x1a, [0xc0]}]}, 0x5, [{0xd7, &(0x7f00000001c0)=@string={0xd7, 0x3, "b465e6e80712e4ba10a4a2f7710b0a7ec6a4fdc43047467bc61bf6a2514ed97cd73e12af3b17afe844a982231b690e98124c4ff59a710479bb88356ed00d5e1e3f68bbe6a9d3c2d82fd4dd86b1f65589548514dcff915bf93e55981054edbda6acb379aab8e021a87e555aa34a3b0c6a115915241fcd7fb5eac988860dc3d658ea0c687fe58680289f85e828e012cb056c3140ea705e40a21162d2318127b4f962569a4e87574481ec889ba7141ea16493cf87fa13290f84501c60a3555a1930c197fbd4154ecadb146e39b44bb04affa8d263e130"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x240a}}, {0x37, &(0x7f00000003c0)=@string={0x37, 0x3, "b9f3f89a8d011b6244c4241511186ca62061102f250ca98a836293d13f0a0dec1945d1f9f40fced8e69dd4e2088bbc33140275ee1f"}}, {0xf4, &(0x7f0000000400)=@string={0xf4, 0x3, "fac9ea451e962622a104d5dbd8a66fdc9b190d4ceaa243c55a89cd68a1e19a7192b1d9b4b0e91d41d17e4bb71ac6b45d38a44b02b05e6e70f750c24bd2ebd0a4386b4ea4603e81426d9a26e8a938eb647e51fbce714d45299aaab83ad215ffc6ea5827dbb65395461a0884af603dbd13b42b5b1725443564b05cf9d8d357b4dcc3f684874dc6ec910cc5e4a343a5aad818dd8a3354942075d2c2f4c415fdce00789a1191d2af5bd969aa1e0057c22b8c02eddcebb2680a60893ea9224a796c2fa0d0ee8c8008ce2a537b893fa0ede528097e79fba09d991a1dec593d0089fa64e65c8d60eac06e3ea2dbcf20bf5131247c17"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x81d}}]}) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xb, @string={0xb, 0x3, "d689c133dc34cfa811"}}}, 0x0) 4.440434081s ago: executing program 2 (id=2391): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240)=0x1000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async, rerun: 64) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) (rerun: 64) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async, rerun: 32) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=""/114, 0x72) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x8302, 0x0) syz_create_resource$binfmt(&(0x7f00000001c0)='./file0/file0\x00') (async, rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) close_range(r0, r1, 0x2) (async) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r2 = inotify_init() cachestat(r2, &(0x7f0000000540)={0x20000040265, 0x80000fff}, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000000c0)=0x4) (async) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x8, 0x4) (async, rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x31, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x4, 0xfb, 0x0, 0x10001, 0x2, 0x3, 0xd4, 0x7, 0x2, 0x4, 0x1, 0x0, 0x7, 0x3, 0x65, 0x5, 0x9, 0xc, '\x00', 0x8}) (async, rerun: 64) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.424040532s ago: executing program 2 (id=2392): r0 = socket$inet6(0xa, 0xa, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="d891b1a1bad00466ed66b8340000000f23c00f21f86635000005000f23f8b8e7008ee80f0012baf80c66b898182d8566efbafc0cb80080ef660f3882a0a4590f226765670f01cf66b80500000066b9004000000f01c1", 0x56}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000140)=@x86={0xa0, 0xa, 0x0, 0x0, 0x3, 0x0, 0x5, 0xd1, 0x6, 0x0, 0xb, 0x4, 0x0, 0xff7ffffc, 0xc, 0x0, 0x2, 0x80, 0x10, '\x00', 0x9, 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e23, 0xfffffffc, @local, 0x20000009}, 0x1c) r4 = dup(r0) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x2, 0x10000, @empty}, 0x1c) 4.323031798s ago: executing program 2 (id=2393): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000003, 0x12, r0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) gettid() r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000740)={@broadcast, @local, 0x0}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000880)={'erspan0\x00', &(0x7f0000000800)={'gretap0\x00', 0x0, 0x20, 0x8, 0xa, 0x6, {{0x9, 0x4, 0x1, 0x2f, 0x24, 0x66, 0x0, 0x5, 0x0, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@rr={0x7, 0xb, 0x76, [@empty, @private=0xa010101]}, @noop, @ra={0x94, 0x4, 0xfffd}]}}}}}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000440)=""/90, 0x328000, 0x1000}, 0x20) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000900)={@remote, 0x0}, &(0x7f0000000940)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x61, 0x8, 0x3, 0xfffffffd, 0x0, @mcast2, @rand_addr=' \x01\x00', 0x40, 0x80, 0x1, 0x400}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000b00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="e0010000", @ANYRESHEX=r4, @ANYBLOB="000828bd7000ffdbdf25130000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000c00018008000100", @ANYRES32=r8, @ANYBLOB="58000180140002006c6f000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020069705f767469300000000000000000001400020067726574617030000000cf00000000001400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030002005032a8e7000038000180", @ANYRES32=0x0, @ANYRES64=r10, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="080001002b1237a96c97d1fb377b25b2751af70ddead55b9a9701a532e1d6dd71fb08619e25fefa40df8cc6e7ff6b71abcafe38d4e2a8ed9", @ANYRES32=r4, @ANYBLOB="08000300000000000800030000000000140002006c6f00000000000000000000000000004000018008000100", @ANYRES16, @ANYBLOB="08000100", @ANYRESOCT=r2, @ANYRESDEC=r8, @ANYRES32=r5, @ANYBLOB="0800030000000000140002006261746164765f736c6176655f30000058000180140002007866726d30000000000000000000000008000100", @ANYRES32=r8, @ANYRESHEX, @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r10, @ANYBLOB], 0x1e0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r11 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r11, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) ioctl$HIDIOCGDEVINFO(r11, 0x801c4803, &(0x7f00000005c0)=""/222) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r5, @ANYRESHEX=r11], 0x14}}, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x100) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000100)={@local, @empty, 0x0, "32cbeceeaca4fc0187ead55bd37552e6059581e50740db25337922d08d886441", 0x24, 0x9, 0x3, 0x800}, 0x3c) socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010102108f8c406d041fc1138a01020301090400020a000409044b0300cc85cf02"], &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0}) 2.874928673s ago: executing program 1 (id=2407): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x1, 0x1000, 0x6b, &(0x7f0000000000)="bdaf3c124ede7cf67490b65673b252dcaf5f3478a6a08a85511487a68ffab3f0c22354600397eeabc65717a6d6f99e39500ad9cb66e51019bc19af3763df248ceb8bae85b3eb6ab20a1ae7fb43e8f041d57ada0b3a33bfb8da857530de992b55d2cf309e249a17b197d064", 0x7f, 0x0, &(0x7f0000000080)="e8b1ed86669ee849ff4d05cf3ccc739faa85a24542519f82c725579140e14dc038a244f86a9658802f785f66efb78171f97185db3c266c77d03c3403d974ae2d13d3f71e385a6da4b53bfad80bd515c0218c1dbee33ec332f5655773bebfc2e6e9ed683c14e874e5aca3e6b07272a17a11e6d8e0965a2dff46ae95f690ecc7"}) (async) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x1, 0x1000, 0x6b, &(0x7f0000000000)="bdaf3c124ede7cf67490b65673b252dcaf5f3478a6a08a85511487a68ffab3f0c22354600397eeabc65717a6d6f99e39500ad9cb66e51019bc19af3763df248ceb8bae85b3eb6ab20a1ae7fb43e8f041d57ada0b3a33bfb8da857530de992b55d2cf309e249a17b197d064", 0x7f, 0x0, &(0x7f0000000080)="e8b1ed86669ee849ff4d05cf3ccc739faa85a24542519f82c725579140e14dc038a244f86a9658802f785f66efb78171f97185db3c266c77d03c3403d974ae2d13d3f71e385a6da4b53bfad80bd515c0218c1dbee33ec332f5655773bebfc2e6e9ed683c14e874e5aca3e6b07272a17a11e6d8e0965a2dff46ae95f690ecc7"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000180)={0x0, 0x2, 0x5, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000180)={0x0, 0x2, 0x5, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000580)={0x14, 0x4, {0x3, @usage=0x8000, 0x0, 0x2, 0x0, 0x8, 0x80, 0x6, 0x84, @struct={0x8, 0x4}, 0x5, 0x3c7, [0x5, 0x9, 0x9, 0xb, 0x280, 0x7fffffff]}, {0x6, @struct={0x1, 0x7}, 0x0, 0x25, 0x65, 0x2, 0x4, 0xfffffffffffffffc, 0x80, @usage=0x4, 0x5, 0x1, [0x8, 0x5, 0xfffffffffffffffe, 0x6, 0x8000000000000000, 0x2]}, {0x7, @struct={0x8001, 0x8}, 0x0, 0x5, 0x9, 0xffffffff, 0x10000, 0x45, 0x20, @usage=0xc, 0x4, 0x3, [0x100000001, 0xbe36, 0x7, 0x3, 0x6, 0x9b23]}, {0x6bc5, 0x101, 0x100}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000980)={0x0, 0x0, {0x7fff, @usage=0xb, 0x0, 0x3, 0x9, 0x4f5a, 0xfffffffffffffe19, 0x7c03, 0x4c1, @usage=0x100000001, 0x1, 0xc827, [0x7fff, 0x4, 0x5, 0xfffffffffffff8b3, 0x0, 0x6]}, {0x2cd9, @struct={0x7fff, 0x10001}, r1, 0x1, 0x1ff, 0x0, 0xffffffff, 0x2, 0x10, @struct={0x7772, 0x3}, 0x1ff, 0x2, [0x2, 0x6, 0x5, 0x5, 0x6, 0x9]}, {0x7, @usage=0xeacf, r2, 0x8001, 0x7fffffff, 0x0, 0x9, 0x0, 0x409, @usage=0x401, 0x4, 0x5, [0x3, 0x3, 0x2, 0x0, 0x10001, 0x5]}, {0xe82, 0x4, 0x100}}) landlock_restrict_self(0xffffffffffffffff, 0x4) r4 = dup2(r0, r0) r5 = getpid() r6 = getpgid(r5) ptrace$setsig(0x4203, r5, 0xa9, &(0x7f0000000d80)={0x37, 0x80000000, 0x80}) close_range(r0, r0, 0x0) (async) close_range(r0, r0, 0x0) read$FUSE(r4, &(0x7f0000000e00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(r4, &(0x7f0000002e40)={0x28, 0x0, r7, {{0x6, 0xffffffff, 0x2, r5}}}, 0x28) (async) write$FUSE_LK(r4, &(0x7f0000002e40)={0x28, 0x0, r7, {{0x6, 0xffffffff, 0x2, r5}}}, 0x28) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000002e80)) connect$bt_sco(r4, &(0x7f0000002ec0)={0x1f, @none}, 0x8) sched_getaffinity(r5, 0x8, &(0x7f0000002f00)) (async) sched_getaffinity(r5, 0x8, &(0x7f0000002f00)) ptrace$ARCH_MAP_VDSO_X32(0x1e, r5, 0x7, 0x2001) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000002f40)={r3, 0x100, 0x0, [0x6, 0xffffffffffffffff, 0x9, 0x3, 0x8], [0x9, 0x3, 0x4, 0xa2, 0x6, 0x6, 0x14, 0x401, 0x2, 0x7, 0x5, 0x9, 0x1, 0xe5e8, 0x499, 0x7fff, 0xb, 0x6, 0x9, 0x4, 0x8000, 0xbb, 0x8, 0x56aa7367, 0x3, 0xbc94, 0x8000, 0xfffffffffffffff9, 0x3, 0x7, 0x6, 0x1, 0x7fffffff, 0x5, 0x6, 0xd1e5, 0x3, 0x8001, 0x5, 0x10001, 0x9, 0x400, 0x8, 0x9, 0xffffffffffffffff, 0x2, 0x8000000000000001, 0xaf13, 0x4ce0, 0x7, 0x100000001, 0x7, 0xd, 0x9, 0x6, 0x2, 0x8, 0x9, 0x7fffffffffffffff, 0xe, 0x3, 0xb, 0x3000000, 0x0, 0xc, 0x1, 0x0, 0x8, 0x10001, 0x97, 0x0, 0x4, 0x7, 0x1, 0x6, 0x5, 0x8b90, 0x2, 0x49, 0x11d6c8e6, 0x3, 0x1, 0x3, 0x6, 0x5, 0x5, 0x5, 0xe9, 0x222e, 0x4, 0xcb7, 0x2, 0x3, 0x3, 0x5, 0x2ec9ff5e, 0xffffffff, 0x0, 0x9, 0x1, 0x0, 0x6, 0x0, 0x4, 0x7, 0x8000000000000001, 0x2, 0x7, 0x800, 0x2, 0x9f1, 0x9, 0x41, 0x1000, 0x9, 0x8000000000000001, 0x4, 0x1, 0x8, 0x3, 0xfffffffffffffffa]}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000003380)=0x7) (async) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000003380)=0x7) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f00000033c0)={r6, 0x1, 0x5}) bind$pptp(r4, &(0x7f0000003400)={0x18, 0x2, {0x1, @private=0xa010100}}, 0x1e) (async) bind$pptp(r4, &(0x7f0000003400)={0x18, 0x2, {0x1, @private=0xa010100}}, 0x1e) rt_tgsigqueueinfo(r8, r6, 0x10, &(0x7f0000003440)={0x2e, 0x69, 0x9}) stat(&(0x7f00000034c0)='./file0\x00', &(0x7f0000003500)) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000003580), 0x48103, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003600), r4) sendmsg$NL80211_CMD_RADAR_DETECT(r10, &(0x7f0000003700)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000036c0)={&(0x7f0000003640)={0x48, r11, 0x820, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x21}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x306}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040050}, 0x40000) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r10, &(0x7f0000003700)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000036c0)={&(0x7f0000003640)={0x48, r11, 0x820, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x21}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x306}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040050}, 0x40000) close(r0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r10, 0xc0c89425, &(0x7f0000003740)={"4879830611c0e5cb7f199d666e41d89f", 0x0, 0x0, {0x6}, {0x4, 0x10}, 0x4, [0x4, 0x60, 0x7, 0x1, 0x5d, 0x80000000, 0x4, 0x1119, 0xb59, 0x7fff, 0xe37, 0x10000, 0x8000000000000001, 0x5, 0x23fabdea, 0x4]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r10, 0xc0c89425, &(0x7f0000003740)={"4879830611c0e5cb7f199d666e41d89f", 0x0, 0x0, {0x6}, {0x4, 0x10}, 0x4, [0x4, 0x60, 0x7, 0x1, 0x5d, 0x80000000, 0x4, 0x1119, 0xb59, 0x7fff, 0xe37, 0x10000, 0x8000000000000001, 0x5, 0x23fabdea, 0x4]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f0000003a40)={"4a54f42066b35d41879831685be78743", r12, 0x0, {0x5, 0x9}, {0x4, 0x8}, 0x10000, [0x10001, 0x7fffffff, 0xffff, 0x7, 0xbd5d, 0x6, 0x0, 0x14000000000, 0xffffffffffffe5b8, 0x6, 0x8001, 0x0, 0x7fffffffffffffff, 0x2, 0x1ff, 0x2]}) 2.874784953s ago: executing program 1 (id=2408): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x200, 0x7, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xfe, 0xf9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@\"\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r1, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) 1.687129252s ago: executing program 2 (id=2413): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000014c0)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x24040, 0x0) 1.627225875s ago: executing program 2 (id=2414): syz_usb_connect$cdc_ecm(0x3, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023f0001010990f709040008030206000d0524060000052400012e4e201f10182021d52f000d240f0109346a8f2f336e9c55f80000000100fd98091303090582020004096d010905030210004005810000"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3264, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xa0, 0x10, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x1, 0x3facec642f0a10f, 0x9, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x965}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x4, 0x6d}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0x2, 0xc, 0x20, 0x1}, 0x34, &(0x7f0000000140)={0x5, 0xf, 0x34, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x6, 0x2, 0x7, 0x5a}, @ssp_cap={0x24, 0x10, 0xa, 0x80, 0x6, 0x7, 0xff00, 0x1000, [0x8080ff, 0xff3f30, 0xf0, 0x30, 0xeaef5c3954dc0679, 0xc0]}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x416}}, {0x50, &(0x7f00000001c0)=@string={0x50, 0x3, "7c3c0de1eeeadda54dcd3840ef125b8451278a52b1e034da65e6375cf1f3864beb229f7caf9c9d28e7118034d7e78a7a12c808a1ac40887688b4a322f3994a72f1e756ff89f418895c4a24e4fb97"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42f}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x104) 1.346839321s ago: executing program 0 (id=2418): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$getflags(r0, 0xb) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xc4}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffe4b, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2}}, 0xb8}}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x20, 0x0, &(0x7f0000000180)=0x4d) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x53}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x60fe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa5, 0x10, 0xb0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x3, 0xb4, {0x9, 0x21, 0x67f7, 0x3, 0x1, {0x22, 0xc9c}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x3, 0x7}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xfb, 0xa1, 0xe0, 0x20, 0xff}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x4, [{0xe8, &(0x7f0000000240)=@string={0xe8, 0x3, "68584c9552822b147ab762195814c5a739443bc39b21a4747c90be24eaf37886bfb66f2ca6f8fbebce85c231aff1f989b0df1ffcb9ef00434aec296a6ae8ab20906e5e889d47a49d08c24ff3938acbcc2aa1a66296203f2db9d38fd84189f5678ab950d9b4a31b8c864f28807195a626c6197c59365d4cfba97b64cf7663658a46f2d87d7f135baf3b4ba0a94a75def0f7350af629cf73ba386bd3b55f0296631061cba1befd89648ab594bf1198508303392f1760beba2c85ba6153c1db5a86a147cca8d469bf2028d0b43237e9accd8fe2035c88d6e8869830626c6f9f341438086145ae05"}}, {0x7f, &(0x7f0000000140)=@string={0x7f, 0x3, "02cb1cde5ef2744dedf2bd4a9ee9eeed2b047f267cb9995e0a5fabacf54ed04d2e088c29b1f7d0b8f598885620c8494de53b5c5969a4eccc18fed003481f88316565a38939415e552414be2955c20816eb4967cc7c20048f375d5e5f8c74d4b686699ca1b4600463f5692443098854124d21b792897c14d384ab792c3d"}}, {0x38, &(0x7f00000000c0)=@string={0x38, 0x3, "aa428fe54f6f64c7f62b727a74a24696a2f7fddcdddd6c4c668196671418baf46bca3b40c72940aaa177d8a47cfd0ec8be353e2eeb6a"}}, {0x6f, &(0x7f0000000340)=@string={0x6f, 0x3, "b1d3592326341260b60c0bb81be593777fbee5ac0643cb88a2b343da59c5b43caccd414c94f1661a8c6057f6060bcb91b24e612014f4522c73d24e38ce571d6ec549c2e1ff444d99dbd5dcf7da4f28b7d29fe8f765c6b312e9beb8ecc27167c061fe413a19cb22a1b64cd53bc9"}}]}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "43b43fac"}, @local=@item_012={0x0, 0x2, 0x7}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0) 1.342808661s ago: executing program 1 (id=2419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x4041e) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="f3400f096536410f018bc3c30f00d82666f3430f1afe66662e0f23bd2e410f01c440c8315500450f011938909f00000064440fc778aa", 0x36}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.311436594s ago: executing program 1 (id=2420): write(0xffffffffffffffff, &(0x7f0000000000)="fc0000004800071fab092504090007000aab60000a0000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc00020000", 0x45) writev(0xffffffffffffffff, &(0x7f0000000f00)=[{&(0x7f0000000000)="c80500002000", 0x6}], 0x1) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f00000001c0)={[{@max={'max', 0x3d, 0x5}}, {@stats}]}) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000140), &(0x7f0000000080)) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000202, r1, &(0x7f00000000c0)='./file0\x00') 1.247136867s ago: executing program 1 (id=2421): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000200)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xfffffffffffffffe, 0x0, 0xfffffc76, 0xfffffffffffffffe, 0x2f, 0x62, 0x18, 0x20}) r1 = syz_io_uring_setup(0x31c7, &(0x7f0000000400)={0x0, 0xa975, 0x2015}, &(0x7f00000001c0), &(0x7f00000005c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0xe016, 0x27, 0x2, 0x0, 0x0, r1}, 0x0, 0x0) 1.246876897s ago: executing program 1 (id=2422): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x1c, 0x80000) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000180)={{}, r1, 0x2, @inherit={0x68, &(0x7f0000000100)={0x1, 0x4, 0xd, 0x73fc, {0x5, 0x9, 0x9, 0x8, 0x2}, [0xb09, 0x7fffffffffffffff, 0x2, 0x5]}}, @subvolid=0x8b2}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12011001000000406a05e3000000000000010902240001000000830904000001030000000921fcff0001220b00090581032000010917f5f1c2f916db1a53f05e8f4d4670c56c74019e9c31418e015708eeaa1cb616fafdec71392f34cb1422417465d54ad684db228f01220269a25d780bc76a6507ef4318195cc611df64d843d6672575727c30eb4e776d14d0c3"], 0x0) lsm_get_self_attr(0x8868edce2fed839c, 0x0, &(0x7f0000003540), 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) 1.246722027s ago: executing program 4 (id=2423): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0xa, 0x1, &(0x7f0000000100)={r1, r2+60000000}, &(0x7f0000000140)=0x1, 0x0) 849.8606ms ago: executing program 0 (id=2424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000d0180c2000002aaaaaaaaaa4186dd69ee0520002800fffc01000000000000000000000000000000000000000050009bad00000000000003000000000000071000"], 0x62) 726.526587ms ago: executing program 4 (id=2426): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000f3b095a9e5913d000000106a053103000000000001090224000100008000090400cf17d448a6d2bc9aed72f83ab437b2c702010300010009210000000122f8040905e2f6f26e3ceed095d048dae969c90981034000040000"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @remote}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x86, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x1, 0x1, 0x40, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0x7f, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x7, 0x24, 0x6, 0x0, 0x0, "40eb"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7, 0xb, 0x3}, [@dmm={0x7, 0x24, 0x14, 0x3, 0x7d}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x10}, @dmm={0x7, 0x24, 0x14, 0x7ff, 0x48}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x6, [0x4de, 0x9, 0x2, 0x8, 0xfff8, 0x3]}, @mbim_extended={0x8, 0x24, 0x1c, 0x1ff, 0x7, 0x400}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x8, 0x1a}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0xf, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xa}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x0, 0x1c, 0x12, 0x8, 0x7}, 0x12, &(0x7f0000000240)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x6, 0x4, 0xe3}]}, 0x3, [{0x91, &(0x7f0000000280)=@string={0x91, 0x3, "cb82ba4d50a2fb6490e979352b707684b7cff0bd1e2bd5d8bb94291908b788c0534189297d5c34bed0b4411332acd870f30db5305e78ec269726feac9e9c6fe9d27e5ad976aa9a9c44ab4b8192c42018daa7905199b146a7cd35f2af6072917d5b18e5a9d107bf6d248e9729f3f4821662a9643dcc107defbf2c6da2b95e5c19db31e16efba8400d9a4c7bd7b7d8b8"}}, {0x7a, &(0x7f0000000340)=@string={0x7a, 0x3, "77cde79e15c1ac9e52afe6b7eab7451d9c9f6ef42b77daf184815714286a6331a0cdb6feb2bb723402a59c26799aff746d7e848c3371e60da70758c1f6ed2bf0b2c7b418a9335c5cc18184a81de715a8245aed5f818a8a55fa6dd349f5981cf20ed11270449bfee8c177987286d5b7cfb401dbde43e8c809"}}, {0x6f, &(0x7f00000003c0)=@string={0x6f, 0x3, "c1dbd69d5409d7381f59cbb2cab54a2e825ec2f698c60191b1523ccbb69fc61d1f86b3286a3fd9535247ca885570e0946f6de80ca9e51c66827b8f785de92d834f9deb37b786e5fc12550ec590c9b48ab05fb4c6e0820be74457829771ae966036b2c7fc9195e632097292de6b"}}]}) 191.236449ms ago: executing program 2 (id=2427): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x20, 0x7, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="2401000012000501000000000000000005001900ff00000028001a000a010102000000000000000000000000fe8000000000000000000000000000aa020006d1ac"], 0x124}}, 0x4000800) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 190.759729ms ago: executing program 0 (id=2425): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000024c0), 0x28042, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000840)=""/134}, {&(0x7f0000000180)=""/111}, {&(0x7f0000000300)=""/120}, {&(0x7f0000000380)=""/114}, {&(0x7f0000002500)=""/4096}, {&(0x7f0000000400)=""/98}, {&(0x7f0000000480)=""/225}, {&(0x7f0000000080)=""/21}, {&(0x7f0000000800)=""/58}, {&(0x7f0000000680)=""/142}], 0x3b) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da5"], 0x310) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x400, &(0x7f0000000080)=ANY=[]) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x8) readv(r0, &(0x7f00000019c0)=[{&(0x7f00000005c0)=""/184, 0xb8}], 0x1) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000013c0)={0x79, 0x0, 0x800000080003}) 190.038719ms ago: executing program 4 (id=2428): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x1, 0x110, r0, 0xed8d000) (async) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000040)={0x3, 0x200}) (async) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000800410000000000", @ANYRES32=0x0, @ANYBLOB="0400e5"], 0x1c}], 0x1}, 0x0) (async) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000200)={0x1d, r3}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "e6bff385353800ff"}, 0x10}}, 0x2004c895) 189.750559ms ago: executing program 4 (id=2429): timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = gettid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'xfrm0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r2, 0x7) close_range(r1, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) setitimer(0x1, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) 108.879283ms ago: executing program 0 (id=2430): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x74) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x8000, 0xffff, 0x7f, 0x800, 0x9a, "785ae57e34e7c4e4"}) 96.653624ms ago: executing program 0 (id=2431): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x4000f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x80ab}, 0x1c) (async) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000020c0)) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000002100), &(0x7f0000002140)=0x8) (async) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0x4, 0x0, &(0x7f00000000c0)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000040), 0x5, 0x10b900) read$usbmon(r4, &(0x7f0000000140)=""/112, 0x70) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fstat(r5, &(0x7f0000000700)) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) (async) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) (async) bind$vsock_stream(r2, &(0x7f0000002180)={0x28, 0x0, 0x0, @host}, 0x10) (async) listen(r3, 0xd5) (async) read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x3a) 30.968038ms ago: executing program 4 (id=2432): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160016000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x8, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x60c48d1}, 0x8080) 29.276519ms ago: executing program 0 (id=2433): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) pipe(0x0) 0s ago: executing program 4 (id=2434): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0xb37, 0x1efe50df45352462) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000400)=0x4614, 0x4) (async, rerun: 64) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @sack_perm, @mss={0x2, 0x3}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @window={0x3, 0xfffe}, @timestamp], 0x2000000000000133) (rerun: 64) sendto(r2, &(0x7f0000000980)="cd", 0x1, 0xc0, 0x0, 0x0) (async, rerun: 64) sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (async, rerun: 64) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r2, 0x4401}, {r0, 0x3008}, {r3, 0x4009}, {r1, 0x1}, {r1, 0x3001}, {r2, 0x2000}, {r0, 0x4014}], 0x7, &(0x7f0000000200), &(0x7f0000000240)={[0x8]}, 0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e", 0x5f, 0x4008044, 0x0, 0x0) (async, rerun: 64) write$binfmt_misc(r0, &(0x7f0000000380)='}', 0x35) (async, rerun: 64) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): cdDevice=6c.6d [ 186.099855][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.111881][ T45] usb 3-1: Product: syz [ 186.116084][ T45] usb 3-1: Manufacturer: syz [ 186.120838][ T45] usb 3-1: SerialNumber: syz [ 186.132035][ T6590] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 186.139220][ T6590] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 186.243168][ T6614] netlink: 'syz.0.2254': attribute type 16 has an invalid length. [ 186.251091][ T6614] netlink: 'syz.0.2254': attribute type 4 has an invalid length. [ 186.258834][ T6614] netlink: 64094 bytes leftover after parsing attributes in process `syz.0.2254'. [ 186.268634][ T6614] warn_alloc: 5 callbacks suppressed [ 186.268650][ T6614] syz.0.2254: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 186.289194][ T6614] CPU: 0 UID: 0 PID: 6614 Comm: syz.0.2254 Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 186.289222][ T6614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 186.289235][ T6614] Call Trace: [ 186.289241][ T6614] [ 186.289248][ T6614] __dump_stack+0x21/0x30 [ 186.289278][ T6614] dump_stack_lvl+0x140/0x1c0 [ 186.289303][ T6614] ? __cfi_dump_stack_lvl+0x10/0x10 [ 186.289328][ T6614] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 186.289357][ T6614] dump_stack+0x19/0x20 [ 186.289379][ T6614] warn_alloc+0x1e7/0x2c0 [ 186.289397][ T6614] ? stack_depot_save_flags+0x38/0x800 [ 186.289421][ T6614] ? __cfi_warn_alloc+0x10/0x10 [ 186.289439][ T6614] ? kasan_save_track+0x3e/0x80 [ 186.289464][ T6614] ? kasan_save_alloc_info+0x40/0x50 [ 186.289484][ T6614] ? xsk_init_queue+0xb2/0x120 [ 186.289502][ T6614] ? xsk_setsockopt+0x42c/0x760 [ 186.289527][ T6614] ? do_sock_setsockopt+0x27f/0x410 [ 186.289555][ T6614] ? __x64_sys_setsockopt+0x1b7/0x250 [ 186.289581][ T6614] ? x64_sys_call+0x2adc/0x2ee0 [ 186.289607][ T6614] ? do_syscall_64+0x57/0xf0 [ 186.289632][ T6614] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 186.289659][ T6614] __vmalloc_node_range_noprof+0x132/0x1480 [ 186.289687][ T6614] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 186.289709][ T6614] ? kasan_save_alloc_info+0x40/0x50 [ 186.289729][ T6614] ? __kasan_kmalloc+0x96/0xb0 [ 186.289754][ T6614] ? __kmalloc_cache_noprof+0x23c/0x470 [ 186.289779][ T6614] vmalloc_user_noprof+0x77/0x90 [ 186.289805][ T6614] ? xskq_create+0xdb/0x290 [ 186.289824][ T6614] xskq_create+0xdb/0x290 [ 186.289843][ T6614] xsk_init_queue+0xb2/0x120 [ 186.289862][ T6614] xsk_setsockopt+0x42c/0x760 [ 186.289880][ T6614] ? __cfi_xsk_setsockopt+0x10/0x10 [ 186.289910][ T6614] ? do_futex+0x37d/0x510 [ 186.289931][ T6614] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 186.289960][ T6614] ? security_socket_setsockopt+0x3d/0x100 [ 186.289987][ T6614] ? __cfi_xsk_setsockopt+0x10/0x10 [ 186.290016][ T6614] do_sock_setsockopt+0x27f/0x410 [ 186.290042][ T6614] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 186.290068][ T6614] __x64_sys_setsockopt+0x1b7/0x250 [ 186.290095][ T6614] x64_sys_call+0x2adc/0x2ee0 [ 186.290118][ T6614] do_syscall_64+0x57/0xf0 [ 186.290144][ T6614] ? clear_bhb_loop+0x50/0xa0 [ 186.290170][ T6614] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 186.290195][ T6614] RIP: 0033:0x7fb37399af79 [ 186.290211][ T6614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.290228][ T6614] RSP: 002b:00007fb3748a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 186.290250][ T6614] RAX: ffffffffffffffda RBX: 00007fb373c15fa0 RCX: 00007fb37399af79 [ 186.290265][ T6614] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 186.290278][ T6614] RBP: 00007fb373a316e0 R08: 0000000000000004 R09: 0000000000000000 [ 186.290290][ T6614] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.290303][ T6614] R13: 00007fb373c16038 R14: 00007fb373c15fa0 R15: 00007ffe4f84b768 [ 186.290319][ T6614] [ 186.374531][ T45] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 186.457592][ T6614] Mem-Info: [ 186.507372][ T45] usb 3-1: USB disconnect, device number 16 [ 186.555342][ T6614] active_anon:16160 inactive_anon:28 isolated_anon:0 [ 186.555342][ T6614] active_file:9430 inactive_file:14666 isolated_file:0 [ 186.555342][ T6614] unevictable:16444 dirty:51 writeback:0 [ 186.555342][ T6614] slab_reclaimable:4869 slab_unreclaimable:71441 [ 186.555342][ T6614] mapped:24060 shmem:10071 pagetables:1058 [ 186.555342][ T6614] sec_pagetables:0 bounce:0 [ 186.555342][ T6614] kernel_misc_reclaimable:0 [ 186.555342][ T6614] free:1489261 free_pcp:7282 free_cma:0 [ 186.586093][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.592626][ T6614] Node 0 active_anon:64640kB inactive_anon:112kB active_file:37720kB inactive_file:58664kB unevictable:65776kB isolated(anon):0kB isolated(file):0kB mapped:96240kB dirty:204kB writeback:0kB shmem:40284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7600kB pagetables:4232kB sec_pagetables:0kB all_unreclaimable? no [ 186.605428][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.608271][ T6614] DMA32 free:2950100kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963376kB mlocked:0kB bounce:0kB free_pcp:13276kB local_pcp:11228kB free_cma:0kB [ 186.666864][ T6615] bridge_slave_0: entered allmulticast mode [ 186.692988][ T6614] lowmem_reserve[]: 0 3921 [ 186.706367][ T6615] bridge_slave_0: entered promiscuous mode [ 186.730395][ T6614] 3921 [ 186.749211][ T6614] Normal free:3009528kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64616kB inactive_anon:112kB active_file:37720kB inactive_file:58668kB unevictable:65776kB writepending:204kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:15952kB local_pcp:656kB free_cma:0kB [ 186.781199][ T6614] lowmem_reserve[]: 0 0 0 [ 186.785591][ T6614] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (M) 717*4096kB (M) = 2950100kB [ 186.801372][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.808611][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.815819][ T6615] bridge_slave_1: entered allmulticast mode [ 186.822545][ T6615] bridge_slave_1: entered promiscuous mode [ 186.829840][ T6614] Normal: 71*4kB (UME) 301*8kB (ME) 399*16kB (UME) 558*32kB (UME) 568*64kB (UME) 262*128kB (UME) 117*256kB (UME) 71*512kB (UME) 74*1024kB (UME) 20*2048kB (UME) 666*4096kB (UM) = 3007796kB [ 186.861015][ T6614] 50833 total pagecache pages [ 186.865759][ T6614] 246 pages in swap cache [ 186.869921][ T36] audit: type=1400 audit(2000008816.483:27142): avc: denied { watch watch_reads } for pid=6622 comm="syz.4.2256" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 186.870839][ T6614] Free swap = 123532kB [ 186.896735][ T6614] Total swap = 124996kB [ 186.901263][ T6614] 2097051 pages RAM [ 186.915394][ T6614] 0 pages HighMem/MovableOnly [ 186.921147][ T6614] 352241 pages reserved [ 186.925370][ T6614] 0 pages cma reserved [ 186.934114][ T6614] Memory allocations: [ 186.938182][ T6614] 0 B 0 init/main.c:1477 func:do_initcalls [ 187.019954][ T6614] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 187.028129][ T6614] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 187.039827][ T6614] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 187.057798][ T6614] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 187.080939][ T6614] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 187.099718][ T6614] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 187.109860][ T6614] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 187.117784][ T6614] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 187.145967][ T6614] 0 B 0 init/initramfs.c:101 func:find_link [ 187.199904][ T6641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2258'. [ 187.230745][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.237802][ T6615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.245220][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.252275][ T6615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.408844][ T4687] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.420067][ T4687] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.446715][ T4655] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.453797][ T4655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.490310][ T4655] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.497374][ T4655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.536010][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2263'. [ 187.554073][ T6615] veth0_vlan: entered promiscuous mode [ 187.575135][ T6615] veth1_macvtap: entered promiscuous mode [ 187.729503][ T6625] cgroup: fork rejected by pids controller in /syz2 [ 188.060874][ T6683] sock: sock_timestamping_bind_phc: sock not bind to device [ 188.123938][ T6693] sock: sock_set_timeout: `syz.0.2271' (pid 6693) tries to set negative timeout [ 188.549829][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 188.569869][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 188.660091][ T6720] netlink: 'syz.4.2280': attribute type 13 has an invalid length. [ 188.721235][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.734412][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 188.740152][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 188.759510][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.769815][ T45] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 188.778005][ T45] usb 3-1: config 2 has no interface number 0 [ 188.784754][ T31] usb 2-1: config 0 descriptor?? [ 188.798259][ T45] usb 3-1: config 2 interface 88 has no altsetting 0 [ 188.811969][ T45] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 188.821528][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.831266][ T45] usb 3-1: Product: syz [ 188.835563][ T45] usb 3-1: Manufacturer: syz [ 188.842704][ T45] usb 3-1: SerialNumber: syz [ 189.199702][ T31] kone 0003:1E7D:2CED.000C: hidraw0: USB HID v10.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 189.253394][ T45] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 189.267037][ T45] asix 3-1:2.88: probe with driver asix failed with error -71 [ 189.282652][ T45] usb 3-1: USB disconnect, device number 17 [ 189.400574][ T6737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.412382][ T6737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.426015][ T31] kone 0003:1E7D:2CED.000C: couldn't init struct kone_device [ 189.447413][ T31] kone 0003:1E7D:2CED.000C: couldn't install mouse [ 189.465343][ T31] kone 0003:1E7D:2CED.000C: probe with driver kone failed with error -5 [ 189.481958][ T31] usb 2-1: USB disconnect, device number 6 [ 189.495655][ T36] audit: type=1326 audit(2000008819.123:27143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6739 comm="syz.0.2287" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb37399af79 code=0x0 [ 189.547224][ T36] audit: type=1400 audit(2000008819.173:27144): avc: denied { listen } for pid=6739 comm="syz.0.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.751819][ T6660] syz.2.2257 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 189.787997][ T6660] CPU: 1 UID: 0 PID: 6660 Comm: syz.2.2257 Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 189.788030][ T6660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 189.788043][ T6660] Call Trace: [ 189.788050][ T6660] [ 189.788058][ T6660] __dump_stack+0x21/0x30 [ 189.788098][ T6660] dump_stack_lvl+0x140/0x1c0 [ 189.788121][ T6660] ? __cfi_dump_stack_lvl+0x10/0x10 [ 189.788143][ T6660] ? ___ratelimit+0x40e/0x5b0 [ 189.788163][ T6660] dump_stack+0x19/0x20 [ 189.788185][ T6660] dump_header+0xd6/0x490 [ 189.788204][ T6660] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 189.788230][ T6660] oom_kill_process+0x35d/0x640 [ 189.788256][ T6660] out_of_memory+0x624/0xa30 [ 189.788282][ T6660] ? __cfi_out_of_memory+0x10/0x10 [ 189.788308][ T6660] ? mutex_lock_killable+0x97/0x1d0 [ 189.788329][ T6660] ? __cfi_mutex_lock_killable+0x10/0x10 [ 189.788352][ T6660] mem_cgroup_out_of_memory+0x2c8/0x390 [ 189.788375][ T6660] ? css_next_descendant_pre+0x202/0x230 [ 189.788395][ T6660] ? drain_obj_stock+0xed0/0xed0 [ 189.788418][ T6660] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 189.788442][ T6660] try_charge_memcg+0x91c/0xe10 [ 189.788462][ T6660] ? __cfi_try_charge_memcg+0x10/0x10 [ 189.788481][ T6660] ? __alloc_pages_noprof+0x35f/0x7e0 [ 189.788500][ T6660] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 189.788521][ T6660] __mem_cgroup_charge+0xfc/0x420 [ 189.788542][ T6660] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 189.788563][ T6660] ? preempt_schedule_irq+0xab/0x110 [ 189.788581][ T6660] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 189.788600][ T6660] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 189.788628][ T6660] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 189.788650][ T6660] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 189.788678][ T6660] ? put_swap_device+0x130/0x130 [ 189.788704][ T6660] ? shmem_huge_global_enabled+0x2da/0x360 [ 189.788731][ T6660] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 189.788756][ T6660] ? __kasan_check_write+0x18/0x20 [ 189.788782][ T6660] ? _raw_spin_lock+0x92/0x120 [ 189.788807][ T6660] shmem_get_folio_gfp+0x607/0x1390 [ 189.788834][ T6660] ? shmem_get_folio+0xc0/0xc0 [ 189.788858][ T6660] ? follow_page_pte+0x90f/0xbc0 [ 189.788877][ T6660] ? inode_to_bdi+0x6d/0x100 [ 189.788898][ T6660] shmem_write_begin+0xf4/0x270 [ 189.788924][ T6660] generic_perform_write+0x328/0x970 [ 189.788946][ T6660] ? __cfi_generic_perform_write+0x10/0x10 [ 189.788965][ T6660] ? down_write+0xee/0x2b0 [ 189.788987][ T6660] ? file_update_time+0xa3/0x210 [ 189.789005][ T6660] shmem_file_write_iter+0x105/0x130 [ 189.789025][ T6660] __kernel_write_iter+0x42c/0x8a0 [ 189.789048][ T6660] ? __cfi___kernel_write_iter+0x10/0x10 [ 189.789071][ T6660] ? get_dump_page+0x165/0x220 [ 189.789089][ T6660] ? __asan_memset+0x39/0x50 [ 189.789110][ T6660] ? iov_iter_bvec+0xc0/0x180 [ 189.789134][ T6660] dump_user_range+0xb8b/0xe60 [ 189.789160][ T6660] ? __cfi_dump_user_range+0x10/0x10 [ 189.789183][ T6660] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 189.789216][ T6660] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 189.789240][ T6660] ? elf_core_dump+0x24c0/0x3960 [ 189.789268][ T6660] elf_core_dump+0x2e7e/0x3960 [ 189.789297][ T6660] ? __cfi_elf_core_dump+0x10/0x10 [ 189.789330][ T6660] ? dump_interrupted+0xf0/0xf0 [ 189.789352][ T6660] ? filp_open+0x199/0x1f0 [ 189.789370][ T6660] ? 0xffffffffff600000 [ 189.789385][ T6660] do_coredump+0x208d/0x2fe0 [ 189.789409][ T6660] ? __cfi_do_coredump+0x10/0x10 [ 189.789430][ T6660] ? asm_exc_page_fault+0x2b/0x30 [ 189.789462][ T6660] ? __kasan_slab_free+0x6a/0x80 [ 189.789488][ T6660] ? kmem_cache_free+0x1bd/0x4f0 [ 189.789512][ T6660] ? get_signal+0xa74/0x14e0 [ 189.789534][ T6660] get_signal+0x11f8/0x14e0 [ 189.789559][ T6660] arch_do_signal_or_restart+0xbc/0x760 [ 189.789584][ T6660] ? fixup_vdso_exception+0x20d/0x310 [ 189.789611][ T6660] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 189.789640][ T6660] irqentry_exit_to_user_mode+0x4d/0xb0 [ 189.789664][ T6660] irqentry_exit+0x16/0x60 [ 189.789685][ T6660] exc_page_fault+0x65/0xc0 [ 189.789705][ T6660] asm_exc_page_fault+0x2b/0x30 [ 189.789729][ T6660] RIP: 0033:0x7fbc2f0514f7 [ 189.789744][ T6660] Code: e8 8e fa ff ff 89 f2 48 8d 3d 05 43 1b 00 48 8d 35 5f f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 189.789759][ T6660] RSP: 002b:00007fbc2ff66120 EFLAGS: 00010202 [ 189.789777][ T6660] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbc2f19af79 [ 189.789790][ T6660] RDX: 00007fbc2ff66140 RSI: 00007fbc2ff66270 RDI: 000000000000000b [ 189.789803][ T6660] RBP: 00007fbc2f2316e0 R08: 0000000000000000 R09: 0000000000000000 [ 189.789816][ T6660] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 189.789828][ T6660] R13: 00007fbc2f416038 R14: 00007fbc2f415fa0 R15: 00007ffc796a9008 [ 189.789845][ T6660] [ 190.252668][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 190.260225][ T6660] memory: usage 307200kB, limit 307200kB, failcnt 18669 [ 190.267214][ T6660] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 190.275335][ T6660] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 190.282362][ T6660] Memory cgroup stats for /syz2: [ 190.282567][ T6660] cache 314486784 [ 190.291204][ T6660] rss 86016 [ 190.294302][ T6660] rss_huge 0 [ 190.297577][ T6660] shmem 314478592 [ 190.301266][ T6660] mapped_file 0 [ 190.304724][ T6660] dirty 0 [ 190.307667][ T6660] writeback 0 [ 190.310972][ T6660] workingset_refault_anon 22 [ 190.315563][ T6660] workingset_refault_file 969 [ 190.320284][ T6660] swap 127995904 [ 190.323834][ T6660] swapcached 0 [ 190.327191][ T6660] pgpgin 330939 [ 190.330669][ T6660] pgpgout 256694 [ 190.334239][ T6660] pgfault 185323 [ 190.337793][ T6660] pgmajfault 14 [ 190.341270][ T6660] inactive_anon 15228928 [ 190.345521][ T6660] active_anon 299335680 [ 190.349671][ T6660] inactive_file 0 [ 190.353326][ T6660] active_file 8192 [ 190.357050][ T6660] unevictable 0 [ 190.360536][ T6660] hierarchical_memory_limit 314572800 [ 190.365905][ T6660] hierarchical_memsw_limit 9223372036854771712 [ 190.372076][ T6660] total_cache 314486784 [ 190.376237][ T6660] total_rss 86016 [ 190.379902][ T6660] total_rss_huge 0 [ 190.383619][ T6660] total_shmem 314478592 [ 190.387780][ T6660] total_mapped_file 0 [ 190.391770][ T6660] total_dirty 0 [ 190.395231][ T6660] total_writeback 0 [ 190.399021][ T6660] total_workingset_refault_anon 22 [ 190.404144][ T6660] total_workingset_refault_file 969 [ 190.409352][ T6660] total_swap 127995904 [ 190.413457][ T6660] total_swapcached 0 [ 190.417361][ T6660] total_pgpgin 330939 [ 190.419884][ T31] usb 2-1: device descriptor read/64, error -71 [ 190.421657][ T6660] total_pgpgout 256694 [ 190.431679][ T6660] total_pgfault 185323 [ 190.435736][ T6660] total_pgmajfault 14 [ 190.439709][ T6660] total_inactive_anon 15228928 [ 190.444494][ T6660] total_active_anon 299335680 [ 190.449168][ T6660] total_inactive_file 0 [ 190.453334][ T6660] total_active_file 8192 [ 190.457584][ T6660] total_unevictable 0 [ 190.461604][ T6660] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2257,pid=6634,uid=0 [ 190.476511][ T6660] Memory cgroup out of memory: Killed process 6634 (syz.2.2257) total-vm:90484kB, anon-rss:1400kB, file-rss:53632kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 190.679844][ T31] usb 2-1: device descriptor read/64, error -71 [ 190.687919][ T6639] syz.2.2257 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 190.776673][ T6639] CPU: 1 UID: 0 PID: 6639 Comm: syz.2.2257 Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 190.776705][ T6639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 190.776718][ T6639] Call Trace: [ 190.776724][ T6639] [ 190.776732][ T6639] __dump_stack+0x21/0x30 [ 190.776759][ T6639] dump_stack_lvl+0x140/0x1c0 [ 190.776781][ T6639] ? __cfi_dump_stack_lvl+0x10/0x10 [ 190.776804][ T6639] ? ___ratelimit+0x40e/0x5b0 [ 190.776823][ T6639] dump_stack+0x19/0x20 [ 190.776845][ T6639] dump_header+0xd6/0x490 [ 190.776865][ T6639] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 190.776884][ T6639] oom_kill_process+0x35d/0x640 [ 190.776909][ T6639] out_of_memory+0x624/0xa30 [ 190.776953][ T6639] ? __cfi_out_of_memory+0x10/0x10 [ 190.776978][ T6639] ? mutex_lock_killable+0x97/0x1d0 [ 190.777001][ T6639] ? __cfi_mutex_lock_killable+0x10/0x10 [ 190.777024][ T6639] mem_cgroup_out_of_memory+0x2c8/0x390 [ 190.777054][ T6639] ? css_next_descendant_pre+0x202/0x230 [ 190.777075][ T6639] ? drain_obj_stock+0xed0/0xed0 [ 190.777110][ T6639] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 190.777141][ T6639] try_charge_memcg+0x91c/0xe10 [ 190.777163][ T6639] ? __cfi_try_charge_memcg+0x10/0x10 [ 190.777183][ T6639] ? __alloc_pages_noprof+0x35f/0x7e0 [ 190.777204][ T6639] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 190.777226][ T6639] __mem_cgroup_charge+0xfc/0x420 [ 190.777248][ T6639] ? folio_add_lru+0x116/0x400 [ 190.777277][ T6639] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 190.777301][ T6639] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 190.777334][ T6639] ? put_swap_device+0x130/0x130 [ 190.777362][ T6639] ? shmem_huge_global_enabled+0x2da/0x360 [ 190.777390][ T6639] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 190.777418][ T6639] ? __kasan_check_write+0x18/0x20 [ 190.777441][ T6639] ? _raw_spin_lock+0x92/0x120 [ 190.777468][ T6639] shmem_get_folio_gfp+0x607/0x1390 [ 190.777498][ T6639] ? shmem_get_folio+0xc0/0xc0 [ 190.777523][ T6639] ? follow_page_pte+0x90f/0xbc0 [ 190.777543][ T6639] ? inode_to_bdi+0x6d/0x100 [ 190.777564][ T6639] shmem_write_begin+0xf4/0x270 [ 190.777593][ T6639] generic_perform_write+0x328/0x970 [ 190.777616][ T6639] ? __cfi_generic_perform_write+0x10/0x10 [ 190.777636][ T6639] ? down_write+0xee/0x2b0 [ 190.777660][ T6639] ? file_update_time+0xa3/0x210 [ 190.777681][ T6639] shmem_file_write_iter+0x105/0x130 [ 190.777701][ T6639] __kernel_write_iter+0x42c/0x8a0 [ 190.777726][ T6639] ? __cfi___kernel_write_iter+0x10/0x10 [ 190.777750][ T6639] ? get_dump_page+0x165/0x220 [ 190.777769][ T6639] ? __asan_memset+0x39/0x50 [ 190.777791][ T6639] ? iov_iter_bvec+0xc0/0x180 [ 190.777816][ T6639] dump_user_range+0xb8b/0xe60 [ 190.777843][ T6639] ? __cfi_dump_user_range+0x10/0x10 [ 190.777867][ T6639] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 190.777895][ T6639] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 190.777922][ T6639] ? elf_core_dump+0x24c0/0x3960 [ 190.777950][ T6639] elf_core_dump+0x2e7e/0x3960 [ 190.777982][ T6639] ? __cfi_elf_core_dump+0x10/0x10 [ 190.778018][ T6639] ? dump_interrupted+0xf0/0xf0 [ 190.778040][ T6639] ? filp_open+0x199/0x1f0 [ 190.778060][ T6639] ? 0xffffffffff600000 [ 190.778076][ T6639] do_coredump+0x208d/0x2fe0 [ 190.778104][ T6639] ? __cfi_do_coredump+0x10/0x10 [ 190.778142][ T6639] ? asm_exc_page_fault+0x2b/0x30 [ 190.778174][ T6639] ? __kasan_slab_free+0x6a/0x80 [ 190.778200][ T6639] ? kmem_cache_free+0x1bd/0x4f0 [ 190.778223][ T6639] ? get_signal+0xa74/0x14e0 [ 190.778246][ T6639] get_signal+0x11f8/0x14e0 [ 190.778271][ T6639] arch_do_signal_or_restart+0xbc/0x760 [ 190.778299][ T6639] ? fixup_vdso_exception+0x20d/0x310 [ 190.778326][ T6639] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 190.778357][ T6639] irqentry_exit_to_user_mode+0x4d/0xb0 [ 190.778382][ T6639] irqentry_exit+0x16/0x60 [ 190.778402][ T6639] exc_page_fault+0x65/0xc0 [ 190.778423][ T6639] asm_exc_page_fault+0x2b/0x30 [ 190.778448][ T6639] RIP: 0033:0x7fbc2f0514f7 [ 190.778463][ T6639] Code: e8 8e fa ff ff 89 f2 48 8d 3d 05 43 1b 00 48 8d 35 5f f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 190.778481][ T6639] RSP: 002b:00007fbc2ff66120 EFLAGS: 00010202 [ 190.778498][ T6639] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbc2f19af79 [ 190.778511][ T6639] RDX: 00007fbc2ff66140 RSI: 00007fbc2ff66270 RDI: 000000000000000b [ 190.778524][ T6639] RBP: 00007fbc2f2316e0 R08: 0000000000000000 R09: 0000000000000000 [ 190.778536][ T6639] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 190.778548][ T6639] R13: 00007fbc2f416038 R14: 00007fbc2f415fa0 R15: 00007ffc796a9008 [ 190.778564][ T6639] [ 191.291034][ T6639] memory: usage 307200kB, limit 307200kB, failcnt 20374 [ 191.298129][ T6639] memory+swap: usage 432136kB, limit 9007199254740988kB, failcnt 0 [ 191.326201][ T6639] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 191.333293][ T6639] Memory cgroup stats for /syz2: [ 191.333427][ T6639] cache 314519552 [ 191.342205][ T6639] rss 53248 [ 191.345405][ T6639] rss_huge 0 [ 191.348651][ T6639] shmem 314515456 [ 191.352338][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 191.360310][ T6639] mapped_file 0 [ 191.363854][ T6639] dirty 0 [ 191.366898][ T6639] writeback 0 [ 191.370665][ T6639] workingset_refault_anon 22 [ 191.375297][ T6639] workingset_refault_file 1397 [ 191.380237][ T6639] swap 127991808 [ 191.383863][ T6639] swapcached 0 [ 191.387281][ T6639] pgpgin 340262 [ 191.390961][ T6639] pgpgout 266017 [ 191.394595][ T6639] pgfault 185813 [ 191.398172][ T6639] pgmajfault 20 [ 191.401837][ T6639] inactive_anon 271904768 [ 191.406244][ T6639] active_anon 41742336 [ 191.410517][ T6639] inactive_file 4096 [ 191.414452][ T6639] active_file 0 [ 191.418003][ T6639] unevictable 0 [ 191.421677][ T6639] hierarchical_memory_limit 314572800 [ 191.427082][ T6639] hierarchical_memsw_limit 9223372036854771712 [ 191.433465][ T6639] total_cache 314519552 [ 191.437660][ T6639] total_rss 53248 [ 191.441646][ T6639] total_rss_huge 0 [ 191.445452][ T6639] total_shmem 314515456 [ 191.449652][ T6639] total_mapped_file 0 [ 191.453869][ T6639] total_dirty 0 [ 191.457431][ T6639] total_writeback 0 [ 191.461441][ T6639] total_workingset_refault_anon 22 [ 191.466587][ T6639] total_workingset_refault_file 1397 [ 191.472372][ T6639] total_swap 127991808 [ 191.476487][ T6639] total_swapcached 0 [ 191.480559][ T6639] total_pgpgin 340262 [ 191.484642][ T6639] total_pgpgout 266017 [ 191.488750][ T6639] total_pgfault 185813 [ 191.493087][ T6639] total_pgmajfault 20 [ 191.497165][ T6639] total_inactive_anon 271904768 [ 191.502076][ T31] usb 2-1: device descriptor read/64, error -71 [ 191.508642][ T6639] total_active_anon 41742336 [ 191.513394][ T6639] total_inactive_file 4096 [ 191.517853][ T6639] total_active_file 0 [ 191.522063][ T6639] total_unevictable 0 [ 191.526102][ T6639] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2257,pid=6631,uid=0 [ 191.541150][ T6639] Memory cgroup out of memory: Killed process 6631 (syz.2.2257) total-vm:90484kB, anon-rss:1392kB, file-rss:53612kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 191.759830][ T31] usb 2-1: device descriptor read/64, error -71 [ 191.852922][ T6676] syz.2.2257 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 191.870003][ T31] usb usb2-port1: attempt power cycle [ 191.899817][ T6676] CPU: 0 UID: 0 PID: 6676 Comm: syz.2.2257 Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 191.899846][ T6676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 191.899859][ T6676] Call Trace: [ 191.899865][ T6676] [ 191.899873][ T6676] __dump_stack+0x21/0x30 [ 191.899902][ T6676] dump_stack_lvl+0x140/0x1c0 [ 191.899924][ T6676] ? __cfi_dump_stack_lvl+0x10/0x10 [ 191.899947][ T6676] ? ___ratelimit+0x40e/0x5b0 [ 191.899966][ T6676] dump_stack+0x19/0x20 [ 191.899987][ T6676] dump_header+0xd6/0x490 [ 191.900013][ T6676] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 191.900032][ T6676] oom_kill_process+0x35d/0x640 [ 191.900059][ T6676] out_of_memory+0x624/0xa30 [ 191.900084][ T6676] ? __cfi_out_of_memory+0x10/0x10 [ 191.900109][ T6676] ? mutex_lock_killable+0x97/0x1d0 [ 191.900129][ T6676] ? __cfi_mutex_lock_killable+0x10/0x10 [ 191.900152][ T6676] mem_cgroup_out_of_memory+0x2c8/0x390 [ 191.900175][ T6676] ? css_next_descendant_pre+0x202/0x230 [ 191.900195][ T6676] ? drain_obj_stock+0xed0/0xed0 [ 191.900219][ T6676] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 191.900241][ T6676] try_charge_memcg+0x91c/0xe10 [ 191.900261][ T6676] ? __cfi_try_charge_memcg+0x10/0x10 [ 191.900280][ T6676] ? __alloc_pages_noprof+0x35f/0x7e0 [ 191.900300][ T6676] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 191.900321][ T6676] __mem_cgroup_charge+0xfc/0x420 [ 191.900343][ T6676] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 191.900364][ T6676] ? do_pte_missing+0x1937/0x44f0 [ 191.900394][ T6676] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 191.900424][ T6676] ? put_swap_device+0x130/0x130 [ 191.900450][ T6676] ? shmem_huge_global_enabled+0x2da/0x360 [ 191.900477][ T6676] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 191.900502][ T6676] ? __kasan_check_write+0x18/0x20 [ 191.900524][ T6676] ? _raw_spin_lock+0x92/0x120 [ 191.900551][ T6676] shmem_get_folio_gfp+0x607/0x1390 [ 191.900578][ T6676] ? shmem_get_folio+0xc0/0xc0 [ 191.900602][ T6676] ? follow_page_pte+0x90f/0xbc0 [ 191.900620][ T6676] ? inode_to_bdi+0x6d/0x100 [ 191.900640][ T6676] shmem_write_begin+0xf4/0x270 [ 191.900669][ T6676] generic_perform_write+0x328/0x970 [ 191.900690][ T6676] ? __cfi_generic_perform_write+0x10/0x10 [ 191.900709][ T6676] ? down_write+0xee/0x2b0 [ 191.900731][ T6676] ? file_update_time+0xa3/0x210 [ 191.900750][ T6676] shmem_file_write_iter+0x105/0x130 [ 191.900769][ T6676] __kernel_write_iter+0x42c/0x8a0 [ 191.900793][ T6676] ? __cfi___kernel_write_iter+0x10/0x10 [ 191.900815][ T6676] ? get_dump_page+0x165/0x220 [ 191.900832][ T6676] ? __asan_memset+0x39/0x50 [ 191.900853][ T6676] ? iov_iter_bvec+0xc0/0x180 [ 191.900877][ T6676] dump_user_range+0xb8b/0xe60 [ 191.900901][ T6676] ? __cfi_dump_user_range+0x10/0x10 [ 191.900923][ T6676] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 191.900949][ T6676] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 191.900975][ T6676] ? elf_core_dump+0x24c0/0x3960 [ 191.901008][ T6676] elf_core_dump+0x2e7e/0x3960 [ 191.901039][ T6676] ? __cfi_elf_core_dump+0x10/0x10 [ 191.901072][ T6676] ? dump_interrupted+0xf0/0xf0 [ 191.901093][ T6676] ? filp_open+0x199/0x1f0 [ 191.901111][ T6676] ? 0xffffffffff600000 [ 191.901126][ T6676] do_coredump+0x208d/0x2fe0 [ 191.901150][ T6676] ? __cfi_do_coredump+0x10/0x10 [ 191.901171][ T6676] ? asm_exc_page_fault+0x2b/0x30 [ 191.901202][ T6676] ? __kasan_slab_free+0x6a/0x80 [ 191.901227][ T6676] ? kmem_cache_free+0x1bd/0x4f0 [ 191.901249][ T6676] ? get_signal+0xa74/0x14e0 [ 191.901271][ T6676] get_signal+0x11f8/0x14e0 [ 191.901296][ T6676] arch_do_signal_or_restart+0xbc/0x760 [ 191.901321][ T6676] ? fixup_vdso_exception+0x20d/0x310 [ 191.901348][ T6676] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 191.901377][ T6676] irqentry_exit_to_user_mode+0x4d/0xb0 [ 191.901400][ T6676] irqentry_exit+0x16/0x60 [ 191.901422][ T6676] exc_page_fault+0x65/0xc0 [ 191.901443][ T6676] asm_exc_page_fault+0x2b/0x30 [ 191.901466][ T6676] RIP: 0033:0x7fbc2f0514f7 [ 191.901481][ T6676] Code: e8 8e fa ff ff 89 f2 48 8d 3d 05 43 1b 00 48 8d 35 5f f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 191.901497][ T6676] RSP: 002b:00007fbc2ff66120 EFLAGS: 00010202 [ 191.901514][ T6676] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbc2f19af79 [ 191.901526][ T6676] RDX: 00007fbc2ff66140 RSI: 00007fbc2ff66270 RDI: 000000000000000b [ 191.901539][ T6676] RBP: 00007fbc2f2316e0 R08: 0000000000000000 R09: 0000000000000000 [ 191.901550][ T6676] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 191.901561][ T6676] R13: 00007fbc2f416038 R14: 00007fbc2f415fa0 R15: 00007ffc796a9008 [ 191.901577][ T6676] [ 191.901584][ T6676] memory: usage 303932kB, limit 307200kB, failcnt 23105 [ 192.239878][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 192.320745][ T6676] memory+swap: usage 406408kB, limit 9007199254740988kB, failcnt 0 [ 192.351385][ T31] usb 2-1: device descriptor read/8, error -71 [ 192.378866][ T6676] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 192.407295][ T6676] Memory cgroup stats for /syz2: [ 192.407465][ T6676] cache 289976320 [ 192.416277][ T6676] rss 471040 [ 192.427989][ T6676] rss_huge 0 [ 192.438406][ T6676] shmem 285519872 [ 192.452247][ T6676] mapped_file 4325376 [ 192.456247][ T6676] dirty 0 [ 192.459197][ T6676] writeback 126976 [ 192.502070][ T31] usb 2-1: device descriptor read/8, error -71 [ 192.517503][ T6676] workingset_refault_anon 173 [ 192.534281][ T6676] workingset_refault_file 2485 [ 192.569443][ T6676] swap 127246336 [ 192.578828][ T6676] swapcached 749568 [ 192.588801][ T6676] pgpgin 343726 [ 192.599873][ T6676] pgpgout 275293 [ 192.613556][ T6676] pgfault 186027 [ 192.617219][ T6676] pgmajfault 52 [ 192.631386][ T6676] inactive_anon 11145216 [ 192.639172][ T6676] active_anon 274509824 [ 192.643704][ T6676] inactive_file 0 [ 192.647354][ T6676] active_file 4456448 [ 192.651542][ T6676] unevictable 0 [ 192.655045][ T6676] hierarchical_memory_limit 314572800 [ 192.660604][ T6676] hierarchical_memsw_limit 9223372036854771712 [ 192.666826][ T6676] total_cache 289976320 [ 192.672756][ T6676] total_rss 471040 [ 192.676572][ T6676] total_rss_huge 0 [ 192.680773][ T6676] total_shmem 285519872 [ 192.685019][ T6676] total_mapped_file 4325376 [ 192.689574][ T6676] total_dirty 0 [ 192.693341][ T6676] total_writeback 126976 [ 192.697654][ T6676] total_workingset_refault_anon 173 [ 192.703555][ T36] audit: type=1400 audit(2000008822.323:27145): avc: denied { mount } for pid=6780 comm="syz.4.2301" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 192.726419][ T6676] total_workingset_refault_file 2485 [ 192.731885][ T6676] total_swap 127246336 [ 192.735973][ T6676] total_swapcached 749568 [ 192.740589][ T6676] total_pgpgin 343726 [ 192.744612][ T6676] total_pgpgout 275293 [ 192.748685][ T6676] total_pgfault 186027 [ 192.754029][ T6676] total_pgmajfault 52 [ 192.758067][ T6676] total_inactive_anon 11145216 [ 192.763055][ T6676] total_active_anon 274509824 [ 192.767770][ T6676] total_inactive_file 0 [ 192.771958][ T6676] total_active_file 4456448 [ 192.776543][ T6676] total_unevictable 0 [ 192.780554][ T6676] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2257,pid=6629,uid=0 [ 192.795423][ T6676] Memory cgroup out of memory: Killed process 6629 (syz.2.2257) total-vm:90484kB, anon-rss:1404kB, file-rss:53552kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 192.949874][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 192.970799][ T31] usb 2-1: device descriptor read/8, error -71 [ 193.040046][ T6630] syz.2.2257 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 193.056722][ T6630] CPU: 1 UID: 0 PID: 6630 Comm: syz.2.2257 Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 193.056750][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 193.056762][ T6630] Call Trace: [ 193.056769][ T6630] [ 193.056776][ T6630] __dump_stack+0x21/0x30 [ 193.056805][ T6630] dump_stack_lvl+0x140/0x1c0 [ 193.056829][ T6630] ? __cfi_dump_stack_lvl+0x10/0x10 [ 193.056852][ T6630] ? ___ratelimit+0x40e/0x5b0 [ 193.056871][ T6630] dump_stack+0x19/0x20 [ 193.056893][ T6630] dump_header+0xd6/0x490 [ 193.056944][ T6630] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 193.056965][ T6630] oom_kill_process+0x35d/0x640 [ 193.056994][ T6630] out_of_memory+0x624/0xa30 [ 193.057021][ T6630] ? __cfi_out_of_memory+0x10/0x10 [ 193.057046][ T6630] ? mutex_lock_killable+0x97/0x1d0 [ 193.057079][ T6630] ? __cfi_mutex_lock_killable+0x10/0x10 [ 193.057101][ T6630] mem_cgroup_out_of_memory+0x2c8/0x390 [ 193.057124][ T6630] ? css_next_descendant_pre+0x202/0x230 [ 193.057142][ T6630] ? drain_obj_stock+0xed0/0xed0 [ 193.057166][ T6630] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 193.057189][ T6630] try_charge_memcg+0x91c/0xe10 [ 193.057208][ T6630] ? __cfi_try_charge_memcg+0x10/0x10 [ 193.057244][ T6630] ? __alloc_pages_noprof+0x35f/0x7e0 [ 193.057264][ T6630] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 193.057286][ T6630] __mem_cgroup_charge+0xfc/0x420 [ 193.057307][ T6630] ? folio_add_lru+0x116/0x400 [ 193.057336][ T6630] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 193.057361][ T6630] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 193.057393][ T6630] ? put_swap_device+0x130/0x130 [ 193.057421][ T6630] ? shmem_huge_global_enabled+0x2da/0x360 [ 193.057450][ T6630] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 193.057478][ T6630] ? __kasan_check_write+0x18/0x20 [ 193.057501][ T6630] ? _raw_spin_lock+0x92/0x120 [ 193.057528][ T6630] shmem_get_folio_gfp+0x607/0x1390 [ 193.057557][ T6630] ? shmem_get_folio+0xc0/0xc0 [ 193.057582][ T6630] ? follow_page_pte+0x90f/0xbc0 [ 193.057602][ T6630] ? inode_to_bdi+0x6d/0x100 [ 193.057624][ T6630] shmem_write_begin+0xf4/0x270 [ 193.057652][ T6630] generic_perform_write+0x328/0x970 [ 193.057675][ T6630] ? __cfi_generic_perform_write+0x10/0x10 [ 193.057696][ T6630] ? down_write+0xee/0x2b0 [ 193.057730][ T6630] ? file_update_time+0xa3/0x210 [ 193.057749][ T6630] shmem_file_write_iter+0x105/0x130 [ 193.057769][ T6630] __kernel_write_iter+0x42c/0x8a0 [ 193.057793][ T6630] ? __cfi___kernel_write_iter+0x10/0x10 [ 193.057815][ T6630] ? get_dump_page+0x165/0x220 [ 193.057832][ T6630] ? __asan_memset+0x39/0x50 [ 193.057853][ T6630] ? iov_iter_bvec+0xc0/0x180 [ 193.057895][ T6630] dump_user_range+0xb8b/0xe60 [ 193.057928][ T6630] ? __cfi_dump_user_range+0x10/0x10 [ 193.057951][ T6630] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 193.057977][ T6630] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 193.058002][ T6630] ? elf_core_dump+0x24c0/0x3960 [ 193.058040][ T6630] elf_core_dump+0x2e7e/0x3960 [ 193.058086][ T6630] ? __cfi_elf_core_dump+0x10/0x10 [ 193.058139][ T6630] ? dump_interrupted+0xf0/0xf0 [ 193.058158][ T6630] ? filp_open+0x199/0x1f0 [ 193.058175][ T6630] ? 0xffffffffff600000 [ 193.058190][ T6630] do_coredump+0x208d/0x2fe0 [ 193.058213][ T6630] ? __cfi_do_coredump+0x10/0x10 [ 193.058233][ T6630] ? asm_exc_page_fault+0x2b/0x30 [ 193.058263][ T6630] ? __kasan_slab_free+0x6a/0x80 [ 193.058287][ T6630] ? kmem_cache_free+0x1bd/0x4f0 [ 193.058309][ T6630] ? get_signal+0xa74/0x14e0 [ 193.058330][ T6630] get_signal+0x11f8/0x14e0 [ 193.058353][ T6630] arch_do_signal_or_restart+0xbc/0x760 [ 193.058378][ T6630] ? fixup_vdso_exception+0x20d/0x310 [ 193.058404][ T6630] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 193.058433][ T6630] irqentry_exit_to_user_mode+0x4d/0xb0 [ 193.058456][ T6630] irqentry_exit+0x16/0x60 [ 193.058477][ T6630] exc_page_fault+0x65/0xc0 [ 193.058498][ T6630] asm_exc_page_fault+0x2b/0x30 [ 193.058520][ T6630] RIP: 0033:0x7fbc2f0514f7 [ 193.058536][ T6630] Code: e8 8e fa ff ff 89 f2 48 8d 3d 05 43 1b 00 48 8d 35 5f f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 193.058552][ T6630] RSP: 002b:00007fbc2ff66120 EFLAGS: 00010202 [ 193.058569][ T6630] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbc2f19af79 [ 193.058580][ T6630] RDX: 00007fbc2ff66140 RSI: 00007fbc2ff66270 RDI: 000000000000000b [ 193.058590][ T6630] RBP: 00007fbc2f2316e0 R08: 0000000000000000 R09: 0000000000000000 [ 193.058600][ T6630] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 193.058610][ T6630] R13: 00007fbc2f416038 R14: 00007fbc2f415fa0 R15: 00007ffc796a9008 [ 193.058624][ T6630] [ 193.058630][ T6630] memory: usage 307200kB, limit 307200kB, failcnt 27250 [ 193.517517][ T6630] memory+swap: usage 427760kB, limit 9007199254740988kB, failcnt 0 [ 193.533328][ T6630] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 193.541075][ T31] usb 2-1: device descriptor read/8, error -71 [ 193.547315][ T6630] Memory cgroup stats for /syz2: [ 193.547701][ T6630] cache 313425920 [ 193.557535][ T4687] bridge_slave_1: left allmulticast mode [ 193.563291][ T4687] bridge_slave_1: left promiscuous mode [ 193.570768][ T4687] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.579551][ T6630] rss 659456 [ 193.583169][ T4687] bridge_slave_0: left allmulticast mode [ 193.588812][ T4687] bridge_slave_0: left promiscuous mode [ 193.599976][ T6630] rss_huge 0 [ 193.603197][ T6630] shmem 313425920 [ 193.607220][ T4687] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.614525][ T6630] mapped_file 0 [ 193.618072][ T6630] dirty 0 [ 193.626365][ T6630] writeback 0 [ 193.637678][ T6630] workingset_refault_anon 222 [ 193.642664][ T6630] workingset_refault_file 2517 [ 193.647502][ T6630] swap 117436416 [ 193.650121][ T31] usb usb2-port1: unable to enumerate USB device [ 193.651688][ T6630] swapcached 765952 [ 193.671426][ T6630] pgpgin 350755 [ 193.674899][ T6630] pgpgout 276584 [ 193.678447][ T6630] pgfault 186286 [ 193.699830][ T6630] pgmajfault 70 [ 193.706367][ T4687] tipc: Left network mode [ 193.711157][ T6630] inactive_anon 303726592 [ 193.729829][ T6630] active_anon 10543104 [ 193.739821][ T6630] inactive_file 0 [ 193.743486][ T6630] active_file 0 [ 193.777497][ T6630] unevictable 0 [ 193.789604][ T6630] hierarchical_memory_limit 314572800 [ 193.795985][ T6630] hierarchical_memsw_limit 9223372036854771712 [ 193.809830][ T6630] total_cache 313425920 [ 193.820658][ T6630] total_rss 659456 [ 193.824921][ T6630] total_rss_huge 0 [ 193.835864][ T6630] total_shmem 313425920 [ 193.849811][ T6630] total_mapped_file 0 [ 193.855912][ T6630] total_dirty 0 [ 193.860397][ T6630] total_writeback 0 [ 193.864242][ T6630] total_workingset_refault_anon 222 [ 193.869447][ T6630] total_workingset_refault_file 2517 [ 193.875197][ T6630] total_swap 117436416 [ 193.879368][ T6630] total_swapcached 765952 [ 193.884056][ T6630] total_pgpgin 350755 [ 193.888354][ T6630] total_pgpgout 276584 [ 193.893247][ T6630] total_pgfault 186286 [ 193.897571][ T36] audit: type=1326 audit(2000008823.523:27146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6793 comm="syz.4.2305" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72539af79 code=0x0 [ 193.920518][ T6630] total_pgmajfault 70 [ 193.924508][ T6630] total_inactive_anon 303726592 [ 193.929366][ T6630] total_active_anon 10543104 [ 193.934707][ T6630] total_inactive_file 0 [ 193.939279][ T6630] total_active_file 0 [ 193.943706][ T6630] total_unevictable 0 [ 193.948067][ T6630] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2257,pid=6630,uid=0 [ 193.963368][ T6630] Memory cgroup out of memory: Killed process 6630 (syz.2.2257) total-vm:90484kB, anon-rss:1788kB, file-rss:53552kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 194.299815][ T36] audit: type=1400 audit(2000008823.923:27147): avc: denied { shutdown } for pid=6800 comm="syz.2.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 194.742235][ T6643] syz.2.2257 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 194.758251][ T6643] CPU: 0 UID: 0 PID: 6643 Comm: syz.2.2257 Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 194.758284][ T6643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 194.758295][ T6643] Call Trace: [ 194.758302][ T6643] [ 194.758309][ T6643] __dump_stack+0x21/0x30 [ 194.758339][ T6643] dump_stack_lvl+0x140/0x1c0 [ 194.758362][ T6643] ? __cfi_dump_stack_lvl+0x10/0x10 [ 194.758384][ T6643] ? ___ratelimit+0x40e/0x5b0 [ 194.758403][ T6643] dump_stack+0x19/0x20 [ 194.758425][ T6643] dump_header+0xd6/0x490 [ 194.758445][ T6643] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 194.758464][ T6643] oom_kill_process+0x35d/0x640 [ 194.758491][ T6643] out_of_memory+0x624/0xa30 [ 194.758517][ T6643] ? __cfi_out_of_memory+0x10/0x10 [ 194.758543][ T6643] ? mutex_lock_killable+0x97/0x1d0 [ 194.758564][ T6643] ? __cfi_mutex_lock_killable+0x10/0x10 [ 194.758586][ T6643] mem_cgroup_out_of_memory+0x2c8/0x390 [ 194.758607][ T6643] ? css_next_descendant_pre+0x202/0x230 [ 194.758624][ T6643] ? drain_obj_stock+0xed0/0xed0 [ 194.758645][ T6643] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 194.758664][ T6643] try_charge_memcg+0x91c/0xe10 [ 194.758681][ T6643] ? __cfi_try_charge_memcg+0x10/0x10 [ 194.758697][ T6643] ? __alloc_pages_noprof+0x35f/0x7e0 [ 194.758714][ T6643] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 194.758732][ T6643] __mem_cgroup_charge+0xfc/0x420 [ 194.758750][ T6643] ? folio_add_lru+0x116/0x400 [ 194.758775][ T6643] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 194.758796][ T6643] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 194.758822][ T6643] ? put_swap_device+0x130/0x130 [ 194.758845][ T6643] ? shmem_huge_global_enabled+0x2da/0x360 [ 194.758868][ T6643] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 194.758891][ T6643] ? __kasan_check_write+0x18/0x20 [ 194.758911][ T6643] ? _raw_spin_lock+0x92/0x120 [ 194.758934][ T6643] shmem_get_folio_gfp+0x607/0x1390 [ 194.758958][ T6643] ? shmem_get_folio+0xc0/0xc0 [ 194.758978][ T6643] ? follow_page_pte+0x90f/0xbc0 [ 194.758995][ T6643] ? inode_to_bdi+0x6d/0x100 [ 194.759019][ T6643] shmem_write_begin+0xf4/0x270 [ 194.759043][ T6643] generic_perform_write+0x328/0x970 [ 194.759062][ T6643] ? __cfi_generic_perform_write+0x10/0x10 [ 194.759078][ T6643] ? down_write+0xee/0x2b0 [ 194.759101][ T6643] ? file_update_time+0xa3/0x210 [ 194.759117][ T6643] shmem_file_write_iter+0x105/0x130 [ 194.759134][ T6643] __kernel_write_iter+0x42c/0x8a0 [ 194.759155][ T6643] ? __cfi___kernel_write_iter+0x10/0x10 [ 194.759174][ T6643] ? get_dump_page+0x165/0x220 [ 194.759189][ T6643] ? __asan_memset+0x39/0x50 [ 194.759207][ T6643] ? iov_iter_bvec+0xc0/0x180 [ 194.759229][ T6643] dump_user_range+0xb8b/0xe60 [ 194.759250][ T6643] ? __cfi_dump_user_range+0x10/0x10 [ 194.759269][ T6643] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 194.759292][ T6643] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 194.759314][ T6643] ? elf_core_dump+0x24c0/0x3960 [ 194.759339][ T6643] elf_core_dump+0x2e7e/0x3960 [ 194.759365][ T6643] ? __cfi_elf_core_dump+0x10/0x10 [ 194.759394][ T6643] ? dump_interrupted+0xf0/0xf0 [ 194.759411][ T6643] ? filp_open+0x199/0x1f0 [ 194.759426][ T6643] ? 0xffffffffff600000 [ 194.759440][ T6643] do_coredump+0x208d/0x2fe0 [ 194.759461][ T6643] ? __cfi_do_coredump+0x10/0x10 [ 194.759480][ T6643] ? asm_exc_page_fault+0x2b/0x30 [ 194.759507][ T6643] ? __kasan_slab_free+0x6a/0x80 [ 194.759531][ T6643] ? kmem_cache_free+0x1bd/0x4f0 [ 194.759551][ T6643] ? get_signal+0xa74/0x14e0 [ 194.759571][ T6643] get_signal+0x11f8/0x14e0 [ 194.759592][ T6643] arch_do_signal_or_restart+0xbc/0x760 [ 194.759615][ T6643] ? fixup_vdso_exception+0x20d/0x310 [ 194.759639][ T6643] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 194.759665][ T6643] irqentry_exit_to_user_mode+0x4d/0xb0 [ 194.759685][ T6643] irqentry_exit+0x16/0x60 [ 194.759703][ T6643] exc_page_fault+0x65/0xc0 [ 194.759721][ T6643] asm_exc_page_fault+0x2b/0x30 [ 194.759741][ T6643] RIP: 0033:0x7fbc2f0514f7 [ 194.759755][ T6643] Code: e8 8e fa ff ff 89 f2 48 8d 3d 05 43 1b 00 48 8d 35 5f f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 194.759769][ T6643] RSP: 002b:00007fbc2ff66120 EFLAGS: 00010202 [ 194.759785][ T6643] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbc2f19af79 [ 194.759797][ T6643] RDX: 00007fbc2ff66140 RSI: 00007fbc2ff66270 RDI: 000000000000000b [ 194.759809][ T6643] RBP: 00007fbc2f2316e0 R08: 0000000000000000 R09: 0000000000000000 [ 194.759819][ T6643] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 194.759829][ T6643] R13: 00007fbc2f416038 R14: 00007fbc2f415fa0 R15: 00007ffc796a9008 [ 194.759845][ T6643] [ 195.208376][ T6643] memory: usage 307200kB, limit 307200kB, failcnt 32492 [ 195.215389][ T6643] memory+swap: usage 431380kB, limit 9007199254740988kB, failcnt 0 [ 195.223457][ T6643] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 195.230412][ T6643] Memory cgroup stats for /syz2: [ 195.230555][ T6643] cache 313692160 [ 195.239192][ T6643] rss 45056 [ 195.242368][ T6643] rss_huge 0 [ 195.245602][ T6643] shmem 313688064 [ 195.249230][ T6643] mapped_file 0 [ 195.252774][ T6643] dirty 0 [ 195.255733][ T6643] writeback 0 [ 195.259036][ T6643] workingset_refault_anon 222 [ 195.263839][ T6643] workingset_refault_file 3046 [ 195.268603][ T6643] swap 127160320 [ 195.272272][ T6643] swapcached 835584 [ 195.276105][ T6643] pgpgin 377444 [ 195.279557][ T6643] pgpgout 303199 [ 195.283155][ T6643] pgfault 188066 [ 195.286717][ T6643] pgmajfault 76 [ 195.290195][ T6643] inactive_anon 114282496 [ 195.294546][ T6643] active_anon 200286208 [ 195.298695][ T6643] inactive_file 0 [ 195.302378][ T6643] active_file 4096 [ 195.306109][ T6643] unevictable 0 [ 195.309575][ T6643] hierarchical_memory_limit 314572800 [ 195.315099][ T6643] hierarchical_memsw_limit 9223372036854771712 [ 195.321694][ T6643] total_cache 313692160 [ 195.326285][ T6643] total_rss 45056 [ 195.330059][ T6643] total_rss_huge 0 [ 195.333809][ T6643] total_shmem 313688064 [ 195.337979][ T6643] total_mapped_file 0 [ 195.342138][ T6643] total_dirty 0 [ 195.343000][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2310'. [ 195.345611][ T6643] total_writeback 0 [ 195.345619][ T6643] total_workingset_refault_anon 222 [ 195.345627][ T6643] total_workingset_refault_file 3046 [ 195.369105][ T6643] total_swap 127160320 [ 195.373289][ T6643] total_swapcached 835584 [ 195.377629][ T6643] total_pgpgin 377444 [ 195.381773][ T6643] total_pgpgout 303199 [ 195.386576][ T6643] total_pgfault 188066 [ 195.390980][ T6643] total_pgmajfault 76 [ 195.395232][ T6643] total_inactive_anon 114282496 [ 195.400123][ T6643] total_active_anon 200286208 [ 195.404799][ T6643] total_inactive_file 0 [ 195.408958][ T6643] total_active_file 4096 [ 195.413233][ T6643] total_unevictable 0 [ 195.417212][ T6643] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2257,pid=6632,uid=0 [ 195.432050][ T6643] Memory cgroup out of memory: Killed process 6632 (syz.2.2257) total-vm:90484kB, anon-rss:1272kB, file-rss:53632kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 195.462141][ T6643] syz.2.2257 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 195.472029][ T6643] CPU: 1 UID: 0 PID: 6643 Comm: syz.2.2257 Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 195.472057][ T6643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 195.472068][ T6643] Call Trace: [ 195.472075][ T6643] [ 195.472082][ T6643] __dump_stack+0x21/0x30 [ 195.472110][ T6643] dump_stack_lvl+0x140/0x1c0 [ 195.472133][ T6643] ? __cfi_dump_stack_lvl+0x10/0x10 [ 195.472157][ T6643] ? ___ratelimit+0x40e/0x5b0 [ 195.472176][ T6643] dump_stack+0x19/0x20 [ 195.472199][ T6643] dump_header+0xd6/0x490 [ 195.472220][ T6643] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 195.472239][ T6643] oom_kill_process+0x35d/0x640 [ 195.472268][ T6643] out_of_memory+0x624/0xa30 [ 195.472296][ T6643] ? __cfi_out_of_memory+0x10/0x10 [ 195.472322][ T6643] ? mutex_lock_killable+0x115/0x1d0 [ 195.472345][ T6643] ? __cfi_mutex_lock_killable+0x10/0x10 [ 195.472369][ T6643] mem_cgroup_out_of_memory+0x2c8/0x390 [ 195.472395][ T6643] ? css_next_descendant_pre+0x202/0x230 [ 195.472416][ T6643] ? drain_obj_stock+0xed0/0xed0 [ 195.472443][ T6643] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 195.472468][ T6643] try_charge_memcg+0x91c/0xe10 [ 195.472489][ T6643] ? __cfi_try_charge_memcg+0x10/0x10 [ 195.472509][ T6643] ? __alloc_pages_noprof+0x35f/0x7e0 [ 195.472531][ T6643] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 195.472553][ T6643] __mem_cgroup_charge+0xfc/0x420 [ 195.472576][ T6643] ? folio_add_lru+0x116/0x400 [ 195.472607][ T6643] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 195.472632][ T6643] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 195.472663][ T6643] ? put_swap_device+0x130/0x130 [ 195.472699][ T6643] ? shmem_huge_global_enabled+0x2da/0x360 [ 195.472727][ T6643] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 195.472753][ T6643] ? __kasan_check_write+0x18/0x20 [ 195.472776][ T6643] ? _raw_spin_lock+0x92/0x120 [ 195.472803][ T6643] shmem_get_folio_gfp+0x607/0x1390 [ 195.472831][ T6643] ? shmem_get_folio+0xc0/0xc0 [ 195.472857][ T6643] ? __kasan_check_write+0x18/0x20 [ 195.472879][ T6643] ? inode_to_bdi+0x6d/0x100 [ 195.472901][ T6643] shmem_write_begin+0xf4/0x270 [ 195.472939][ T6643] generic_perform_write+0x328/0x970 [ 195.472959][ T6643] ? inode_update_timestamps+0x4f0/0x700 [ 195.472979][ T6643] ? __cfi_generic_perform_write+0x10/0x10 [ 195.472997][ T6643] ? down_write+0xee/0x2b0 [ 195.473017][ T6643] ? mnt_get_write_access_file+0x1af/0x3b0 [ 195.473035][ T6643] ? mnt_put_write_access_file+0xc2/0x100 [ 195.473053][ T6643] ? file_update_time+0x1de/0x210 [ 195.473072][ T6643] shmem_file_write_iter+0x105/0x130 [ 195.473091][ T6643] __kernel_write_iter+0x42c/0x8a0 [ 195.473114][ T6643] ? __cfi___kernel_write_iter+0x10/0x10 [ 195.473135][ T6643] ? get_dump_page+0x165/0x220 [ 195.473153][ T6643] ? __asan_memset+0x39/0x50 [ 195.473174][ T6643] ? iov_iter_bvec+0xc0/0x180 [ 195.473198][ T6643] dump_user_range+0xb8b/0xe60 [ 195.473224][ T6643] ? __cfi_dump_user_range+0x10/0x10 [ 195.473245][ T6643] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 195.473276][ T6643] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 195.473300][ T6643] ? elf_core_dump+0x24c0/0x3960 [ 195.473327][ T6643] elf_core_dump+0x2e7e/0x3960 [ 195.473357][ T6643] ? __cfi_elf_core_dump+0x10/0x10 [ 195.473390][ T6643] ? dump_interrupted+0xf0/0xf0 [ 195.473410][ T6643] ? filp_open+0x199/0x1f0 [ 195.473428][ T6643] ? 0xffffffffff600000 [ 195.473444][ T6643] do_coredump+0x208d/0x2fe0 [ 195.473467][ T6643] ? __cfi_do_coredump+0x10/0x10 [ 195.473488][ T6643] ? asm_exc_page_fault+0x2b/0x30 [ 195.473520][ T6643] ? __kasan_slab_free+0x6a/0x80 [ 195.473544][ T6643] ? kmem_cache_free+0x1bd/0x4f0 [ 195.473567][ T6643] ? get_signal+0xa74/0x14e0 [ 195.473590][ T6643] get_signal+0x11f8/0x14e0 [ 195.473613][ T6643] arch_do_signal_or_restart+0xbc/0x760 [ 195.473639][ T6643] ? fixup_vdso_exception+0x20d/0x310 [ 195.473665][ T6643] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 195.473704][ T6643] irqentry_exit_to_user_mode+0x4d/0xb0 [ 195.473727][ T6643] irqentry_exit+0x16/0x60 [ 195.473747][ T6643] exc_page_fault+0x65/0xc0 [ 195.473769][ T6643] asm_exc_page_fault+0x2b/0x30 [ 195.473792][ T6643] RIP: 0033:0x7fbc2f0514f7 [ 195.473807][ T6643] Code: e8 8e fa ff ff 89 f2 48 8d 3d 05 43 1b 00 48 8d 35 5f f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 195.473823][ T6643] RSP: 002b:00007fbc2ff66120 EFLAGS: 00010202 [ 195.473840][ T6643] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbc2f19af79 [ 195.473852][ T6643] RDX: 00007fbc2ff66140 RSI: 00007fbc2ff66270 RDI: 000000000000000b [ 195.473865][ T6643] RBP: 00007fbc2f2316e0 R08: 0000000000000000 R09: 0000000000000000 [ 195.473876][ T6643] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 195.473888][ T6643] R13: 00007fbc2f416038 R14: 00007fbc2f415fa0 R15: 00007ffc796a9008 [ 195.473904][ T6643] [ 195.473911][ T6643] memory: usage 307200kB, limit 307200kB, failcnt 32701 [ 195.945672][ T6643] memory+swap: usage 396872kB, limit 9007199254740988kB, failcnt 0 [ 195.953841][ T6643] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 195.960761][ T6643] Memory cgroup stats for /syz2: [ 195.960950][ T6643] cache 293552128 [ 195.969543][ T6643] rss 45056 [ 195.972695][ T6643] rss_huge 0 [ 195.975931][ T6643] shmem 293552128 [ 195.979574][ T6643] mapped_file 0 [ 195.983051][ T6643] dirty 0 [ 195.985993][ T6643] writeback 0 [ 195.989270][ T6643] workingset_refault_anon 222 [ 195.993986][ T6643] workingset_refault_file 3046 [ 195.998754][ T6643] swap 111968256 [ 196.002442][ T6643] swapcached 831488 [ 196.006341][ T6643] pgpgin 377446 [ 196.009847][ T6643] pgpgout 308119 [ 196.013402][ T6643] pgfault 188066 [ 196.016954][ T6643] pgmajfault 76 [ 196.020439][ T6643] inactive_anon 104411136 [ 196.024779][ T6643] active_anon 190017536 [ 196.028929][ T6643] inactive_file 0 [ 196.032656][ T6643] active_file 0 [ 196.036120][ T6643] unevictable 0 [ 196.039567][ T6643] hierarchical_memory_limit 314572800 [ 196.044999][ T6643] hierarchical_memsw_limit 9223372036854771712 [ 196.051189][ T6643] total_cache 293552128 [ 196.055338][ T6643] total_rss 45056 [ 196.058973][ T6643] total_rss_huge 0 [ 196.062730][ T66] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 196.063258][ T6643] total_shmem 293552128 [ 196.074474][ T6643] total_mapped_file 0 [ 196.078440][ T6643] total_dirty 0 [ 196.081930][ T6643] total_writeback 0 [ 196.085741][ T6643] total_workingset_refault_anon 222 [ 196.090954][ T6643] total_workingset_refault_file 3046 [ 196.096242][ T6643] total_swap 111968256 [ 196.100332][ T6643] total_swapcached 831488 [ 196.104677][ T6643] total_pgpgin 377446 [ 196.108645][ T6643] total_pgpgout 308119 [ 196.112791][ T6643] total_pgfault 188066 [ 196.116890][ T6643] total_pgmajfault 76 [ 196.120951][ T6643] total_inactive_anon 104411136 [ 196.125815][ T6643] total_active_anon 190017536 [ 196.130515][ T6643] total_inactive_file 0 [ 196.134671][ T6643] total_active_file 0 [ 196.138659][ T6643] total_unevictable 0 [ 196.142701][ T6643] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2257,pid=6628,uid=0 [ 196.157732][ T6643] Memory cgroup out of memory: Killed process 6628 (syz.2.2257) total-vm:90484kB, anon-rss:1240kB, file-rss:53720kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 196.229857][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 196.241010][ T66] usb 2-1: config 0 interface 0 has no altsetting 0 [ 196.247777][ T66] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 196.259128][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.272000][ T66] usb 2-1: config 0 descriptor?? [ 196.274053][ T6666] syz.2.2257 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 196.329850][ T6666] CPU: 0 UID: 0 PID: 6666 Comm: syz.2.2257 Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 196.329881][ T6666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 196.329893][ T6666] Call Trace: [ 196.329900][ T6666] [ 196.329907][ T6666] __dump_stack+0x21/0x30 [ 196.329940][ T6666] dump_stack_lvl+0x140/0x1c0 [ 196.329963][ T6666] ? __cfi_dump_stack_lvl+0x10/0x10 [ 196.329984][ T6666] ? ___ratelimit+0x40e/0x5b0 [ 196.330004][ T6666] dump_stack+0x19/0x20 [ 196.330024][ T6666] dump_header+0xd6/0x490 [ 196.330044][ T6666] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 196.330063][ T6666] oom_kill_process+0x35d/0x640 [ 196.330090][ T6666] out_of_memory+0x624/0xa30 [ 196.330115][ T6666] ? __cfi_out_of_memory+0x10/0x10 [ 196.330138][ T6666] ? mutex_lock_killable+0x115/0x1d0 [ 196.330159][ T6666] ? __cfi_mutex_lock_killable+0x10/0x10 [ 196.330181][ T6666] mem_cgroup_out_of_memory+0x2c8/0x390 [ 196.330204][ T6666] ? css_next_descendant_pre+0x202/0x230 [ 196.330223][ T6666] ? drain_obj_stock+0xed0/0xed0 [ 196.330247][ T6666] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 196.330270][ T6666] try_charge_memcg+0x91c/0xe10 [ 196.330289][ T6666] ? __cfi_try_charge_memcg+0x10/0x10 [ 196.330307][ T6666] ? __alloc_pages_noprof+0x35f/0x7e0 [ 196.330327][ T6666] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 196.330347][ T6666] __mem_cgroup_charge+0xfc/0x420 [ 196.330368][ T6666] ? folio_add_lru+0x116/0x400 [ 196.330395][ T6666] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 196.330417][ T6666] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 196.330448][ T6666] ? put_swap_device+0x130/0x130 [ 196.330474][ T6666] ? shmem_huge_global_enabled+0x2da/0x360 [ 196.330500][ T6666] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 196.330524][ T6666] ? __kasan_check_write+0x18/0x20 [ 196.330546][ T6666] ? _raw_spin_lock+0x92/0x120 [ 196.330572][ T6666] shmem_get_folio_gfp+0x607/0x1390 [ 196.330618][ T6666] ? shmem_get_folio+0xc0/0xc0 [ 196.330648][ T6666] ? follow_page_pte+0x90f/0xbc0 [ 196.330668][ T6666] ? inode_to_bdi+0x6d/0x100 [ 196.330690][ T6666] shmem_write_begin+0xf4/0x270 [ 196.330718][ T6666] generic_perform_write+0x328/0x970 [ 196.330741][ T6666] ? __cfi_generic_perform_write+0x10/0x10 [ 196.330760][ T6666] ? down_write+0xee/0x2b0 [ 196.330784][ T6666] ? file_update_time+0xa3/0x210 [ 196.330805][ T6666] shmem_file_write_iter+0x105/0x130 [ 196.330826][ T6666] __kernel_write_iter+0x42c/0x8a0 [ 196.330852][ T6666] ? __cfi___kernel_write_iter+0x10/0x10 [ 196.330875][ T6666] ? get_dump_page+0x165/0x220 [ 196.330893][ T6666] ? __asan_memset+0x39/0x50 [ 196.330916][ T6666] ? iov_iter_bvec+0xc0/0x180 [ 196.330942][ T6666] dump_user_range+0xb8b/0xe60 [ 196.330969][ T6666] ? __cfi_dump_user_range+0x10/0x10 [ 196.330992][ T6666] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 196.331019][ T6666] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 196.331045][ T6666] ? elf_core_dump+0x24c0/0x3960 [ 196.331075][ T6666] elf_core_dump+0x2e7e/0x3960 [ 196.331107][ T6666] ? __cfi_elf_core_dump+0x10/0x10 [ 196.331142][ T6666] ? dump_interrupted+0xf0/0xf0 [ 196.331163][ T6666] ? filp_open+0x199/0x1f0 [ 196.331181][ T6666] ? 0xffffffffff600000 [ 196.331197][ T6666] do_coredump+0x208d/0x2fe0 [ 196.331223][ T6666] ? __cfi_do_coredump+0x10/0x10 [ 196.331245][ T6666] ? asm_exc_page_fault+0x2b/0x30 [ 196.331279][ T6666] ? __kasan_slab_free+0x6a/0x80 [ 196.331307][ T6666] ? kmem_cache_free+0x1bd/0x4f0 [ 196.331330][ T6666] ? get_signal+0xa74/0x14e0 [ 196.331354][ T6666] get_signal+0x11f8/0x14e0 [ 196.331380][ T6666] arch_do_signal_or_restart+0xbc/0x760 [ 196.331407][ T6666] ? fixup_vdso_exception+0x20d/0x310 [ 196.331437][ T6666] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 196.331468][ T6666] irqentry_exit_to_user_mode+0x4d/0xb0 [ 196.331493][ T6666] irqentry_exit+0x16/0x60 [ 196.331514][ T6666] exc_page_fault+0x65/0xc0 [ 196.331537][ T6666] asm_exc_page_fault+0x2b/0x30 [ 196.331562][ T6666] RIP: 0033:0x7fbc2f0514f7 [ 196.331580][ T6666] Code: e8 8e fa ff ff 89 f2 48 8d 3d 05 43 1b 00 48 8d 35 5f f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 196.331597][ T6666] RSP: 002b:00007fbc2ff66120 EFLAGS: 00010202 [ 196.331616][ T6666] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbc2f19af79 [ 196.331630][ T6666] RDX: 00007fbc2ff66140 RSI: 00007fbc2ff66270 RDI: 000000000000000b [ 196.331651][ T6666] RBP: 00007fbc2f2316e0 R08: 0000000000000000 R09: 0000000000000000 [ 196.331664][ T6666] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 196.331678][ T6666] R13: 00007fbc2f416038 R14: 00007fbc2f415fa0 R15: 00007ffc796a9008 [ 196.331695][ T6666] [ 196.331761][ T6666] memory: usage 307032kB, limit 307200kB, failcnt 33905 [ 196.786506][ T6666] memory+swap: usage 415280kB, limit 9007199254740988kB, failcnt 0 [ 196.794472][ T6666] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 196.801355][ T6666] Memory cgroup stats for /syz2: [ 196.801503][ T6666] cache 313442304 [ 196.810302][ T6666] rss 106496 [ 196.813533][ T6666] rss_huge 0 [ 196.816807][ T6666] shmem 312979456 [ 196.839847][ T6666] mapped_file 331776 [ 196.843853][ T6666] dirty 0 [ 196.850628][ T6666] writeback 4096 [ 196.854216][ T6666] workingset_refault_anon 222 [ 196.858921][ T6666] workingset_refault_file 3159 [ 196.889832][ T6666] swap 111157248 [ 196.893445][ T6666] swapcached 733184 [ 196.897297][ T6666] pgpgin 386967 [ 196.972616][ T6666] pgpgout 312793 [ 196.976225][ T6666] pgfault 188709 [ 196.999958][ T6666] pgmajfault 77 [ 197.004325][ T6666] inactive_anon 124911616 [ 197.044791][ T6666] active_anon 187920384 [ 197.049968][ T66] hid-led 0003:1D34:0004.000D: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.1-1/input0 [ 197.133302][ T66] hid-led 0003:1D34:0004.000D: Dream Cheeky Webmail Notifier initialized [ 197.158479][ T6666] inactive_file 0 [ 197.189814][ T6666] active_file 462848 [ 197.214020][ T6666] unevictable 0 [ 197.217512][ T6666] hierarchical_memory_limit 314572800 [ 197.251134][ T6666] hierarchical_memsw_limit 9223372036854771712 [ 197.253830][ T31] usb 2-1: USB disconnect, device number 11 [ 197.257401][ T6666] total_cache 313442304 [ 197.257412][ T6666] total_rss 106496 [ 197.257420][ T6666] total_rss_huge 0 [ 197.257428][ T6666] total_shmem 312979456 [ 197.257436][ T6666] total_mapped_file 331776 [ 197.349924][ T6666] total_dirty 0 [ 197.380372][ T6666] total_writeback 4096 [ 197.384484][ T6666] total_workingset_refault_anon 222 [ 197.424807][ T6666] total_workingset_refault_file 3159 [ 197.462978][ T6666] total_swap 111157248 [ 197.467079][ T6666] total_swapcached 733184 [ 197.497472][ T6666] total_pgpgin 386967 [ 197.521287][ T6666] total_pgpgout 312793 [ 197.544111][ T6882] fuse: Unknown parameter 'bd' [ 197.549731][ T6666] total_pgfault 188709 [ 197.558795][ T6666] total_pgmajfault 77 [ 197.562975][ T6666] total_inactive_anon 124911616 [ 197.574872][ T6666] total_active_anon 187920384 [ 197.579633][ T6666] total_inactive_file 0 [ 197.580015][ T6884] bridge0: entered promiscuous mode [ 197.584601][ T6666] total_active_file 462848 [ 197.589029][ T6884] bridge0: entered allmulticast mode [ 197.594277][ T6666] total_unevictable 0 [ 197.602984][ T6666] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2257,pid=6643,uid=0 [ 197.617950][ T6666] Memory cgroup out of memory: Killed process 6643 (syz.2.2257) total-vm:90484kB, anon-rss:1384kB, file-rss:53668kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 197.925502][ T6072] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 198.000081][ T6072] CPU: 1 UID: 0 PID: 6072 Comm: syz-executor Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 198.000115][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 198.000127][ T6072] Call Trace: [ 198.000133][ T6072] [ 198.000140][ T6072] __dump_stack+0x21/0x30 [ 198.000170][ T6072] dump_stack_lvl+0x140/0x1c0 [ 198.000192][ T6072] ? __cfi_dump_stack_lvl+0x10/0x10 [ 198.000215][ T6072] ? ___ratelimit+0x40e/0x5b0 [ 198.000233][ T6072] dump_stack+0x19/0x20 [ 198.000254][ T6072] dump_header+0xd6/0x490 [ 198.000274][ T6072] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 198.000293][ T6072] oom_kill_process+0x35d/0x640 [ 198.000320][ T6072] out_of_memory+0x624/0xa30 [ 198.000346][ T6072] ? __cfi_out_of_memory+0x10/0x10 [ 198.000370][ T6072] ? mutex_lock_killable+0x97/0x1d0 [ 198.000391][ T6072] ? __cfi_mutex_lock_killable+0x10/0x10 [ 198.000412][ T6072] mem_cgroup_out_of_memory+0x2c8/0x390 [ 198.000435][ T6072] ? css_next_descendant_pre+0x202/0x230 [ 198.000455][ T6072] ? drain_obj_stock+0xed0/0xed0 [ 198.000498][ T6072] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 198.000521][ T6072] try_charge_memcg+0x91c/0xe10 [ 198.000557][ T6072] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 198.000583][ T6072] ? __cfi_try_charge_memcg+0x10/0x10 [ 198.000602][ T6072] ? page_cache_ra_order+0xb44/0xff0 [ 198.000632][ T6072] ? __alloc_pages_noprof+0x35f/0x7e0 [ 198.000654][ T6072] __mem_cgroup_charge+0xfc/0x420 [ 198.000676][ T6072] ? filemap_get_entry+0x41b/0x490 [ 198.000704][ T6072] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 198.000729][ T6072] filemap_add_folio+0x57/0x2d0 [ 198.000755][ T6072] __filemap_get_folio+0x5df/0xad0 [ 198.000784][ T6072] ? __cfi___filemap_get_folio+0x10/0x10 [ 198.000813][ T6072] ? filemap_map_pages+0x1666/0x1a10 [ 198.000832][ T6072] ? sched_clock_noinstr+0xd/0x30 [ 198.000853][ T6072] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 198.000872][ T6072] filemap_fault+0xb5f/0x1850 [ 198.000892][ T6072] ? __cfi_filemap_fault+0x10/0x10 [ 198.000908][ T6072] ? psi_task_switch+0x59e/0xa10 [ 198.000930][ T6072] ? __cfi_filemap_map_pages+0x10/0x10 [ 198.000949][ T6072] ? __switch_to_asm+0x3d/0x70 [ 198.000975][ T6072] ? __schedule+0x1357/0x1ea0 [ 198.000993][ T6072] do_pte_missing+0x9b3/0x44f0 [ 198.001024][ T6072] ? __sched_text_start+0x10/0x10 [ 198.001042][ T6072] ? enqueue_hrtimer+0x12f/0x2e0 [ 198.001069][ T6072] ? pte_marker_clear+0x1b0/0x1b0 [ 198.001096][ T6072] ? __kasan_check_write+0x18/0x20 [ 198.001120][ T6072] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 198.001146][ T6072] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 198.001175][ T6072] ? __pte_offset_map+0x1b0/0x230 [ 198.001197][ T6072] ? pte_offset_map_rw_nolock+0xba/0x110 [ 198.001220][ T6072] handle_mm_fault+0x11b8/0x1bf0 [ 198.001251][ T6072] ? __cfi_handle_mm_fault+0x10/0x10 [ 198.001276][ T6072] ? lock_vma_under_rcu+0x4d1/0x590 [ 198.001306][ T6072] ? __cfi___x64_sys_wait4+0x10/0x10 [ 198.001333][ T6072] do_user_addr_fault+0x963/0x11e0 [ 198.001362][ T6072] exc_page_fault+0x58/0xc0 [ 198.001383][ T6072] asm_exc_page_fault+0x2b/0x30 [ 198.001410][ T6072] RIP: 0033:0x7fbc2f069074 [ 198.001427][ T6072] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 c7 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 c6 ed 00 48 01 d1 [ 198.001444][ T6072] RSP: 002b:00007ffc796a9370 EFLAGS: 00010206 [ 198.001464][ T6072] RAX: 0000001b30324000 RBX: 0000000000000092 RCX: 0000000000030188 [ 198.001495][ T6072] RDX: 0000000007495c64 RSI: 00007ffc796a9400 RDI: 0000000000000001 [ 198.001509][ T6072] RBP: 00007ffc796a93ac R08: 000000001bcbc984 R09: 7fffffffffffffff [ 198.001523][ T6072] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 198.001535][ T6072] R13: 00000000000927c0 R14: 0000000000030340 R15: 00007ffc796a9400 [ 198.001551][ T6072] [ 198.001640][ T6072] memory: usage 284072kB, limit 307200kB, failcnt 41532 [ 198.109960][ T378] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 198.111826][ T6072] memory+swap: usage 405208kB, limit 9007199254740988kB, failcnt 0 [ 198.268129][ T378] usb 2-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 198.284133][ T6072] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 198.288986][ T36] audit: type=1326 audit(2000008827.908:27148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.4.2332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe72539af79 code=0x0 [ 198.294858][ T6072] Memory cgroup stats for [ 198.310561][ T378] usb 2-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 198.453036][ T378] usb 2-1: config 0 interface 0 has no altsetting 0 [ 198.459946][ T378] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 198.469226][ T378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.477725][ T6072] /syz2: [ 198.477847][ T6072] cache 292945920 [ 198.484642][ T378] usb 2-1: config 0 descriptor?? [ 198.489899][ T6893] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 198.501748][ T6072] rss 159744 [ 198.505055][ T6072] rss_huge 0 [ 198.508278][ T6072] shmem 290254848 [ 198.512231][ T6072] mapped_file 2621440 [ 198.516305][ T6072] dirty 0 [ 198.519303][ T6072] writeback 0 [ 198.523088][ T6072] workingset_refault_anon 222 [ 198.527828][ T6072] workingset_refault_file 4693 [ 198.532987][ T6072] swap 127991808 [ 198.536591][ T6072] swapcached 4096 [ 198.555439][ T6072] pgpgin 405721 [ 198.569770][ T6072] pgpgout 336705 [ 198.589314][ T6072] pgfault 190105 [ 198.614945][ T6072] pgmajfault 90 [ 198.636514][ T6072] inactive_anon 284864512 [ 198.664709][ T6072] active_anon 5406720 [ 198.694271][ T6072] inactive_file 2428928 [ 198.724789][ T6072] active_file 12288 [ 198.753354][ T6072] unevictable 0 [ 198.777568][ T6072] hierarchical_memory_limit 314572800 [ 198.812505][ T6072] hierarchical_memsw_limit 9223372036854771712 [ 198.857733][ T6072] total_cache 292945920 [ 198.890423][ T6072] total_rss 159744 [ 198.904260][ T378] dragonrise 0003:0079:0006.000E: hidraw0: USB HID v0.04 Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0 [ 198.910270][ T6072] total_rss_huge 0 [ 198.925333][ T378] dragonrise 0003:0079:0006.000E: no inputs found [ 198.938507][ T378] dragonrise 0003:0079:0006.000E: force feedback init failed [ 198.945973][ T6072] total_shmem 290254848 [ 198.970585][ T6072] total_mapped_file 2621440 [ 198.988239][ T6072] total_dirty 0 [ 199.001586][ T6072] total_writeback 0 [ 199.015157][ T6072] total_workingset_refault_anon 222 [ 199.033095][ T6072] total_workingset_refault_file 4693 [ 199.056573][ T6072] total_swap 127991808 [ 199.060797][ T6072] total_swapcached 4096 [ 199.065007][ T6072] total_pgpgin 405721 [ 199.068986][ T6072] total_pgpgout 336705 [ 199.073107][ T6072] total_pgfault 190105 [ 199.077225][ T6072] total_pgmajfault 90 [ 199.081289][ T6072] total_inactive_anon 284864512 [ 199.086137][ T6072] total_active_anon 5406720 [ 199.090676][ T6072] total_inactive_file 2428928 [ 199.095352][ T6072] total_active_file 12288 [ 199.099669][ T6072] total_unevictable 0 [ 199.103812][ T6072] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2257,pid=6672,uid=0 [ 199.112553][ T378] usb 2-1: USB disconnect, device number 12 [ 199.119622][ T6072] Memory cgroup out of memory: Killed process 6672 (syz.2.2257) total-vm:90484kB, anon-rss:1328kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 199.166398][ T6655] syz.2.2257 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 199.218584][ T6655] CPU: 0 UID: 0 PID: 6655 Comm: syz.2.2257 Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 199.218617][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 199.218629][ T6655] Call Trace: [ 199.218636][ T6655] [ 199.218643][ T6655] __dump_stack+0x21/0x30 [ 199.218671][ T6655] dump_stack_lvl+0x140/0x1c0 [ 199.218694][ T6655] ? __cfi_dump_stack_lvl+0x10/0x10 [ 199.218716][ T6655] ? ___ratelimit+0x40e/0x5b0 [ 199.218735][ T6655] dump_stack+0x19/0x20 [ 199.218756][ T6655] dump_header+0xd6/0x490 [ 199.218775][ T6655] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 199.218794][ T6655] oom_kill_process+0x35d/0x640 [ 199.218819][ T6655] out_of_memory+0x624/0xa30 [ 199.218844][ T6655] ? __cfi_out_of_memory+0x10/0x10 [ 199.218867][ T6655] ? mutex_lock_killable+0x115/0x1d0 [ 199.218887][ T6655] ? __cfi_mutex_lock_killable+0x10/0x10 [ 199.218909][ T6655] mem_cgroup_out_of_memory+0x2c8/0x390 [ 199.218933][ T6655] ? css_next_descendant_pre+0x202/0x230 [ 199.218952][ T6655] ? drain_obj_stock+0xed0/0xed0 [ 199.218975][ T6655] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 199.218998][ T6655] try_charge_memcg+0x91c/0xe10 [ 199.219017][ T6655] ? __cfi_try_charge_memcg+0x10/0x10 [ 199.219036][ T6655] ? __alloc_pages_noprof+0x35f/0x7e0 [ 199.219056][ T6655] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 199.219076][ T6655] __mem_cgroup_charge+0xfc/0x420 [ 199.219096][ T6655] ? folio_add_lru+0x116/0x400 [ 199.219122][ T6655] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 199.219145][ T6655] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 199.219174][ T6655] ? put_swap_device+0x130/0x130 [ 199.219201][ T6655] ? shmem_huge_global_enabled+0x2da/0x360 [ 199.219228][ T6655] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 199.219253][ T6655] ? __kasan_check_write+0x18/0x20 [ 199.219274][ T6655] ? _raw_spin_lock+0x92/0x120 [ 199.219301][ T6655] shmem_get_folio_gfp+0x607/0x1390 [ 199.219329][ T6655] ? shmem_get_folio+0xc0/0xc0 [ 199.219351][ T6655] ? follow_page_pte+0x90f/0xbc0 [ 199.219370][ T6655] ? inode_to_bdi+0x6d/0x100 [ 199.219394][ T6655] shmem_write_begin+0xf4/0x270 [ 199.219422][ T6655] generic_perform_write+0x328/0x970 [ 199.219443][ T6655] ? __cfi_generic_perform_write+0x10/0x10 [ 199.219462][ T6655] ? down_write+0xee/0x2b0 [ 199.219484][ T6655] ? file_update_time+0xa3/0x210 [ 199.219502][ T6655] shmem_file_write_iter+0x105/0x130 [ 199.219521][ T6655] __kernel_write_iter+0x42c/0x8a0 [ 199.219545][ T6655] ? __cfi___kernel_write_iter+0x10/0x10 [ 199.219567][ T6655] ? get_dump_page+0x165/0x220 [ 199.219583][ T6655] ? __asan_memset+0x39/0x50 [ 199.219604][ T6655] ? iov_iter_bvec+0xc0/0x180 [ 199.219633][ T6655] dump_user_range+0xb8b/0xe60 [ 199.219658][ T6655] ? __cfi_dump_user_range+0x10/0x10 [ 199.219680][ T6655] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 199.219705][ T6655] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 199.219730][ T6655] ? elf_core_dump+0x24c0/0x3960 [ 199.219758][ T6655] elf_core_dump+0x2e7e/0x3960 [ 199.219787][ T6655] ? __cfi_elf_core_dump+0x10/0x10 [ 199.219838][ T6655] ? dump_interrupted+0xf0/0xf0 [ 199.219860][ T6655] ? filp_open+0x199/0x1f0 [ 199.219879][ T6655] ? 0xffffffffff600000 [ 199.219896][ T6655] do_coredump+0x208d/0x2fe0 [ 199.219922][ T6655] ? __cfi_do_coredump+0x10/0x10 [ 199.219943][ T6655] ? asm_exc_page_fault+0x2b/0x30 [ 199.219977][ T6655] ? __kasan_slab_free+0x6a/0x80 [ 199.220004][ T6655] ? kmem_cache_free+0x1bd/0x4f0 [ 199.220029][ T6655] ? get_signal+0xa74/0x14e0 [ 199.220052][ T6655] get_signal+0x11f8/0x14e0 [ 199.220079][ T6655] arch_do_signal_or_restart+0xbc/0x760 [ 199.220106][ T6655] ? fixup_vdso_exception+0x20d/0x310 [ 199.220135][ T6655] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 199.220167][ T6655] irqentry_exit_to_user_mode+0x4d/0xb0 [ 199.220192][ T6655] irqentry_exit+0x16/0x60 [ 199.220213][ T6655] exc_page_fault+0x65/0xc0 [ 199.220235][ T6655] asm_exc_page_fault+0x2b/0x30 [ 199.220261][ T6655] RIP: 0033:0x7fbc2f0514f7 [ 199.220277][ T6655] Code: e8 8e fa ff ff 89 f2 48 8d 3d 05 43 1b 00 48 8d 35 5f f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 199.220295][ T6655] RSP: 002b:00007fbc2ff66120 EFLAGS: 00010202 [ 199.220313][ T6655] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbc2f19af79 [ 199.220326][ T6655] RDX: 00007fbc2ff66140 RSI: 00007fbc2ff66270 RDI: 000000000000000b [ 199.220339][ T6655] RBP: 00007fbc2f2316e0 R08: 0000000000000000 R09: 0000000000000000 [ 199.220350][ T6655] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 199.220362][ T6655] R13: 00007fbc2f416038 R14: 00007fbc2f415fa0 R15: 00007ffc796a9008 [ 199.220385][ T6655] [ 199.737311][ T6655] memory: usage 281768kB, limit 307200kB, failcnt 41952 [ 199.744664][ T6655] memory+swap: usage 401972kB, limit 9007199254740988kB, failcnt 0 [ 199.752928][ T6655] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 199.759856][ T6655] Memory cgroup stats for /syz2: [ 199.759983][ T6655] cache 284311552 [ 199.768660][ T6655] rss 2183168 [ 199.775651][ T6655] rss_huge 0 [ 199.778872][ T6655] shmem 284303360 [ 199.782564][ T6655] mapped_file 0 [ 199.786116][ T6655] dirty 0 [ 199.789068][ T6655] writeback 151552 [ 199.792845][ T6655] workingset_refault_anon 883 [ 199.797633][ T6655] workingset_refault_file 5836 [ 199.802439][ T6655] swap 124243968 [ 199.806040][ T6655] swapcached 2785280 [ 199.809965][ T6655] pgpgin 414097 [ 199.813476][ T6655] pgpgout 346520 [ 199.817032][ T6655] pgfault 191916 [ 199.820617][ T6655] pgmajfault 237 [ 199.824227][ T6655] inactive_anon 117428224 [ 199.828559][ T6655] active_anon 168947712 [ 199.832754][ T6655] inactive_file 0 [ 199.836472][ T6655] active_file 8192 [ 199.840238][ T6655] unevictable 0 [ 199.843764][ T6655] hierarchical_memory_limit 314572800 [ 199.849137][ T6655] hierarchical_memsw_limit 9223372036854771712 [ 199.855418][ T6655] total_cache 284311552 [ 199.859651][ T6655] total_rss 2183168 [ 199.863486][ T6655] total_rss_huge 0 [ 199.867269][ T6655] total_shmem 284303360 [ 199.871463][ T6655] total_mapped_file 0 [ 199.875536][ T6655] total_dirty 0 [ 199.879014][ T6655] total_writeback 151552 [ 199.883311][ T6655] total_workingset_refault_anon 883 [ 199.888609][ T6655] total_workingset_refault_file 5836 [ 199.893940][ T6655] total_swap 124243968 [ 199.898068][ T6655] total_swapcached 2785280 [ 199.902588][ T6655] total_pgpgin 414097 [ 199.906642][ T6655] total_pgpgout 346520 [ 199.910747][ T6655] total_pgfault 191916 [ 199.914871][ T6655] total_pgmajfault 237 [ 199.918941][ T6655] total_inactive_anon 117428224 [ 199.923819][ T6655] total_active_anon 168947712 [ 199.928582][ T6655] total_inactive_file 0 [ 199.932764][ T6655] total_active_file 8192 [ 199.937157][ T6655] total_unevictable 0 [ 199.941175][ T6655] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2257,pid=6658,uid=0 [ 199.956420][ T6655] Memory cgroup out of memory: Killed process 6658 (syz.2.2257) total-vm:90484kB, anon-rss:3060kB, file-rss:53680kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 200.339852][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 200.500964][ T45] usb 2-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 200.511481][ T45] usb 2-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.529811][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 200.538031][ T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 200.547268][ T45] usb 2-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 200.555707][ T45] usb 2-1: Product: syz [ 200.565488][ T45] usb 2-1: config 0 descriptor?? [ 200.651646][ T6666] syz.2.2257 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 200.690241][ T6666] CPU: 1 UID: 0 PID: 6666 Comm: syz.2.2257 Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 200.690279][ T6666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 200.690291][ T6666] Call Trace: [ 200.690298][ T6666] [ 200.690306][ T6666] __dump_stack+0x21/0x30 [ 200.690336][ T6666] dump_stack_lvl+0x140/0x1c0 [ 200.690360][ T6666] ? __cfi_dump_stack_lvl+0x10/0x10 [ 200.690384][ T6666] ? ___ratelimit+0x40e/0x5b0 [ 200.690404][ T6666] dump_stack+0x19/0x20 [ 200.690426][ T6666] dump_header+0xd6/0x490 [ 200.690447][ T6666] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 200.690466][ T6666] oom_kill_process+0x35d/0x640 [ 200.690495][ T6666] out_of_memory+0x624/0xa30 [ 200.690523][ T6666] ? __cfi_out_of_memory+0x10/0x10 [ 200.690549][ T6666] ? mutex_lock_killable+0x97/0x1d0 [ 200.690571][ T6666] ? __cfi_mutex_lock_killable+0x10/0x10 [ 200.690595][ T6666] mem_cgroup_out_of_memory+0x2c8/0x390 [ 200.690619][ T6666] ? css_next_descendant_pre+0x202/0x230 [ 200.690642][ T6666] ? drain_obj_stock+0xed0/0xed0 [ 200.690668][ T6666] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 200.690694][ T6666] try_charge_memcg+0x91c/0xe10 [ 200.690715][ T6666] ? __cfi_try_charge_memcg+0x10/0x10 [ 200.690734][ T6666] ? __alloc_pages_noprof+0x35f/0x7e0 [ 200.690755][ T6666] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 200.690776][ T6666] __mem_cgroup_charge+0xfc/0x420 [ 200.690798][ T6666] ? folio_add_lru+0x116/0x400 [ 200.690827][ T6666] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 200.690851][ T6666] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 200.690883][ T6666] ? put_swap_device+0x130/0x130 [ 200.690911][ T6666] ? shmem_huge_global_enabled+0x2da/0x360 [ 200.690939][ T6666] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 200.690965][ T6666] ? __kasan_check_write+0x18/0x20 [ 200.690988][ T6666] ? _raw_spin_lock+0x92/0x120 [ 200.691016][ T6666] shmem_get_folio_gfp+0x607/0x1390 [ 200.691047][ T6666] ? shmem_get_folio+0xc0/0xc0 [ 200.691074][ T6666] ? follow_page_pte+0x90f/0xbc0 [ 200.691094][ T6666] ? inode_to_bdi+0x6d/0x100 [ 200.691116][ T6666] shmem_write_begin+0xf4/0x270 [ 200.691145][ T6666] generic_perform_write+0x328/0x970 [ 200.691168][ T6666] ? __cfi_generic_perform_write+0x10/0x10 [ 200.691188][ T6666] ? down_write+0xee/0x2b0 [ 200.691213][ T6666] ? file_update_time+0xa3/0x210 [ 200.691241][ T6666] shmem_file_write_iter+0x105/0x130 [ 200.691262][ T6666] __kernel_write_iter+0x42c/0x8a0 [ 200.691288][ T6666] ? __cfi___kernel_write_iter+0x10/0x10 [ 200.691313][ T6666] ? get_dump_page+0x165/0x220 [ 200.691331][ T6666] ? __asan_memset+0x39/0x50 [ 200.691353][ T6666] ? iov_iter_bvec+0xc0/0x180 [ 200.691380][ T6666] dump_user_range+0xb8b/0xe60 [ 200.691408][ T6666] ? __cfi_dump_user_range+0x10/0x10 [ 200.691433][ T6666] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 200.691461][ T6666] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 200.691488][ T6666] ? elf_core_dump+0x24c0/0x3960 [ 200.691527][ T6666] elf_core_dump+0x2e7e/0x3960 [ 200.691558][ T6666] ? __cfi_elf_core_dump+0x10/0x10 [ 200.691592][ T6666] ? dump_interrupted+0xf0/0xf0 [ 200.691614][ T6666] ? filp_open+0x199/0x1f0 [ 200.691632][ T6666] ? 0xffffffffff600000 [ 200.691648][ T6666] do_coredump+0x208d/0x2fe0 [ 200.691673][ T6666] ? __cfi_do_coredump+0x10/0x10 [ 200.691694][ T6666] ? asm_exc_page_fault+0x2b/0x30 [ 200.691727][ T6666] ? __kasan_slab_free+0x6a/0x80 [ 200.691754][ T6666] ? kmem_cache_free+0x1bd/0x4f0 [ 200.691776][ T6666] ? get_signal+0xa74/0x14e0 [ 200.691798][ T6666] get_signal+0x11f8/0x14e0 [ 200.691823][ T6666] arch_do_signal_or_restart+0xbc/0x760 [ 200.691849][ T6666] ? fixup_vdso_exception+0x20d/0x310 [ 200.691878][ T6666] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 200.691907][ T6666] irqentry_exit_to_user_mode+0x4d/0xb0 [ 200.691931][ T6666] irqentry_exit+0x16/0x60 [ 200.691951][ T6666] exc_page_fault+0x65/0xc0 [ 200.691971][ T6666] asm_exc_page_fault+0x2b/0x30 [ 200.691995][ T6666] RIP: 0033:0x7fbc2f0514f7 [ 200.692011][ T6666] Code: e8 8e fa ff ff 89 f2 48 8d 3d 05 43 1b 00 48 8d 35 5f f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 200.692026][ T6666] RSP: 002b:00007fbc2ff66120 EFLAGS: 00010202 [ 200.692045][ T6666] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbc2f19af79 [ 200.692059][ T6666] RDX: 00007fbc2ff66140 RSI: 00007fbc2ff66270 RDI: 000000000000000b [ 200.692073][ T6666] RBP: 00007fbc2f2316e0 R08: 0000000000000000 R09: 0000000000000000 [ 200.692086][ T6666] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 200.692098][ T6666] R13: 00007fbc2f416038 R14: 00007fbc2f415fa0 R15: 00007ffc796a9008 [ 200.692115][ T6666] [ 200.697920][ T6666] memory: usage 307108kB, limit 307200kB, failcnt 43303 [ 201.151585][ T6666] memory+swap: usage 429920kB, limit 9007199254740988kB, failcnt 0 [ 201.160213][ T45] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 201.168182][ T45] usb 2-1: USB disconnect, device number 13 [ 201.184139][ T6666] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 201.195304][ T6948] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2346'. [ 201.208918][ T6666] Memory cgroup stats for /syz2: [ 201.209048][ T6666] cache 312066048 [ 201.218522][ T36] audit: type=1400 audit(2000008830.838:27149): avc: denied { nlmsg_read } for pid=6947 comm="syz.0.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 201.227809][ T6666] rss 2101248 [ 201.258028][ T6666] rss_huge 0 [ 201.264626][ T6666] shmem 312061952 [ 201.268398][ T6666] mapped_file 0 [ 201.272039][ T6666] dirty 0 [ 201.275062][ T6666] writeback 0 [ 201.278390][ T6666] workingset_refault_anon 1349 [ 201.283374][ T6666] workingset_refault_file 7757 [ 201.288246][ T6666] swap 125788160 [ 201.291994][ T6666] swapcached 2207744 [ 201.295945][ T6666] pgpgin 433293 [ 201.299498][ T6666] pgpgout 359078 [ 201.303303][ T6666] pgfault 195749 [ 201.306886][ T6666] pgmajfault 330 [ 201.310682][ T6666] inactive_anon 202809344 [ 201.315048][ T6666] active_anon 111263744 [ 201.319238][ T6666] inactive_file 0 [ 201.323172][ T6666] active_file 4096 [ 201.326958][ T6666] unevictable 0 [ 201.330625][ T6666] hierarchical_memory_limit 314572800 [ 201.336103][ T6666] hierarchical_memsw_limit 9223372036854771712 [ 201.342475][ T6666] total_cache 312066048 [ 201.346753][ T6666] total_rss 2101248 [ 201.350744][ T6666] total_rss_huge 0 [ 201.354510][ T6666] total_shmem 312061952 [ 201.358753][ T6666] total_mapped_file 0 [ 201.363273][ T6666] total_dirty 0 [ 201.366802][ T6666] total_writeback 0 [ 201.370910][ T6666] total_workingset_refault_anon 1349 [ 201.376244][ T6666] total_workingset_refault_file 7757 [ 201.381778][ T6666] total_swap 125788160 [ 201.385884][ T6666] total_swapcached 2207744 [ 201.390500][ T6666] total_pgpgin 433293 [ 201.394581][ T6666] total_pgpgout 359078 [ 201.398683][ T6666] total_pgfault 195749 [ 201.402980][ T6666] total_pgmajfault 330 [ 201.407150][ T6666] total_inactive_anon 202809344 [ 201.412242][ T6666] total_active_anon 111263744 [ 201.416982][ T6666] total_inactive_file 0 [ 201.421398][ T6666] total_active_file 4096 [ 201.425683][ T6666] total_unevictable 0 [ 201.429706][ T6666] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2257,pid=6676,uid=0 [ 201.444943][ T6666] Memory cgroup out of memory: Killed process 6676 (syz.2.2257) total-vm:90484kB, anon-rss:1320kB, file-rss:53632kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 201.573605][ T6678] syz.2.2257 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 201.607341][ T6678] CPU: 0 UID: 0 PID: 6678 Comm: syz.2.2257 Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 201.607374][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 201.607387][ T6678] Call Trace: [ 201.607394][ T6678] [ 201.607402][ T6678] __dump_stack+0x21/0x30 [ 201.607432][ T6678] dump_stack_lvl+0x140/0x1c0 [ 201.607455][ T6678] ? __cfi_dump_stack_lvl+0x10/0x10 [ 201.607477][ T6678] ? ___ratelimit+0x40e/0x5b0 [ 201.607497][ T6678] dump_stack+0x19/0x20 [ 201.607519][ T6678] dump_header+0xd6/0x490 [ 201.607540][ T6678] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 201.607560][ T6678] oom_kill_process+0x35d/0x640 [ 201.607587][ T6678] out_of_memory+0x624/0xa30 [ 201.607614][ T6678] ? __cfi_out_of_memory+0x10/0x10 [ 201.607640][ T6678] ? mutex_lock_killable+0x97/0x1d0 [ 201.607661][ T6678] ? __cfi_mutex_lock_killable+0x10/0x10 [ 201.607685][ T6678] mem_cgroup_out_of_memory+0x2c8/0x390 [ 201.607710][ T6678] ? css_next_descendant_pre+0x202/0x230 [ 201.607730][ T6678] ? drain_obj_stock+0xed0/0xed0 [ 201.607754][ T6678] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 201.607778][ T6678] try_charge_memcg+0x91c/0xe10 [ 201.607799][ T6678] ? __cfi_try_charge_memcg+0x10/0x10 [ 201.607818][ T6678] ? __alloc_pages_noprof+0x35f/0x7e0 [ 201.607838][ T6678] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 201.607867][ T6678] ? cgroup_rstat_updated+0x141/0x810 [ 201.607895][ T6678] __mem_cgroup_charge+0xfc/0x420 [ 201.607917][ T6678] ? resched_curr+0xb0/0x440 [ 201.607942][ T6678] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 201.607964][ T6678] ? __cfi_resched_curr+0x10/0x10 [ 201.607990][ T6678] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 201.608021][ T6678] ? put_swap_device+0x130/0x130 [ 201.608049][ T6678] ? shmem_huge_global_enabled+0x2da/0x360 [ 201.608076][ T6678] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 201.608102][ T6678] ? __kasan_check_write+0x18/0x20 [ 201.608124][ T6678] ? _raw_spin_lock+0x92/0x120 [ 201.608151][ T6678] shmem_get_folio_gfp+0x607/0x1390 [ 201.608184][ T6678] ? shmem_get_folio+0xc0/0xc0 [ 201.608208][ T6678] ? follow_page_pte+0x90f/0xbc0 [ 201.608228][ T6678] ? inode_to_bdi+0x6d/0x100 [ 201.608249][ T6678] shmem_write_begin+0xf4/0x270 [ 201.608277][ T6678] generic_perform_write+0x328/0x970 [ 201.608299][ T6678] ? __cfi_generic_perform_write+0x10/0x10 [ 201.608318][ T6678] ? down_write+0xee/0x2b0 [ 201.608340][ T6678] ? file_update_time+0xa3/0x210 [ 201.608360][ T6678] shmem_file_write_iter+0x105/0x130 [ 201.608385][ T6678] __kernel_write_iter+0x42c/0x8a0 [ 201.608409][ T6678] ? __cfi___kernel_write_iter+0x10/0x10 [ 201.608432][ T6678] ? get_dump_page+0x165/0x220 [ 201.608450][ T6678] ? __asan_memset+0x39/0x50 [ 201.608471][ T6678] ? iov_iter_bvec+0xc0/0x180 [ 201.608497][ T6678] dump_user_range+0xb8b/0xe60 [ 201.608522][ T6678] ? __cfi_dump_user_range+0x10/0x10 [ 201.608546][ T6678] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 201.608571][ T6678] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 201.608596][ T6678] ? elf_core_dump+0x24c0/0x3960 [ 201.608626][ T6678] elf_core_dump+0x2e7e/0x3960 [ 201.608655][ T6678] ? __cfi_elf_core_dump+0x10/0x10 [ 201.608690][ T6678] ? dump_interrupted+0xf0/0xf0 [ 201.608712][ T6678] ? filp_open+0x199/0x1f0 [ 201.608730][ T6678] ? 0xffffffffff600000 [ 201.608746][ T6678] do_coredump+0x208d/0x2fe0 [ 201.608771][ T6678] ? __cfi_do_coredump+0x10/0x10 [ 201.608793][ T6678] ? asm_exc_page_fault+0x2b/0x30 [ 201.608825][ T6678] ? __kasan_slab_free+0x6a/0x80 [ 201.608851][ T6678] ? kmem_cache_free+0x1bd/0x4f0 [ 201.608874][ T6678] ? get_signal+0xa74/0x14e0 [ 201.608896][ T6678] get_signal+0x11f8/0x14e0 [ 201.608921][ T6678] arch_do_signal_or_restart+0xbc/0x760 [ 201.608948][ T6678] ? fixup_vdso_exception+0x20d/0x310 [ 201.608977][ T6678] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 201.609006][ T6678] irqentry_exit_to_user_mode+0x4d/0xb0 [ 201.609030][ T6678] irqentry_exit+0x16/0x60 [ 201.609052][ T6678] exc_page_fault+0x65/0xc0 [ 201.609074][ T6678] asm_exc_page_fault+0x2b/0x30 [ 201.609098][ T6678] RIP: 0033:0x7fbc2f0514f7 [ 201.609114][ T6678] Code: e8 8e fa ff ff 89 f2 48 8d 3d 05 43 1b 00 48 8d 35 5f f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 201.609132][ T6678] RSP: 002b:00007fbc2ff66120 EFLAGS: 00010202 [ 201.609150][ T6678] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbc2f19af79 [ 201.609164][ T6678] RDX: 00007fbc2ff66140 RSI: 00007fbc2ff66270 RDI: 000000000000000b [ 201.609184][ T6678] RBP: 00007fbc2f2316e0 R08: 0000000000000000 R09: 0000000000000000 [ 201.609198][ T6678] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 201.609211][ T6678] R13: 00007fbc2f416038 R14: 00007fbc2f415fa0 R15: 00007ffc796a9008 [ 201.609228][ T6678] [ 201.832789][ T6678] memory: usage 303500kB, limit 307200kB, failcnt 44335 [ 202.618140][ T6678] memory+swap: usage 420256kB, limit 9007199254740988kB, failcnt 0 [ 202.723239][ T6678] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 202.775408][ T6678] Memory cgroup stats for /syz2: [ 202.775538][ T6678] cache 298565632 [ 202.839026][ T6678] rss 2502656 [ 202.854065][ T6678] rss_huge 0 [ 202.861641][ T6678] shmem 298561536 [ 202.889686][ T6678] mapped_file 0 [ 202.893263][ T6678] dirty 0 [ 202.896315][ T6678] writeback 0 [ 202.903860][ T6678] workingset_refault_anon 1651 [ 202.908724][ T6678] workingset_refault_file 7758 [ 202.915466][ T6678] swap 125116416 [ 202.919573][ T6678] swapcached 2879488 [ 202.923532][ T6678] pgpgin 438892 [ 202.927050][ T6678] pgpgout 367836 [ 202.930717][ T6678] pgfault 195991 [ 202.934306][ T6678] pgmajfault 392 [ 202.937921][ T6678] inactive_anon 34525184 [ 202.942482][ T6678] active_anon 266002432 [ 202.950937][ T6678] inactive_file 0 [ 202.954665][ T6678] active_file 4096 [ 202.958534][ T6678] unevictable 0 [ 202.962219][ T6678] hierarchical_memory_limit 314572800 [ 202.967667][ T6678] hierarchical_memsw_limit 9223372036854771712 [ 202.974018][ T6678] total_cache 298565632 [ 202.978257][ T6678] total_rss 2502656 [ 202.982261][ T6678] total_rss_huge 0 [ 202.986092][ T6678] total_shmem 298561536 [ 202.996635][ T6678] total_mapped_file 0 [ 203.000945][ T6678] total_dirty 0 [ 203.005097][ T6678] total_writeback 0 [ 203.009306][ T6678] total_workingset_refault_anon 1651 [ 203.015781][ T6678] total_workingset_refault_file 7758 [ 203.021544][ T6678] total_swap 125116416 [ 203.026279][ T6678] total_swapcached 2879488 [ 203.043164][ T6678] total_pgpgin 438892 [ 203.047401][ T6678] total_pgpgout 367836 [ 203.052409][ T6678] total_pgfault 195991 [ 203.056642][ T6678] total_pgmajfault 392 [ 203.061418][ T6678] total_inactive_anon 34525184 [ 203.066416][ T6678] total_active_anon 266002432 [ 203.071640][ T6678] total_inactive_file 0 [ 203.075983][ T6678] total_active_file 4096 [ 203.080707][ T6678] total_unevictable 0 [ 203.085026][ T6678] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2257,pid=6661,uid=0 [ 203.101335][ T6678] Memory cgroup out of memory: Killed process 6661 (syz.2.2257) total-vm:90484kB, anon-rss:3056kB, file-rss:53656kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 203.159872][ T378] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 203.179825][ T10] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 203.310882][ T378] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 203.320079][ T378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.331320][ T378] usb 2-1: config 0 descriptor?? [ 203.337184][ T10] usb 3-1: No LPM exit latency info found, disabling LPM. [ 203.345357][ T10] usb 3-1: config 1 has an invalid descriptor of length 175, skipping remainder of the config [ 203.360131][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.560053][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.568972][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.643291][ T6980] netlink: 'syz.4.2357': attribute type 12 has an invalid length. [ 203.664597][ T6980] fuse: Bad value for 'user_id' [ 203.679843][ T6980] fuse: Bad value for 'user_id' [ 203.724415][ T6990] kthread_run failed with err -4 [ 203.740546][ T6995] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2360'. [ 204.194505][ T6655] syz.2.2257 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 204.222507][ T6655] CPU: 0 UID: 0 PID: 6655 Comm: syz.2.2257 Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 204.222554][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 204.222568][ T6655] Call Trace: [ 204.222575][ T6655] [ 204.222583][ T6655] __dump_stack+0x21/0x30 [ 204.222630][ T6655] dump_stack_lvl+0x140/0x1c0 [ 204.222660][ T6655] ? __cfi_dump_stack_lvl+0x10/0x10 [ 204.222684][ T6655] ? ___ratelimit+0x40e/0x5b0 [ 204.222704][ T6655] dump_stack+0x19/0x20 [ 204.222728][ T6655] dump_header+0xd6/0x490 [ 204.222762][ T6655] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 204.222781][ T6655] oom_kill_process+0x35d/0x640 [ 204.222827][ T6655] out_of_memory+0x624/0xa30 [ 204.222856][ T6655] ? __cfi_out_of_memory+0x10/0x10 [ 204.222884][ T6655] ? mutex_lock_killable+0x97/0x1d0 [ 204.222907][ T6655] ? __cfi_mutex_lock_killable+0x10/0x10 [ 204.222932][ T6655] mem_cgroup_out_of_memory+0x2c8/0x390 [ 204.222959][ T6655] ? css_next_descendant_pre+0x202/0x230 [ 204.222981][ T6655] ? drain_obj_stock+0xed0/0xed0 [ 204.223007][ T6655] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 204.223031][ T6655] try_charge_memcg+0x91c/0xe10 [ 204.223053][ T6655] ? __cfi_try_charge_memcg+0x10/0x10 [ 204.223073][ T6655] ? __alloc_pages_noprof+0x35f/0x7e0 [ 204.223095][ T6655] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 204.223118][ T6655] __mem_cgroup_charge+0xfc/0x420 [ 204.223140][ T6655] ? psi_task_switch+0xad/0xa10 [ 204.223164][ T6655] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 204.223196][ T6655] ? __kasan_check_write+0x18/0x20 [ 204.223222][ T6655] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 204.223254][ T6655] ? put_swap_device+0x130/0x130 [ 204.223281][ T6655] ? shmem_huge_global_enabled+0x2da/0x360 [ 204.223310][ T6655] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 204.223337][ T6655] ? __kasan_check_write+0x18/0x20 [ 204.223360][ T6655] ? _raw_spin_lock+0x92/0x120 [ 204.223388][ T6655] shmem_get_folio_gfp+0x607/0x1390 [ 204.223419][ T6655] ? shmem_get_folio+0xc0/0xc0 [ 204.223446][ T6655] ? __kasan_check_write+0x18/0x20 [ 204.223468][ T6655] ? inode_to_bdi+0x6d/0x100 [ 204.223490][ T6655] shmem_write_begin+0xf4/0x270 [ 204.223520][ T6655] generic_perform_write+0x328/0x970 [ 204.223540][ T6655] ? inode_update_timestamps+0x4f0/0x700 [ 204.223563][ T6655] ? __cfi_generic_perform_write+0x10/0x10 [ 204.223583][ T6655] ? down_write+0xee/0x2b0 [ 204.223624][ T6655] ? mnt_get_write_access_file+0x1af/0x3b0 [ 204.223645][ T6655] ? mnt_put_write_access_file+0xc2/0x100 [ 204.223666][ T6655] ? file_update_time+0x1de/0x210 [ 204.223687][ T6655] shmem_file_write_iter+0x105/0x130 [ 204.223710][ T6655] __kernel_write_iter+0x42c/0x8a0 [ 204.223738][ T6655] ? __cfi___kernel_write_iter+0x10/0x10 [ 204.223764][ T6655] ? get_dump_page+0x165/0x220 [ 204.223784][ T6655] ? __asan_memset+0x39/0x50 [ 204.223820][ T6655] ? iov_iter_bvec+0xc0/0x180 [ 204.223847][ T6655] dump_user_range+0xb8b/0xe60 [ 204.223874][ T6655] ? __cfi_dump_user_range+0x10/0x10 [ 204.223898][ T6655] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 204.223926][ T6655] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 204.223954][ T6655] ? elf_core_dump+0x24c0/0x3960 [ 204.223983][ T6655] elf_core_dump+0x2e7e/0x3960 [ 204.224015][ T6655] ? __cfi_elf_core_dump+0x10/0x10 [ 204.224051][ T6655] ? dump_interrupted+0xf0/0xf0 [ 204.224074][ T6655] ? filp_open+0x199/0x1f0 [ 204.224093][ T6655] ? 0xffffffffff600000 [ 204.224110][ T6655] do_coredump+0x208d/0x2fe0 [ 204.224138][ T6655] ? __cfi_do_coredump+0x10/0x10 [ 204.224174][ T6655] ? asm_exc_page_fault+0x2b/0x30 [ 204.224213][ T6655] ? __kasan_slab_free+0x6a/0x80 [ 204.224238][ T6655] ? kmem_cache_free+0x1bd/0x4f0 [ 204.224261][ T6655] ? get_signal+0xa74/0x14e0 [ 204.224284][ T6655] get_signal+0x11f8/0x14e0 [ 204.224308][ T6655] arch_do_signal_or_restart+0xbc/0x760 [ 204.224333][ T6655] ? fixup_vdso_exception+0x20d/0x310 [ 204.224361][ T6655] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 204.224391][ T6655] irqentry_exit_to_user_mode+0x4d/0xb0 [ 204.224414][ T6655] irqentry_exit+0x16/0x60 [ 204.224436][ T6655] exc_page_fault+0x65/0xc0 [ 204.224457][ T6655] asm_exc_page_fault+0x2b/0x30 [ 204.224482][ T6655] RIP: 0033:0x7fbc2f0514f7 [ 204.224498][ T6655] Code: e8 8e fa ff ff 89 f2 48 8d 3d 05 43 1b 00 48 8d 35 5f f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 204.224515][ T6655] RSP: 002b:00007fbc2ff66120 EFLAGS: 00010202 [ 204.224533][ T6655] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbc2f19af79 [ 204.224547][ T6655] RDX: 00007fbc2ff66140 RSI: 00007fbc2ff66270 RDI: 000000000000000b [ 204.224560][ T6655] RBP: 00007fbc2f2316e0 R08: 0000000000000000 R09: 0000000000000000 [ 204.224572][ T6655] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 204.224585][ T6655] R13: 00007fbc2f416038 R14: 00007fbc2f415fa0 R15: 00007ffc796a9008 [ 204.224602][ T6655] [ 204.225116][ T6655] memory: usage 307196kB, limit 307200kB, failcnt 45112 [ 204.685904][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.693369][ T6655] memory+swap: usage 428400kB, limit 9007199254740988kB, failcnt 0 [ 204.695324][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.703042][ T6655] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 204.732708][ T6655] Memory cgroup stats for /syz2: [ 204.732817][ T6655] cache 310452224 [ 204.732868][ T378] usb 2-1: Cannot set autoneg [ 204.738027][ T378] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 204.741457][ T6655] rss 2437120 [ 204.741469][ T6655] rss_huge 0 [ 204.750242][ T378] usb 2-1: USB disconnect, device number 14 [ 204.770397][ T6655] shmem 310448128 [ 204.774088][ T6655] mapped_file 0 [ 204.777549][ T6655] dirty 0 [ 204.780782][ T6655] writeback 0 [ 204.784304][ T6655] workingset_refault_anon 2457 [ 204.789181][ T6655] workingset_refault_file 8952 [ 204.794052][ T6655] swap 124108800 [ 204.797639][ T6655] swapcached 3854336 [ 204.801615][ T6655] pgpgin 473293 [ 204.805193][ T6655] pgpgout 399048 [ 204.808751][ T6655] pgfault 199071 [ 204.812323][ T6655] pgmajfault 579 [ 204.815888][ T6655] inactive_anon 39800832 [ 204.820238][ T6655] active_anon 274767872 [ 204.824417][ T6655] inactive_file 4096 [ 204.828320][ T6655] active_file 0 [ 204.831814][ T6655] unevictable 0 [ 204.835286][ T6655] hierarchical_memory_limit 314572800 [ 204.840694][ T6655] hierarchical_memsw_limit 9223372036854771712 [ 204.846864][ T6655] total_cache 310452224 [ 204.851054][ T6655] total_rss 2437120 [ 204.854872][ T6655] total_rss_huge 0 [ 204.858599][ T6655] total_shmem 310448128 [ 204.862858][ T6655] total_mapped_file 0 [ 204.866856][ T6655] total_dirty 0 [ 204.870351][ T6655] total_writeback 0 [ 204.874169][ T6655] total_workingset_refault_anon 2457 [ 204.879453][ T6655] total_workingset_refault_file 8952 [ 204.884788][ T6655] total_swap 124108800 [ 204.888896][ T6655] total_swapcached 3854336 [ 204.893353][ T6655] total_pgpgin 473293 [ 204.897365][ T6655] total_pgpgout 399048 [ 204.901528][ T6655] total_pgfault 199071 [ 204.905604][ T6655] total_pgmajfault 579 [ 204.909663][ T6655] total_inactive_anon 39800832 [ 204.914466][ T6655] total_active_anon 274767872 [ 204.919155][ T6655] total_inactive_file 4096 [ 204.923615][ T6655] total_active_file 0 [ 204.927607][ T6655] total_unevictable 0 [ 204.931629][ T6655] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2257,pid=6655,uid=0 [ 204.946827][ T6655] Memory cgroup out of memory: Killed process 6655 (syz.2.2257) total-vm:90484kB, anon-rss:1616kB, file-rss:56160kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 205.018423][ T6653] syz.2.2257 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 205.050828][ T6653] CPU: 1 UID: 0 PID: 6653 Comm: syz.2.2257 Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 205.050861][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 205.050874][ T6653] Call Trace: [ 205.050881][ T6653] [ 205.050889][ T6653] __dump_stack+0x21/0x30 [ 205.050918][ T6653] dump_stack_lvl+0x140/0x1c0 [ 205.050941][ T6653] ? __cfi_dump_stack_lvl+0x10/0x10 [ 205.050964][ T6653] ? ___ratelimit+0x40e/0x5b0 [ 205.050984][ T6653] dump_stack+0x19/0x20 [ 205.051006][ T6653] dump_header+0xd6/0x490 [ 205.051027][ T6653] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 205.051047][ T6653] oom_kill_process+0x35d/0x640 [ 205.051075][ T6653] out_of_memory+0x624/0xa30 [ 205.051106][ T6653] ? __cfi_out_of_memory+0x10/0x10 [ 205.051132][ T6653] ? mutex_lock_killable+0x97/0x1d0 [ 205.051153][ T6653] ? __cfi_mutex_lock_killable+0x10/0x10 [ 205.051177][ T6653] mem_cgroup_out_of_memory+0x2c8/0x390 [ 205.051202][ T6653] ? css_next_descendant_pre+0x202/0x230 [ 205.051222][ T6653] ? drain_obj_stock+0xed0/0xed0 [ 205.051247][ T6653] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 205.051271][ T6653] try_charge_memcg+0x91c/0xe10 [ 205.051291][ T6653] ? __cfi_try_charge_memcg+0x10/0x10 [ 205.051311][ T6653] ? __alloc_pages_noprof+0x35f/0x7e0 [ 205.051331][ T6653] ? folio_add_new_anon_rmap+0x475/0x900 [ 205.051358][ T6653] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 205.051379][ T6653] __mem_cgroup_charge+0xfc/0x420 [ 205.051401][ T6653] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 205.051425][ T6653] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 205.051457][ T6653] ? put_swap_device+0x130/0x130 [ 205.051486][ T6653] ? shmem_huge_global_enabled+0x2da/0x360 [ 205.051512][ T6653] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 205.051539][ T6653] ? __kasan_check_write+0x18/0x20 [ 205.051561][ T6653] ? _raw_spin_lock+0x92/0x120 [ 205.051587][ T6653] shmem_get_folio_gfp+0x607/0x1390 [ 205.051615][ T6653] ? shmem_get_folio+0xc0/0xc0 [ 205.051639][ T6653] ? follow_page_pte+0x90f/0xbc0 [ 205.051658][ T6653] ? inode_to_bdi+0x6d/0x100 [ 205.051679][ T6653] shmem_write_begin+0xf4/0x270 [ 205.051708][ T6653] generic_perform_write+0x328/0x970 [ 205.051731][ T6653] ? __cfi_generic_perform_write+0x10/0x10 [ 205.051750][ T6653] ? down_write+0xee/0x2b0 [ 205.051772][ T6653] ? file_update_time+0xa3/0x210 [ 205.051792][ T6653] shmem_file_write_iter+0x105/0x130 [ 205.051812][ T6653] __kernel_write_iter+0x42c/0x8a0 [ 205.051836][ T6653] ? __cfi___kernel_write_iter+0x10/0x10 [ 205.051859][ T6653] ? get_dump_page+0x165/0x220 [ 205.051877][ T6653] ? __asan_memset+0x39/0x50 [ 205.051899][ T6653] ? iov_iter_bvec+0xc0/0x180 [ 205.051924][ T6653] dump_user_range+0xb8b/0xe60 [ 205.051949][ T6653] ? __cfi_dump_user_range+0x10/0x10 [ 205.051973][ T6653] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 205.051999][ T6653] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 205.052029][ T6653] elf_core_dump+0x2e7e/0x3960 [ 205.052061][ T6653] ? __cfi_elf_core_dump+0x10/0x10 [ 205.052096][ T6653] ? dump_interrupted+0xf0/0xf0 [ 205.052124][ T6653] ? filp_open+0x199/0x1f0 [ 205.052142][ T6653] ? 0xffffffffff600000 [ 205.052158][ T6653] do_coredump+0x208d/0x2fe0 [ 205.052182][ T6653] ? __cfi_do_coredump+0x10/0x10 [ 205.052203][ T6653] ? asm_exc_page_fault+0x2b/0x30 [ 205.052234][ T6653] ? __kasan_slab_free+0x6a/0x80 [ 205.052261][ T6653] ? kmem_cache_free+0x1bd/0x4f0 [ 205.052284][ T6653] ? get_signal+0xa74/0x14e0 [ 205.052306][ T6653] get_signal+0x11f8/0x14e0 [ 205.052332][ T6653] arch_do_signal_or_restart+0xbc/0x760 [ 205.052358][ T6653] ? fixup_vdso_exception+0x20d/0x310 [ 205.052387][ T6653] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 205.052417][ T6653] irqentry_exit_to_user_mode+0x4d/0xb0 [ 205.052440][ T6653] irqentry_exit+0x16/0x60 [ 205.052462][ T6653] exc_page_fault+0x65/0xc0 [ 205.052484][ T6653] asm_exc_page_fault+0x2b/0x30 [ 205.052508][ T6653] RIP: 0033:0x7fbc2f0514f7 [ 205.052524][ T6653] Code: e8 8e fa ff ff 89 f2 48 8d 3d 05 43 1b 00 48 8d 35 5f f8 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 205.052540][ T6653] RSP: 002b:00007fbc2ff66120 EFLAGS: 00010202 [ 205.052559][ T6653] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbc2f19af79 [ 205.052573][ T6653] RDX: 00007fbc2ff66140 RSI: 00007fbc2ff66270 RDI: 000000000000000b [ 205.052586][ T6653] RBP: 00007fbc2f2316e0 R08: 0000000000000000 R09: 0000000000000000 [ 205.052599][ T6653] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 205.052612][ T6653] R13: 00007fbc2f416038 R14: 00007fbc2f415fa0 R15: 00007ffc796a9008 [ 205.052628][ T6653] [ 205.052636][ T6653] memory: usage 307200kB, limit 307200kB, failcnt 45657 [ 205.502405][ T6653] memory+swap: usage 428264kB, limit 9007199254740988kB, failcnt 0 [ 205.510508][ T6653] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 205.517367][ T6653] Memory cgroup stats for /syz2: [ 205.517508][ T6653] cache 308813824 [ 205.526168][ T6653] rss 2412544 [ 205.529472][ T6653] rss_huge 0 [ 205.532820][ T6653] shmem 308809728 [ 205.536461][ T6653] mapped_file 0 [ 205.539948][ T6653] dirty 0 [ 205.542903][ T6653] writeback 0 [ 205.546233][ T6653] workingset_refault_anon 2457 [ 205.551024][ T6653] workingset_refault_file 8952 [ 205.555810][ T6653] swap 122843136 [ 205.559365][ T6653] swapcached 3854336 [ 205.563298][ T6653] pgpgin 473293 [ 205.566769][ T6653] pgpgout 399424 [ 205.570348][ T6653] pgfault 199071 [ 205.573900][ T6653] pgmajfault 579 [ 205.577461][ T6653] inactive_anon 5558272 [ 205.581658][ T6653] active_anon 307470336 [ 205.585822][ T6653] inactive_file 4096 [ 205.589726][ T6653] active_file 0 [ 205.593237][ T6653] unevictable 0 [ 205.596707][ T6653] hierarchical_memory_limit 314572800 [ 205.602111][ T6653] hierarchical_memsw_limit 9223372036854771712 [ 205.608268][ T6653] total_cache 308813824 [ 205.609944][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 205.612471][ T6653] total_rss 2412544 [ 205.612481][ T6653] total_rss_huge 0 [ 205.627606][ T6653] total_shmem 308809728 [ 205.631802][ T6653] total_mapped_file 0 [ 205.635784][ T6653] total_dirty 0 [ 205.639257][ T6653] total_writeback 0 [ 205.643098][ T6653] total_workingset_refault_anon 2457 [ 205.648404][ T6653] total_workingset_refault_file 8952 [ 205.653743][ T6653] total_swap 122843136 [ 205.657847][ T6653] total_swapcached 3854336 [ 205.662309][ T6653] total_pgpgin 473293 [ 205.666291][ T6653] total_pgpgout 399424 [ 205.670378][ T6653] total_pgfault 199071 [ 205.674462][ T6653] total_pgmajfault 579 [ 205.678533][ T6653] total_inactive_anon 5558272 [ 205.683461][ T6653] total_active_anon 307470336 [ 205.688204][ T6653] total_inactive_file 4096 [ 205.693114][ T6653] total_active_file 0 [ 205.697123][ T6653] total_unevictable 0 [ 205.701280][ T6653] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2257,pid=6653,uid=0 [ 205.716396][ T6653] Memory cgroup out of memory: Killed process 6653 (syz.2.2257) total-vm:90484kB, anon-rss:1620kB, file-rss:56188kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 205.789997][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 205.797815][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 205.806850][ T9] usb 2-1: config 13 has an invalid interface number: 50 but max is 0 [ 205.815247][ T9] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 205.829807][ T9] usb 2-1: config 13 has no interface number 0 [ 205.839956][ T9] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 205.850385][ T9] usb 2-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.869931][ T9] usb 2-1: config 13 interface 50 has no altsetting 0 [ 205.878250][ T9] usb 2-1: New USB device found, idVendor=1aca, idProduct=cb8e, bcdDevice=28.e1 [ 205.887635][ T9] usb 2-1: New USB device strings: Mfr=76, Product=2, SerialNumber=3 [ 205.895956][ T9] usb 2-1: Product: syz [ 205.900365][ T9] usb 2-1: Manufacturer: syz [ 205.905002][ T9] usb 2-1: SerialNumber: syz [ 205.916797][ T7022] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.975681][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.989814][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.004554][ T10] usb 3-1: can't set config #1, error -71 [ 206.020545][ T10] usb 3-1: USB disconnect, device number 19 [ 206.088935][ T36] audit: type=1400 audit(2000008835.708:27150): avc: denied { read } for pid=7027 comm="syz.2.2372" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 206.131134][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 206.156345][ T9] usb 2-1: USB disconnect, device number 15 [ 206.926426][ T45] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 207.069823][ T45] usb 2-1: device descriptor read/64, error -71 [ 207.079824][ T330] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 207.240807][ T330] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 252, using maximum allowed: 30 [ 207.251820][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.262815][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.272583][ T330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 252 [ 207.285547][ T330] usb 3-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00 [ 207.294593][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.303286][ T330] usb 3-1: config 0 descriptor?? [ 207.319812][ T45] usb 2-1: device descriptor read/64, error -71 [ 207.559865][ T45] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 207.689836][ T45] usb 2-1: device descriptor read/64, error -71 [ 207.711419][ T330] wacom 0003:056A:0302.000F: Unknown device_type for 'HID 056a:0302'. Assuming pen. [ 207.721483][ T330] wacom 0003:056A:0302.000F: hidraw0: USB HID v0.00 Device [HID 056a:0302] on usb-dummy_hcd.2-1/input0 [ 207.733850][ T330] input: Wacom Intuos PT S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0302.000F/input/input13 [ 207.911646][ T9] usb 3-1: USB disconnect, device number 20 [ 207.929823][ T45] usb 2-1: device descriptor read/64, error -71 [ 208.039937][ T45] usb usb2-port1: attempt power cycle [ 208.379863][ T45] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 208.400845][ T45] usb 2-1: device descriptor read/8, error -71 [ 208.441141][ T36] audit: type=1400 audit(2000008838.068:27151): avc: denied { unmount } for pid=6072 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 208.530876][ T45] usb 2-1: device descriptor read/8, error -71 [ 208.568944][ T7094] netlink: 'syz.0.2395': attribute type 27 has an invalid length. [ 208.590038][ T7094] +$<¶: port 2(bridge_slave_1) entered disabled state [ 208.597146][ T7094] +$<¶: port 1(bridge_slave_0) entered disabled state [ 208.739818][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 208.769824][ T45] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 208.790877][ T45] usb 2-1: device descriptor read/8, error -71 [ 208.890970][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 208.901805][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.912777][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.921443][ T45] usb 2-1: device descriptor read/8, error -71 [ 208.922896][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 208.942408][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 208.951490][ T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 208.959580][ T9] usb 3-1: Manufacturer: syz [ 208.964752][ T9] usb 3-1: config 0 descriptor?? [ 209.029909][ T45] usb usb2-port1: unable to enumerate USB device [ 209.372617][ T9] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 209.379910][ T9] appleir 0003:05AC:8243.0010: No inputs registered, leaving [ 209.388275][ T9] appleir 0003:05AC:8243.0010: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 209.736551][ T7117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.771623][ T7117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.799151][ T7123] netlink: 'syz.0.2404': attribute type 63 has an invalid length. [ 209.807160][ T7123] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2404'. [ 209.857120][ T36] audit: type=1400 audit(2000008839.478:27152): avc: denied { read write } for pid=7124 comm="syz.1.2405" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 209.884318][ T36] audit: type=1400 audit(2000008839.478:27153): avc: denied { open } for pid=7124 comm="syz.1.2405" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 210.199811][ T45] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 210.350755][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.361701][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.374588][ T45] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 210.383679][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.392391][ T45] usb 2-1: config 0 descriptor?? [ 210.722606][ T36] audit: type=1400 audit(2000008840.348:27154): avc: denied { execute } for pid=7139 comm="syz.4.2410" name="file1" dev="tmpfs" ino=2920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 210.745075][ T36] audit: type=1400 audit(2000008840.348:27155): avc: denied { execute_no_trans } for pid=7139 comm="syz.4.2410" path="/536/file1" dev="tmpfs" ino=2920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 210.800180][ T45] aureal 0003:0755:2626.0011: unknown main item tag 0x0 [ 210.807165][ T45] aureal 0003:0755:2626.0011: unknown main item tag 0x0 [ 210.814357][ T45] aureal 0003:0755:2626.0011: unknown main item tag 0x0 [ 210.821340][ T45] aureal 0003:0755:2626.0011: unknown main item tag 0x0 [ 210.828293][ T45] aureal 0003:0755:2626.0011: unknown main item tag 0x0 [ 210.835277][ T45] aureal 0003:0755:2626.0011: unknown main item tag 0x0 [ 210.843103][ T45] aureal 0003:0755:2626.0011: hidraw1: USB HID v2.00 Device [HID 0755:2626] on usb-dummy_hcd.1-1/input0 [ 211.005317][ T45] usb 2-1: USB disconnect, device number 20 [ 211.478855][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2418'. [ 211.499835][ T330] usb 3-1: reset high-speed USB device number 21 using dummy_hcd [ 211.508023][ T330] usb 3-1: device reset changed ep0 maxpacket size! [ 211.514894][ T9] usb 3-1: USB disconnect, device number 21 [ 211.529991][ T36] audit: type=1400 audit(2000008841.148:27156): avc: denied { write } for pid=7162 comm="syz.1.2419" name="dev" dev="proc" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 211.558423][ T7165] netlink: 1143 bytes leftover after parsing attributes in process `syz.1.2420'. [ 211.649855][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 211.799923][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 211.806364][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 211.814720][ T9] usb 3-1: config 1 has an invalid descriptor of length 78, skipping remainder of the config [ 211.824920][ T9] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.829898][ T45] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 211.837783][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 211.853368][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.862447][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.870452][ T9] usb 3-1: Product: syz [ 211.874599][ T9] usb 3-1: Manufacturer: syz [ 211.879174][ T9] usb 3-1: SerialNumber: syz [ 211.990914][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 212.000088][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.009170][ T45] usb 2-1: config 0 descriptor?? [ 212.091735][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.102850][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.113321][ T9] usb 3-1: bad CDC descriptors [ 212.124966][ T9] usb 3-1: USB disconnect, device number 22 [ 212.203442][ T7178] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.210783][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.217907][ T7178] bridge_slave_0: entered allmulticast mode [ 212.225886][ T7178] bridge_slave_0: entered promiscuous mode [ 212.232876][ T4655] bridge_slave_1: left allmulticast mode [ 212.238560][ T4655] bridge_slave_1: left promiscuous mode [ 212.244686][ T4655] +$<¶: port 2(bridge_slave_1) entered disabled state [ 212.252336][ T4655] bridge_slave_0: left allmulticast mode [ 212.258065][ T4655] bridge_slave_0: left promiscuous mode [ 212.263764][ T4655] +$<¶: port 1(bridge_slave_0) entered disabled state [ 212.371332][ T7178] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.378450][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.385532][ T7178] bridge_slave_1: entered allmulticast mode [ 212.391951][ T7178] bridge_slave_1: entered promiscuous mode [ 212.426119][ T7170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.434918][ T7170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.445308][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 212.451295][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 212.462394][ T45] usb 2-1: USB disconnect, device number 21 [ 212.498903][ T7178] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.506050][ T7178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.513359][ T7178] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.520427][ T7178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.540332][ T4687] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.547625][ T4687] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.557134][ T4664] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.564196][ T4664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.573018][ T4664] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.580083][ T4664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.603839][ T7178] veth0_vlan: entered promiscuous mode [ 212.614046][ T7178] veth1_macvtap: entered promiscuous mode [ 212.774569][ T36] audit: type=1400 audit(2000008842.398:27157): avc: denied { read } for pid=7201 comm="syz.0.2431" name="usbmon5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 212.798685][ T7207] netlink: 'syz.4.2432': attribute type 4 has an invalid length. [ 212.806548][ T7207] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2432'. [ 212.815806][ T36] audit: type=1400 audit(2000008842.398:27158): avc: denied { open } for pid=7201 comm="syz.0.2431" path="/dev/usbmon5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 212.841210][ T4655] ------------[ cut here ]------------ [ 212.846798][ T4655] WARNING: CPU: 0 PID: 4655 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 212.856970][ T4655] Modules linked in: [ 212.860950][ T4655] CPU: 0 UID: 0 PID: 4655 Comm: kworker/u8:5 Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 212.870598][ T350] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 212.872813][ T4655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 212.890340][ T4655] Workqueue: netns cleanup_net [ 212.895172][ T4655] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 212.901232][ T4655] Code: e8 41 3c db fc 4b 83 3c 3e 00 75 19 e8 e5 70 83 fc 49 81 ff f8 07 00 00 74 1b e8 d7 70 83 fc 49 83 c7 08 eb c9 e8 cc 70 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 212.920932][ T4655] RSP: 0018:ffffc9000113fb90 EFLAGS: 00010293 [ 212.927017][ T4655] RAX: ffffffff85042c44 RBX: ffff888124e5d8c0 RCX: ffff88811f1e4c00 [ 212.935036][ T4655] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888103f203f0 [ 212.943057][ T4655] RBP: ffffc9000113fbb0 R08: 0000000000000003 R09: 0000000000000004 [ 212.951086][ T4655] R10: dffffc0000000000 R11: fffff52000227f04 R12: dffffc0000000000 [ 212.959090][ T4655] R13: dffffc0000000000 R14: ffff888103f20000 R15: 00000000000003f0 [ 212.967121][ T4655] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 212.976098][ T4655] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.982743][ T4655] CR2: 000055556669a908 CR3: 0000000118f24000 CR4: 00000000003526b0 [ 212.990757][ T4655] Call Trace: [ 212.994055][ T4655] [ 212.997011][ T4655] cleanup_net+0x6c0/0xc90 [ 213.001493][ T4655] ? __cfi_cleanup_net+0x10/0x10 [ 213.006455][ T4655] ? __schedule+0x1357/0x1ea0 [ 213.011179][ T4655] ? kick_pool+0xb9/0x550 [ 213.015546][ T4655] process_scheduled_works+0x7d4/0x1020 [ 213.021190][ T4655] worker_thread+0xc70/0x10b0 [ 213.025896][ T4655] kthread+0x2c9/0x370 [ 213.029993][ T4655] ? __cfi_worker_thread+0x10/0x10 [ 213.035126][ T4655] ? __cfi_kthread+0x10/0x10 [ 213.039747][ T4655] ret_from_fork+0x67/0xa0 [ 213.039876][ T350] usb 3-1: Using ep0 maxpacket: 8 [ 213.044204][ T4655] ? __cfi_kthread+0x10/0x10 [ 213.052150][ T350] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 213.053880][ T4655] ret_from_fork_asm+0x1a/0x30 [ 213.063348][ T350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.067751][ T4655] [ 213.067764][ T4655] ---[ end trace 0000000000000000 ]--- [ 213.080679][ T350] usb 3-1: config 0 descriptor?? [ 213.086247][ T4655] ------------[ cut here ]------------ [ 213.094779][ T4655] WARNING: CPU: 0 PID: 4655 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 213.105005][ T4655] Modules linked in: [ 213.108928][ T4655] CPU: 0 UID: 0 PID: 4655 Comm: kworker/u8:5 Tainted: G W syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 213.122269][ T4655] Tainted: [W]=WARN [ 213.126081][ T4655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 213.136177][ T4655] Workqueue: netns cleanup_net [ 213.140982][ T4655] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 213.147067][ T4655] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 90 70 83 fc 49 81 ff f8 07 00 00 74 1b e8 82 70 83 fc 49 83 c7 08 eb c5 e8 77 70 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 67 70 83 fc 5b 41 5c 41 5e 41 [ 213.166763][ T4655] RSP: 0018:ffffc9000113fb90 EFLAGS: 00010293 [ 213.172892][ T4655] RAX: ffffffff85042c99 RBX: ffff888103f20800 RCX: ffff88811f1e4c00 [ 213.180905][ T4655] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888103f20820 [ 213.188894][ T4655] RBP: ffffc9000113fbb0 R08: 0000000000000003 R09: 0000000000000004 [ 213.196904][ T4655] R10: dffffc0000000000 R11: fffff52000227f04 R12: dffffc0000000000 [ 213.204955][ T4655] R13: dffffc0000000000 R14: ffff888103f20000 R15: 0000000000000020 [ 213.212956][ T4655] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 213.221931][ T4655] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.228536][ T4655] CR2: 000055556669a908 CR3: 0000000118f24000 CR4: 00000000003526b0 [ 213.236600][ T4655] Call Trace: [ 213.239923][ T4655] [ 213.242873][ T4655] cleanup_net+0x6c0/0xc90 [ 213.247305][ T4655] ? __cfi_cleanup_net+0x10/0x10 [ 213.252290][ T4655] ? __schedule+0x1357/0x1ea0 [ 213.256995][ T4655] ? kick_pool+0xb9/0x550 [ 213.261388][ T4655] process_scheduled_works+0x7d4/0x1020 [ 213.266998][ T4655] worker_thread+0xc70/0x10b0 [ 213.271731][ T4655] kthread+0x2c9/0x370 [ 213.275827][ T4655] ? __cfi_worker_thread+0x10/0x10 [ 213.280992][ T4655] ? __cfi_kthread+0x10/0x10 [ 213.285596][ T4655] ret_from_fork+0x67/0xa0 [ 213.290046][ T4655] ? __cfi_kthread+0x10/0x10 [ 213.294656][ T4655] ret_from_fork_asm+0x1a/0x30 [ 213.299469][ T4655] [ 213.302540][ T4655] ---[ end trace 0000000000000000 ]--- [ 213.312559][ T4655] ------------[ cut here ]------------ [ 213.318063][ T4655] WARNING: CPU: 0 PID: 4655 at net/xfrm/xfrm_state.c:3215 xfrm_state_fini+0x2be/0x310 [ 213.327653][ T4655] Modules linked in: [ 213.331583][ T4655] CPU: 0 UID: 0 PID: 4655 Comm: kworker/u8:5 Tainted: G W syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 213.344812][ T4655] Tainted: [W]=WARN [ 213.348619][ T4655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 213.358717][ T4655] Workqueue: netns cleanup_net [ 213.363521][ T4655] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 213.369090][ T4655] Code: 3c 20 00 74 08 48 89 df e8 7f 05 f6 fc 48 8b 3b e8 17 44 e1 fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 12 3a 9e fc <0f> 0b e9 b0 fd ff ff e8 06 3a 9e fc 0f 0b e9 18 fe ff ff e8 fa 39 [ 213.388760][ T4655] RSP: 0018:ffffc9000113fb70 EFLAGS: 00010293 [ 213.394913][ T4655] RAX: ffffffff84e962fe RBX: ffff888124e5d8c0 RCX: ffff88811f1e4c00 [ 213.402921][ T4655] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88811f1e4c00 [ 213.410935][ T4655] RBP: ffffc9000113fb98 R08: ffffffff87d351c7 R09: 1ffffffff0fa6a38 [ 213.418914][ T4655] R10: dffffc0000000000 R11: fffffbfff0fa6a39 R12: 1ffffffff0fa6788 [ 213.426966][ T4655] R13: dffffc0000000000 R14: ffff888124e5e4c0 R15: dffffc0000000000 [ 213.434991][ T4655] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 213.443976][ T4655] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.450596][ T4655] CR2: 000055556669a908 CR3: 0000000125b78000 CR4: 00000000003526b0 [ 213.458628][ T4655] Call Trace: [ 213.462037][ T4655] [ 213.464991][ T4655] xfrm_net_exit+0x31/0x80 [ 213.469443][ T4655] cleanup_net+0x6c0/0xc90 [ 213.473940][ T4655] ? __cfi_cleanup_net+0x10/0x10 [ 213.478895][ T4655] ? __schedule+0x1357/0x1ea0 [ 213.483615][ T4655] ? kick_pool+0xb9/0x550 [ 213.487969][ T4655] process_scheduled_works+0x7d4/0x1020 [ 213.493561][ T4655] worker_thread+0xc70/0x10b0 [ 213.498278][ T4655] kthread+0x2c9/0x370 [ 213.502101][ T7189] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2427'. [ 213.502383][ T4655] ? __cfi_worker_thread+0x10/0x10 [ 213.516428][ T4655] ? __cfi_kthread+0x10/0x10 [ 213.518804][ T350] pantherlord 0003:0E8F:0003.0012: unknown main item tag 0x0 [ 213.521053][ T4655] ret_from_fork+0x67/0xa0 [ 213.532384][ T350] pantherlord 0003:0E8F:0003.0012: unknown main item tag 0x0 [ 213.532858][ T4655] ? __cfi_kthread+0x10/0x10 [ 213.540682][ T350] pantherlord 0003:0E8F:0003.0012: unknown main item tag 0x0 [ 213.544795][ T4655] ret_from_fork_asm+0x1a/0x30 [ 213.544835][ T4655] [ 213.554154][ T350] pantherlord 0003:0E8F:0003.0012: unknown main item tag 0x0 [ 213.557016][ T4655] ---[ end trace 0000000000000000 ]--- [ 213.573259][ T350] pantherlord 0003:0E8F:0003.0012: unknown main item tag 0x0 [ 213.580710][ T350] pantherlord 0003:0E8F:0003.0012: unknown main item tag 0x0 [ 213.588124][ T350] pantherlord 0003:0E8F:0003.0012: unknown main item tag 0x0 [ 213.596705][ T350] pantherlord 0003:0E8F:0003.0012: hidraw0: USB HID v0.20 Device [HID 0e8f:0003] on usb-dummy_hcd.2-1/input0 [ 213.608324][ T350] pantherlord 0003:0E8F:0003.0012: no output reports found [ 213.714062][ T9] usb 3-1: USB disconnect, device number 23