last executing test programs: 15.524141662s ago: executing program 3 (id=119): write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f", 0x17) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x40, 0x7, 0x1000f4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f000016d000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x8) 15.209376651s ago: executing program 3 (id=120): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x60, 0xa, 0xfc, {0xfc, 0x3, "32c9a75111eea5ecae39eccf8c631fcdd0493f70c2c810299c22702fbc8df4e23a5f0c9d5f2efb705209b62d2a29142b14fee3d73530cedd78ee57f5f5627d45a4b09c7b11fdc78d6fa62d61fc4206808117e52ffad51fe3450e0dea8d81df5c101dfc85ca63348ba3ebaa92464a0532cec47f87830b1597285895a7ab56124cd483b1edacf8e2a35f054e06ca9d29559996cd3ae1011c31e40b0e36c7d851304cdf08a11cfc0e2d89623c6a250573444d3700480086560c635345ca9cb7db013c71eeb09b05b20a4ff68ec6aa9050c929d4e57ac04058bebec0a608dece4d7c869d42bfb3aec670317a7ec039dbcddc996b5b36ac4901a93b38"}}, &(0x7f00000002c0)={0x0, 0x3, 0x23, @string={0x23, 0x3, "19f1622b30af9cb366e07f1bb20efeed450dbb75eb003d4616258c500b62373e69"}}, &(0x7f0000000300)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "74ef9e3b619692fa16981f74e416ec1a"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x92, 0x7c, 0x8, 0x9, 0xf8}, @ptm_cap={0x3}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x4, 0x0, 0x0, "a118973c", "8c44000d"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x3, 0x4, 0x2, 0x5, 0x0, 0x5}}}, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x20, 0x17, 0xfc, "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"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x20}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x7de8}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x46}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "e236"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0xc70}, &(0x7f0000000740)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000780)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "d0db"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0xfff7}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x2e}}) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000140)=0x8, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002080)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x8040) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r6 = timerfd_create(0x0, 0x0) read(r6, &(0x7f0000002180)=""/262, 0x106) timerfd_settime(r6, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, 0x0) 10.804807292s ago: executing program 3 (id=129): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = getpgid(r2) r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) (async) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) (async) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) syz_open_dev$hiddev(0x0, 0xa, 0x62080) socket$igmp6(0xa, 0x3, 0x2) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000300)={0x40, 0xf, 0x30, "1680009bcecc687de4c0b1f44813eecf067103c390b547a168c1e162fccf74382cfdfc91dc1b977dca2ba26beb2e5a9e"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) 7.705358459s ago: executing program 0 (id=136): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xecf86c37d53049cc) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) close(r0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)="11", 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 6.566104897s ago: executing program 0 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x1, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000002c0)={0x2, 0x0, [{0x2, 0x2, 0x0, 0x0, @msi={0x7, 0x1, 0x0, 0x258e}}, {0xfffffffa, 0x4, 0x1, 0x0, @adapter={0x9, 0x5, 0xf, 0x1ff}}]}) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) getpeername$inet6(r0, 0x0, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = syz_ublk_setup_io_uring(0x917, &(0x7f0000000000)={0x0, 0xd944, 0x4000, 0x2, 0x1e0, 0x0, r5}, &(0x7f0000000280), &(0x7f00000000c0), &(0x7f0000000140)) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x3000, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x101d, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 6.260621543s ago: executing program 0 (id=150): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x35) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/bus/pci/drivers/8250_pericom\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000700)='new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='8', 0x1) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)) (async) memfd_create(&(0x7f0000000300)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4O$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\x19\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\xcdSL\b\x7f\xfe\xab\xd7\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\xa4\x83t\xdcyx', 0x8) (async) r2 = socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1) (async) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000400)=0x5, 0x4) (async) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="120110030000ec3f8205820540000102030109026e00030108000f080b0001012030080904000000010130000a2401080a00ff010000090401000041023000090230000905010920000302b40a2525010000000100800904020000010230000904020101010230000905820908009a06070a2525050000000504000000000000"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 2.963957193s ago: executing program 3 (id=154): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000240)=0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) read$FUSE(r1, &(0x7f0000001900)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000003940)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@flag='silent'}, {@smackfstransmute}, {@hash}, {@uid_eq={'uid', 0x3d, r2}}, {@fsmagic}, {@seclabel}, {@uid_gt={'uid>', r2}}, {@subj_type={'subj_type', 0x3d, 'index=on'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') syslog(0x0, &(0x7f00000002c0)=""/147, 0x93) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x400c0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmsg$unix(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)}, 0x400001e2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file7/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000100)="8907", 0x28) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1000006, 0x40010, r1, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) fdatasync(0xffffffffffffffff) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r7, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) getdents(r5, 0x0, 0x0) 2.818455905s ago: executing program 3 (id=156): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x5, r3, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) write(r1, &(0x7f0000000000)="010000000000000020", 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103c3"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x6443) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x30, 0x5, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x3, 0x44, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x6, 0x7f, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x250, 0x1, 0x7}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x7, 0x0, 0x0, 0x20, 0x5a}, 0x17, &(0x7f0000000280)=ANY=[@ANYBLOB="050f1700048400053e08000507100212460700"], 0x2, [{0xb0, &(0x7f0000000440)=ANY=[@ANYBLOB="b003f929f667a8ff144ac52aa5b70fe0131c33b607f9347d0a3f8359a65509fb167a540429297373d4b58949f6b7ed49277054577042a9685fa692c8a3790819a96dc14e43b235ec941ed61a42b11b7cf8ff1b08020ba77b3fd3ab373a8bb0431ac3d0ff161119078baabe2070d96bf60f9f213a9403f41bcb22a3a10dc2a17b2b497177ec61d09ddb0b972a31df01346b8500d2ab3d8c1dc3197a774d4e01ce1a480e7f4355"]}, {0x5f, &(0x7f0000000500)=@string={0x5f, 0x3, "7ab74b219347b263c74d479ee9f3b5b6b95bd70bf238c5f9a9d0999c1828d70e349ceba585f2155a56fc3d5aef42daba51b14b2454563063f5f25ed07c7c72faf45316232b86fc6fc9b16ba84978ee21cebd6959636ed021eaf52628b2"}}]}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_REV={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd7000000000000700000014"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) setsockopt(r0, 0x9, 0x9, &(0x7f0000000380)="26e2e91b45a38dcc4297d9d28057f0a21cfd4da03887122465a90bddfff6276ff27d9dd4d87f9b97672166057d88aa7cdd52b85076c4989c9f14d4b11e762f9d1dd6f5418c552bd1b594fced98495889b2dc8166dc3db6ea9ef540ea697d845023d3d960", 0x64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f0000000400)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400050020a10700000100000000000000ef0000000000000000000000000000000000005f17b9", 0x63) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) mmap$xdp(&(0x7f0000292000/0x4000)=nil, 0x4000, 0x4, 0x12, r5, 0x80000000) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="64000000100001060000000000000000000000003f0000000000000000000000100003007665746830000000000000001000120008000100766574681800020014000100000000000000000d05e2cf6c50a3070010000300766574683100000000000000", 0x64}], 0x1}, 0x0) 2.324706023s ago: executing program 2 (id=158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000400000000000000000d001d0005"], 0x24}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x8080) io_setup(0xfffc, &(0x7f0000000800)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x2300}) r3 = socket(0x10, 0x3, 0x0) clock_settime(0xfffffffc, &(0x7f0000000300)={0x77359400}) write(r3, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000080008000d000000", 0x24) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x36, 0xefffffffffffffff, 0x0, 0x187, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.956348913s ago: executing program 2 (id=159): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x78, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8916, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) lsm_set_self_attr(0x66, 0x0, 0x22, 0x20) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r7, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r8 = dup3(r5, r7, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000300)={0x200f}) ioctl$KVM_CAP_PMU_CAPABILITY(r8, 0x4068aea3, &(0x7f0000000080)={0xd4, 0x0, 0x4}) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) r10 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f0000000040)={0x1, r10}) close(0x3) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0f01c8f20f0726dce90f00d7b805000000b95ec500000f01c10fc779f766b82d000f00d00f20d835080000000f22d8c4c1fd28750066b8fa000f00d0", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x23, 0x0, 0x0) 1.793373998s ago: executing program 0 (id=160): ioctl$KVM_TDX_INIT_VCPU(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000000)={0x2, 0x0, 0x8}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x84, 0x26}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000810) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000180)=[@set_irq_handler={0xc8, 0x20, {0xd7}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest32=0x4800, 0x80, 0x4433, 0x7f}}, @nested_load_code={0x12e, 0x55, {0x3, "0f320f30f30f3066ba6100b8174b0000efc74424006b000000c74424020d000000ff2c240fc76b4147da9d001000000f01ca673e0f01c32665260f01cb"}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_vmresume={0x130, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x9, 0x0, 0x1}}, @cpuid={0x64, 0x18, {0x9, 0x3}}, @in_dx={0x69, 0x20, {0xc430, 0x3}}, @cpuid={0x64, 0x18, {0x754c025e, 0xfffffff7}}, @nested_amd_invlpga={0x17d, 0x20, {0x25000, 0xc956}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0x1, 0x85f5}}, @cpuid={0x64, 0x18, {0x6d410e19, 0x9}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_load_syzos={0x136, 0xb0, {0x1, 0x7, [@nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18}, @set_irq_handler={0xc8, 0x20, {0xdd, 0x1}}, @nested_amd_stgi={0x17e, 0x10}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x3}]}}], 0x295}) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000480)={[0x80a0000, 0x58000, 0x78000, 0x40000], 0x6, 0x4, 0x6}) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x40000, 0xb, 0x8977, 0x2, 0x0, [{0x8, 0x2, 0x6, '\x00', 0x94}, {0x3b, 0x3, 0x4, '\x00', 0xe}, {0x1, 0x4, 0x1, '\x00', 0xf9}, {0x40, 0x2, 0x8, '\x00', 0xc}, {0x6, 0x2, 0x80, '\x00', 0x7f}, {0x9, 0x0, 0x1f, '\x00', 0x8}, {0xa, 0x4, 0xc, '\x00', 0x51}, {0x43, 0x4}, {0x8, 0x3, 0x2, '\x00', 0x6}, {0x9, 0x6, 0x2, '\x00', 0x80}, {0x4, 0x2, 0x8, '\x00', 0x64}, {0x3, 0xc, 0x5, '\x00', 0x6}, {0xc, 0x6, 0x5, '\x00', 0xc}, {0x39, 0x3, 0xa, '\x00', 0x4}, {0x7, 0xf, 0x4, '\x00', 0xfc}, {0xd2, 0xb, 0x5}, {0x3, 0x2d, 0x2, '\x00', 0x7d}, {0x2, 0x40, 0xf, '\x00', 0x6}, {0x5, 0x0, 0xfd, '\x00', 0x30}, {0x3f, 0x2, 0xf3, '\x00', 0x10}, {0x7, 0x8, 0x7, '\x00', 0x5}, {0xf7, 0x2, 0x4a, '\x00', 0x5}, {0x2, 0x1, 0x7, '\x00', 0x7}, {0x4, 0x2, 0x8, '\x00', 0x9}]}}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6a}}}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'c'}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40048}, 0x4040154) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000880)=0x2) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000008c0)={0x1, 0x1, {0x2a, 0x1, 0xc, 0xd, 0x1, 0x2, 0x2, 0x13d, 0x1}}) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xa8, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff801}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfbc}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000800) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000a80), 0x8000, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}}, 0x10) r6 = syz_open_dev$mouse(&(0x7f0000000c00), 0x7f, 0x113001) preadv(r6, &(0x7f0000000d80)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/238, 0xee}], 0x2, 0x5, 0x4) r7 = accept$inet6(r6, &(0x7f0000000dc0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000e00)=0x1c) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000e40), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000e80)={{0x0, 0x1c96b185, 0x7f, 0x6, 0x8, 0x1, 0x1, 0x2, 0x6, 0x80, 0x11d4, 0xffffffffffffffe4, 0x4, 0x6f9, 0x3}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000001e80)={{r8, 0x0, 0x6, 0x5, 0x1df, 0xf1, 0x4, 0x8, 0xd2, 0xf732, 0x4, 0xe714, 0x1, 0x6, 0xffff}, 0x18, [0x0, 0x0, 0x0]}) r9 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001f40)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000001f80)={0xffff, 0x9, 0x1f4400000}) fcntl$setlease(r0, 0x400, 0x1) pwrite64$ublk_ch(r6, &(0x7f0000001fc0)=@buf_max_buf="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", 0x1000, 0x1) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000003080)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x24, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xc52a3bb08a4f9f6f) readv(r2, &(0x7f0000003100)=[{&(0x7f00000030c0)=""/14, 0xe}], 0x1) r10 = syz_pidfd_open(0x0, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r10, 0xc0186e87, &(0x7f0000003240)={&(0x7f0000003140)=[{0x95, 0x2400000000000, 0x10001, 0x6, 0x5}, {0x4f62a8b5, 0x5, 0x10, 0xd, 0x4}, {0x80000000, 0x1, 0x8000, 0x6, 0x1}, {0x5, 0x9, 0x1, 0x3541, 0x3}, {0x2, 0x200, 0x80, 0x0, 0x10000}, {0x2, 0x4, 0x4, 0x401, 0x80000000}], 0x6, 0x28, 0x101, 0x7fffffffffffffff}) 1.60078174s ago: executing program 2 (id=161): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x0, 0x7fff7ffc}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x70bd2c, 0x25dfdbfe, {0x28, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.60038141s ago: executing program 3 (id=162): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x0, 0xfffffffffffffffe, 0x8000000000000000, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xdd37, 0xfda, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3, 0xb3, 0x48d], 0xeeee8000}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x46e, 0x5577, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x60, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x3, 0x7f, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0xb90}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0x7, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000a40)={0x24, &(0x7f0000000840)={0x0, 0x23, 0xd6, {0xd6, 0x8, "5ab6b73efd3a040b0e106601692c64fd60141cc7a60429fe766111b0c1c20225eb495313fd8a506f7a04175508ff8097c35f1da04a3b2e52a9553e9cbf639f49298d92a99e1e74cbe7db55a0b46024f5a6e0a1463d15b7bc10af08149afe1ccfb0ae029d0ab729e17fd6ca5c9456f3ceabd3de1df8442caecdf5149e1118791b82b791b4f1b1d01aba40f7af9a320e53c815ebdf13131b1baad9549c3f4580541a5010984527284d1bb8ad3d8df6a0783932d3aeb8eb2ad4292da1605a2695b591b7c5e768a52809c9de906e95dfec490240ee62"}}, &(0x7f0000000940)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "297af12c612ee42ffea635fd41ff6f93291442b5e12f5961cf9690b312b213e1c134537a3a5c09f4d89093057d136039d46f58e461bafb1757b0fc3baf"}}, &(0x7f00000009c0)={0x0, 0x22, 0x1, {[@local]}}, &(0x7f0000000a00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x10, 0x1, {0x22, 0x889}}}}, &(0x7f0000000c00)={0x2c, &(0x7f0000000a80)={0x20, 0x16, 0x66, "582b885e933e9b813c92d9daac089181f18dfcaec3cbd808c1505fc83a15c6636962ca0f941a19ce8db87f20a0950abc3aa3445a1536d71bafa0bd52b017a95cd3c84a85590ac3f782826c3f3eb0977900193a99411d4e056176b618664a189763dd20451cea"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000b80)={0x20, 0x1, 0x10, "e628ce4feb61a5f1f696e103446fccea"}, &(0x7f0000000bc0)={0x20, 0x3, 0x1, 0x7}}) syz_usb_connect$uac1(0x3, 0xb8, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.37228871s ago: executing program 0 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0x4000}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, r0, 0x100000000000019) (async) setpriority(0x0, r0, 0x100000000000019) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x8) chdir(&(0x7f0000000140)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') utime(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)={0x8, 0xffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) fallocate(r1, 0x10, 0x4000, 0x40fe) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 1.223562093s ago: executing program 0 (id=164): syz_usb_connect(0x3, 0xb3, &(0x7f0000000000)=ANY=[], 0x0) 1.132705662s ago: executing program 1 (id=165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'veth0_to_bridge\x00', &(0x7f00000001c0)=@ethtool_sfeatures={0x3b, 0x1, [{0x9, 0x45}]}}) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x408c0}, 0x60804) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') 1.05318191s ago: executing program 1 (id=166): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RSETATTR(r1, &(0x7f0000000180)={0x7, 0x1b, 0x1}, 0x7) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_usb_connect$uac3(0x5, 0x8c, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x2b53, 0x31, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x62, 0x20, 0x6, {0x8, 0xb, 0x2, 0x2, 0x1, 0x22, 0x30, 0xe}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x16, 0xc000000}, [@source_unit={0xc, 0x24, 0xb, 0x1, 0x0, 0x11c450e9, 0x0, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xd1, 0x3, 0x8, {0xa, 0x25, 0x25, 0x0, 0x61, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x30, 0x7, {0xa, 0x25, 0x25, 0xd, 0x3, 0x9}}}}}}}}]}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) write$selinux_load(r0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r4, @ANYRES16=r3, @ANYRESDEC=0x0, @ANYRESHEX], 0x190ec) 791.949797ms ago: executing program 2 (id=167): gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x1e, 0x2, @thr={&(0x7f0000000040)="2fd5012465e0c58e0753ef715055848c7853b9d64f188bedca69b1498ac344aacc3aa8afd9a8f91798a4f6cb136631eb39cdda6d786bab5654b767126c1294493020db2e5140721c5bbf31500af42e9788f77737a082ae015aec217a3f257f84811bbe66a235a589fe9beedfbca58b015d1b0283bcf2772f07486e32f1dd369fe13f3dbbdc320f7e8ee4c038bb3dc71e20345c9da397fa41f7152a98349c58473d9ffc2007bd8ab6590d813114508055f62cf79541ed21734337b181aa43903c2d4e4d2d8c394d523c4b33d384ffa88cbe284a55b95e2fa18ef2b0d13a64c813bb75c6b0f7b9", &(0x7f0000000140)="99c3ebd560733d70014d49093e98a1e58201163b141ed800d8fadf1205edf8aa51cdf37f86ff83beaf854baa9d2f8a0fa0c1836eb75677f3d787ffa0c6d94d86f055"}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) close(0x3) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) recvmmsg(r0, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x39}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x9, 0x40, 0x80, 0x100, 0x2, 0x408c00b8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/ram1/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='1', 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, 0x0) 749.902536ms ago: executing program 2 (id=168): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x3, 0x2, 0x1, {0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}}}, 0x32) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) (async) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x3, 0x2, 0x1, {0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}}}, 0x32) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async) 632.800412ms ago: executing program 2 (id=169): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100a2205a94a3374971142791e51daf110902"], 0x0) 365.71674ms ago: executing program 1 (id=170): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x549}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='utf8', &(0x7f00000001c0)='\x00\x00\xf2qE', 0x0) fsmount(r5, 0x1, 0x9) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x74, 0x14, 0x1, 0x4, 0x25dfdbfe, {0xa}, [@typed={0x4}, @nested={0x48, 0x8, 0x0, 0x1, [@nested={0x42, 0x147, 0x0, 0x1, [@typed={0xc, 0x29, 0x0, 0x0, @u64=0x3ff}, @generic="19636f7a4d7a8e5cc3f82d56982dcb2f9ba1e6833f2f1ad01d9bad8383bd6d713484453fbd3c6815506b22e59374ee7d56d5"]}]}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000003, 0x0, 0x1}]}) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r8, &(0x7f00000002c0)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @empty, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/79, 0x15}, 0x7ffffffc}], 0x1, 0x2040, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0xffffffff}], 0x1, 0x10022, 0x0) 97.480208ms ago: executing program 1 (id=171): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='0x', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/scsi_host/host0/state\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)="88", 0x1) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='1-6:5/', @ANYRESDEC, @ANYRESDEC=r3], 0x31) 4.429759ms ago: executing program 1 (id=172): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000440)={0x0, 0x1, 0x17, 0xd, 0x1f4, &(0x7f0000000040)="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"}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000480)={0x8, 'veth0_virt_wifi\x00', {'ip6tnl0\x00'}, 0x2}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x488140) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$NILFS_IOCTL_GET_CPSTAT(r1, 0x80186e83, &(0x7f0000000500)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000840)={{r0, &(0x7f0000000540)='veth0_virt_wifi\x00', 0x159800, &(0x7f0000000580)={@_ha_fsid={[0x9, 0x40]}, {0x5, 0x6, 0xffff, 0x8}}, 0x4, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000600)=0x1}, 0x3, &(0x7f00000007c0)=[{0x2, 0xf7, &(0x7f0000000640)='veth0_virt_wifi\x00', &(0x7f0000000680)="ed3924982f95549ef615a9ec59890d163726c1c6216b2479739feaba1cc2f42c3126d6", 0x23}, {0x3, 0x5, &(0x7f00000006c0)='/dev/snd/timer\x00', &(0x7f0000000700), 0x0, 0xa}, {0x1, 0x3ef, &(0x7f0000000740)='ip6tnl0\x00', &(0x7f0000000780)="0c6fc5c4c1d359121c2d", 0xa, 0x32}]}) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f00000008c0)=0x1, 0x4) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000900), 0x20000, 0x0) pwritev2(r3, &(0x7f0000001a00)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="e43e5539a2204a2d2936a6e184385681a6606f102e02b45ea27a78889cebd0e7cc04583026988910be0c07fdcd107cb8251df7e3402d490a2879dfeebeb0e2034e0b9612c5b5f34d5896d993e9883c87ee855eec951332a8f7c0b97c15dc34314fd158", 0x63}, {&(0x7f00000019c0)="6283b1a8729c42cd2b1e3611977203fb55c1b60c0826ce", 0x17}], 0x3, 0xfffffffe, 0x1, 0x1a) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000001a40), 0x3) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000001a80)={{0x43e19f2c78193b5c, 0x3, 0x5, 0x3, 0x2}, 0x2c8, 0x54}) pipe2(&(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001b40)='./binderfs/binder0\x00', 0x804, 0x0) pwritev(r6, &(0x7f0000001b80), 0x0, 0x81, 0x7fffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)={0x1, 0x143, 0x10}, 0x18) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001c40), 0x800, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, &(0x7f0000001c80)={0x0, 0x1, 0xe}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001cc0), 0x6c502, 0x0) ioctl$KVM_GET_MSRS_sys(r8, 0xc008ae88, &(0x7f0000001d00)={0x8, 0x0, [{0xa41, 0x0, 0x100000000}, {0x2c7, 0x0, 0x3}, {0x978, 0x0, 0xffffffffffff8001}, {0x8b6, 0x0, 0x1}, {0x48f, 0x0, 0x8}, {0xa60, 0x0, 0x3}, {0x9da, 0x0, 0x400}, {0x90e, 0x0, 0x5}]}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0) read(r8, &(0x7f0000001dc0)=""/137, 0x89) clock_gettime(0x0, &(0x7f0000001e80)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001ec0)={0x0, 0x0}) write$evdev(r5, &(0x7f0000001f00)=[{{0x77359400}, 0x17, 0x200, 0xff}, {{r9, r10/1000+10000}, 0x2, 0xf800, 0x4}, {{0x0, 0xea60}, 0x14, 0x4, 0x10001}, {{0x0, 0x2710}, 0x2, 0x0, 0x100}, {{r11, r12/1000+10000}, 0x11, 0xfffe, 0x9}, {{0x0, 0x2710}, 0x3, 0x9, 0x11e}], 0x90) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000001fc0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000020c0)={'vxcan1\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000002100)={0x1d, r13}, 0x10, &(0x7f00000021c0)={&(0x7f0000002140)=@canfd={{0x0, 0x1}, 0x15, 0x0, 0x0, 0x0, "5521c920fa80fcd5588f3eaf99d2999763592fb6de1ba14fc04004a73964f8baa637c91087e897ef66f85e85a556fb22ad11fc6fbb81a31f26026b3ffbf4e1e8"}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x800) ioctl$TIOCGPTPEER(r5, 0x5441, 0x84) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000003940)={0x2e, 0x41, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003900)=@new_dev={0x1, 0x16a, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x20}}}, &(0x7f00000039c0)) 0s ago: executing program 1 (id=173): r0 = syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0xa, 0x9, 0x47}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x0, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x0, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac2(r0, 0x0, 0x0) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x139840, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) (async) write(r1, &(0x7f0000000280)="7c16dc48f922712baefa0c025b6542cfb7817be1266f7167dd2b5cf91b8eb584eb6dc7cc7470ce878d7848cf38e08ccb51189d4184a020b0532dc5f4fd7e4e825865c9f5d6e407e8ba0b346b3b9e426b0741251e10892b575f1f9327eef00ff4ffb5032835154951f15231a017c2b6565c0e918228890bd49b76d6c598502d2e5f30113789484ae3a3c4998c2798daf6503fc1aa92dc864529ea139a4253f4c9d9565c6269ec30fc61f418a8c8c265ceb5bfe0b3ae6057f87d713732fff27b9f4c30a99a5fef", 0xc6) (async) iopl(0x3) process_mrelease(0xffffffffffffffff, 0x700000000000013) r2 = socket(0x80000000000000a, 0x2, 0x0) read(r1, &(0x7f0000000140)=""/26, 0x1a) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x7, 0x80000006, 0x0, @loopback, @empty, 0x40, 0x20, 0x0, 0xa79}}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001c00000000000000000000000000000000000300004e2200000000008002000000", @ANYRESOCT=r4, @ANYRESDEC=r1, @ANYRES8=r3], 0x104}, 0x1, 0x0, 0x0, 0x44}, 0xc000) sendmsg$netlink(r4, 0xfffffffffffffffc, 0x0) kernel console output (not intermixed with test programs): 16387][ T615] ? __kasan_check_read+0x15/0x20 [ 41.416403][ T615] irqentry_exit_to_user_mode+0x4d/0xb0 [ 41.416423][ T615] irqentry_exit+0x16/0x60 [ 41.416443][ T615] exc_page_fault+0x65/0xc0 [ 41.416462][ T615] asm_exc_page_fault+0x2b/0x30 [ 41.416479][ T615] RIP: 0033:0x7f327559e161 [ 41.416492][ T615] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 41.416506][ T615] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 41.416520][ T615] RAX: 0000000000000000 RBX: 00007f3275825fa0 RCX: 00007f327559e159 [ 41.416533][ T615] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 41.416543][ T615] RBP: 00007f327563506b R08: 0000000000000000 R09: 0000000000000000 [ 41.416554][ T615] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 41.416564][ T615] R13: 00007f3275826038 R14: 00007f3275825fa0 R15: 00007ffe3a37c378 [ 41.416578][ T615] [ 41.477212][ T615] memory: usage 307200kB, limit 307200kB, failcnt 26201 [ 41.509366][ T433] usb usb2-port1: attempt power cycle [ 41.510254][ T615] memory+swap: usage 421780kB, limit 9007199254740988kB, failcnt 0 [ 41.539238][ T319] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 41.541786][ T615] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 41.556186][ T748] block device autoloading is deprecated and will be removed. [ 41.561511][ T615] Memory cgroup stats for [ 41.700299][ T319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.702687][ T615] /syz3 [ 41.707451][ T319] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 41.712687][ T615] : [ 41.712794][ T615] cache 294539264 [ 41.719506][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.725510][ T615] rss 110592 [ 41.734092][ T319] usb 1-1: config 0 descriptor?? [ 41.735171][ T615] rss_huge 0 [ 41.839282][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 41.847876][ T615] shmem 294539264 [ 41.869239][ T433] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 41.869584][ T615] mapped_file 0 [ 41.900178][ T433] usb 2-1: device descriptor read/8, error -71 [ 41.904177][ T615] dirty 0 [ 42.010252][ T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 42.012970][ T615] writeback 0 [ 42.019021][ T10] usb 3-1: config 0 has no interface number 0 [ 42.021946][ T615] workingset_refault_anon 25 [ 42.021956][ T615] workingset_refault_file 2640 [ 42.030385][ T10] usb 3-1: config 0 interface 41 has no altsetting 0 [ 42.033323][ T615] swap 122310656 [ 42.040937][ T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 42.043981][ T615] swapcached 0 [ 42.048712][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.055404][ T615] pgpgin 162135 [ 42.059332][ T10] usb 3-1: Product: syz [ 42.067955][ T615] pgpgout 90710 [ 42.071632][ T10] usb 3-1: Manufacturer: syz [ 42.079349][ T615] pgfault 11814 [ 42.082798][ T433] usb 2-1: device descriptor read/8, error -71 [ 42.086908][ T615] pgmajfault 45 [ 42.090665][ T10] usb 3-1: SerialNumber: syz [ 42.094941][ T615] inactive_anon 246181888 [ 42.101770][ T10] usb 3-1: config 0 descriptor?? [ 42.104530][ T615] active_anon 48467968 [ 42.125808][ T615] inactive_file 0 [ 42.129439][ T615] active_file 0 [ 42.132882][ T615] unevictable 0 [ 42.136313][ T615] hierarchical_memory_limit 314572800 [ 42.141693][ T615] hierarchical_memsw_limit 9223372036854771712 [ 42.147830][ T615] total_cache 294539264 [ 42.153045][ T615] total_rss 110592 [ 42.156764][ T615] total_rss_huge 0 [ 42.160481][ T615] total_shmem 294539264 [ 42.164628][ T615] total_mapped_file 0 [ 42.168595][ T615] total_dirty 0 [ 42.172071][ T615] total_writeback 0 [ 42.175865][ T615] total_workingset_refault_anon 25 [ 42.180976][ T615] total_workingset_refault_file 2640 [ 42.186252][ T615] total_swap 122310656 [ 42.190322][ T615] total_swapcached 0 [ 42.194205][ T615] total_pgpgin 162135 [ 42.198169][ T615] total_pgpgout 90710 [ 42.202155][ T615] total_pgfault 11814 [ 42.206123][ T615] total_pgmajfault 45 [ 42.210108][ T615] total_inactive_anon 246181888 [ 42.214948][ T615] total_active_anon 48467968 [ 42.219549][ T615] total_inactive_file 0 [ 42.223687][ T615] total_active_file 0 [ 42.227643][ T615] total_unevictable 0 [ 42.231637][ T615] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.70,pid=617,uid=0 [ 42.246207][ T615] Memory cgroup out of memory: Killed process 617 (syz.3.70) total-vm:90660kB, anon-rss:1240kB, file-rss:52224kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 42.312778][ T752] ./dev/sda1: Can't lookup blockdev [ 42.329221][ T433] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 42.339276][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 42.339290][ T36] audit: type=1400 audit(1790460836.899:270): avc: denied { search } for pid=745 comm="syz.3.108" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 42.345470][ T594] syz.3.70 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 42.377430][ T10] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32 [ 42.391790][ T433] usb 2-1: device descriptor read/8, error -71 [ 42.416076][ T594] CPU: 1 UID: 0 PID: 594 Comm: syz.3.70 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 42.416103][ T594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.416115][ T594] Call Trace: [ 42.416122][ T594] [ 42.416129][ T594] __dump_stack+0x21/0x30 [ 42.416159][ T594] dump_stack_lvl+0x140/0x1c0 [ 42.416182][ T594] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.416207][ T594] ? ___ratelimit+0x41c/0x5c0 [ 42.416228][ T594] ? __kasan_check_write+0x18/0x20 [ 42.416248][ T594] dump_stack+0x19/0x20 [ 42.416270][ T594] dump_header+0xd9/0x460 [ 42.416293][ T594] oom_kill_process+0x35d/0x640 [ 42.416316][ T594] out_of_memory+0x5d1/0xa20 [ 42.416336][ T594] ? __cfi_out_of_memory+0x10/0x10 [ 42.416356][ T594] ? mutex_lock_killable+0x115/0x1d0 [ 42.416385][ T594] ? __cfi_mutex_lock_killable+0x10/0x10 [ 42.416408][ T594] mem_cgroup_out_of_memory+0x2c5/0x390 [ 42.416428][ T594] ? css_next_descendant_pre+0x1ec/0x210 [ 42.416451][ T594] ? __kasan_check_write+0x18/0x20 [ 42.416470][ T594] ? drain_obj_stock+0xec0/0xec0 [ 42.416490][ T594] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 42.416511][ T594] try_charge_memcg+0x925/0xe10 [ 42.416535][ T594] ? static_key_count+0x45/0x70 [ 42.416563][ T594] ? lruvec_init+0x1f1/0x280 [ 42.416584][ T594] ? __cfi_try_charge_memcg+0x10/0x10 [ 42.416609][ T594] ? __alloc_pages_noprof+0x35a/0x7e0 [ 42.416635][ T594] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 42.416661][ T594] __mem_cgroup_charge+0xfc/0x420 [ 42.416679][ T594] ? folio_add_lru+0x116/0x400 [ 42.416701][ T594] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 42.416721][ T594] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 42.416746][ T594] ? shmem_replace_folio+0x9b0/0x9b0 [ 42.416769][ T594] ? shmem_huge_global_enabled+0x2da/0x360 [ 42.416791][ T594] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 42.416812][ T594] ? __kasan_check_write+0x18/0x20 [ 42.416830][ T594] ? _raw_spin_lock+0x92/0x120 [ 42.416848][ T594] shmem_get_folio_gfp+0x5cd/0x12e0 [ 42.416871][ T594] ? shmem_get_folio+0xc0/0xc0 [ 42.416890][ T594] ? __kasan_check_write+0x18/0x20 [ 42.416908][ T594] ? inode_to_bdi+0x6d/0x100 [ 42.416933][ T594] shmem_write_begin+0xf4/0x260 [ 42.416955][ T594] generic_perform_write+0x32c/0x970 [ 42.416979][ T594] ? inode_update_timestamps+0x4d1/0x6e0 [ 42.417006][ T594] ? __cfi_generic_perform_write+0x10/0x10 [ 42.417030][ T594] ? generic_write_checks_count+0x426/0x540 [ 42.417053][ T594] ? mnt_get_write_access_file+0x1af/0x3b0 [ 42.417078][ T594] ? mnt_put_write_access_file+0xc2/0x100 [ 42.417103][ T594] ? file_update_time+0x1de/0x210 [ 42.417119][ T594] shmem_file_write_iter+0x105/0x130 [ 42.417144][ T594] __kernel_write_iter+0x462/0x900 [ 42.417164][ T594] ? __cfi___kernel_write_iter+0x10/0x10 [ 42.417184][ T594] ? get_dump_page+0x165/0x220 [ 42.417208][ T594] ? __asan_memset+0x39/0x50 [ 42.417225][ T594] ? iov_iter_bvec+0xc0/0x180 [ 42.417251][ T594] dump_user_range+0xb8b/0xe60 [ 42.417273][ T594] ? __cfi_dump_user_range+0x10/0x10 [ 42.417293][ T594] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 42.417320][ T594] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 42.417346][ T594] ? elf_core_dump+0x23cf/0x3840 [ 42.417379][ T594] elf_core_dump+0x2d61/0x3840 [ 42.417404][ T594] ? __cfi_elf_core_dump+0x10/0x10 [ 42.417426][ T594] ? mas_next_slot+0xf01/0xfd0 [ 42.417454][ T594] ? dump_interrupted+0xf0/0xf0 [ 42.417473][ T594] ? 0xffffffffff600000 [ 42.417487][ T594] ? put_dmabuf_info+0xf5/0x200 [ 42.417512][ T594] do_coredump+0x20d2/0x3050 [ 42.417534][ T594] ? __cfi_do_coredump+0x10/0x10 [ 42.417551][ T594] ? asm_exc_page_fault+0x2b/0x30 [ 42.417579][ T594] ? __kasan_slab_free+0x6a/0x80 [ 42.417601][ T594] ? get_signal+0xa2a/0x1490 [ 42.417625][ T594] get_signal+0x11bf/0x1490 [ 42.417651][ T594] arch_do_signal_or_restart+0xbc/0x700 [ 42.417670][ T594] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 42.417691][ T594] ? __kasan_check_read+0x15/0x20 [ 42.417710][ T594] irqentry_exit_to_user_mode+0x4d/0xb0 [ 42.417734][ T594] irqentry_exit+0x16/0x60 [ 42.417756][ T594] exc_page_fault+0x65/0xc0 [ 42.417778][ T594] asm_exc_page_fault+0x2b/0x30 [ 42.417799][ T594] RIP: 0033:0x7f327559e161 [ 42.417815][ T594] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 42.417830][ T594] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 42.417848][ T594] RAX: 0000000000000000 RBX: 00007f3275825fa0 RCX: 00007f327559e159 [ 42.417861][ T594] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 42.417873][ T594] RBP: 00007f327563506b R08: 0000000000000000 R09: 0000000000000000 [ 42.417886][ T594] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 42.417897][ T594] R13: 00007f3275826038 R14: 00007f3275825fa0 R15: 00007ffe3a37c378 [ 42.417913][ T594] [ 42.418001][ T594] memory: usage 307188kB, limit 307200kB, failcnt 27534 [ 42.530185][ T433] usb 2-1: device descriptor read/8, error -71 [ 42.533671][ T594] memory+swap: usage 432144kB, limit 9007199254740988kB, failcnt 0 [ 42.559855][ T319] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 42.561221][ T594] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 42.576324][ T319] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 42.576579][ T594] Memory cgroup stats for [ 42.649399][ T433] usb usb2-port1: unable to enumerate USB device [ 42.691086][ T594] /syz3 [ 42.919161][ T319] usb 1-1: USB disconnect, device number 11 [ 42.919203][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 42.924805][ T594] : [ 42.944850][ T594] cache 311566336 [ 42.991569][ T36] audit: type=1400 audit(1790460837.559:271): avc: granted { setsecparam } for pid=761 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 42.993890][ T594] rss 114688 [ 43.029536][ T36] audit: type=1400 audit(1790460837.559:272): avc: denied { append } for pid=755 comm="syz.3.111" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 43.036080][ T594] rss_huge 0 [ 43.059204][ T36] audit: type=1400 audit(1790460837.579:273): avc: denied { bind } for pid=761 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.086167][ T765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.114'. [ 43.095102][ T765] bridge_slave_1: left allmulticast mode [ 43.104660][ T36] audit: type=1400 audit(1790460837.579:274): avc: denied { write } for pid=761 comm="syz.1.113" path="socket:[6938]" dev="sockfs" ino=6938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.108991][ T594] shmem 310120448 [ 43.128009][ T765] bridge_slave_1: left promiscuous mode [ 43.143052][ T765] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.150779][ T765] bridge_slave_0: left allmulticast mode [ 43.159035][ T765] bridge_slave_0: left promiscuous mode [ 43.162562][ T594] mapped_file 1249280 [ 43.164737][ T765] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.168854][ T594] dirty 4096 [ 43.178797][ T594] writeback 20480 [ 43.182445][ T594] workingset_refault_anon 25 [ 43.187047][ T594] workingset_refault_file 3025 [ 43.191976][ T594] swap 127975424 [ 43.195591][ T594] swapcached 20480 [ 43.199431][ T594] pgpgin 175580 [ 43.202890][ T594] pgpgout 99992 [ 43.206331][ T594] pgfault 12690 [ 43.209942][ T594] pgmajfault 47 [ 43.213421][ T594] inactive_anon 236175360 [ 43.217792][ T594] active_anon 73281536 [ 43.221904][ T594] inactive_file 4096 [ 43.226536][ T594] active_file 1433600 [ 43.230594][ T594] unevictable 0 [ 43.234043][ T594] hierarchical_memory_limit 314572800 [ 43.239421][ T594] hierarchical_memsw_limit 9223372036854771712 [ 43.245655][ T594] total_cache 311566336 [ 43.249820][ T594] total_rss 114688 [ 43.253522][ T594] total_rss_huge 0 [ 43.257225][ T594] total_shmem 310120448 [ 43.261395][ T594] total_mapped_file 1249280 [ 43.265900][ T594] total_dirty 4096 [ 43.269253][ T363] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 43.269612][ T594] total_writeback 20480 [ 43.281177][ T594] total_workingset_refault_anon 25 [ 43.286281][ T594] total_workingset_refault_file 3025 [ 43.291575][ T594] total_swap 127975424 [ 43.295627][ T594] total_swapcached 20480 [ 43.299860][ T594] total_pgpgin 175580 [ 43.303824][ T594] total_pgpgout 99992 [ 43.307777][ T594] total_pgfault 12690 [ 43.311753][ T594] total_pgmajfault 47 [ 43.315722][ T594] total_inactive_anon 236175360 [ 43.320566][ T594] total_active_anon 73281536 [ 43.325135][ T594] total_inactive_file 4096 [ 43.329540][ T594] total_active_file 1433600 [ 43.334025][ T594] total_unevictable 0 [ 43.337985][ T594] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.70,pid=604,uid=0 [ 43.352550][ T594] Memory cgroup out of memory: Killed process 604 (syz.3.70) total-vm:90660kB, anon-rss:1240kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 43.451795][ T363] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.480978][ T363] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.493234][ T363] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 43.502485][ T363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 43.519206][ T363] usb 4-1: SerialNumber: syz [ 43.527005][ T36] audit: type=1400 audit(1790460838.089:275): avc: denied { create } for pid=776 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 43.919219][ T45] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 43.927958][ T615] syz.3.70 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 43.964528][ T363] usb 4-1: 0:2 : does not exist [ 43.969681][ T363] usb 4-1: unit 5 not found! [ 43.977918][ T363] usb 4-1: USB disconnect, device number 7 [ 44.070280][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.080491][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.110528][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 44.115159][ T615] CPU: 0 UID: 0 PID: 615 Comm: syz.3.70 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 44.115187][ T615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.115198][ T615] Call Trace: [ 44.115204][ T615] [ 44.115211][ T615] __dump_stack+0x21/0x30 [ 44.115239][ T615] dump_stack_lvl+0x140/0x1c0 [ 44.115262][ T615] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.115284][ T615] ? ___ratelimit+0x41c/0x5c0 [ 44.115303][ T615] ? __kasan_check_write+0x18/0x20 [ 44.115323][ T615] dump_stack+0x19/0x20 [ 44.115344][ T615] dump_header+0xd9/0x460 [ 44.115366][ T615] oom_kill_process+0x35d/0x640 [ 44.115387][ T615] out_of_memory+0x5d1/0xa20 [ 44.115407][ T615] ? __cfi_out_of_memory+0x10/0x10 [ 44.115426][ T615] ? mutex_lock_killable+0x97/0x1d0 [ 44.115447][ T615] ? __cfi_mutex_lock_killable+0x10/0x10 [ 44.115469][ T615] mem_cgroup_out_of_memory+0x2c5/0x390 [ 44.115488][ T615] ? css_next_descendant_pre+0x1ec/0x210 [ 44.115509][ T615] ? __kasan_check_write+0x18/0x20 [ 44.115526][ T615] ? drain_obj_stock+0xec0/0xec0 [ 44.115545][ T615] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 44.115564][ T615] try_charge_memcg+0x925/0xe10 [ 44.115586][ T615] ? static_key_count+0x45/0x70 [ 44.115608][ T615] ? lruvec_init+0x1f1/0x280 [ 44.115627][ T615] ? __cfi_try_charge_memcg+0x10/0x10 [ 44.115650][ T615] ? __alloc_pages_noprof+0x35a/0x7e0 [ 44.115674][ T615] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 44.115699][ T615] __mem_cgroup_charge+0xfc/0x420 [ 44.115716][ T615] ? folio_add_lru+0x116/0x400 [ 44.115743][ T615] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 44.115761][ T615] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 44.115784][ T615] ? shmem_replace_folio+0x9b0/0x9b0 [ 44.115805][ T615] ? shmem_huge_global_enabled+0x2da/0x360 [ 44.115825][ T615] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 44.115844][ T615] ? __kasan_check_write+0x18/0x20 [ 44.115861][ T615] ? _raw_spin_lock+0x92/0x120 [ 44.115878][ T615] shmem_get_folio_gfp+0x5cd/0x12e0 [ 44.115900][ T615] ? shmem_get_folio+0xc0/0xc0 [ 44.115917][ T615] ? follow_page_pte+0x8fb/0xba0 [ 44.115941][ T615] ? inode_to_bdi+0x6d/0x100 [ 44.115964][ T615] shmem_write_begin+0xf4/0x260 [ 44.115985][ T615] generic_perform_write+0x32c/0x970 [ 44.116010][ T615] ? __cfi_generic_perform_write+0x10/0x10 [ 44.116032][ T615] ? generic_write_checks_count+0x426/0x540 [ 44.116056][ T615] ? file_update_time+0xa3/0x210 [ 44.116071][ T615] shmem_file_write_iter+0x105/0x130 [ 44.116095][ T615] __kernel_write_iter+0x462/0x900 [ 44.116114][ T615] ? __cfi___kernel_write_iter+0x10/0x10 [ 44.116132][ T615] ? get_dump_page+0x165/0x220 [ 44.116153][ T615] ? __asan_memset+0x39/0x50 [ 44.116170][ T615] ? iov_iter_bvec+0xc0/0x180 [ 44.116194][ T615] dump_user_range+0xb8b/0xe60 [ 44.116216][ T615] ? __cfi_dump_user_range+0x10/0x10 [ 44.116235][ T615] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 44.116261][ T615] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 44.116286][ T615] ? elf_core_dump+0x23cf/0x3840 [ 44.116309][ T615] elf_core_dump+0x2d61/0x3840 [ 44.116332][ T615] ? __cfi_elf_core_dump+0x10/0x10 [ 44.116352][ T615] ? mas_next_slot+0xf01/0xfd0 [ 44.116378][ T615] ? dump_interrupted+0xf0/0xf0 [ 44.116396][ T615] ? 0xffffffffff600000 [ 44.116409][ T615] ? put_dmabuf_info+0xf5/0x200 [ 44.116434][ T615] do_coredump+0x20d2/0x3050 [ 44.116454][ T615] ? __cfi_do_coredump+0x10/0x10 [ 44.116470][ T615] ? asm_exc_page_fault+0x2b/0x30 [ 44.116497][ T615] ? __kasan_slab_free+0x6a/0x80 [ 44.116517][ T615] ? get_signal+0xa2a/0x1490 [ 44.116540][ T615] get_signal+0x11bf/0x1490 [ 44.116563][ T615] arch_do_signal_or_restart+0xbc/0x700 [ 44.116581][ T615] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 44.116600][ T615] ? __kasan_check_read+0x15/0x20 [ 44.116618][ T615] irqentry_exit_to_user_mode+0x4d/0xb0 [ 44.116641][ T615] irqentry_exit+0x16/0x60 [ 44.116662][ T615] exc_page_fault+0x65/0xc0 [ 44.116683][ T615] asm_exc_page_fault+0x2b/0x30 [ 44.116702][ T615] RIP: 0033:0x7f327559e161 [ 44.116717][ T615] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 44.116738][ T615] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 44.116754][ T615] RAX: 0000000000000000 RBX: 00007f3275825fa0 RCX: 00007f327559e159 [ 44.116767][ T615] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 44.116779][ T615] RBP: 00007f327563506b R08: 0000000000000000 R09: 0000000000000000 [ 44.116791][ T615] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 44.116801][ T615] R13: 00007f3275826038 R14: 00007f3275825fa0 R15: 00007ffe3a37c378 [ 44.116816][ T615] [ 44.116823][ T615] memory: usage 305912kB, limit 307200kB, failcnt 32075 [ 44.125163][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.504008][ T615] memory+swap: usage 428136kB, limit 9007199254740988kB, failcnt 0 [ 44.513981][ T45] usb 2-1: Product: syz [ 44.639209][ T45] usb 2-1: Manufacturer: syz [ 44.643834][ T45] usb 2-1: SerialNumber: syz [ 44.720450][ T615] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 44.799965][ T615] Memory cgroup stats for /syz3: [ 44.800120][ T615] cache 310857728 [ 44.853454][ T45] usb 2-1: 0:2 : does not exist [ 44.858459][ T45] usb 2-1: unit 9 not found! [ 44.876585][ T45] usb 2-1: USB disconnect, device number 18 [ 44.880843][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.893705][ T615] rss 180224 [ 45.030273][ T615] rss_huge 0 [ 45.080351][ T615] shmem 308965376 [ 45.089434][ T36] audit: type=1400 audit(1790460839.659:276): avc: denied { mounton } for pid=812 comm="syz.0.121" path="/33/file0" dev="tmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 45.134073][ T615] mapped_file 1880064 [ 45.139317][ T615] dirty 4096 [ 45.144755][ T615] writeback 73728 [ 45.150594][ T615] workingset_refault_anon 27 [ 45.156327][ T615] workingset_refault_file 5143 [ 45.164382][ T615] swap 127897600 [ 45.169047][ T615] swapcached 98304 [ 45.189497][ T615] pgpgin 184248 [ 45.195176][ T615] pgpgout 108771 [ 45.201386][ T615] pgfault 13298 [ 45.205969][ T615] pgmajfault 68 [ 45.210575][ T615] inactive_anon 304869376 [ 45.217177][ T615] active_anon 3465216 [ 45.223418][ T615] inactive_file 0 [ 45.228161][ T615] active_file 1482752 [ 45.233329][ T615] unevictable 0 [ 45.237918][ T615] hierarchical_memory_limit 314572800 [ 45.244450][ T615] hierarchical_memsw_limit 9223372036854771712 [ 45.249222][ T363] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 45.251735][ T615] total_cache 310857728 [ 45.263339][ T615] total_rss 180224 [ 45.268176][ T615] total_rss_huge 0 [ 45.272008][ T615] total_shmem 308965376 [ 45.277686][ T615] total_mapped_file 1880064 [ 45.282245][ T615] total_dirty 4096 [ 45.287071][ T615] total_writeback 73728 [ 45.292486][ T615] total_workingset_refault_anon 27 [ 45.299197][ T615] total_workingset_refault_file 5143 [ 45.305786][ T615] total_swap 127897600 [ 45.311014][ T615] total_swapcached 98304 [ 45.316376][ T615] total_pgpgin 184248 [ 45.321529][ T615] total_pgpgout 108771 [ 45.326735][ T615] total_pgfault 13298 [ 45.329377][ T817] netlink: 5 bytes leftover after parsing attributes in process `syz.0.122'. [ 45.331868][ T615] total_pgmajfault 68 [ 45.345672][ T615] total_inactive_anon 304869376 [ 45.350584][ T615] total_active_anon 3465216 [ 45.357801][ T615] total_inactive_file 0 [ 45.362007][ T615] total_active_file 1482752 [ 45.367796][ T615] total_unevictable 0 [ 45.372952][ T615] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.70,pid=603,uid=0 [ 45.409610][ T615] Memory cgroup out of memory: Killed process 603 (syz.3.70) total-vm:90660kB, anon-rss:1240kB, file-rss:53564kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 45.412383][ T363] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 45.459487][ T363] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 45.475530][ T363] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.530713][ T363] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 45.539836][ T363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 45.547912][ T363] usb 4-1: Product: syz [ 45.552317][ T363] usb 4-1: Manufacturer: syz [ 45.556918][ T363] usb 4-1: SerialNumber: syz [ 45.574773][ T36] audit: type=1400 audit(1790460840.139:277): avc: denied { setopt } for pid=823 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.626689][ T36] audit: type=1400 audit(1790460840.139:278): avc: denied { append } for pid=823 comm="syz.1.124" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 45.736480][ T355] usb 3-1: USB disconnect, device number 13 [ 46.008243][ T615] syz.3.70 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 46.038174][ T615] CPU: 1 UID: 0 PID: 615 Comm: syz.3.70 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 46.038206][ T615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.038217][ T615] Call Trace: [ 46.038225][ T615] [ 46.038232][ T615] __dump_stack+0x21/0x30 [ 46.038262][ T615] dump_stack_lvl+0x140/0x1c0 [ 46.038286][ T615] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.038309][ T615] ? ___ratelimit+0x41c/0x5c0 [ 46.038330][ T615] ? __kasan_check_write+0x18/0x20 [ 46.038351][ T615] dump_stack+0x19/0x20 [ 46.038375][ T615] dump_header+0xd9/0x460 [ 46.038399][ T615] oom_kill_process+0x35d/0x640 [ 46.038421][ T615] out_of_memory+0x5d1/0xa20 [ 46.038442][ T615] ? __cfi_out_of_memory+0x10/0x10 [ 46.038462][ T615] ? mutex_lock_killable+0x97/0x1d0 [ 46.038485][ T615] ? __cfi_mutex_lock_killable+0x10/0x10 [ 46.038509][ T615] mem_cgroup_out_of_memory+0x2c5/0x390 [ 46.038529][ T615] ? css_next_descendant_pre+0x1ec/0x210 [ 46.038552][ T615] ? __kasan_check_write+0x18/0x20 [ 46.038571][ T615] ? drain_obj_stock+0xec0/0xec0 [ 46.038591][ T615] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 46.038612][ T615] try_charge_memcg+0x925/0xe10 [ 46.038636][ T615] ? static_key_count+0x45/0x70 [ 46.038660][ T615] ? lruvec_init+0x1f1/0x280 [ 46.038680][ T615] ? __cfi_try_charge_memcg+0x10/0x10 [ 46.038706][ T615] ? __alloc_pages_noprof+0x35a/0x7e0 [ 46.038731][ T615] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 46.038758][ T615] __mem_cgroup_charge+0xfc/0x420 [ 46.038776][ T615] ? folio_add_lru+0x116/0x400 [ 46.038798][ T615] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 46.038818][ T615] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 46.038843][ T615] ? shmem_replace_folio+0x9b0/0x9b0 [ 46.038865][ T615] ? shmem_huge_global_enabled+0x2da/0x360 [ 46.038888][ T615] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 46.038909][ T615] ? __kasan_check_write+0x18/0x20 [ 46.038928][ T615] ? _raw_spin_lock+0x92/0x120 [ 46.038946][ T615] shmem_get_folio_gfp+0x5cd/0x12e0 [ 46.038969][ T615] ? shmem_get_folio+0xc0/0xc0 [ 46.038989][ T615] ? follow_page_pte+0x8fb/0xba0 [ 46.039010][ T615] ? inode_to_bdi+0x6d/0x100 [ 46.039031][ T615] shmem_write_begin+0xf4/0x260 [ 46.039050][ T615] generic_perform_write+0x32c/0x970 [ 46.039072][ T615] ? __cfi_generic_perform_write+0x10/0x10 [ 46.039098][ T615] ? generic_write_checks_count+0x426/0x540 [ 46.039120][ T615] ? file_update_time+0xa3/0x210 [ 46.039134][ T615] shmem_file_write_iter+0x105/0x130 [ 46.039155][ T615] __kernel_write_iter+0x462/0x900 [ 46.039173][ T615] ? __cfi___kernel_write_iter+0x10/0x10 [ 46.039191][ T615] ? get_dump_page+0x165/0x220 [ 46.039214][ T615] ? __asan_memset+0x39/0x50 [ 46.039231][ T615] ? iov_iter_bvec+0xc0/0x180 [ 46.039256][ T615] dump_user_range+0xb8b/0xe60 [ 46.039278][ T615] ? __cfi_dump_user_range+0x10/0x10 [ 46.039298][ T615] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 46.039325][ T615] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 46.039351][ T615] ? elf_core_dump+0x23cf/0x3840 [ 46.039374][ T615] elf_core_dump+0x2d61/0x3840 [ 46.039399][ T615] ? __cfi_elf_core_dump+0x10/0x10 [ 46.039421][ T615] ? mas_next_slot+0xf01/0xfd0 [ 46.039450][ T615] ? dump_interrupted+0xf0/0xf0 [ 46.039469][ T615] ? 0xffffffffff600000 [ 46.039482][ T615] ? put_dmabuf_info+0xf5/0x200 [ 46.039509][ T615] do_coredump+0x20d2/0x3050 [ 46.039531][ T615] ? __cfi_do_coredump+0x10/0x10 [ 46.039549][ T615] ? asm_exc_page_fault+0x2b/0x30 [ 46.039577][ T615] ? __kasan_slab_free+0x6a/0x80 [ 46.039600][ T615] ? get_signal+0xa2a/0x1490 [ 46.039624][ T615] get_signal+0x11bf/0x1490 [ 46.039650][ T615] arch_do_signal_or_restart+0xbc/0x700 [ 46.039669][ T615] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 46.039690][ T615] ? __kasan_check_read+0x15/0x20 [ 46.039709][ T615] irqentry_exit_to_user_mode+0x4d/0xb0 [ 46.039735][ T615] irqentry_exit+0x16/0x60 [ 46.039757][ T615] exc_page_fault+0x65/0xc0 [ 46.039779][ T615] asm_exc_page_fault+0x2b/0x30 [ 46.039799][ T615] RIP: 0033:0x7f327559e161 [ 46.039815][ T615] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 46.039831][ T615] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 46.039848][ T615] RAX: 0000000000000000 RBX: 00007f3275825fa0 RCX: 00007f327559e159 [ 46.039862][ T615] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 46.039875][ T615] RBP: 00007f327563506b R08: 0000000000000000 R09: 0000000000000000 [ 46.039887][ T615] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 46.039899][ T615] R13: 00007f3275826038 R14: 00007f3275825fa0 R15: 00007ffe3a37c378 [ 46.039915][ T615] [ 46.632037][ T615] memory: usage 307200kB, limit 307200kB, failcnt 36492 [ 46.639003][ T615] memory+swap: usage 432136kB, limit 9007199254740988kB, failcnt 0 [ 46.657063][ T615] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 46.664301][ T615] Memory cgroup stats for /syz3: [ 46.664433][ T615] cache 314404864 [ 46.684092][ T615] rss 139264 [ 46.687297][ T615] rss_huge 0 [ 46.699191][ T615] shmem 314400768 [ 46.702826][ T615] mapped_file 0 [ 46.709369][ T615] dirty 0 [ 46.712314][ T615] writeback 0 [ 46.715590][ T615] workingset_refault_anon 30 [ 46.730390][ T615] workingset_refault_file 5796 [ 46.735158][ T615] swap 127934464 [ 46.738689][ T615] swapcached 49152 [ 46.759212][ T615] pgpgin 187814 [ 46.769198][ T615] pgpgout 111525 [ 46.772746][ T615] pgfault 13554 [ 46.786340][ T615] pgmajfault 92 [ 46.789944][ T615] inactive_anon 223866880 [ 46.794264][ T615] active_anon 90701824 [ 46.808638][ T615] inactive_file 4096 [ 46.828677][ T615] active_file 0 [ 46.859254][ T615] unevictable 0 [ 46.862720][ T615] hierarchical_memory_limit 314572800 [ 46.868080][ T615] hierarchical_memsw_limit 9223372036854771712 [ 46.924833][ T615] total_cache 314404864 [ 46.929011][ T615] total_rss 139264 [ 46.965143][ T615] total_rss_huge 0 [ 46.968879][ T615] total_shmem 314400768 [ 47.000926][ T615] total_mapped_file 0 [ 47.004926][ T615] total_dirty 0 [ 47.018697][ T615] total_writeback 0 [ 47.028785][ T615] total_workingset_refault_anon 30 [ 47.042547][ T615] total_workingset_refault_file 5796 [ 47.049207][ T355] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 47.058119][ T615] total_swap 127934464 [ 47.062611][ T615] total_swapcached 49152 [ 47.066851][ T615] total_pgpgin 187814 [ 47.079194][ T615] total_pgpgout 111525 [ 47.085260][ T615] total_pgfault 13554 [ 47.093403][ T615] total_pgmajfault 92 [ 47.097399][ T615] total_inactive_anon 223866880 [ 47.103583][ T615] total_active_anon 90701824 [ 47.108171][ T615] total_inactive_file 4096 [ 47.119348][ T615] total_active_file 0 [ 47.123339][ T615] total_unevictable 0 [ 47.127346][ T615] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.70,pid=593,uid=0 [ 47.149207][ T615] Memory cgroup out of memory: Killed process 593 (syz.3.70) total-vm:90528kB, anon-rss:1240kB, file-rss:36076kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 47.179233][ T355] usb 3-1: device descriptor read/64, error -71 [ 47.293867][ T363] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 47.419215][ T355] usb 3-1: device descriptor read/64, error -71 [ 47.649212][ T363] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 47.659261][ T355] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 47.789286][ T355] usb 3-1: device descriptor read/64, error -71 [ 47.810240][ T363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.823290][ T363] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 47.844326][ T363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.860256][ T363] usb 2-1: config 0 descriptor?? [ 48.039220][ T355] usb 3-1: device descriptor read/64, error -71 [ 48.044396][ T36] audit: type=1400 audit(1790460842.609:279): avc: denied { read write } for pid=811 comm="syz.3.120" name="lp0" dev="devtmpfs" ino=513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 48.080345][ T363] usbhid 2-1:0.0: can't add hid device: -71 [ 48.086299][ T363] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 48.094095][ T36] audit: type=1400 audit(1790460842.609:280): avc: denied { open } for pid=811 comm="syz.3.120" path="/dev/usb/lp0" dev="devtmpfs" ino=513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 48.106304][ T363] usb 2-1: USB disconnect, device number 19 [ 48.151341][ T355] usb usb3-port1: attempt power cycle [ 48.213562][ T36] audit: type=1400 audit(1790460842.779:281): avc: denied { ioctl } for pid=811 comm="syz.3.120" path="/dev/usb/lp0" dev="devtmpfs" ino=513 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 48.319858][ T800] syz.0.117 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 48.489215][ T355] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 48.520209][ T355] usb 3-1: device descriptor read/8, error -71 [ 48.527748][ T800] CPU: 1 UID: 0 PID: 800 Comm: syz.0.117 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 48.527777][ T800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.527789][ T800] Call Trace: [ 48.527795][ T800] [ 48.527802][ T800] __dump_stack+0x21/0x30 [ 48.527831][ T800] dump_stack_lvl+0x140/0x1c0 [ 48.527864][ T800] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.527888][ T800] ? ___ratelimit+0x41c/0x5c0 [ 48.527911][ T800] ? __kasan_check_write+0x18/0x20 [ 48.527931][ T800] dump_stack+0x19/0x20 [ 48.527955][ T800] dump_header+0xd9/0x460 [ 48.527979][ T800] oom_kill_process+0x35d/0x640 [ 48.528001][ T800] out_of_memory+0x5d1/0xa20 [ 48.528022][ T800] ? __cfi_out_of_memory+0x10/0x10 [ 48.528042][ T800] ? mutex_lock_killable+0x97/0x1d0 [ 48.528064][ T800] ? __cfi_mutex_lock_killable+0x10/0x10 [ 48.528088][ T800] mem_cgroup_out_of_memory+0x2c5/0x390 [ 48.528109][ T800] ? css_next_descendant_pre+0x1ec/0x210 [ 48.528131][ T800] ? __kasan_check_write+0x18/0x20 [ 48.528150][ T800] ? drain_obj_stock+0xec0/0xec0 [ 48.528171][ T800] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 48.528191][ T800] try_charge_memcg+0x925/0xe10 [ 48.528216][ T800] ? static_key_count+0x45/0x70 [ 48.528239][ T800] ? lruvec_init+0x1f1/0x280 [ 48.528260][ T800] ? __cfi_try_charge_memcg+0x10/0x10 [ 48.528283][ T800] ? __alloc_pages_noprof+0x35a/0x7e0 [ 48.528324][ T800] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 48.528350][ T800] __mem_cgroup_charge+0xfc/0x420 [ 48.528368][ T800] ? folio_add_lru+0x116/0x400 [ 48.528390][ T800] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 48.528410][ T800] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 48.528434][ T800] ? shmem_replace_folio+0x9b0/0x9b0 [ 48.528456][ T800] ? shmem_huge_global_enabled+0x2da/0x360 [ 48.528478][ T800] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 48.528499][ T800] ? __kasan_check_write+0x18/0x20 [ 48.528517][ T800] ? _raw_spin_lock+0x92/0x120 [ 48.528535][ T800] shmem_get_folio_gfp+0x5cd/0x12e0 [ 48.528558][ T800] ? shmem_get_folio+0xc0/0xc0 [ 48.528577][ T800] ? follow_page_pte+0x8fb/0xba0 [ 48.528602][ T800] ? inode_to_bdi+0x6d/0x100 [ 48.528627][ T800] shmem_write_begin+0xf4/0x260 [ 48.528650][ T800] generic_perform_write+0x32c/0x970 [ 48.528677][ T800] ? __cfi_generic_perform_write+0x10/0x10 [ 48.528700][ T800] ? generic_write_checks_count+0x426/0x540 [ 48.528726][ T800] ? file_update_time+0xa3/0x210 [ 48.528744][ T800] shmem_file_write_iter+0x105/0x130 [ 48.528768][ T800] __kernel_write_iter+0x462/0x900 [ 48.528789][ T800] ? __cfi___kernel_write_iter+0x10/0x10 [ 48.528808][ T800] ? get_dump_page+0x165/0x220 [ 48.528831][ T800] ? __asan_memset+0x39/0x50 [ 48.528856][ T800] ? iov_iter_bvec+0xc0/0x180 [ 48.528881][ T800] dump_user_range+0xb8b/0xe60 [ 48.528903][ T800] ? __cfi_dump_user_range+0x10/0x10 [ 48.528924][ T800] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 48.528950][ T800] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 48.528975][ T800] ? elf_core_dump+0x23cf/0x3840 [ 48.528999][ T800] elf_core_dump+0x2d61/0x3840 [ 48.529023][ T800] ? __cfi_elf_core_dump+0x10/0x10 [ 48.529045][ T800] ? mas_next_slot+0xf01/0xfd0 [ 48.529072][ T800] ? dump_interrupted+0xf0/0xf0 [ 48.529090][ T800] ? filp_open+0x199/0x1f0 [ 48.529114][ T800] ? 0xffffffffff600000 [ 48.529129][ T800] do_coredump+0x20d2/0x3050 [ 48.529150][ T800] ? __cfi_do_coredump+0x10/0x10 [ 48.529170][ T800] ? asm_exc_page_fault+0x2b/0x30 [ 48.529196][ T800] ? __kasan_slab_free+0x6a/0x80 [ 48.529219][ T800] ? get_signal+0xa2a/0x1490 [ 48.529243][ T800] get_signal+0x11bf/0x1490 [ 48.529269][ T800] arch_do_signal_or_restart+0xbc/0x700 [ 48.529288][ T800] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 48.529307][ T800] ? __bad_area_nosemaphore+0x2fb/0x680 [ 48.529327][ T800] irqentry_exit_to_user_mode+0x4d/0xb0 [ 48.529352][ T800] irqentry_exit+0x16/0x60 [ 48.529374][ T800] exc_page_fault+0x65/0xc0 [ 48.529396][ T800] asm_exc_page_fault+0x2b/0x30 [ 48.529417][ T800] RIP: 0033:0x7fa9d3c53bd7 [ 48.529434][ T800] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 48.529449][ T800] RSP: 002b:00007fa9d4caf120 EFLAGS: 00010202 [ 48.529467][ T800] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa9d3d9e159 [ 48.529480][ T800] RDX: 00007fa9d4caf140 RSI: 00007fa9d4caf270 RDI: 000000000000000b [ 48.529494][ T800] RBP: 00007fa9d3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 48.529506][ T800] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 48.529518][ T800] R13: 00007fa9d4026128 R14: 00007fa9d4026090 R15: 00007fff967accc8 [ 48.529534][ T800] [ 48.989478][ T800] memory: usage 307200kB, limit 307200kB, failcnt 6467 [ 48.996378][ T800] memory+swap: usage 318884kB, limit 9007199254740988kB, failcnt 0 [ 49.004387][ T800] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 49.011545][ T800] Memory cgroup stats for /syz0: [ 49.011668][ T800] cache 311648256 [ 49.020318][ T800] rss 2920448 [ 49.023635][ T800] rss_huge 0 [ 49.026859][ T800] shmem 311603200 [ 49.031041][ T800] mapped_file 0 [ 49.034537][ T800] dirty 0 [ 49.037503][ T800] writeback 0 [ 49.040844][ T800] workingset_refault_anon 11 [ 49.045455][ T800] workingset_refault_file 4586 [ 49.050253][ T800] swap 11964416 [ 49.053730][ T800] swapcached 4096 [ 49.057379][ T800] pgpgin 132730 [ 49.060860][ T800] pgpgout 55930 [ 49.064347][ T800] pgfault 32989 [ 49.068164][ T800] pgmajfault 145 [ 49.071768][ T800] inactive_anon 5144576 [ 49.075960][ T800] active_anon 309383168 [ 49.081845][ T800] inactive_file 45056 [ 49.085910][ T800] active_file 0 [ 49.089411][ T800] unevictable 0 [ 49.092968][ T800] hierarchical_memory_limit 314572800 [ 49.098402][ T800] hierarchical_memsw_limit 9223372036854771712 [ 49.104688][ T800] total_cache 311648256 [ 49.108908][ T800] total_rss 2920448 [ 49.112847][ T800] total_rss_huge 0 [ 49.116673][ T800] total_shmem 311603200 [ 49.120942][ T800] total_mapped_file 0 [ 49.124974][ T800] total_dirty 0 [ 49.128542][ T800] total_writeback 0 [ 49.132417][ T800] total_workingset_refault_anon 11 [ 49.137572][ T800] total_workingset_refault_file 4586 [ 49.149116][ T800] total_swap 11964416 [ 49.153335][ T800] total_swapcached 4096 [ 49.157532][ T800] total_pgpgin 132730 [ 49.161711][ T800] total_pgpgout 55930 [ 49.165793][ T800] total_pgfault 32989 [ 49.169970][ T800] total_pgmajfault 145 [ 49.174103][ T800] total_inactive_anon 5144576 [ 49.178873][ T800] total_active_anon 309383168 [ 49.183751][ T800] total_inactive_file 45056 [ 49.188811][ T800] total_active_file 0 [ 49.193165][ T800] total_unevictable 0 [ 49.197195][ T800] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.117,pid=784,uid=0 [ 49.212175][ T800] Memory cgroup out of memory: Killed process 784 (syz.0.117) total-vm:90528kB, anon-rss:1372kB, file-rss:21924kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 49.255800][ T433] usb 4-1: USB disconnect, device number 8 [ 49.278288][ T433] usblp0: removed [ 49.299730][ T355] usb 3-1: device descriptor read/8, error -71 [ 49.339260][ T363] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 49.341763][ T595] syz.3.70 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 49.372128][ T595] CPU: 0 UID: 0 PID: 595 Comm: syz.3.70 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 49.372158][ T595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.372169][ T595] Call Trace: [ 49.372175][ T595] [ 49.372183][ T595] __dump_stack+0x21/0x30 [ 49.372211][ T595] dump_stack_lvl+0x140/0x1c0 [ 49.372235][ T595] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.372258][ T595] ? ___ratelimit+0x41c/0x5c0 [ 49.372279][ T595] ? __kasan_check_write+0x18/0x20 [ 49.372299][ T595] dump_stack+0x19/0x20 [ 49.372321][ T595] dump_header+0xd9/0x460 [ 49.372344][ T595] oom_kill_process+0x35d/0x640 [ 49.372366][ T595] out_of_memory+0x5d1/0xa20 [ 49.372386][ T595] ? __cfi_out_of_memory+0x10/0x10 [ 49.372406][ T595] ? mutex_lock_killable+0x115/0x1d0 [ 49.372428][ T595] ? __cfi_mutex_lock_killable+0x10/0x10 [ 49.372452][ T595] mem_cgroup_out_of_memory+0x2c5/0x390 [ 49.372472][ T595] ? css_next_descendant_pre+0x1ec/0x210 [ 49.372494][ T595] ? __kasan_check_write+0x18/0x20 [ 49.372513][ T595] ? drain_obj_stock+0xec0/0xec0 [ 49.372533][ T595] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 49.372551][ T595] try_charge_memcg+0x925/0xe10 [ 49.372571][ T595] ? static_key_count+0x45/0x70 [ 49.372594][ T595] ? lruvec_init+0x1f1/0x280 [ 49.372613][ T595] ? __cfi_try_charge_memcg+0x10/0x10 [ 49.372634][ T595] ? __alloc_pages_noprof+0x35a/0x7e0 [ 49.372657][ T595] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 49.372679][ T595] __mem_cgroup_charge+0xfc/0x420 [ 49.372697][ T595] ? folio_add_lru+0x116/0x400 [ 49.372718][ T595] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 49.372738][ T595] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 49.372770][ T595] ? shmem_replace_folio+0x9b0/0x9b0 [ 49.372791][ T595] ? shmem_huge_global_enabled+0x2da/0x360 [ 49.372812][ T595] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 49.372834][ T595] shmem_get_folio_gfp+0x5cd/0x12e0 [ 49.372857][ T595] ? shmem_get_folio+0xc0/0xc0 [ 49.372877][ T595] ? __kasan_check_write+0x18/0x20 [ 49.372895][ T595] ? inode_to_bdi+0x6d/0x100 [ 49.372918][ T595] shmem_write_begin+0xf4/0x260 [ 49.372937][ T595] generic_perform_write+0x32c/0x970 [ 49.372961][ T595] ? inode_update_timestamps+0x4d1/0x6e0 [ 49.372988][ T595] ? __cfi_generic_perform_write+0x10/0x10 [ 49.373010][ T595] ? generic_write_checks_count+0x426/0x540 [ 49.373034][ T595] ? mnt_get_write_access_file+0x1af/0x3b0 [ 49.373058][ T595] ? mnt_put_write_access_file+0xc2/0x100 [ 49.373082][ T595] ? file_update_time+0x1de/0x210 [ 49.373100][ T595] shmem_file_write_iter+0x105/0x130 [ 49.373124][ T595] __kernel_write_iter+0x462/0x900 [ 49.373144][ T595] ? __cfi___kernel_write_iter+0x10/0x10 [ 49.373164][ T595] ? __asan_memset+0x39/0x50 [ 49.373181][ T595] ? iov_iter_bvec+0xc0/0x180 [ 49.373204][ T595] dump_user_range+0xb8b/0xe60 [ 49.373225][ T595] ? __cfi_dump_user_range+0x10/0x10 [ 49.373245][ T595] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 49.373271][ T595] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 49.373296][ T595] ? elf_core_dump+0x23cf/0x3840 [ 49.373319][ T595] elf_core_dump+0x2d61/0x3840 [ 49.373343][ T595] ? __cfi_elf_core_dump+0x10/0x10 [ 49.373365][ T595] ? mas_next_slot+0xf01/0xfd0 [ 49.373394][ T595] ? dump_interrupted+0xf0/0xf0 [ 49.373412][ T595] ? 0xffffffffff600000 [ 49.373426][ T595] ? put_dmabuf_info+0xf5/0x200 [ 49.373452][ T595] do_coredump+0x20d2/0x3050 [ 49.373473][ T595] ? __cfi_do_coredump+0x10/0x10 [ 49.373491][ T595] ? asm_exc_page_fault+0x2b/0x30 [ 49.373519][ T595] ? __kasan_slab_free+0x6a/0x80 [ 49.373541][ T595] ? get_signal+0xa2a/0x1490 [ 49.373565][ T595] get_signal+0x11bf/0x1490 [ 49.373590][ T595] arch_do_signal_or_restart+0xbc/0x700 [ 49.373609][ T595] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 49.373630][ T595] ? __kasan_check_read+0x15/0x20 [ 49.373648][ T595] irqentry_exit_to_user_mode+0x4d/0xb0 [ 49.373673][ T595] irqentry_exit+0x16/0x60 [ 49.373694][ T595] exc_page_fault+0x65/0xc0 [ 49.373717][ T595] asm_exc_page_fault+0x2b/0x30 [ 49.373737][ T595] RIP: 0033:0x7f327559e161 [ 49.373763][ T595] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 49.373778][ T595] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 49.373795][ T595] RAX: 0000000000000000 RBX: 00007f3275825fa0 RCX: 00007f327559e159 [ 49.373809][ T595] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 49.373821][ T595] RBP: 00007f327563506b R08: 0000000000000000 R09: 0000000000000000 [ 49.373833][ T595] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 49.373845][ T595] R13: 00007f3275826038 R14: 00007f3275825fa0 R15: 00007ffe3a37c378 [ 49.373861][ T595] [ 49.374031][ T595] memory: usage 307200kB, limit 307200kB, failcnt 40202 [ 49.490313][ T363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.491195][ T595] memory+swap: usage 420380kB, limit 9007199254740988kB, failcnt 0 [ 49.495678][ T363] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 49.500407][ T595] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 49.505758][ T363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.511215][ T595] Memory cgroup stats for [ 49.522060][ T363] usb 2-1: config 0 descriptor?? [ 49.526545][ T595] /syz3: [ 49.895376][ T595] cache 314343424 [ 49.901931][ T595] rss 147456 [ 49.905130][ T595] rss_huge 0 [ 49.908311][ T595] shmem 314302464 [ 49.911949][ T595] mapped_file 4096 [ 49.915721][ T595] dirty 0 [ 49.918661][ T595] writeback 0 [ 49.921973][ T595] workingset_refault_anon 72 [ 49.926561][ T595] workingset_refault_file 10552 [ 49.931471][ T595] swap 115896320 [ 49.935233][ T595] swapcached 102400 [ 49.943287][ T595] pgpgin 211309 [ 49.946756][ T595] pgpgout 135020 [ 49.950322][ T595] pgfault 15938 [ 49.957788][ T595] pgmajfault 232 [ 49.962677][ T595] inactive_anon 305401856 [ 49.967035][ T595] active_anon 9129984 [ 49.971041][ T595] inactive_file 0 [ 49.974719][ T595] active_file 36864 [ 49.978566][ T595] unevictable 0 [ 49.982237][ T595] hierarchical_memory_limit 314572800 [ 49.987657][ T595] hierarchical_memsw_limit 9223372036854771712 [ 49.994016][ T595] total_cache 314343424 [ 49.998231][ T595] total_rss 147456 [ 50.002145][ T595] total_rss_huge 0 [ 50.005903][ T595] total_shmem 314302464 [ 50.012639][ T595] total_mapped_file 4096 [ 50.016915][ T595] total_dirty 0 [ 50.020506][ T595] total_writeback 0 [ 50.024357][ T595] total_workingset_refault_anon 72 [ 50.029519][ T595] total_workingset_refault_file 10552 [ 50.034883][ T595] total_swap 115896320 [ 50.038923][ T595] total_swapcached 102400 [ 50.043289][ T595] total_pgpgin 211309 [ 50.047254][ T595] total_pgpgout 135020 [ 50.051345][ T595] total_pgfault 15938 [ 50.055530][ T595] total_pgmajfault 232 [ 50.059229][ T433] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 50.059763][ T595] total_inactive_anon 305401856 [ 50.074333][ T595] total_active_anon 9129984 [ 50.079370][ T595] total_inactive_file 0 [ 50.083545][ T595] total_active_file 36864 [ 50.087857][ T595] total_unevictable 0 [ 50.091883][ T595] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.70,pid=615,uid=0 [ 50.106498][ T595] Memory cgroup out of memory: Killed process 615 (syz.3.70) total-vm:90660kB, anon-rss:1240kB, file-rss:22112kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 50.229212][ T433] usb 4-1: Using ep0 maxpacket: 16 [ 50.240083][ T433] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.260375][ T433] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.271383][ T433] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.299215][ T433] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 50.312075][ T793] syz.0.117 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 50.329211][ T433] usb 4-1: config 0 interface 0 has no altsetting 0 [ 50.335837][ T433] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 50.349208][ T793] CPU: 0 UID: 0 PID: 793 Comm: syz.0.117 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 50.349235][ T793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.349247][ T793] Call Trace: [ 50.349253][ T793] [ 50.349260][ T793] __dump_stack+0x21/0x30 [ 50.349288][ T793] dump_stack_lvl+0x140/0x1c0 [ 50.349310][ T793] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.349334][ T793] ? ___ratelimit+0x41c/0x5c0 [ 50.349355][ T793] ? __kasan_check_write+0x18/0x20 [ 50.349374][ T793] dump_stack+0x19/0x20 [ 50.349396][ T793] dump_header+0xd9/0x460 [ 50.349419][ T793] oom_kill_process+0x35d/0x640 [ 50.349441][ T793] out_of_memory+0x5d1/0xa20 [ 50.349462][ T793] ? __cfi_out_of_memory+0x10/0x10 [ 50.349482][ T793] ? mutex_lock_killable+0x115/0x1d0 [ 50.349505][ T793] ? __cfi_mutex_lock_killable+0x10/0x10 [ 50.349529][ T793] mem_cgroup_out_of_memory+0x2c5/0x390 [ 50.349549][ T793] ? css_next_descendant_pre+0x1ec/0x210 [ 50.349571][ T793] ? __kasan_check_write+0x18/0x20 [ 50.349590][ T793] ? drain_obj_stock+0xec0/0xec0 [ 50.349611][ T793] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 50.349631][ T793] try_charge_memcg+0x925/0xe10 [ 50.349656][ T793] ? __cfi_try_charge_memcg+0x10/0x10 [ 50.349682][ T793] ? __alloc_pages_noprof+0x35a/0x7e0 [ 50.349707][ T793] __mem_cgroup_charge+0xfc/0x420 [ 50.349725][ T793] ? filemap_get_entry+0x41b/0x490 [ 50.349747][ T793] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 50.349766][ T793] filemap_add_folio+0x57/0x3e0 [ 50.349787][ T793] __filemap_get_folio+0x829/0xe80 [ 50.349808][ T793] ? downgrade_write+0x470/0x470 [ 50.349836][ T793] ? __cfi___filemap_get_folio+0x10/0x10 [ 50.349857][ T793] ? down_read+0x7f/0xe0 [ 50.349879][ T793] ? __cfi_down_read+0x10/0x10 [ 50.349900][ T793] ? filemap_map_pages+0x17c0/0x1b80 [ 50.349923][ T793] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 50.349947][ T793] filemap_fault+0xb8e/0x1ad0 [ 50.349970][ T793] ? __cfi_filemap_fault+0x10/0x10 [ 50.349993][ T793] ? __cfi_filemap_map_pages+0x10/0x10 [ 50.350017][ T793] ? vma_data_pages+0x105/0x140 [ 50.350035][ T793] do_pte_missing+0x364c/0x4440 [ 50.350060][ T793] ? shmem_alloc_and_add_folio+0xd84/0x10b0 [ 50.350083][ T793] ? pte_marker_clear+0x1b0/0x1b0 [ 50.350107][ T793] ? shmem_replace_folio+0x9b0/0x9b0 [ 50.350129][ T793] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 50.350149][ T793] handle_mm_fault+0x1189/0x1ba0 [ 50.350176][ T793] ? __kasan_check_write+0x18/0x20 [ 50.350198][ T793] ? __cfi_handle_mm_fault+0x10/0x10 [ 50.350219][ T793] ? follow_page_pte+0x2c0/0xba0 [ 50.350244][ T793] ? gup_must_unshare+0x1e0/0x1e0 [ 50.350268][ T793] ? vma_is_secretmem+0x11/0x50 [ 50.350292][ T793] ? check_vma_flags+0x337/0x3a0 [ 50.350317][ T793] __get_user_pages+0x114b/0x22d0 [ 50.350341][ T793] ? __kasan_check_write+0x18/0x20 [ 50.350362][ T793] ? populate_vma_page_range+0x220/0x220 [ 50.350385][ T793] ? __kernel_write_iter+0x6ff/0x900 [ 50.350406][ T793] get_dump_page+0x10c/0x220 [ 50.350429][ T793] ? __cfi_get_dump_page+0x10/0x10 [ 50.350451][ T793] ? __asan_memset+0x39/0x50 [ 50.350471][ T793] dump_user_range+0x18b/0xe60 [ 50.350492][ T793] ? __cfi_dump_user_range+0x10/0x10 [ 50.350513][ T793] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 50.350540][ T793] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 50.350566][ T793] ? elf_core_dump+0x23cf/0x3840 [ 50.350590][ T793] elf_core_dump+0x2d61/0x3840 [ 50.350615][ T793] ? __cfi_elf_core_dump+0x10/0x10 [ 50.350637][ T793] ? mas_next_slot+0xf01/0xfd0 [ 50.350665][ T793] ? dump_interrupted+0xf0/0xf0 [ 50.350683][ T793] ? filp_open+0x199/0x1f0 [ 50.350706][ T793] ? 0xffffffffff600000 [ 50.350721][ T793] do_coredump+0x20d2/0x3050 [ 50.350743][ T793] ? __cfi_do_coredump+0x10/0x10 [ 50.350761][ T793] ? asm_exc_page_fault+0x2b/0x30 [ 50.350789][ T793] ? __kasan_slab_free+0x6a/0x80 [ 50.350811][ T793] ? get_signal+0xa2a/0x1490 [ 50.350834][ T793] get_signal+0x11bf/0x1490 [ 50.350859][ T793] arch_do_signal_or_restart+0xbc/0x700 [ 50.350877][ T793] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 50.350896][ T793] ? __bad_area_nosemaphore+0x2fb/0x680 [ 50.350916][ T793] irqentry_exit_to_user_mode+0x4d/0xb0 [ 50.350939][ T793] irqentry_exit+0x16/0x60 [ 50.350961][ T793] exc_page_fault+0x65/0xc0 [ 50.350982][ T793] asm_exc_page_fault+0x2b/0x30 [ 50.351002][ T793] RIP: 0033:0x7fa9d3c53bd7 [ 50.351018][ T793] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 50.351033][ T793] RSP: 002b:00007fa9d4caf120 EFLAGS: 00010202 [ 50.351049][ T793] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa9d3d9e159 [ 50.351062][ T793] RDX: 00007fa9d4caf140 RSI: 00007fa9d4caf270 RDI: 000000000000000b [ 50.351076][ T793] RBP: 00007fa9d3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 50.351088][ T793] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 50.351100][ T793] R13: 00007fa9d4026128 R14: 00007fa9d4026090 R15: 00007fff967accc8 [ 50.351115][ T793] [ 50.351122][ T793] memory: usage 307124kB, limit 307200kB, failcnt 7399 [ 50.354436][ T363] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 50.362531][ T433] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.398899][ T363] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 50.442984][ T793] memory+swap: usage 319752kB, limit 9007199254740988kB, failcnt 0 [ 50.509210][ T355] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 50.510754][ T433] usb 4-1: config 0 descriptor?? [ 50.539624][ T355] usb 3-1: Using ep0 maxpacket: 32 [ 50.774168][ T793] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 50.810255][ T355] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.959217][ T355] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.969007][ T355] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 50.985467][ T355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.000488][ T355] usb 3-1: config 0 descriptor?? [ 51.013754][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 51.018944][ T10] usb 2-1: USB disconnect, device number 20 [ 51.022565][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 51.090605][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 51.114011][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 51.153670][ T433] logitech-djreceiver 0003:046D:C53A.0004: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 51.182827][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 51.192551][ T793] Memory cgroup stats for /syz0: [ 51.192685][ T793] cache 311787520 [ 51.209639][ T793] rss 2744320 [ 51.213003][ T793] rss_huge 0 [ 51.218887][ T793] shmem 311607296 [ 51.222765][ T793] mapped_file 86016 [ 51.226007][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 51.227122][ T793] dirty 4096 [ 51.246369][ T793] writeback 0 [ 51.258099][ T793] workingset_refault_anon 11 [ 51.268897][ T793] workingset_refault_file 10300 [ 51.275306][ T793] swap 13357056 [ 51.276236][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 51.278758][ T793] swapcached 40960 [ 51.278766][ T793] pgpgin 146589 [ 51.278773][ T793] pgpgout 69789 [ 51.302160][ T793] pgfault 33755 [ 51.305629][ T793] pgmajfault 219 [ 51.311991][ T793] inactive_anon 30216192 [ 51.316233][ T793] active_anon 284176384 [ 51.320619][ T793] inactive_file 0 [ 51.324298][ T793] active_file 180224 [ 51.328187][ T793] unevictable 0 [ 51.331475][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 51.331954][ T793] hierarchical_memory_limit 314572800 [ 51.345947][ T793] hierarchical_memsw_limit 9223372036854771712 [ 51.364015][ T793] total_cache 311787520 [ 51.375410][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 51.375472][ T793] total_rss 2744320 [ 51.402388][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 51.402564][ T793] total_rss_huge 0 [ 51.415125][ T793] total_shmem 311607296 [ 51.419270][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 51.423069][ T355] koneplus 0003:1E7D:2D51.0005: hidraw1: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 51.439732][ T793] total_mapped_file 86016 [ 51.444093][ T793] total_dirty 4096 [ 51.447821][ T793] total_writeback 0 [ 51.451691][ T793] total_workingset_refault_anon 11 [ 51.456797][ T793] total_workingset_refault_file 10300 [ 51.462196][ T793] total_swap 13357056 [ 51.466173][ T793] total_swapcached 40960 [ 51.470422][ T793] total_pgpgin 146589 [ 51.474409][ T793] total_pgpgout 69789 [ 51.478382][ T793] total_pgfault 33755 [ 51.482365][ T793] total_pgmajfault 219 [ 51.486423][ T793] total_inactive_anon 30216192 [ 51.491183][ T793] total_active_anon 284176384 [ 51.495851][ T793] total_inactive_file 0 [ 51.500004][ T793] total_active_file 180224 [ 51.504411][ T793] total_unevictable 0 [ 51.508373][ T793] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.117,pid=797,uid=0 [ 51.523011][ T793] Memory cgroup out of memory: Killed process 797 (syz.0.117) total-vm:90796kB, anon-rss:1396kB, file-rss:21900kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 51.576718][ T36] audit: type=1326 audit(1790460846.139:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=854 comm="syz.1.133" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7a559e159 code=0x0 [ 51.640243][ T355] koneplus 0003:1E7D:2D51.0005: couldn't init struct koneplus_device [ 51.649728][ T626] syz.3.70 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 51.659441][ T355] koneplus 0003:1E7D:2D51.0005: couldn't install mouse [ 51.666614][ T626] CPU: 1 UID: 0 PID: 626 Comm: syz.3.70 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 51.666649][ T626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.666661][ T626] Call Trace: [ 51.666667][ T626] [ 51.666674][ T626] __dump_stack+0x21/0x30 [ 51.666703][ T626] dump_stack_lvl+0x140/0x1c0 [ 51.666726][ T626] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.666750][ T626] ? ___ratelimit+0x41c/0x5c0 [ 51.666771][ T626] ? __kasan_check_write+0x18/0x20 [ 51.666791][ T626] dump_stack+0x19/0x20 [ 51.666813][ T626] dump_header+0xd9/0x460 [ 51.666836][ T626] oom_kill_process+0x35d/0x640 [ 51.666859][ T626] out_of_memory+0x5d1/0xa20 [ 51.666879][ T626] ? __cfi_out_of_memory+0x10/0x10 [ 51.666898][ T626] ? mutex_lock_killable+0x115/0x1d0 [ 51.666921][ T626] ? __cfi_mutex_lock_killable+0x10/0x10 [ 51.666944][ T626] mem_cgroup_out_of_memory+0x2c5/0x390 [ 51.666964][ T626] ? css_next_descendant_pre+0x1ec/0x210 [ 51.666986][ T626] ? __kasan_check_write+0x18/0x20 [ 51.667005][ T626] ? drain_obj_stock+0xec0/0xec0 [ 51.667026][ T626] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 51.667045][ T626] try_charge_memcg+0x925/0xe10 [ 51.667068][ T626] ? static_key_count+0x45/0x70 [ 51.667091][ T626] ? lruvec_init+0x1f1/0x280 [ 51.667111][ T626] ? __cfi_try_charge_memcg+0x10/0x10 [ 51.667136][ T626] ? __alloc_pages_noprof+0x35a/0x7e0 [ 51.667161][ T626] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 51.667187][ T626] __mem_cgroup_charge+0xfc/0x420 [ 51.667206][ T626] ? do_pte_missing+0x3894/0x4440 [ 51.667229][ T626] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 51.667249][ T626] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 51.667272][ T626] ? shmem_replace_folio+0x9b0/0x9b0 [ 51.667294][ T626] ? shmem_huge_global_enabled+0x2da/0x360 [ 51.667315][ T626] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 51.667335][ T626] ? __kasan_check_write+0x18/0x20 [ 51.667353][ T626] ? _raw_spin_lock+0x92/0x120 [ 51.667371][ T626] shmem_get_folio_gfp+0x5cd/0x12e0 [ 51.667393][ T626] ? shmem_get_folio+0xc0/0xc0 [ 51.667413][ T626] ? __kasan_check_write+0x18/0x20 [ 51.667431][ T626] ? inode_to_bdi+0x6d/0x100 [ 51.667455][ T626] shmem_write_begin+0xf4/0x260 [ 51.667477][ T626] generic_perform_write+0x32c/0x970 [ 51.667501][ T626] ? inode_update_timestamps+0x4d1/0x6e0 [ 51.667528][ T626] ? __cfi_generic_perform_write+0x10/0x10 [ 51.667551][ T626] ? generic_write_checks_count+0x426/0x540 [ 51.667575][ T626] ? mnt_get_write_access_file+0x1af/0x3b0 [ 51.667600][ T626] ? mnt_put_write_access_file+0xc2/0x100 [ 51.667624][ T626] ? file_update_time+0x1de/0x210 [ 51.667647][ T626] shmem_file_write_iter+0x105/0x130 [ 51.667671][ T626] __kernel_write_iter+0x462/0x900 [ 51.667691][ T626] ? __cfi___kernel_write_iter+0x10/0x10 [ 51.667711][ T626] ? get_dump_page+0x165/0x220 [ 51.667734][ T626] ? __asan_memset+0x39/0x50 [ 51.667752][ T626] ? iov_iter_bvec+0xc0/0x180 [ 51.667777][ T626] dump_user_range+0xb8b/0xe60 [ 51.667799][ T626] ? __cfi_dump_user_range+0x10/0x10 [ 51.667819][ T626] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 51.667846][ T626] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 51.667872][ T626] ? elf_core_dump+0x23cf/0x3840 [ 51.667896][ T626] elf_core_dump+0x2d61/0x3840 [ 51.667943][ T626] ? __cfi_elf_core_dump+0x10/0x10 [ 51.667967][ T626] ? mas_next_slot+0xf01/0xfd0 [ 51.667995][ T626] ? dump_interrupted+0xf0/0xf0 [ 51.668014][ T626] ? 0xffffffffff600000 [ 51.668027][ T626] ? put_dmabuf_info+0xf5/0x200 [ 51.668068][ T626] do_coredump+0x20d2/0x3050 [ 51.668090][ T626] ? __cfi_do_coredump+0x10/0x10 [ 51.668107][ T626] ? asm_exc_page_fault+0x2b/0x30 [ 51.668152][ T626] ? __kasan_slab_free+0x6a/0x80 [ 51.668175][ T626] ? get_signal+0xa2a/0x1490 [ 51.668214][ T626] get_signal+0x11bf/0x1490 [ 51.668239][ T626] arch_do_signal_or_restart+0xbc/0x700 [ 51.668258][ T626] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 51.668278][ T626] ? __kasan_check_read+0x15/0x20 [ 51.668302][ T626] irqentry_exit_to_user_mode+0x4d/0xb0 [ 51.668327][ T626] irqentry_exit+0x16/0x60 [ 51.668349][ T626] exc_page_fault+0x65/0xc0 [ 51.668371][ T626] asm_exc_page_fault+0x2b/0x30 [ 51.668403][ T626] RIP: 0033:0x7f327559e161 [ 51.668431][ T626] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 51.668448][ T626] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 51.668483][ T626] RAX: 0000000000000000 RBX: 00007f3275825fa0 RCX: 00007f327559e159 [ 51.668497][ T626] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 51.668509][ T626] RBP: 00007f327563506b R08: 0000000000000000 R09: 0000000000000000 [ 51.668522][ T626] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 51.668533][ T626] R13: 00007f3275826038 R14: 00007f3275825fa0 R15: 00007ffe3a37c378 [ 51.668550][ T626] [ 51.668557][ T626] memory: usage 307200kB, limit 307200kB, failcnt 42796 [ 52.154581][ T355] koneplus 0003:1E7D:2D51.0005: probe with driver koneplus failed with error -71 [ 52.159292][ T626] memory+swap: usage 419024kB, limit 9007199254740988kB, failcnt 0 [ 52.166379][ T355] usb 3-1: USB disconnect, device number 17 [ 52.203141][ T626] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 52.214167][ T626] Memory cgroup stats for /syz3: [ 52.214302][ T626] cache 314351616 [ 52.228875][ T626] rss 151552 [ 52.234322][ T626] rss_huge 0 [ 52.241457][ T626] shmem 314322944 [ 52.248401][ T626] mapped_file 4096 [ 52.254422][ T626] dirty 0 [ 52.258575][ T626] writeback 0 [ 52.265150][ T626] workingset_refault_anon 72 [ 52.270860][ T626] workingset_refault_file 13949 [ 52.277905][ T626] swap 114507776 [ 52.282584][ T626] swapcached 90112 [ 52.288493][ T626] pgpgin 223764 [ 52.293097][ T626] pgpgout 147475 [ 52.297767][ T626] pgfault 16639 [ 52.303436][ T626] pgmajfault 298 [ 52.307655][ T626] inactive_anon 262627328 [ 52.313302][ T626] active_anon 51916800 [ 52.318122][ T626] inactive_file 28672 [ 52.322848][ T626] active_file 0 [ 52.327428][ T626] unevictable 0 [ 52.332034][ T626] hierarchical_memory_limit 314572800 [ 52.338558][ T626] hierarchical_memsw_limit 9223372036854771712 [ 52.344943][ T626] total_cache 314351616 [ 52.349150][ T626] total_rss 151552 [ 52.353470][ T626] total_rss_huge 0 [ 52.358082][ T626] total_shmem 314322944 [ 52.364318][ T626] total_mapped_file 4096 [ 52.368597][ T626] total_dirty 0 [ 52.372282][ T626] total_writeback 0 [ 52.376958][ T626] total_workingset_refault_anon 72 [ 52.382314][ T626] total_workingset_refault_file 13949 [ 52.388503][ T626] total_swap 114507776 [ 52.392847][ T626] total_swapcached 90112 [ 52.397556][ T626] total_pgpgin 223764 [ 52.403958][ T626] total_pgpgout 147475 [ 52.419408][ T10] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 52.436954][ T626] total_pgfault 16639 [ 52.441094][ T626] total_pgmajfault 298 [ 52.445199][ T626] total_inactive_anon 262627328 [ 52.452504][ T868] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 52.461645][ T626] total_active_anon 51916800 [ 52.466280][ T626] total_inactive_file 28672 [ 52.470849][ T867] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 52.480420][ T626] total_active_file 0 [ 52.484775][ T626] total_unevictable 0 [ 52.488812][ T626] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.70,pid=589,uid=0 [ 52.505624][ T36] audit: type=1400 audit(1790460847.069:283): avc: denied { mounton } for pid=865 comm="syz.1.139" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.531578][ T626] Memory cgroup out of memory: Killed process 589 (syz.3.70) total-vm:90396kB, anon-rss:1236kB, file-rss:22120kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 52.590173][ T36] audit: type=1400 audit(1790460847.129:284): avc: denied { connect } for pid=860 comm="syz.0.136" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.624578][ T619] syz.3.70 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 52.667901][ T36] audit: type=1400 audit(1790460847.159:285): avc: denied { write } for pid=860 comm="syz.0.136" laddr=fe80::7c3c:6fff:feca:4268 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.692745][ T619] CPU: 0 UID: 0 PID: 619 Comm: syz.3.70 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 52.692773][ T619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.692785][ T619] Call Trace: [ 52.692790][ T619] [ 52.692797][ T619] __dump_stack+0x21/0x30 [ 52.692826][ T619] dump_stack_lvl+0x140/0x1c0 [ 52.692845][ T619] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.692865][ T619] ? ___ratelimit+0x41c/0x5c0 [ 52.692884][ T619] ? __kasan_check_write+0x18/0x20 [ 52.692903][ T619] dump_stack+0x19/0x20 [ 52.692925][ T619] dump_header+0xd9/0x460 [ 52.692948][ T619] oom_kill_process+0x35d/0x640 [ 52.692969][ T619] out_of_memory+0x5d1/0xa20 [ 52.692988][ T619] ? __cfi_out_of_memory+0x10/0x10 [ 52.693008][ T619] ? mutex_lock_killable+0x115/0x1d0 [ 52.693039][ T619] ? __cfi_mutex_lock_killable+0x10/0x10 [ 52.693062][ T619] mem_cgroup_out_of_memory+0x2c5/0x390 [ 52.693082][ T619] ? css_next_descendant_pre+0x1ec/0x210 [ 52.693103][ T619] ? __kasan_check_write+0x18/0x20 [ 52.693121][ T619] ? drain_obj_stock+0xec0/0xec0 [ 52.693139][ T619] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 52.693158][ T619] try_charge_memcg+0x925/0xe10 [ 52.693182][ T619] ? __cfi_try_charge_memcg+0x10/0x10 [ 52.693206][ T619] ? __alloc_pages_noprof+0x35a/0x7e0 [ 52.693231][ T619] __mem_cgroup_charge+0xfc/0x420 [ 52.693249][ T619] ? filemap_get_entry+0x41b/0x490 [ 52.693270][ T619] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 52.693288][ T619] filemap_add_folio+0x57/0x3e0 [ 52.693307][ T619] __filemap_get_folio+0x829/0xe80 [ 52.693327][ T619] ? downgrade_write+0x470/0x470 [ 52.693352][ T619] ? __cfi___filemap_get_folio+0x10/0x10 [ 52.693371][ T619] ? down_read+0x7f/0xe0 [ 52.693391][ T619] ? __cfi_down_read+0x10/0x10 [ 52.693413][ T619] ? filemap_map_pages+0x17c0/0x1b80 [ 52.693434][ T619] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 52.693459][ T619] filemap_fault+0xb8e/0x1ad0 [ 52.693482][ T619] ? __cfi_filemap_fault+0x10/0x10 [ 52.693503][ T619] ? __cfi_filemap_map_pages+0x10/0x10 [ 52.693524][ T619] ? vma_data_pages+0x105/0x140 [ 52.693541][ T619] do_pte_missing+0x364c/0x4440 [ 52.693563][ T619] ? shmem_alloc_and_add_folio+0xd84/0x10b0 [ 52.693584][ T619] ? pte_marker_clear+0x1b0/0x1b0 [ 52.693607][ T619] ? shmem_replace_folio+0x9b0/0x9b0 [ 52.693628][ T619] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 52.693646][ T619] handle_mm_fault+0x1189/0x1ba0 [ 52.693666][ T619] ? __kasan_check_write+0x18/0x20 [ 52.693686][ T619] ? __cfi_handle_mm_fault+0x10/0x10 [ 52.693707][ T619] ? follow_page_pte+0x2c0/0xba0 [ 52.693730][ T619] ? gup_must_unshare+0x1e0/0x1e0 [ 52.693753][ T619] ? vma_is_secretmem+0x11/0x50 [ 52.693776][ T619] ? check_vma_flags+0x337/0x3a0 [ 52.693799][ T619] __get_user_pages+0x114b/0x22d0 [ 52.693820][ T619] ? __kasan_check_write+0x18/0x20 [ 52.693838][ T619] ? populate_vma_page_range+0x220/0x220 [ 52.693861][ T619] ? __kernel_write_iter+0x6ff/0x900 [ 52.693881][ T619] get_dump_page+0x10c/0x220 [ 52.693904][ T619] ? __cfi_get_dump_page+0x10/0x10 [ 52.693927][ T619] ? __asan_memset+0x39/0x50 [ 52.693946][ T619] dump_user_range+0x18b/0xe60 [ 52.693968][ T619] ? __cfi_dump_user_range+0x10/0x10 [ 52.693987][ T619] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 52.694014][ T619] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 52.694049][ T619] ? elf_core_dump+0x23cf/0x3840 [ 52.694072][ T619] elf_core_dump+0x2d61/0x3840 [ 52.694096][ T619] ? __cfi_elf_core_dump+0x10/0x10 [ 52.694118][ T619] ? mas_next_slot+0xf01/0xfd0 [ 52.694146][ T619] ? dump_interrupted+0xf0/0xf0 [ 52.694163][ T619] ? 0xffffffffff600000 [ 52.694175][ T619] ? put_dmabuf_info+0xf5/0x200 [ 52.694199][ T619] do_coredump+0x20d2/0x3050 [ 52.694218][ T619] ? __cfi_do_coredump+0x10/0x10 [ 52.694234][ T619] ? asm_exc_page_fault+0x2b/0x30 [ 52.694259][ T619] ? __kasan_slab_free+0x6a/0x80 [ 52.694279][ T619] ? get_signal+0xa2a/0x1490 [ 52.694300][ T619] get_signal+0x11bf/0x1490 [ 52.694323][ T619] arch_do_signal_or_restart+0xbc/0x700 [ 52.694340][ T619] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 52.694356][ T619] ? __kasan_check_read+0x15/0x20 [ 52.694370][ T619] irqentry_exit_to_user_mode+0x4d/0xb0 [ 52.694389][ T619] irqentry_exit+0x16/0x60 [ 52.694406][ T619] exc_page_fault+0x65/0xc0 [ 52.694424][ T619] asm_exc_page_fault+0x2b/0x30 [ 52.694439][ T619] RIP: 0033:0x7f327559e161 [ 52.694452][ T619] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 52.694464][ T619] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 52.694477][ T619] RAX: 0000000000000000 RBX: 00007f3275825fa0 RCX: 00007f327559e159 [ 52.694488][ T619] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 52.694498][ T619] RBP: 00007f327563506b R08: 0000000000000000 R09: 0000000000000000 [ 52.694507][ T619] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 52.694516][ T619] R13: 00007f3275826038 R14: 00007f3275825fa0 R15: 00007ffe3a37c378 [ 52.694529][ T619] [ 52.694554][ T619] memory: usage 300488kB, limit 307200kB, failcnt 43015 [ 52.739711][ T881] exFAT-fs (rnullb0): invalid boot record signature [ 52.751081][ T36] audit: type=1400 audit(1790460847.259:286): avc: denied { ioctl } for pid=880 comm="syz.2.143" path="socket:[7413]" dev="sockfs" ino=7413 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.779230][ T881] exFAT-fs (rnullb0): failed to read boot sector [ 52.803708][ T619] memory+swap: usage 402860kB, limit 9007199254740988kB, failcnt 0 [ 52.839321][ T881] exFAT-fs (rnullb0): failed to recognize exfat type [ 52.897895][ T619] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 53.260754][ T619] Memory cgroup stats for /syz3: [ 53.260886][ T619] cache 301199360 [ 53.272771][ T619] rss 143360 [ 53.275995][ T619] rss_huge 0 [ 53.279222][ T619] shmem 294416384 [ 53.282866][ T619] mapped_file 6709248 [ 53.286865][ T619] dirty 0 [ 53.289865][ T619] writeback 0 [ 53.293235][ T619] workingset_refault_anon 76 [ 53.297857][ T619] workingset_refault_file 15889 [ 53.302719][ T619] swap 104022016 [ 53.306265][ T619] swapcached 90112 [ 53.310036][ T619] pgpgin 229139 [ 53.313560][ T619] pgpgout 156063 [ 53.317126][ T619] pgfault 17828 [ 53.320641][ T619] pgmajfault 311 [ 53.324193][ T619] inactive_anon 6742016 [ 53.328351][ T619] active_anon 287887360 [ 53.332558][ T619] inactive_file 5775360 [ 53.343268][ T619] active_file 1007616 [ 53.351504][ T36] audit: type=1400 audit(1790460847.919:287): avc: denied { append } for pid=887 comm="syz.1.145" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 53.387497][ T619] unevictable 0 [ 53.400266][ T619] hierarchical_memory_limit 314572800 [ 53.417644][ T619] hierarchical_memsw_limit 9223372036854771712 [ 53.436744][ T619] total_cache 301199360 [ 53.442311][ T619] total_rss 143360 [ 53.446058][ T619] total_rss_huge 0 [ 53.470873][ T619] total_shmem 294416384 [ 53.477022][ T619] total_mapped_file 6709248 [ 53.483664][ T619] total_dirty 0 [ 53.487246][ T619] total_writeback 0 [ 53.509191][ T619] total_workingset_refault_anon 76 [ 53.520522][ T619] total_workingset_refault_file 15889 [ 53.538317][ T619] total_swap 104022016 [ 53.552408][ T619] total_swapcached 90112 [ 53.568411][ T619] total_pgpgin 229139 [ 53.576866][ T619] total_pgpgout 156063 [ 53.583583][ T619] total_pgfault 17828 [ 53.597703][ T619] total_pgmajfault 311 [ 53.607476][ T619] total_inactive_anon 6742016 [ 53.619192][ T619] total_active_anon 287887360 [ 53.629219][ T619] total_inactive_file 5775360 [ 53.633919][ T619] total_active_file 1007616 [ 53.639237][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 53.647472][ T619] total_unevictable 0 [ 53.653310][ T619] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.70,pid=623,uid=0 [ 53.683213][ T619] Memory cgroup out of memory: Killed process 623 (syz.3.70) total-vm:90660kB, anon-rss:1240kB, file-rss:22072kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 53.748227][ T614] syz.3.70 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 53.789267][ T614] CPU: 1 UID: 0 PID: 614 Comm: syz.3.70 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 53.789299][ T614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.789310][ T614] Call Trace: [ 53.789316][ T614] [ 53.789323][ T614] __dump_stack+0x21/0x30 [ 53.789352][ T614] dump_stack_lvl+0x140/0x1c0 [ 53.789376][ T614] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.789400][ T614] ? ___ratelimit+0x41c/0x5c0 [ 53.789421][ T614] ? __kasan_check_write+0x18/0x20 [ 53.789442][ T614] dump_stack+0x19/0x20 [ 53.789464][ T614] dump_header+0xd9/0x460 [ 53.789487][ T614] oom_kill_process+0x35d/0x640 [ 53.789508][ T614] out_of_memory+0x5d1/0xa20 [ 53.789527][ T614] ? __cfi_out_of_memory+0x10/0x10 [ 53.789546][ T614] ? mutex_lock_killable+0x115/0x1d0 [ 53.789568][ T614] ? __cfi_mutex_lock_killable+0x10/0x10 [ 53.789590][ T614] mem_cgroup_out_of_memory+0x2c5/0x390 [ 53.789610][ T614] ? css_next_descendant_pre+0x1ec/0x210 [ 53.789633][ T614] ? __kasan_check_write+0x18/0x20 [ 53.789652][ T614] ? drain_obj_stock+0xec0/0xec0 [ 53.789672][ T614] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 53.789691][ T614] try_charge_memcg+0x925/0xe10 [ 53.789713][ T614] ? static_key_count+0x45/0x70 [ 53.789736][ T614] ? lruvec_init+0x1f1/0x280 [ 53.789756][ T614] ? __cfi_try_charge_memcg+0x10/0x10 [ 53.789780][ T614] ? __alloc_pages_noprof+0x35a/0x7e0 [ 53.789806][ T614] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 53.789832][ T614] __mem_cgroup_charge+0xfc/0x420 [ 53.789851][ T614] ? do_pte_missing+0x3894/0x4440 [ 53.789874][ T614] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 53.789894][ T614] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 53.789918][ T614] ? shmem_replace_folio+0x9b0/0x9b0 [ 53.789940][ T614] ? shmem_huge_global_enabled+0x2da/0x360 [ 53.789962][ T614] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 53.789992][ T614] ? __kasan_check_write+0x18/0x20 [ 53.790011][ T614] ? _raw_spin_lock+0x92/0x120 [ 53.790029][ T614] shmem_get_folio_gfp+0x5cd/0x12e0 [ 53.790052][ T614] ? shmem_get_folio+0xc0/0xc0 [ 53.790073][ T614] ? __kasan_check_write+0x18/0x20 [ 53.790090][ T614] ? inode_to_bdi+0x6d/0x100 [ 53.790115][ T614] shmem_write_begin+0xf4/0x260 [ 53.790138][ T614] generic_perform_write+0x32c/0x970 [ 53.790162][ T614] ? inode_update_timestamps+0x4d1/0x6e0 [ 53.790189][ T614] ? __cfi_generic_perform_write+0x10/0x10 [ 53.790213][ T614] ? generic_write_checks_count+0x426/0x540 [ 53.790236][ T614] ? mnt_get_write_access_file+0x1af/0x3b0 [ 53.790262][ T614] ? mnt_put_write_access_file+0xc2/0x100 [ 53.790286][ T614] ? file_update_time+0x1de/0x210 [ 53.790303][ T614] shmem_file_write_iter+0x105/0x130 [ 53.790328][ T614] __kernel_write_iter+0x462/0x900 [ 53.790347][ T614] ? __cfi___kernel_write_iter+0x10/0x10 [ 53.790366][ T614] ? get_dump_page+0x165/0x220 [ 53.790392][ T614] ? __asan_memset+0x39/0x50 [ 53.790410][ T614] ? iov_iter_bvec+0xc0/0x180 [ 53.790436][ T614] dump_user_range+0xb8b/0xe60 [ 53.790457][ T614] ? __cfi_dump_user_range+0x10/0x10 [ 53.790477][ T614] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 53.790504][ T614] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 53.790530][ T614] ? elf_core_dump+0x23cf/0x3840 [ 53.790554][ T614] elf_core_dump+0x2d61/0x3840 [ 53.790578][ T614] ? __cfi_elf_core_dump+0x10/0x10 [ 53.790600][ T614] ? mas_next_slot+0xf01/0xfd0 [ 53.790628][ T614] ? dump_interrupted+0xf0/0xf0 [ 53.790646][ T614] ? 0xffffffffff600000 [ 53.790659][ T614] ? put_dmabuf_info+0xf5/0x200 [ 53.790684][ T614] do_coredump+0x20d2/0x3050 [ 53.790705][ T614] ? __cfi_do_coredump+0x10/0x10 [ 53.790723][ T614] ? asm_exc_page_fault+0x2b/0x30 [ 53.790751][ T614] ? __kasan_slab_free+0x6a/0x80 [ 53.790772][ T614] ? get_signal+0xa2a/0x1490 [ 53.790794][ T614] get_signal+0x11bf/0x1490 [ 53.790819][ T614] arch_do_signal_or_restart+0xbc/0x700 [ 53.790838][ T614] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 53.790858][ T614] ? __kasan_check_read+0x15/0x20 [ 53.790876][ T614] irqentry_exit_to_user_mode+0x4d/0xb0 [ 53.790901][ T614] irqentry_exit+0x16/0x60 [ 53.790923][ T614] exc_page_fault+0x65/0xc0 [ 53.790944][ T614] asm_exc_page_fault+0x2b/0x30 [ 53.790965][ T614] RIP: 0033:0x7f327559e161 [ 53.790989][ T614] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 53.791004][ T614] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 53.791022][ T614] RAX: 0000000000000000 RBX: 00007f3275825fa0 RCX: 00007f327559e159 [ 53.791036][ T614] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 53.791049][ T614] RBP: 00007f327563506b R08: 0000000000000000 R09: 0000000000000000 [ 53.791060][ T614] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 53.791072][ T614] R13: 00007f3275826038 R14: 00007f3275825fa0 R15: 00007ffe3a37c378 [ 53.791087][ T614] [ 53.791132][ T614] memory: usage 306800kB, limit 307200kB, failcnt 44519 [ 54.277723][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.288631][ T31] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 54.289276][ T434] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 54.297691][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.324810][ T31] usb 2-1: config 0 descriptor?? [ 54.360140][ T614] memory+swap: usage 369200kB, limit 9007199254740988kB, failcnt 0 [ 54.450438][ T614] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 54.470303][ T614] Memory cgroup stats for /syz3: [ 54.470464][ T614] cache 291041280 [ 54.509592][ T433] usb 4-1: USB disconnect, device number 9 [ 54.516966][ T614] rss 73728 [ 54.527237][ T614] rss_huge 0 [ 54.539214][ T434] usb 1-1: device descriptor read/64, error -71 [ 54.552484][ T614] shmem 280539136 [ 54.556730][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 54.569246][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 54.579509][ T614] mapped_file 10264576 [ 54.583587][ T614] dirty 4096 [ 54.586774][ T614] writeback 0 [ 54.591043][ T31] usb 2-1: USB disconnect, device number 21 [ 54.639271][ T614] workingset_refault_anon 106 [ 54.654119][ T614] workingset_refault_file 18486 [ 54.658987][ T614] swap 89591808 [ 54.679216][ T355] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 54.696985][ T614] swapcached 172032 [ 54.707376][ T614] pgpgin 245611 [ 54.720169][ T614] pgpgout 174988 [ 54.723721][ T614] pgfault 21072 [ 54.727169][ T614] pgmajfault 342 [ 54.769203][ T614] inactive_anon 3354624 [ 54.783523][ T614] active_anon 277385216 [ 54.787692][ T614] inactive_file 0 [ 54.806637][ T614] active_file 10502144 [ 54.823870][ T614] unevictable 0 [ 54.827341][ T614] hierarchical_memory_limit 314572800 [ 54.840340][ T355] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.842239][ T434] usb 1-1: device descriptor read/64, error -71 [ 54.850520][ T355] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 54.878991][ T355] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.899260][ T355] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 54.908402][ T614] hierarchical_memsw_limit 9223372036854771712 [ 54.914594][ T355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.933061][ T355] usb 3-1: config 0 descriptor?? [ 54.940689][ T614] total_cache 291041280 [ 54.956331][ T614] total_rss 73728 [ 54.966416][ T614] total_rss_huge 0 [ 54.976500][ T614] total_shmem 280539136 [ 54.986586][ T614] total_mapped_file 10264576 [ 55.009192][ T614] total_dirty 4096 [ 55.026980][ T614] total_writeback 0 [ 55.047098][ T614] total_workingset_refault_anon 106 [ 55.059217][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 55.076880][ T614] total_workingset_refault_file 18486 [ 55.096976][ T614] total_swap 89591808 [ 55.109216][ T434] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 55.109237][ T614] total_swapcached 172032 [ 55.109248][ T614] total_pgpgin 245611 [ 55.139630][ T918] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.179204][ T614] total_pgpgout 174988 [ 55.189727][ T614] total_pgfault 21072 [ 55.193766][ T614] total_pgmajfault 342 [ 55.202917][ T614] total_inactive_anon 3354624 [ 55.207612][ T614] total_active_anon 277385216 [ 55.223732][ T614] total_inactive_file 0 [ 55.230710][ T614] total_active_file 10502144 [ 55.235517][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.246511][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 55.258253][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.269420][ T614] total_unevictable 0 [ 55.277359][ T31] usb 2-1: config 0 descriptor?? [ 55.289231][ T434] usb 1-1: device descriptor read/64, error -71 [ 55.294956][ T614] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.70,pid=626,uid=0 [ 55.311644][ T614] Memory cgroup out of memory: OOM victim 626 (syz.3.70) is already exiting. Skip killing the task [ 55.337563][ T800] syz.0.117 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 55.359027][ T800] CPU: 0 UID: 0 PID: 800 Comm: syz.0.117 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 55.359056][ T800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.359067][ T800] Call Trace: [ 55.359073][ T800] [ 55.359080][ T800] __dump_stack+0x21/0x30 [ 55.359109][ T800] dump_stack_lvl+0x140/0x1c0 [ 55.359132][ T800] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.359156][ T800] ? ___ratelimit+0x41c/0x5c0 [ 55.359179][ T800] ? __kasan_check_write+0x18/0x20 [ 55.359199][ T800] dump_stack+0x19/0x20 [ 55.359221][ T800] dump_header+0xd9/0x460 [ 55.359244][ T800] oom_kill_process+0x35d/0x640 [ 55.359265][ T800] out_of_memory+0x5d1/0xa20 [ 55.359286][ T800] ? __cfi_out_of_memory+0x10/0x10 [ 55.359305][ T800] ? mutex_lock_killable+0x115/0x1d0 [ 55.359327][ T800] ? __cfi_mutex_lock_killable+0x10/0x10 [ 55.359357][ T800] mem_cgroup_out_of_memory+0x2c5/0x390 [ 55.359377][ T800] ? css_next_descendant_pre+0x1ec/0x210 [ 55.359398][ T800] ? __kasan_check_write+0x18/0x20 [ 55.359416][ T800] ? drain_obj_stock+0xec0/0xec0 [ 55.359436][ T800] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 55.359456][ T800] try_charge_memcg+0x925/0xe10 [ 55.359478][ T800] ? static_key_count+0x45/0x70 [ 55.359501][ T800] ? lruvec_init+0x1f1/0x280 [ 55.359520][ T800] ? __cfi_try_charge_memcg+0x10/0x10 [ 55.359544][ T800] ? __alloc_pages_noprof+0x35a/0x7e0 [ 55.359569][ T800] ? __switch_to+0xc6b/0x1320 [ 55.359594][ T800] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 55.359619][ T800] __mem_cgroup_charge+0xfc/0x420 [ 55.359637][ T800] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 55.359656][ T800] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 55.359680][ T800] ? shmem_replace_folio+0x9b0/0x9b0 [ 55.359701][ T800] ? shmem_huge_global_enabled+0x2da/0x360 [ 55.359722][ T800] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 55.359742][ T800] ? __kasan_check_write+0x18/0x20 [ 55.359760][ T800] ? _raw_spin_lock+0x92/0x120 [ 55.359776][ T800] shmem_get_folio_gfp+0x5cd/0x12e0 [ 55.359798][ T800] ? shmem_get_folio+0xc0/0xc0 [ 55.359817][ T800] ? follow_page_pte+0x8fb/0xba0 [ 55.359842][ T800] ? inode_to_bdi+0x6d/0x100 [ 55.359867][ T800] shmem_write_begin+0xf4/0x260 [ 55.359889][ T800] generic_perform_write+0x32c/0x970 [ 55.359915][ T800] ? __cfi_generic_perform_write+0x10/0x10 [ 55.359938][ T800] ? generic_write_checks_count+0x426/0x540 [ 55.359963][ T800] ? file_update_time+0xa3/0x210 [ 55.359978][ T800] shmem_file_write_iter+0x105/0x130 [ 55.360000][ T800] __kernel_write_iter+0x462/0x900 [ 55.360019][ T800] ? __cfi___kernel_write_iter+0x10/0x10 [ 55.360038][ T800] ? get_dump_page+0x165/0x220 [ 55.360061][ T800] ? __asan_memset+0x39/0x50 [ 55.360079][ T800] ? iov_iter_bvec+0xc0/0x180 [ 55.360106][ T800] dump_user_range+0xb8b/0xe60 [ 55.360128][ T800] ? __cfi_dump_user_range+0x10/0x10 [ 55.360148][ T800] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 55.360175][ T800] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 55.360201][ T800] ? elf_core_dump+0x23cf/0x3840 [ 55.360225][ T800] elf_core_dump+0x2d61/0x3840 [ 55.360250][ T800] ? __cfi_elf_core_dump+0x10/0x10 [ 55.360272][ T800] ? mas_next_slot+0xf01/0xfd0 [ 55.360299][ T800] ? dump_interrupted+0xf0/0xf0 [ 55.360318][ T800] ? filp_open+0x199/0x1f0 [ 55.360341][ T800] ? 0xffffffffff600000 [ 55.360364][ T800] do_coredump+0x20d2/0x3050 [ 55.360385][ T800] ? __cfi_do_coredump+0x10/0x10 [ 55.360404][ T800] ? asm_exc_page_fault+0x2b/0x30 [ 55.360431][ T800] ? __kasan_slab_free+0x6a/0x80 [ 55.360453][ T800] ? get_signal+0xa2a/0x1490 [ 55.360478][ T800] get_signal+0x11bf/0x1490 [ 55.360503][ T800] arch_do_signal_or_restart+0xbc/0x700 [ 55.360522][ T800] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 55.360541][ T800] ? __bad_area_nosemaphore+0x2fb/0x680 [ 55.360562][ T800] irqentry_exit_to_user_mode+0x4d/0xb0 [ 55.360586][ T800] irqentry_exit+0x16/0x60 [ 55.360608][ T800] exc_page_fault+0x65/0xc0 [ 55.360630][ T800] asm_exc_page_fault+0x2b/0x30 [ 55.360650][ T800] RIP: 0033:0x7fa9d3c53bd7 [ 55.360666][ T800] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 55.360682][ T800] RSP: 002b:00007fa9d4caf120 EFLAGS: 00010202 [ 55.360699][ T800] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa9d3d9e159 [ 55.360713][ T800] RDX: 00007fa9d4caf140 RSI: 00007fa9d4caf270 RDI: 000000000000000b [ 55.360726][ T800] RBP: 00007fa9d3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 55.360738][ T800] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 55.360749][ T800] R13: 00007fa9d4026128 R14: 00007fa9d4026090 R15: 00007fff967accc8 [ 55.360765][ T800] [ 55.749003][ T355] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 55.752111][ T800] memory: usage 307200kB, limit 307200kB, failcnt 25779 [ 55.784655][ T355] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 55.788709][ T800] memory+swap: usage 350064kB, limit 9007199254740988kB, failcnt 0 [ 55.801946][ T355] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 55.809578][ T800] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 55.824894][ T355] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 55.827959][ T800] Memory cgroup stats for [ 55.846136][ T355] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 55.850980][ T800] /syz0: [ 55.884131][ T800] cache 312446976 [ 55.890625][ T800] rss 2080768 [ 55.893938][ T800] rss_huge 0 [ 55.897162][ T800] shmem 312434688 [ 55.900833][ T800] mapped_file 4096 [ 55.904624][ T800] dirty 0 [ 55.907585][ T800] writeback 0 [ 55.910886][ T800] workingset_refault_anon 18 [ 55.915499][ T800] workingset_refault_file 28053 [ 55.919244][ T355] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf3 found [ 55.920537][ T800] swap 43892736 [ 55.929051][ T355] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf4 found [ 55.931465][ T800] swapcached 45056 [ 55.942825][ T800] pgpgin 178990 [ 55.946280][ T800] pgpgout 102190 [ 55.949840][ T800] pgfault 35976 [ 55.953349][ T800] pgmajfault 608 [ 55.956891][ T800] inactive_anon 71831552 [ 55.961149][ T800] active_anon 242728960 [ 55.965351][ T800] inactive_file 12288 [ 55.969343][ T800] active_file 0 [ 55.972791][ T800] unevictable 0 [ 55.976301][ T800] hierarchical_memory_limit 314572800 [ 55.981709][ T434] usb 1-1: device descriptor read/64, error -71 [ 55.988014][ T800] hierarchical_memsw_limit 9223372036854771712 [ 55.994190][ T800] total_cache 312446976 [ 55.998383][ T800] total_rss 2080768 [ 56.002215][ T800] total_rss_huge 0 [ 56.005924][ T800] total_shmem 312434688 [ 56.010129][ T800] total_mapped_file 4096 [ 56.014362][ T800] total_dirty 0 [ 56.017810][ T800] total_writeback 0 [ 56.021664][ T800] total_workingset_refault_anon 18 [ 56.026770][ T800] total_workingset_refault_file 28053 [ 56.032188][ T800] total_swap 43892736 [ 56.036162][ T800] total_swapcached 45056 [ 56.040416][ T800] total_pgpgin 178990 [ 56.044429][ T800] total_pgpgout 102190 [ 56.048488][ T800] total_pgfault 35976 [ 56.052481][ T800] total_pgmajfault 608 [ 56.056587][ T800] total_inactive_anon 71831552 [ 56.061376][ T800] total_active_anon 242728960 [ 56.066038][ T800] total_inactive_file 12288 [ 56.070622][ T800] total_active_file 0 [ 56.074594][ T800] total_unevictable 0 [ 56.078563][ T800] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.117,pid=800,uid=0 [ 56.093354][ T434] usb usb1-port1: attempt power cycle [ 56.099005][ T800] Memory cgroup out of memory: Killed process 800 (syz.0.117) total-vm:90796kB, anon-rss:1400kB, file-rss:24968kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 56.099754][ T31] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 56.126924][ T299] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 56.158090][ T31] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 56.223601][ T299] CPU: 1 UID: 0 PID: 299 Comm: syz-executor Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 56.223631][ T299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.223643][ T299] Call Trace: [ 56.223649][ T299] [ 56.223656][ T299] __dump_stack+0x21/0x30 [ 56.223686][ T299] dump_stack_lvl+0x140/0x1c0 [ 56.223723][ T299] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.223747][ T299] ? ___ratelimit+0x41c/0x5c0 [ 56.223768][ T299] ? __kasan_check_write+0x18/0x20 [ 56.223789][ T299] dump_stack+0x19/0x20 [ 56.223811][ T299] dump_header+0xd9/0x460 [ 56.223836][ T299] oom_kill_process+0x35d/0x640 [ 56.223858][ T299] out_of_memory+0x5d1/0xa20 [ 56.223879][ T299] ? __cfi_out_of_memory+0x10/0x10 [ 56.223899][ T299] ? mutex_lock_killable+0x115/0x1d0 [ 56.223922][ T299] ? __cfi_mutex_lock_killable+0x10/0x10 [ 56.223946][ T299] mem_cgroup_out_of_memory+0x2c5/0x390 [ 56.223967][ T299] ? css_next_descendant_pre+0x1ec/0x210 [ 56.223988][ T299] ? __kasan_check_write+0x18/0x20 [ 56.224008][ T299] ? drain_obj_stock+0xec0/0xec0 [ 56.224029][ T299] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 56.224049][ T299] try_charge_memcg+0x925/0xe10 [ 56.224075][ T299] ? __cfi_try_charge_memcg+0x10/0x10 [ 56.224100][ T299] ? __alloc_pages_noprof+0x35a/0x7e0 [ 56.224126][ T299] __mem_cgroup_charge+0xfc/0x420 [ 56.224144][ T299] ? filemap_get_entry+0x41b/0x490 [ 56.224165][ T299] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 56.224185][ T299] filemap_add_folio+0x57/0x3e0 [ 56.224205][ T299] __filemap_get_folio+0x829/0xe80 [ 56.224227][ T299] ? downgrade_write+0x470/0x470 [ 56.224254][ T299] ? __cfi___filemap_get_folio+0x10/0x10 [ 56.224275][ T299] ? down_read+0x7f/0xe0 [ 56.224296][ T299] ? __cfi_down_read+0x10/0x10 [ 56.224319][ T299] ? filemap_map_pages+0x17c0/0x1b80 [ 56.224341][ T299] ? __kasan_check_write+0x18/0x20 [ 56.224360][ T299] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 56.224385][ T299] filemap_fault+0xb8e/0x1ad0 [ 56.224409][ T299] ? __cfi_filemap_fault+0x10/0x10 [ 56.224431][ T299] ? __kasan_check_write+0x18/0x20 [ 56.224450][ T299] ? __cfi_filemap_map_pages+0x10/0x10 [ 56.224474][ T299] ? __schedule+0x149e/0x20b0 [ 56.224494][ T299] ? vma_data_pages+0x105/0x140 [ 56.224512][ T299] do_pte_missing+0x364c/0x4440 [ 56.224537][ T299] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 56.224557][ T299] ? hrtimer_start_range_ns+0x123f/0x2030 [ 56.224583][ T299] ? pte_marker_clear+0x1b0/0x1b0 [ 56.224606][ T299] ? __kasan_check_write+0x18/0x20 [ 56.224625][ T299] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 56.224644][ T299] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 56.224663][ T299] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 56.224683][ T299] handle_mm_fault+0x1189/0x1ba0 [ 56.224712][ T299] ? __cfi_handle_mm_fault+0x10/0x10 [ 56.224732][ T299] ? lock_vma_under_rcu+0x4cf/0x590 [ 56.224756][ T299] ? __cfi___x64_sys_wait4+0x10/0x10 [ 56.224782][ T299] do_user_addr_fault+0x951/0x1230 [ 56.224799][ T299] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 56.224824][ T299] exc_page_fault+0x58/0xc0 [ 56.224846][ T299] asm_exc_page_fault+0x2b/0x30 [ 56.224868][ T299] RIP: 0033:0x7f327546c014 [ 56.224884][ T299] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 a0 97 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 99 96 ee 00 48 01 d1 [ 56.224900][ T299] RSP: 002b:00007ffe3a37c6e0 EFLAGS: 00010202 [ 56.224917][ T299] RAX: 0000001b2f024000 RBX: 0000000000000077 RCX: 000000000000c738 [ 56.224931][ T299] RDX: 0000000005820c02 RSI: 00007ffe3a37c770 RDI: 0000000000000001 [ 56.224944][ T299] RBP: 00007ffe3a37c71c R08: 000000001502e6f2 R09: 4000000000000000 [ 56.224957][ T299] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 56.224969][ T299] R13: 00000000000927c0 R14: 000000000000c7c5 R15: 00007ffe3a37c770 [ 56.224985][ T299] [ 56.297588][ T299] memory: usage 307196kB, limit 307200kB, failcnt 47853 [ 56.541502][ T31] usb 2-1: USB disconnect, device number 22 [ 56.557403][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 56.557750][ T299] memory+swap: usage 371896kB, limit 9007199254740988kB, failcnt 0 [ 56.635226][ T434] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 56.643158][ T299] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 56.650107][ T299] Memory cgroup stats for /syz3: [ 56.650235][ T299] cache 293474304 [ 56.658807][ T299] rss 192512 [ 56.662172][ T299] rss_huge 0 [ 56.665366][ T299] shmem 293265408 [ 56.668990][ T299] mapped_file 143360 [ 56.673056][ T299] dirty 4096 [ 56.676321][ T299] writeback 0 [ 56.680344][ T434] usb 1-1: device descriptor read/8, error -71 [ 56.686533][ T299] workingset_refault_anon 142 [ 56.699196][ T299] workingset_refault_file 18947 [ 56.704048][ T299] swap 67035136 [ 56.707494][ T299] swapcached 208896 [ 56.729192][ T299] pgpgin 292046 [ 56.732665][ T299] pgpgout 220838 [ 56.736202][ T299] pgfault 27521 [ 56.746548][ T299] pgmajfault 390 [ 56.750207][ T299] inactive_anon 117329920 [ 56.754847][ T299] active_anon 176214016 [ 56.759294][ T299] inactive_file 65536 [ 56.763266][ T299] active_file 12288 [ 56.767061][ T299] unevictable 0 [ 56.770810][ T299] hierarchical_memory_limit 314572800 [ 56.776296][ T299] hierarchical_memsw_limit 9223372036854771712 [ 56.782638][ T299] total_cache 293474304 [ 56.786788][ T299] total_rss 192512 [ 56.790827][ T299] total_rss_huge 0 [ 56.794546][ T299] total_shmem 293265408 [ 56.798694][ T299] total_mapped_file 143360 [ 56.810313][ T434] usb 1-1: device descriptor read/8, error -71 [ 56.829260][ T299] total_dirty 4096 [ 56.832984][ T299] total_writeback 0 [ 56.836783][ T299] total_workingset_refault_anon 142 [ 56.869192][ T299] total_workingset_refault_file 18947 [ 56.874577][ T299] total_swap 67035136 [ 56.878549][ T299] total_swapcached 208896 [ 56.909534][ T299] total_pgpgin 292046 [ 56.913537][ T299] total_pgpgout 220838 [ 56.917593][ T299] total_pgfault 27521 [ 56.944721][ T299] total_pgmajfault 390 [ 56.948815][ T299] total_inactive_anon 117329920 [ 56.965717][ T299] total_active_anon 176214016 [ 56.970542][ T299] total_inactive_file 65536 [ 56.975084][ T299] total_active_file 12288 [ 56.981042][ T299] total_unevictable 0 [ 56.985060][ T299] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.70,pid=602,uid=0 [ 56.999731][ T299] Memory cgroup out of memory: OOM victim 602 (syz.3.70) is already exiting. Skip killing the task [ 57.019220][ T31] usb 3-1: reset full-speed USB device number 18 using dummy_hcd [ 57.059217][ T434] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 57.169733][ T807] syz.0.117 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 57.170304][ T434] usb 1-1: device descriptor read/8, error -71 [ 57.199429][ T925] overlay: Unknown parameter 'silent' [ 57.286573][ T807] CPU: 1 UID: 0 PID: 807 Comm: syz.0.117 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 57.286606][ T807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.286619][ T807] Call Trace: [ 57.286626][ T807] [ 57.286642][ T807] __dump_stack+0x21/0x30 [ 57.286675][ T807] dump_stack_lvl+0x140/0x1c0 [ 57.286699][ T807] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.286723][ T807] ? ___ratelimit+0x41c/0x5c0 [ 57.286745][ T807] ? __kasan_check_write+0x18/0x20 [ 57.286766][ T807] dump_stack+0x19/0x20 [ 57.286789][ T807] dump_header+0xd9/0x460 [ 57.286813][ T807] oom_kill_process+0x35d/0x640 [ 57.286836][ T807] out_of_memory+0x5d1/0xa20 [ 57.286857][ T807] ? __cfi_out_of_memory+0x10/0x10 [ 57.286878][ T807] ? mutex_lock_killable+0x115/0x1d0 [ 57.286901][ T807] ? __cfi_mutex_lock_killable+0x10/0x10 [ 57.286925][ T807] mem_cgroup_out_of_memory+0x2c5/0x390 [ 57.286945][ T807] ? css_next_descendant_pre+0x1ec/0x210 [ 57.286968][ T807] ? __kasan_check_write+0x18/0x20 [ 57.286988][ T807] ? drain_obj_stock+0xec0/0xec0 [ 57.287009][ T807] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 57.287029][ T807] try_charge_memcg+0x925/0xe10 [ 57.287055][ T807] ? __cfi_try_charge_memcg+0x10/0x10 [ 57.287081][ T807] ? __alloc_pages_noprof+0x35a/0x7e0 [ 57.287107][ T807] __mem_cgroup_charge+0xfc/0x420 [ 57.287125][ T807] ? filemap_get_entry+0x41b/0x490 [ 57.287147][ T807] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 57.287167][ T807] filemap_add_folio+0x57/0x3e0 [ 57.287188][ T807] __filemap_get_folio+0x829/0xe80 [ 57.287209][ T807] ? downgrade_write+0x470/0x470 [ 57.287236][ T807] ? __cfi___filemap_get_folio+0x10/0x10 [ 57.287258][ T807] ? down_read+0x7f/0xe0 [ 57.287280][ T807] ? __cfi_down_read+0x10/0x10 [ 57.287302][ T807] ? filemap_map_pages+0x17c0/0x1b80 [ 57.287325][ T807] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 57.287350][ T807] filemap_fault+0xb8e/0x1ad0 [ 57.287374][ T807] ? __cfi_filemap_fault+0x10/0x10 [ 57.287397][ T807] ? __cfi_filemap_map_pages+0x10/0x10 [ 57.287422][ T807] ? vma_data_pages+0x105/0x140 [ 57.287441][ T807] do_pte_missing+0x364c/0x4440 [ 57.287466][ T807] ? shmem_alloc_and_add_folio+0xd84/0x10b0 [ 57.287489][ T807] ? pte_marker_clear+0x1b0/0x1b0 [ 57.287513][ T807] ? shmem_replace_folio+0x9b0/0x9b0 [ 57.287536][ T807] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 57.287557][ T807] handle_mm_fault+0x1189/0x1ba0 [ 57.287578][ T807] ? __kasan_check_write+0x18/0x20 [ 57.287600][ T807] ? __cfi_handle_mm_fault+0x10/0x10 [ 57.287647][ T807] ? follow_page_pte+0x2c0/0xba0 [ 57.287674][ T807] ? gup_must_unshare+0x1e0/0x1e0 [ 57.287698][ T807] ? vma_is_secretmem+0x11/0x50 [ 57.287722][ T807] ? check_vma_flags+0x337/0x3a0 [ 57.287748][ T807] __get_user_pages+0x114b/0x22d0 [ 57.287773][ T807] ? __kasan_check_write+0x18/0x20 [ 57.287794][ T807] ? populate_vma_page_range+0x220/0x220 [ 57.287817][ T807] ? __kernel_write_iter+0x6ff/0x900 [ 57.287838][ T807] get_dump_page+0x10c/0x220 [ 57.287861][ T807] ? __cfi_get_dump_page+0x10/0x10 [ 57.287885][ T807] ? __asan_memset+0x39/0x50 [ 57.287904][ T807] dump_user_range+0x18b/0xe60 [ 57.287927][ T807] ? __cfi_dump_user_range+0x10/0x10 [ 57.287947][ T807] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 57.287974][ T807] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 57.288000][ T807] ? elf_core_dump+0x23cf/0x3840 [ 57.288023][ T807] elf_core_dump+0x2d61/0x3840 [ 57.288048][ T807] ? __cfi_elf_core_dump+0x10/0x10 [ 57.288070][ T807] ? mas_next_slot+0xf01/0xfd0 [ 57.288098][ T807] ? dump_interrupted+0xf0/0xf0 [ 57.288116][ T807] ? filp_open+0x199/0x1f0 [ 57.288140][ T807] ? 0xffffffffff600000 [ 57.288156][ T807] do_coredump+0x20d2/0x3050 [ 57.288178][ T807] ? __cfi_do_coredump+0x10/0x10 [ 57.288196][ T807] ? asm_exc_page_fault+0x2b/0x30 [ 57.288224][ T807] ? __kasan_slab_free+0x6a/0x80 [ 57.288246][ T807] ? get_signal+0xa2a/0x1490 [ 57.288270][ T807] get_signal+0x11bf/0x1490 [ 57.288295][ T807] arch_do_signal_or_restart+0xbc/0x700 [ 57.288313][ T807] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 57.288334][ T807] ? __bad_area_nosemaphore+0x2fb/0x680 [ 57.288353][ T807] irqentry_exit_to_user_mode+0x4d/0xb0 [ 57.288379][ T807] irqentry_exit+0x16/0x60 [ 57.288401][ T807] exc_page_fault+0x65/0xc0 [ 57.288424][ T807] asm_exc_page_fault+0x2b/0x30 [ 57.288444][ T807] RIP: 0033:0x7fa9d3c53bd7 [ 57.288461][ T807] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 57.288478][ T807] RSP: 002b:00007fa9d4caf120 EFLAGS: 00010202 [ 57.288496][ T807] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa9d3d9e159 [ 57.288510][ T807] RDX: 00007fa9d4caf140 RSI: 00007fa9d4caf270 RDI: 000000000000000b [ 57.288524][ T807] RBP: 00007fa9d3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 57.288536][ T807] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 57.288548][ T807] R13: 00007fa9d4026128 R14: 00007fa9d4026090 R15: 00007fff967accc8 [ 57.288564][ T807] [ 57.393276][ T434] usb 1-1: device descriptor read/8, error -71 [ 57.514152][ T807] memory: usage 307132kB, limit 307200kB, failcnt 29071 [ 57.541235][ T36] audit: type=1400 audit(1790460852.089:288): avc: denied { map } for pid=926 comm="syz.3.156" path="socket:[8511]" dev="sockfs" ino=8511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.545318][ T355] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 57.566482][ T36] audit: type=1400 audit(1790460852.089:289): avc: denied { read } for pid=926 comm="syz.3.156" path="socket:[8511]" dev="sockfs" ino=8511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.579248][ T807] memory+swap: usage 361172kB, limit 9007199254740988kB, failcnt 0 [ 57.681132][ T36] audit: type=1400 audit(1790460852.249:290): avc: denied { write } for pid=930 comm="syz.2.157" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.688121][ T807] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 57.761250][ T434] usb usb1-port1: unable to enumerate USB device [ 57.790354][ T355] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 57.908529][ T355] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 57.922059][ T355] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 57.939552][ T807] Memory cgroup stats for /syz0: [ 57.939585][ T355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.939681][ T807] cache 312987648 [ 57.944544][ T355] usb 2-1: Product: syz [ 57.944562][ T355] usb 2-1: Manufacturer: syz [ 57.965867][ T355] usb 2-1: SerialNumber: syz [ 58.142922][ T807] rss 163840 [ 58.173505][ T807] rss_huge 0 [ 58.179306][ T355] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 58.196190][ T36] audit: type=1400 audit(1790460852.759:291): avc: denied { bind } for pid=921 comm="syz.1.155" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.245918][ T36] audit: type=1400 audit(1790460852.759:292): avc: denied { name_bind } for pid=921 comm="syz.1.155" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 58.280121][ T807] shmem 301711360 [ 58.295460][ T936] kvm: MONITOR instruction emulated as NOP! [ 58.303607][ T36] audit: type=1400 audit(1790460852.759:293): avc: denied { node_bind } for pid=921 comm="syz.1.155" saddr=fe80::bb src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 58.352617][ T807] mapped_file 10600448 [ 58.356718][ T807] dirty 0 [ 58.402517][ T45] usb 3-1: USB disconnect, device number 18 [ 58.427327][ T36] audit: type=1326 audit(1790460852.989:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=946 comm="syz.2.161" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbae839e159 code=0x0 [ 58.452165][ T807] writeback 733184 [ 58.455885][ T807] workingset_refault_anon 20 [ 58.538749][ T807] workingset_refault_file 30113 [ 58.565370][ T807] swap 59408384 [ 58.587303][ T807] swapcached 1069056 [ 58.608491][ T807] pgpgin 189478 [ 58.629406][ T807] pgpgout 112764 [ 58.655669][ T807] pgfault 36576 [ 58.678685][ T807] pgmajfault 629 [ 58.687814][ T807] inactive_anon 117972992 [ 58.719268][ T355] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 58.720083][ T807] active_anon 182976512 [ 58.827779][ T807] inactive_file 7639040 [ 58.847021][ T807] active_file 3637248 [ 58.870301][ T355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.889258][ T355] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 58.895356][ T960] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.909205][ T355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.927911][ T355] usb 4-1: config 0 descriptor?? [ 58.940335][ T807] unevictable 0 [ 58.954479][ T807] hierarchical_memory_limit 314572800 [ 59.003102][ T807] hierarchical_memsw_limit 9223372036854771712 [ 59.027618][ T807] total_cache 312987648 [ 59.046106][ T807] total_rss 163840 [ 59.056228][ T962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.075845][ T962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.094476][ T807] total_rss_huge 0 [ 59.104659][ T807] total_shmem 301711360 [ 59.109123][ T36] audit: type=1400 audit(1790460853.669:295): avc: denied { load_policy } for pid=961 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 59.109422][ T807] total_mapped_file 10600448 [ 59.129062][ T434] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 59.133944][ T962] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 59.154144][ T962] SELinux: failed to load policy [ 59.154202][ T355] usbhid 4-1:0.0: can't add hid device: -71 [ 59.165387][ T355] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 59.179288][ T355] usb 4-1: USB disconnect, device number 10 [ 59.191969][ T807] total_dirty 0 [ 59.195469][ T807] total_writeback 733184 [ 59.203352][ T807] total_workingset_refault_anon 20 [ 59.208502][ T807] total_workingset_refault_file 30113 [ 59.214064][ T807] total_swap 59408384 [ 59.218039][ T807] total_swapcached 1069056 [ 59.287368][ T807] total_pgpgin 189478 [ 59.299551][ T434] usb 1-1: device descriptor read/64, error -71 [ 59.305970][ T807] total_pgpgout 112764 [ 59.324506][ T807] total_pgfault 36576 [ 59.328506][ T807] total_pgmajfault 629 [ 59.365962][ T807] total_inactive_anon 117972992 [ 59.371013][ T807] total_active_anon 182976512 [ 59.375694][ T807] total_inactive_file 7639040 [ 59.380563][ T807] total_active_file 3637248 [ 59.385098][ T807] total_unevictable 0 [ 59.403655][ T807] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.117,pid=785,uid=0 [ 59.418498][ T807] Memory cgroup out of memory: Killed process 785 (syz.0.117) total-vm:90528kB, anon-rss:1344kB, file-rss:29752kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000 [ 59.539229][ T434] usb 1-1: device descriptor read/64, error -71 [ 59.589205][ T355] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 59.709911][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 59.744165][ T355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.769247][ T355] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 59.778313][ T355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.789424][ T434] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 59.819870][ T355] usb 4-1: config 0 descriptor?? [ 59.849208][ T10] usb 3-1: device descriptor read/64, error -71 [ 59.929214][ T434] usb 1-1: device descriptor read/64, error -71 [ 59.950585][ T795] syz.0.117 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 59.996453][ T36] audit: type=1400 audit(1790460854.559:296): avc: denied { search } for pid=976 comm="syz.1.171" name="/" dev="configfs" ino=2374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.051102][ T45] usb 2-1: USB disconnect, device number 23 [ 60.060581][ T45] usblp0: removed [ 60.099250][ T10] usb 3-1: device descriptor read/64, error -71 [ 60.149296][ T795] CPU: 0 UID: 0 PID: 795 Comm: syz.0.117 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 60.149329][ T795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.149342][ T795] Call Trace: [ 60.149351][ T795] [ 60.149359][ T795] __dump_stack+0x21/0x30 [ 60.149389][ T795] dump_stack_lvl+0x140/0x1c0 [ 60.149413][ T795] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.149437][ T795] ? ___ratelimit+0x41c/0x5c0 [ 60.149458][ T795] ? __kasan_check_write+0x18/0x20 [ 60.149480][ T795] dump_stack+0x19/0x20 [ 60.149503][ T795] dump_header+0xd9/0x460 [ 60.149527][ T795] oom_kill_process+0x35d/0x640 [ 60.149551][ T795] out_of_memory+0x5d1/0xa20 [ 60.149572][ T795] ? __cfi_out_of_memory+0x10/0x10 [ 60.149593][ T795] ? mutex_lock_killable+0x97/0x1d0 [ 60.149617][ T795] ? __cfi_mutex_lock_killable+0x10/0x10 [ 60.149641][ T795] mem_cgroup_out_of_memory+0x2c5/0x390 [ 60.149662][ T795] ? css_next_descendant_pre+0x1ec/0x210 [ 60.149684][ T795] ? __kasan_check_write+0x18/0x20 [ 60.149704][ T795] ? drain_obj_stock+0xec0/0xec0 [ 60.149725][ T795] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 60.149746][ T795] try_charge_memcg+0x925/0xe10 [ 60.149770][ T795] ? static_key_count+0x45/0x70 [ 60.149794][ T795] ? lruvec_init+0x1f1/0x280 [ 60.149815][ T795] ? __cfi_try_charge_memcg+0x10/0x10 [ 60.149840][ T795] ? __alloc_pages_noprof+0x35a/0x7e0 [ 60.149866][ T795] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 60.149893][ T795] __mem_cgroup_charge+0xfc/0x420 [ 60.149912][ T795] ? do_pte_missing+0x3894/0x4440 [ 60.149934][ T795] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 60.149961][ T795] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 60.149986][ T795] ? shmem_replace_folio+0x9b0/0x9b0 [ 60.150009][ T795] ? shmem_huge_global_enabled+0x2da/0x360 [ 60.150032][ T795] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 60.150053][ T795] ? __kasan_check_write+0x18/0x20 [ 60.150072][ T795] ? _raw_spin_lock+0x92/0x120 [ 60.150091][ T795] shmem_get_folio_gfp+0x5cd/0x12e0 [ 60.150114][ T795] ? shmem_get_folio+0xc0/0xc0 [ 60.150134][ T795] ? __kasan_check_write+0x18/0x20 [ 60.150153][ T795] ? inode_to_bdi+0x6d/0x100 [ 60.150178][ T795] shmem_write_begin+0xf4/0x260 [ 60.150201][ T795] generic_perform_write+0x32c/0x970 [ 60.150224][ T795] ? inode_update_timestamps+0x4d1/0x6e0 [ 60.150252][ T795] ? __cfi_generic_perform_write+0x10/0x10 [ 60.150277][ T795] ? generic_write_checks_count+0x426/0x540 [ 60.150301][ T795] ? mnt_get_write_access_file+0x1af/0x3b0 [ 60.150327][ T795] ? mnt_put_write_access_file+0xc2/0x100 [ 60.150352][ T795] ? file_update_time+0x1de/0x210 [ 60.150369][ T795] shmem_file_write_iter+0x105/0x130 [ 60.150394][ T795] __kernel_write_iter+0x462/0x900 [ 60.150415][ T795] ? __cfi___kernel_write_iter+0x10/0x10 [ 60.150435][ T795] ? get_dump_page+0x165/0x220 [ 60.150458][ T795] ? __asan_memset+0x39/0x50 [ 60.150477][ T795] ? iov_iter_bvec+0xc0/0x180 [ 60.150503][ T795] dump_user_range+0xb8b/0xe60 [ 60.150526][ T795] ? __cfi_dump_user_range+0x10/0x10 [ 60.150547][ T795] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 60.150574][ T795] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 60.150601][ T795] ? elf_core_dump+0x23cf/0x3840 [ 60.150625][ T795] elf_core_dump+0x2d61/0x3840 [ 60.150650][ T795] ? __cfi_elf_core_dump+0x10/0x10 [ 60.150672][ T795] ? mas_next_slot+0xf01/0xfd0 [ 60.150700][ T795] ? dump_interrupted+0xf0/0xf0 [ 60.150719][ T795] ? filp_open+0x199/0x1f0 [ 60.150743][ T795] ? 0xffffffffff600000 [ 60.150759][ T795] do_coredump+0x20d2/0x3050 [ 60.150781][ T795] ? __cfi_do_coredump+0x10/0x10 [ 60.150800][ T795] ? asm_exc_page_fault+0x2b/0x30 [ 60.150829][ T795] ? __kasan_slab_free+0x6a/0x80 [ 60.150851][ T795] ? get_signal+0xa2a/0x1490 [ 60.150875][ T795] get_signal+0x11bf/0x1490 [ 60.150901][ T795] arch_do_signal_or_restart+0xbc/0x700 [ 60.150920][ T795] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 60.150940][ T795] ? __bad_area_nosemaphore+0x2fb/0x680 [ 60.150966][ T795] irqentry_exit_to_user_mode+0x4d/0xb0 [ 60.150991][ T795] irqentry_exit+0x16/0x60 [ 60.151014][ T795] exc_page_fault+0x65/0xc0 [ 60.151037][ T795] asm_exc_page_fault+0x2b/0x30 [ 60.151058][ T795] RIP: 0033:0x7fa9d3c53bd7 [ 60.151074][ T795] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 60.151091][ T795] RSP: 002b:00007fa9d4caf120 EFLAGS: 00010202 [ 60.151109][ T795] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa9d3d9e159 [ 60.151123][ T795] RDX: 00007fa9d4caf140 RSI: 00007fa9d4caf270 RDI: 000000000000000b [ 60.151137][ T795] RBP: 00007fa9d3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 60.151150][ T795] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 60.151162][ T795] R13: 00007fa9d4026128 R14: 00007fa9d4026090 R15: 00007fff967accc8 [ 60.151179][ T795] [ 60.309254][ T795] memory: usage 294700kB, limit 307200kB, failcnt 41340 [ 60.311979][ T434] usb 1-1: device descriptor read/64, error -71 [ 60.316911][ T795] memory+swap: usage 416300kB, limit 9007199254740988kB, failcnt 0 [ 60.429314][ T434] usb usb1-port1: attempt power cycle [ 60.499221][ T45] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 60.503563][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 60.560187][ T795] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 60.686569][ T355] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 60.694276][ T355] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 60.699214][ T10] usb 3-1: device descriptor read/64, error -71 [ 60.705755][ T795] Memory cgroup stats for /syz0: [ 60.709829][ T795] cache 314187776 [ 60.725230][ T795] rss 118784 [ 60.738600][ T795] rss_huge 0 [ 60.741942][ T795] shmem 306794496 [ 60.745673][ T795] mapped_file 7233536 [ 60.749703][ T795] dirty 0 [ 60.752748][ T795] writeback 0 [ 60.756060][ T795] workingset_refault_anon 45 [ 60.760704][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 60.765860][ T795] workingset_refault_file 32930 [ 60.770899][ T795] swap 127852544 [ 60.774629][ T795] swapcached 143360 [ 60.778522][ T795] pgpgin 218169 [ 60.782159][ T795] pgpgout 141400 [ 60.785970][ T795] pgfault 38577 [ 60.790665][ T795] pgmajfault 694 [ 60.794334][ T795] inactive_anon 167899136 [ 60.798736][ T795] active_anon 139087872 [ 60.803126][ T795] inactive_file 204800 [ 60.807285][ T795] active_file 6389760 [ 60.811401][ T45] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 60.820539][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.828561][ T45] usb 2-1: Product: syz [ 60.832778][ T45] usb 2-1: Manufacturer: syz [ 60.837460][ T45] usb 2-1: SerialNumber: syz [ 60.842165][ T795] unevictable 0 [ 60.845712][ T795] hierarchical_memory_limit 314572800 [ 60.854401][ T795] hierarchical_memsw_limit 9223372036854771712 [ 60.860619][ T795] total_cache 314187776 [ 60.864803][ T795] total_rss 118784 [ 60.868556][ T795] total_rss_huge 0 [ 60.872326][ T795] total_shmem 306794496 [ 60.876510][ T795] total_mapped_file 7233536 [ 60.881050][ T795] total_dirty 0 [ 60.884534][ T795] total_writeback 0 [ 60.888366][ T795] total_workingset_refault_anon 45 [ 60.893577][ T795] total_workingset_refault_file 32930 [ 60.898977][ T795] total_swap 127852544 [ 60.903090][ T795] total_swapcached 143360 [ 60.907444][ T795] total_pgpgin 218169 [ 60.909353][ T434] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 60.911724][ T795] total_pgpgout 141400 [ 60.923271][ T795] total_pgfault 38577 [ 60.927271][ T795] total_pgmajfault 694 [ 60.931379][ T795] total_inactive_anon 167899136 [ 60.936265][ T795] total_active_anon 139087872 [ 60.941012][ T795] total_inactive_file 204800 [ 60.941993][ T434] usb 1-1: device descriptor read/8, error -71 [ 60.945627][ T795] total_active_file 6389760 [ 60.956311][ T795] total_unevictable 0 [ 60.960313][ T795] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.117,pid=795,uid=0 [ 60.969234][ T10] usb 3-1: device descriptor read/64, error -71 [ 60.975080][ T795] Memory cgroup out of memory: Killed process 795 (syz.0.117) total-vm:90792kB, anon-rss:1392kB, file-rss:27464kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 61.005230][ C1] ------------[ cut here ]------------ [ 61.010699][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 61.019292][ C1] index 4095 is out of range for type 'const int[34]' [ 61.026057][ C1] CPU: 1 UID: 0 PID: 799 Comm: syz.0.117 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 61.026091][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.026106][ C1] Call Trace: [ 61.026114][ C1] [ 61.026123][ C1] __dump_stack+0x21/0x30 [ 61.026161][ C1] dump_stack_lvl+0x140/0x1c0 [ 61.026192][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.026222][ C1] ? try_to_free_mem_cgroup_pages+0x288/0x630 [ 61.026254][ C1] ? shmem_get_folio_gfp+0x5cd/0x12e0 [ 61.026278][ C1] ? generic_perform_write+0x32c/0x970 [ 61.026308][ C1] dump_stack+0x19/0x20 [ 61.026335][ C1] ubsan_epilogue+0xe/0x40 [ 61.026354][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 61.026387][ C1] aiptek_irq+0x208d/0x2a00 [ 61.026418][ C1] ? _raw_spin_unlock+0x45/0x60 [ 61.026441][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 61.026466][ C1] __usb_hcd_giveback_urb+0x371/0x530 [ 61.026491][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 61.026513][ C1] dummy_timer+0xa3f/0x4900 [ 61.026544][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 61.026567][ C1] ? timerqueue_del+0xd7/0x130 [ 61.026597][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 61.026628][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 61.026650][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 61.026682][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 61.026712][ C1] ? read_tsc+0xd/0x20 [ 61.026738][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 61.026766][ C1] hrtimer_run_softirq+0x159/0x560 [ 61.026787][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 61.026816][ C1] handle_softirqs+0x1aa/0x620 [ 61.026840][ C1] __irq_exit_rcu+0x47/0xb0 [ 61.026861][ C1] irq_exit_rcu+0xd/0x30 [ 61.026881][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 61.026917][ C1] [ 61.026924][ C1] [ 61.026932][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 61.026961][ C1] RIP: 0010:_raw_spin_unlock_irq+0x4e/0x70 [ 61.026987][ C1] Code: 48 89 fb 48 c7 c7 00 8f 4e 87 e8 3d d3 38 fc 48 89 df 48 83 3d 12 0b a7 01 00 74 1f e8 5b 0d 00 00 90 fb 65 ff 0d ca 69 5d 7a <74> 08 5b 5d e9 99 3d 00 00 cc e8 03 78 62 fb eb f1 0f 0b 66 2e 0f [ 61.027005][ C1] RSP: 0018:ffffc90010985ca8 EFLAGS: 00000286 [ 61.027025][ C1] RAX: 0000000000000001 RBX: 0000000000003b01 RCX: dffffc0000000000 [ 61.027042][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888133f96f18 [ 61.027057][ C1] RBP: ffffc90010985cb0 R08: ffffffff8740d357 R09: 1ffffffff0e81a6a [ 61.027073][ C1] R10: dffffc0000000000 R11: fffffbfff0e81a6b R12: dffffc0000000000 [ 61.027090][ C1] R13: ffff888133f973b0 R14: 00000000ffffa245 R15: 0000000000000000 [ 61.027109][ C1] ? _raw_spin_unlock_irq+0x45/0x70 [ 61.027130][ C1] inc_max_seq+0xd48/0xd80 [ 61.027155][ C1] try_to_inc_max_seq+0xd9e/0x1060 [ 61.027179][ C1] try_to_shrink_lruvec+0xe1b/0xfc0 [ 61.027204][ C1] ? shrink_one+0x7f0/0x7f0 [ 61.027224][ C1] ? preempt_schedule+0xc5/0xe0 [ 61.027246][ C1] ? schedule_idle+0x70/0x90 [ 61.027268][ C1] ? lru_add_drain_cpu+0x338/0x450 [ 61.027295][ C1] ? __cfi_lru_add_drain_cpu+0x10/0x10 [ 61.027338][ C1] ? blk_start_plug+0x71/0x1c0 [ 61.027366][ C1] shrink_lruvec+0x461/0x2d40 [ 61.027395][ C1] ? __enqueue_entity+0x58a/0x630 [ 61.027421][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 61.027447][ C1] ? sched_clock_noinstr+0xd/0x30 [ 61.027472][ C1] ? psi_group_change+0xab6/0x10a0 [ 61.027500][ C1] ? mem_cgroup_shrink_node+0x540/0x540 [ 61.027529][ C1] ? kernel_text_address+0xa9/0xe0 [ 61.027558][ C1] ? __kasan_check_write+0x18/0x20 [ 61.027580][ C1] ? resched_curr+0x119/0x440 [ 61.027606][ C1] ? page_counter_calculate_protection+0x176/0x3f0 [ 61.027630][ C1] ? mem_cgroup_iter+0x53f/0x670 [ 61.027658][ C1] shrink_node+0xbbe/0x44c0 [ 61.027684][ C1] ? allow_direct_reclaim+0x690/0x690 [ 61.027707][ C1] ? queue_work_on+0x165/0x1e0 [ 61.027733][ C1] ? __cfi_queue_work_on+0x10/0x10 [ 61.027759][ C1] ? __cfi_try_to_wake_up+0x10/0x10 [ 61.027785][ C1] ? vmpressure_prio+0x116/0x140 [ 61.027811][ C1] do_try_to_free_pages+0x7ce/0x1ee0 [ 61.027840][ C1] ? wake_up_q+0x10a/0x1c0 [ 61.027862][ C1] ? try_to_free_pages+0x1120/0x1120 [ 61.027899][ C1] try_to_free_mem_cgroup_pages+0x288/0x630 [ 61.027931][ C1] ? __cfi_try_to_free_mem_cgroup_pages+0x10/0x10 [ 61.027964][ C1] ? psi_task_change+0x24d/0x4f0 [ 61.027991][ C1] ? _raw_spin_unlock+0x45/0x60 [ 61.028013][ C1] ? raw_spin_rq_unlock+0xd/0x20 [ 61.028042][ C1] ? psi_memstall_enter+0xc1/0x110 [ 61.028069][ C1] try_charge_memcg+0x472/0xe10 [ 61.028097][ C1] ? static_key_count+0x45/0x70 [ 61.028126][ C1] ? __cfi_try_charge_memcg+0x10/0x10 [ 61.028155][ C1] ? __alloc_pages_noprof+0x35a/0x7e0 [ 61.028186][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 61.028216][ C1] __mem_cgroup_charge+0xfc/0x420 [ 61.028238][ C1] ? folio_add_lru+0x116/0x400 [ 61.028264][ C1] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 61.028287][ C1] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 61.028317][ C1] ? shmem_replace_folio+0x9b0/0x9b0 [ 61.028342][ C1] ? shmem_huge_global_enabled+0x2da/0x360 [ 61.028367][ C1] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 61.028390][ C1] ? __kasan_check_write+0x18/0x20 [ 61.028410][ C1] ? _raw_spin_lock+0x92/0x120 [ 61.028430][ C1] shmem_get_folio_gfp+0x5cd/0x12e0 [ 61.028458][ C1] ? shmem_get_folio+0xc0/0xc0 [ 61.028482][ C1] ? __kasan_check_write+0x18/0x20 [ 61.028504][ C1] ? inode_to_bdi+0x6d/0x100 [ 61.028535][ C1] shmem_write_begin+0xf4/0x260 [ 61.028562][ C1] generic_perform_write+0x32c/0x970 [ 61.028591][ C1] ? inode_update_timestamps+0x4d1/0x6e0 [ 61.028622][ C1] ? __cfi_generic_perform_write+0x10/0x10 [ 61.028650][ C1] ? generic_write_checks_count+0x426/0x540 [ 61.028678][ C1] ? mnt_get_write_access_file+0x1af/0x3b0 [ 61.028708][ C1] ? mnt_put_write_access_file+0xc2/0x100 [ 61.028737][ C1] ? file_update_time+0x1de/0x210 [ 61.028757][ C1] shmem_file_write_iter+0x105/0x130 [ 61.028786][ C1] __kernel_write_iter+0x462/0x900 [ 61.028810][ C1] ? __cfi___kernel_write_iter+0x10/0x10 [ 61.028832][ C1] ? get_dump_page+0x165/0x220 [ 61.028860][ C1] ? __asan_memset+0x39/0x50 [ 61.028881][ C1] ? iov_iter_bvec+0xc0/0x180 [ 61.028920][ C1] dump_user_range+0xb8b/0xe60 [ 61.028947][ C1] ? __cfi_dump_user_range+0x10/0x10 [ 61.028971][ C1] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 61.029003][ C1] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 61.029033][ C1] ? elf_core_dump+0x23cf/0x3840 [ 61.029061][ C1] elf_core_dump+0x2d61/0x3840 [ 61.029091][ C1] ? __cfi_elf_core_dump+0x10/0x10 [ 61.029117][ C1] ? mas_next_slot+0xf01/0xfd0 [ 61.029149][ C1] ? dump_interrupted+0xf0/0xf0 [ 61.029170][ C1] ? filp_open+0x199/0x1f0 [ 61.029198][ C1] ? 0xffffffffff600000 [ 61.029216][ C1] do_coredump+0x20d2/0x3050 [ 61.029241][ C1] ? __cfi_do_coredump+0x10/0x10 [ 61.029263][ C1] ? asm_exc_page_fault+0x2b/0x30 [ 61.029294][ C1] ? __kasan_slab_free+0x6a/0x80 [ 61.029320][ C1] ? get_signal+0xa2a/0x1490 [ 61.029347][ C1] get_signal+0x11bf/0x1490 [ 61.029377][ C1] arch_do_signal_or_restart+0xbc/0x700 [ 61.029398][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 61.029421][ C1] ? __bad_area_nosemaphore+0x2fb/0x680 [ 61.029445][ C1] irqentry_exit_to_user_mode+0x4d/0xb0 [ 61.029474][ C1] irqentry_exit+0x16/0x60 [ 61.029501][ C1] exc_page_fault+0x65/0xc0 [ 61.029527][ C1] asm_exc_page_fault+0x2b/0x30 [ 61.029551][ C1] RIP: 0033:0x7fa9d3c53bd7 [ 61.029570][ C1] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 61.029589][ C1] RSP: 002b:00007fa9d4caf120 EFLAGS: 00010202 [ 61.029610][ C1] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa9d3d9e159 [ 61.029626][ C1] RDX: 00007fa9d4caf140 RSI: 00007fa9d4caf270 RDI: 000000000000000b [ 61.029641][ C1] RBP: 00007fa9d3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 61.029656][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 61.029671][ C1] R13: 00007fa9d4026128 R14: 00007fa9d4026090 R15: 00007fff967accc8 [ 61.029691][ C1] [ 61.029699][ C1] ---[ end trace ]--- [ 61.099468][ T10] usb usb3-port1: attempt power cycle [ 61.102399][ C1] ================================================================== [ 61.102411][ C1] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x20ab/0x2a00 [ 61.154449][ T434] usb 1-1: device descriptor read/8, error -71 [ 61.156948][ C1] Read of size 4 at addr ffffffff86709d5c by task syz.0.117/799 [ 61.188793][ T789] syz.0.117 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 61.191649][ C1] [ 61.191660][ C1] CPU: 1 UID: 0 PID: 799 Comm: syz.0.117 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 61.191687][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.191701][ C1] Call Trace: [ 61.191709][ C1] [ 61.191718][ C1] __dump_stack+0x21/0x30 [ 61.191753][ C1] dump_stack_lvl+0x140/0x1c0 [ 61.191781][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.191809][ C1] ? __cfi__printk+0x10/0x10 [ 61.191835][ C1] print_address_description+0x71/0x210 [ 61.191864][ C1] print_report+0x4a/0x70 [ 61.191897][ C1] kasan_report+0x162/0x1a0 [ 61.191925][ C1] ? aiptek_irq+0x20ab/0x2a00 [ 61.191955][ C1] ? aiptek_irq+0x20ab/0x2a00 [ 61.191983][ C1] __asan_report_load4_noabort+0x18/0x20 [ 61.192005][ C1] aiptek_irq+0x20ab/0x2a00 [ 61.192034][ C1] ? _raw_spin_unlock+0x45/0x60 [ 61.192055][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 61.192078][ C1] __usb_hcd_giveback_urb+0x371/0x530 [ 61.192102][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 61.192123][ C1] dummy_timer+0xa3f/0x4900 [ 61.192154][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 61.192176][ C1] ? timerqueue_del+0xd7/0x130 [ 61.192204][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 61.192235][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 61.192257][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 61.192287][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 61.192315][ C1] ? read_tsc+0xd/0x20 [ 61.192341][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 61.192366][ C1] hrtimer_run_softirq+0x159/0x560 [ 61.192386][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 61.192414][ C1] handle_softirqs+0x1aa/0x620 [ 61.192438][ C1] __irq_exit_rcu+0x47/0xb0 [ 61.192460][ C1] irq_exit_rcu+0xd/0x30 [ 61.192479][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 61.192506][ C1] [ 61.192513][ C1] [ 61.192522][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 61.192549][ C1] RIP: 0010:_raw_spin_unlock_irq+0x4e/0x70 [ 61.192572][ C1] Code: 48 89 fb 48 c7 c7 00 8f 4e 87 e8 3d d3 38 fc 48 89 df 48 83 3d 12 0b a7 01 00 74 1f e8 5b 0d 00 00 90 fb 65 ff 0d ca 69 5d 7a <74> 08 5b 5d e9 99 3d 00 00 cc e8 03 78 62 fb eb f1 0f 0b 66 2e 0f [ 61.192591][ C1] RSP: 0018:ffffc90010985ca8 EFLAGS: 00000286 [ 61.192610][ C1] RAX: 0000000000000001 RBX: 0000000000003b01 RCX: dffffc0000000000 [ 61.192626][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888133f96f18 [ 61.192641][ C1] RBP: ffffc90010985cb0 R08: ffffffff8740d357 R09: 1ffffffff0e81a6a [ 61.192658][ C1] R10: dffffc0000000000 R11: fffffbfff0e81a6b R12: dffffc0000000000 [ 61.192674][ C1] R13: ffff888133f973b0 R14: 00000000ffffa245 R15: 0000000000000000 [ 61.192693][ C1] ? _raw_spin_unlock_irq+0x45/0x70 [ 61.192714][ C1] inc_max_seq+0xd48/0xd80 [ 61.192737][ C1] try_to_inc_max_seq+0xd9e/0x1060 [ 61.192760][ C1] try_to_shrink_lruvec+0xe1b/0xfc0 [ 61.192784][ C1] ? shrink_one+0x7f0/0x7f0 [ 61.192803][ C1] ? preempt_schedule+0xc5/0xe0 [ 61.192825][ C1] ? schedule_idle+0x70/0x90 [ 61.192847][ C1] ? lru_add_drain_cpu+0x338/0x450 [ 61.192873][ C1] ? __cfi_lru_add_drain_cpu+0x10/0x10 [ 61.192907][ C1] ? blk_start_plug+0x71/0x1c0 [ 61.192933][ C1] shrink_lruvec+0x461/0x2d40 [ 61.192960][ C1] ? __enqueue_entity+0x58a/0x630 [ 61.192983][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 61.193009][ C1] ? sched_clock_noinstr+0xd/0x30 [ 61.193035][ C1] ? psi_group_change+0xab6/0x10a0 [ 61.193063][ C1] ? mem_cgroup_shrink_node+0x540/0x540 [ 61.193090][ C1] ? kernel_text_address+0xa9/0xe0 [ 61.193119][ C1] ? __kasan_check_write+0x18/0x20 [ 61.193141][ C1] ? resched_curr+0x119/0x440 [ 61.193166][ C1] ? page_counter_calculate_protection+0x176/0x3f0 [ 61.193189][ C1] ? mem_cgroup_iter+0x53f/0x670 [ 61.193217][ C1] shrink_node+0xbbe/0x44c0 [ 61.193242][ C1] ? allow_direct_reclaim+0x690/0x690 [ 61.193263][ C1] ? queue_work_on+0x165/0x1e0 [ 61.193288][ C1] ? __cfi_queue_work_on+0x10/0x10 [ 61.193313][ C1] ? __cfi_try_to_wake_up+0x10/0x10 [ 61.193338][ C1] ? vmpressure_prio+0x116/0x140 [ 61.193363][ C1] do_try_to_free_pages+0x7ce/0x1ee0 [ 61.193390][ C1] ? wake_up_q+0x10a/0x1c0 [ 61.193412][ C1] ? try_to_free_pages+0x1120/0x1120 [ 61.193441][ C1] try_to_free_mem_cgroup_pages+0x288/0x630 [ 61.193470][ C1] ? __cfi_try_to_free_mem_cgroup_pages+0x10/0x10 [ 61.193500][ C1] ? psi_task_change+0x24d/0x4f0 [ 61.193527][ C1] ? _raw_spin_unlock+0x45/0x60 [ 61.193548][ C1] ? raw_spin_rq_unlock+0xd/0x20 [ 61.193576][ C1] ? psi_memstall_enter+0xc1/0x110 [ 61.193604][ C1] try_charge_memcg+0x472/0xe10 [ 61.193632][ C1] ? static_key_count+0x45/0x70 [ 61.193659][ C1] ? __cfi_try_charge_memcg+0x10/0x10 [ 61.193687][ C1] ? __alloc_pages_noprof+0x35a/0x7e0 [ 61.193717][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 61.193748][ C1] __mem_cgroup_charge+0xfc/0x420 [ 61.193768][ C1] ? folio_add_lru+0x116/0x400 [ 61.193793][ C1] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 61.193816][ C1] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 61.193844][ C1] ? shmem_replace_folio+0x9b0/0x9b0 [ 61.193869][ C1] ? shmem_huge_global_enabled+0x2da/0x360 [ 61.193900][ C1] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 61.193924][ C1] ? __kasan_check_write+0x18/0x20 [ 61.193946][ C1] ? _raw_spin_lock+0x92/0x120 [ 61.193966][ C1] shmem_get_folio_gfp+0x5cd/0x12e0 [ 61.193992][ C1] ? shmem_get_folio+0xc0/0xc0 [ 61.194014][ C1] ? __kasan_check_write+0x18/0x20 [ 61.194035][ C1] ? inode_to_bdi+0x6d/0x100 [ 61.194063][ C1] shmem_write_begin+0xf4/0x260 [ 61.194092][ C1] generic_perform_write+0x32c/0x970 [ 61.194120][ C1] ? inode_update_timestamps+0x4d1/0x6e0 [ 61.194151][ C1] ? __cfi_generic_perform_write+0x10/0x10 [ 61.194178][ C1] ? generic_write_checks_count+0x426/0x540 [ 61.194205][ C1] ? mnt_get_write_access_file+0x1af/0x3b0 [ 61.194234][ C1] ? mnt_put_write_access_file+0xc2/0x100 [ 61.194262][ C1] ? file_update_time+0x1de/0x210 [ 61.194281][ C1] shmem_file_write_iter+0x105/0x130 [ 61.194310][ C1] __kernel_write_iter+0x462/0x900 [ 61.194333][ C1] ? __cfi___kernel_write_iter+0x10/0x10 [ 61.194356][ C1] ? get_dump_page+0x165/0x220 [ 61.194383][ C1] ? __asan_memset+0x39/0x50 [ 61.194403][ C1] ? iov_iter_bvec+0xc0/0x180 [ 61.194433][ C1] dump_user_range+0xb8b/0xe60 [ 61.194458][ C1] ? __cfi_dump_user_range+0x10/0x10 [ 61.194480][ C1] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 61.194510][ C1] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 61.194542][ C1] ? elf_core_dump+0x23cf/0x3840 [ 61.194571][ C1] elf_core_dump+0x2d61/0x3840 [ 61.194599][ C1] ? __cfi_elf_core_dump+0x10/0x10 [ 61.194625][ C1] ? mas_next_slot+0xf01/0xfd0 [ 61.194656][ C1] ? dump_interrupted+0xf0/0xf0 [ 61.194677][ C1] ? filp_open+0x199/0x1f0 [ 61.194704][ C1] ? 0xffffffffff600000 [ 61.194722][ C1] do_coredump+0x20d2/0x3050 [ 61.194745][ C1] ? __cfi_do_coredump+0x10/0x10 [ 61.194765][ C1] ? asm_exc_page_fault+0x2b/0x30 [ 61.194796][ C1] ? __kasan_slab_free+0x6a/0x80 [ 61.194821][ C1] ? get_signal+0xa2a/0x1490 [ 61.194848][ C1] get_signal+0x11bf/0x1490 [ 61.194877][ C1] arch_do_signal_or_restart+0xbc/0x700 [ 61.194903][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 61.194926][ C1] ? __bad_area_nosemaphore+0x2fb/0x680 [ 61.194949][ C1] irqentry_exit_to_user_mode+0x4d/0xb0 [ 61.194976][ C1] irqentry_exit+0x16/0x60 [ 61.195002][ C1] exc_page_fault+0x65/0xc0 [ 61.195027][ C1] asm_exc_page_fault+0x2b/0x30 [ 61.195051][ C1] RIP: 0033:0x7fa9d3c53bd7 [ 61.195066][ C1] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 61.195084][ C1] RSP: 002b:00007fa9d4caf120 EFLAGS: 00010202 [ 61.195101][ C1] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa9d3d9e159 [ 61.195116][ C1] RDX: 00007fa9d4caf140 RSI: 00007fa9d4caf270 RDI: 000000000000000b [ 61.195132][ C1] RBP: 00007fa9d3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 61.195147][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 61.195160][ C1] R13: 00007fa9d4026128 R14: 00007fa9d4026090 R15: 00007fff967accc8 [ 61.195179][ C1] [ 61.195187][ C1] [ 61.221052][ T789] CPU: 0 UID: 0 PID: 789 Comm: syz.0.117 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 61.221080][ T789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.221093][ T789] Call Trace: [ 61.221099][ T789] [ 61.221107][ T789] __dump_stack+0x21/0x30 [ 61.221134][ T789] dump_stack_lvl+0x140/0x1c0 [ 61.221157][ T789] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.221180][ T789] ? ___ratelimit+0x41c/0x5c0 [ 61.221201][ T789] ? __kasan_check_write+0x18/0x20 [ 61.221221][ T789] dump_stack+0x19/0x20 [ 61.221242][ T789] dump_header+0xd9/0x460 [ 61.221265][ T789] oom_kill_process+0x35d/0x640 [ 61.221287][ T789] out_of_memory+0x5d1/0xa20 [ 61.221307][ T789] ? __cfi_out_of_memory+0x10/0x10 [ 61.221326][ T789] ? mutex_lock_killable+0x97/0x1d0 [ 61.221348][ T789] ? __cfi_mutex_lock_killable+0x10/0x10 [ 61.221371][ T789] mem_cgroup_out_of_memory+0x2c5/0x390 [ 61.221398][ T789] ? css_next_descendant_pre+0x1ec/0x210 [ 61.221420][ T789] ? __kasan_check_write+0x18/0x20 [ 61.221438][ T789] ? drain_obj_stock+0xec0/0xec0 [ 61.221457][ T789] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 61.221477][ T789] try_charge_memcg+0x925/0xe10 [ 61.221499][ T789] ? static_key_count+0x45/0x70 [ 61.221522][ T789] ? lruvec_init+0x1f1/0x280 [ 61.221542][ T789] ? __cfi_try_charge_memcg+0x10/0x10 [ 61.221566][ T789] ? __alloc_pages_noprof+0x35a/0x7e0 [ 61.221591][ T789] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 61.221616][ T789] __mem_cgroup_charge+0xfc/0x420 [ 61.221634][ T789] ? do_pte_missing+0x3894/0x4440 [ 61.221656][ T789] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 61.221675][ T789] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 61.221699][ T789] ? shmem_replace_folio+0x9b0/0x9b0 [ 61.221721][ T789] ? shmem_huge_global_enabled+0x2da/0x360 [ 61.221742][ T789] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 61.221765][ T789] ? __kasan_check_write+0x18/0x20 [ 61.221784][ T789] ? _raw_spin_lock+0x92/0x120 [ 61.221801][ T789] shmem_get_folio_gfp+0x5cd/0x12e0 [ 61.221823][ T789] ? shmem_get_folio+0xc0/0xc0 [ 61.221842][ T789] ? __kasan_check_write+0x18/0x20 [ 61.221858][ T789] ? inode_to_bdi+0x6d/0x100 [ 61.221882][ T789] shmem_write_begin+0xf4/0x260 [ 61.221903][ T789] generic_perform_write+0x32c/0x970 [ 61.221927][ T789] ? inode_update_timestamps+0x4d1/0x6e0 [ 61.221954][ T789] ? __cfi_generic_perform_write+0x10/0x10 [ 61.221977][ T789] ? generic_write_checks_count+0x426/0x540 [ 61.222001][ T789] ? mnt_get_write_access_file+0x1af/0x3b0 [ 61.222025][ T789] ? mnt_put_write_access_file+0xc2/0x100 [ 61.222049][ T789] ? file_update_time+0x1de/0x210 [ 61.222065][ T789] shmem_file_write_iter+0x105/0x130 [ 61.222088][ T789] __kernel_write_iter+0x462/0x900 [ 61.222108][ T789] ? __cfi___kernel_write_iter+0x10/0x10 [ 61.222127][ T789] ? get_dump_page+0x165/0x220 [ 61.222149][ T789] ? __asan_memset+0x39/0x50 [ 61.222167][ T789] ? iov_iter_bvec+0xc0/0x180 [ 61.222191][ T789] dump_user_range+0xb8b/0xe60 [ 61.222213][ T789] ? __cfi_dump_user_range+0x10/0x10 [ 61.222233][ T789] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 61.222258][ T789] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 61.222284][ T789] ? elf_core_dump+0x23cf/0x3840 [ 61.222307][ T789] elf_core_dump+0x2d61/0x3840 [ 61.222331][ T789] ? __cfi_elf_core_dump+0x10/0x10 [ 61.222353][ T789] ? mas_next_slot+0xf01/0xfd0 [ 61.222384][ T789] ? dump_interrupted+0xf0/0xf0 [ 61.222402][ T789] ? filp_open+0x199/0x1f0 [ 61.222426][ T789] ? 0xffffffffff600000 [ 61.222440][ T789] do_coredump+0x20d2/0x3050 [ 61.222460][ T789] ? __cfi_do_coredump+0x10/0x10 [ 61.222478][ T789] ? asm_exc_page_fault+0x2b/0x30 [ 61.222505][ T789] ? __kasan_slab_free+0x6a/0x80 [ 61.222526][ T789] ? get_signal+0xa2a/0x1490 [ 61.222549][ T789] get_signal+0x11bf/0x1490 [ 61.222574][ T789] arch_do_signal_or_restart+0xbc/0x700 [ 61.222593][ T789] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 61.222611][ T789] ? __bad_area_nosemaphore+0x2fb/0x680 [ 61.222630][ T789] irqentry_exit_to_user_mode+0x4d/0xb0 [ 61.222654][ T789] irqentry_exit+0x16/0x60 [ 61.222675][ T789] exc_page_fault+0x65/0xc0 [ 61.222697][ T789] asm_exc_page_fault+0x2b/0x30 [ 61.222716][ T789] RIP: 0033:0x7fa9d3c53bd7 [ 61.222732][ T789] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 61.222748][ T789] RSP: 002b:00007fa9d4caf120 EFLAGS: 00010202 [ 61.222764][ T789] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa9d3d9e159 [ 61.222777][ T789] RDX: 00007fa9d4caf140 RSI: 00007fa9d4caf270 RDI: 000000000000000b [ 61.222790][ T789] RBP: 00007fa9d3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 61.222802][ T789] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 61.222814][ T789] R13: 00007fa9d4026128 R14: 00007fa9d4026090 R15: 00007fff967accc8 [ 61.222830][ T789] [ 61.222873][ T789] memory: usage 307200kB, limit 307200kB, failcnt 44388 [ 61.238718][ C1] The buggy address belongs to the variable: [ 61.238728][ C1] .str.13+0x5c/0x60 [ 61.238757][ C1] [ 61.253887][ T789] memory+swap: usage 431888kB, limit 9007199254740988kB, failcnt 0 [ 61.260709][ C1] The buggy address belongs to the physical page: [ 61.260732][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6709 [ 61.268927][ T789] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 61.276647][ C1] flags: 0x4000(reserved|zone=0) [ 61.276676][ C1] raw: 0000000000004000 ffffea000019c248 ffffea000019c248 0000000000000000 [ 61.284952][ T789] Memory cgroup stats for [ 61.289820][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 61.289835][ C1] page dumped because: kasan: bad access detected [ 61.289864][ C1] page_owner info is not present (never set?) [ 61.295345][ T36] audit: type=1400 audit(1790460855.819:297): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 61.299331][ C1] [ 61.299338][ C1] Memory state around the buggy address: [ 61.299352][ C1] ffffffff86709c00: 00 07 f9 f9 f9 f9 f9 f9 00 00 00 00 00 00 07 f9 [ 61.299366][ C1] ffffffff86709c80: f9 f9 f9 f9 00 00 00 00 00 00 02 f9 f9 f9 f9 f9 [ 61.299381][ C1] >ffffffff86709d00: 00 00 00 00 00 00 03 f9 f9 f9 f9 f9 00 00 00 00 [ 61.304758][ T36] audit: type=1400 audit(1790460855.819:298): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.309030][ C1] ^ [ 61.309046][ C1] ffffffff86709d80: 00 06 f9 f9 f9 f9 f9 f9 00 00 00 00 02 f9 f9 f9 [ 61.309062][ C1] ffffffff86709e00: f9 f9 f9 f9 00 00 00 00 00 00 00 07 f9 f9 f9 f9 [ 61.314447][ T789] /syz0 [ 61.318441][ C1] ================================================================== [ 61.323696][ T36] audit: type=1400 audit(1790460855.819:299): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.328958][ C1] Disabling lock debugging due to kernel taint [ 61.328973][ C1] ------------[ cut here ]------------ [ 61.328981][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 61.333992][ T789] : [ 61.338371][ C1] index 4096 is out of range for type 'const int[34]' [ 61.338393][ C1] CPU: 1 UID: 0 PID: 799 Comm: syz.0.117 Tainted: G B syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 61.338426][ C1] Tainted: [B]=BAD_PAGE [ 61.338434][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.338447][ C1] Call Trace: [ 61.338455][ C1] [ 61.338463][ C1] __dump_stack+0x21/0x30 [ 61.338498][ C1] dump_stack_lvl+0x140/0x1c0 [ 61.338525][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.338551][ C1] ? input_event_dispose+0x2f5/0x6d0 [ 61.338575][ C1] dump_stack+0x19/0x20 [ 61.338601][ C1] ubsan_epilogue+0xe/0x40 [ 61.338620][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 61.338651][ C1] aiptek_irq+0x1f3c/0x2a00 [ 61.338680][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 61.338704][ C1] __usb_hcd_giveback_urb+0x371/0x530 [ 61.338728][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 61.338748][ C1] dummy_timer+0xa3f/0x4900 [ 61.338777][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 61.338800][ C1] ? timerqueue_del+0xd7/0x130 [ 61.338828][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 61.338857][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 61.338879][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 61.338910][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 61.338938][ C1] ? read_tsc+0xd/0x20 [ 61.338964][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 61.338990][ C1] hrtimer_run_softirq+0x159/0x560 [ 61.339010][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 61.339039][ C1] handle_softirqs+0x1aa/0x620 [ 61.339060][ C1] __irq_exit_rcu+0x47/0xb0 [ 61.339081][ C1] irq_exit_rcu+0xd/0x30 [ 61.339100][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 61.339127][ C1] [ 61.339134][ C1] [ 61.339142][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 61.339169][ C1] RIP: 0010:_raw_spin_unlock_irq+0x4e/0x70 [ 61.339193][ C1] Code: 48 89 fb 48 c7 c7 00 8f 4e 87 e8 3d d3 38 fc 48 89 df 48 83 3d 12 0b a7 01 00 74 1f e8 5b 0d 00 00 90 fb 65 ff 0d ca 69 5d 7a <74> 08 5b 5d e9 99 3d 00 00 cc e8 03 78 62 fb eb f1 0f 0b 66 2e 0f [ 61.339212][ C1] RSP: 0018:ffffc90010985ca8 EFLAGS: 00000286 [ 61.339230][ C1] RAX: 0000000000000001 RBX: 0000000000003b01 RCX: dffffc0000000000 [ 61.339245][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888133f96f18 [ 61.339258][ C1] RBP: ffffc90010985cb0 R08: ffffffff8740d357 R09: 1ffffffff0e81a6a [ 61.339274][ C1] R10: dffffc0000000000 R11: fffffbfff0e81a6b R12: dffffc0000000000 [ 61.339290][ C1] R13: ffff888133f973b0 R14: 00000000ffffa245 R15: 0000000000000000 [ 61.339308][ C1] ? _raw_spin_unlock_irq+0x45/0x70 [ 61.339335][ C1] inc_max_seq+0xd48/0xd80 [ 61.339357][ C1] try_to_inc_max_seq+0xd9e/0x1060 [ 61.339379][ C1] try_to_shrink_lruvec+0xe1b/0xfc0 [ 61.339403][ C1] ? shrink_one+0x7f0/0x7f0 [ 61.339422][ C1] ? preempt_schedule+0xc5/0xe0 [ 61.339444][ C1] ? schedule_idle+0x70/0x90 [ 61.339464][ C1] ? lru_add_drain_cpu+0x338/0x450 [ 61.339490][ C1] ? __cfi_lru_add_drain_cpu+0x10/0x10 [ 61.339517][ C1] ? blk_start_plug+0x71/0x1c0 [ 61.339542][ C1] shrink_lruvec+0x461/0x2d40 [ 61.339568][ C1] ? __enqueue_entity+0x58a/0x630 [ 61.339591][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 61.339617][ C1] ? sched_clock_noinstr+0xd/0x30 [ 61.339642][ C1] ? psi_group_change+0xab6/0x10a0 [ 61.339668][ C1] ? mem_cgroup_shrink_node+0x540/0x540 [ 61.339696][ C1] ? kernel_text_address+0xa9/0xe0 [ 61.339724][ C1] ? __kasan_check_write+0x18/0x20 [ 61.339746][ C1] ? resched_curr+0x119/0x440 [ 61.339770][ C1] ? page_counter_calculate_protection+0x176/0x3f0 [ 61.339793][ C1] ? mem_cgroup_iter+0x53f/0x670 [ 61.339820][ C1] shrink_node+0xbbe/0x44c0 [ 61.339846][ C1] ? allow_direct_reclaim+0x690/0x690 [ 61.339867][ C1] ? queue_work_on+0x165/0x1e0 [ 61.339893][ C1] ? __cfi_queue_work_on+0x10/0x10 [ 61.339918][ C1] ? __cfi_try_to_wake_up+0x10/0x10 [ 61.339942][ C1] ? vmpressure_prio+0x116/0x140 [ 61.339970][ C1] do_try_to_free_pages+0x7ce/0x1ee0 [ 61.339999][ C1] ? wake_up_q+0x10a/0x1c0 [ 61.340020][ C1] ? try_to_free_pages+0x1120/0x1120 [ 61.340049][ C1] try_to_free_mem_cgroup_pages+0x288/0x630 [ 61.340077][ C1] ? __cfi_try_to_free_mem_cgroup_pages+0x10/0x10 [ 61.340107][ C1] ? psi_task_change+0x24d/0x4f0 [ 61.340133][ C1] ? _raw_spin_unlock+0x45/0x60 [ 61.340153][ C1] ? raw_spin_rq_unlock+0xd/0x20 [ 61.340181][ C1] ? psi_memstall_enter+0xc1/0x110 [ 61.340208][ C1] try_charge_memcg+0x472/0xe10 [ 61.340235][ C1] ? static_key_count+0x45/0x70 [ 61.340262][ C1] ? __cfi_try_charge_memcg+0x10/0x10 [ 61.340290][ C1] ? __alloc_pages_noprof+0x35a/0x7e0 [ 61.340325][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 61.340355][ C1] __mem_cgroup_charge+0xfc/0x420 [ 61.340375][ C1] ? folio_add_lru+0x116/0x400 [ 61.340400][ C1] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 61.340422][ C1] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 61.340450][ C1] ? shmem_replace_folio+0x9b0/0x9b0 [ 61.340474][ C1] ? shmem_huge_global_enabled+0x2da/0x360 [ 61.340498][ C1] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 61.340523][ C1] ? __kasan_check_write+0x18/0x20 [ 61.340543][ C1] ? _raw_spin_lock+0x92/0x120 [ 61.340562][ C1] shmem_get_folio_gfp+0x5cd/0x12e0 [ 61.340588][ C1] ? shmem_get_folio+0xc0/0xc0 [ 61.340611][ C1] ? __kasan_check_write+0x18/0x20 [ 61.340631][ C1] ? inode_to_bdi+0x6d/0x100 [ 61.340661][ C1] shmem_write_begin+0xf4/0x260 [ 61.340685][ C1] generic_perform_write+0x32c/0x970 [ 61.340713][ C1] ? inode_update_timestamps+0x4d1/0x6e0 [ 61.340744][ C1] ? __cfi_generic_perform_write+0x10/0x10 [ 61.340770][ C1] ? generic_write_checks_count+0x426/0x540 [ 61.340798][ C1] ? mnt_get_write_access_file+0x1af/0x3b0 [ 61.340826][ C1] ? mnt_put_write_access_file+0xc2/0x100 [ 61.340855][ C1] ? file_update_time+0x1de/0x210 [ 61.340873][ C1] shmem_file_write_iter+0x105/0x130 [ 61.340901][ C1] __kernel_write_iter+0x462/0x900 [ 61.340924][ C1] ? __cfi___kernel_write_iter+0x10/0x10 [ 61.340946][ C1] ? get_dump_page+0x165/0x220 [ 61.340973][ C1] ? __asan_memset+0x39/0x50 [ 61.340994][ C1] ? iov_iter_bvec+0xc0/0x180 [ 61.341023][ C1] dump_user_range+0xb8b/0xe60 [ 61.341047][ C1] ? __cfi_dump_user_range+0x10/0x10 [ 61.341069][ C1] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 61.341099][ C1] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 61.341130][ C1] ? elf_core_dump+0x23cf/0x3840 [ 61.341157][ C1] elf_core_dump+0x2d61/0x3840 [ 61.341184][ C1] ? __cfi_elf_core_dump+0x10/0x10 [ 61.341210][ C1] ? mas_next_slot+0xf01/0xfd0 [ 61.341242][ C1] ? dump_interrupted+0xf0/0xf0 [ 61.341263][ C1] ? filp_open+0x199/0x1f0 [ 61.341291][ C1] ? 0xffffffffff600000 [ 61.341308][ C1] do_coredump+0x20d2/0x3050 [ 61.341352][ C1] ? __cfi_do_coredump+0x10/0x10 [ 61.341373][ C1] ? asm_exc_page_fault+0x2b/0x30 [ 61.341403][ C1] ? __kasan_slab_free+0x6a/0x80 [ 61.341429][ C1] ? get_signal+0xa2a/0x1490 [ 61.341456][ C1] get_signal+0x11bf/0x1490 [ 61.341484][ C1] arch_do_signal_or_restart+0xbc/0x700 [ 61.341506][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 61.341528][ C1] ? __bad_area_nosemaphore+0x2fb/0x680 [ 61.341549][ C1] irqentry_exit_to_user_mode+0x4d/0xb0 [ 61.341577][ C1] irqentry_exit+0x16/0x60 [ 61.341603][ C1] exc_page_fault+0x65/0xc0 [ 61.341628][ C1] asm_exc_page_fault+0x2b/0x30 [ 61.341651][ C1] RIP: 0033:0x7fa9d3c53bd7 [ 61.341666][ C1] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 61.341682][ C1] RSP: 002b:00007fa9d4caf120 EFLAGS: 00010202 [ 61.341700][ C1] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa9d3d9e159 [ 61.341714][ C1] RDX: 00007fa9d4caf140 RSI: 00007fa9d4caf270 RDI: 000000000000000b [ 61.341728][ C1] RBP: 00007fa9d3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 61.341741][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 61.341754][ C1] R13: 00007fa9d4026128 R14: 00007fa9d4026090 R15: 00007fff967accc8 [ 61.341772][ C1] [ 61.341780][ C1] ---[ end trace ]--- [ 61.343442][ T36] audit: type=1400 audit(1790460855.819:300): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.362208][ T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 61.364478][ T36] audit: type=1400 audit(1790460855.819:301): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.371864][ T45] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 61.377936][ T36] audit: type=1400 audit(1790460855.819:302): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.402902][ T789] cache 314298368 [ 61.419383][ T36] audit: type=1400 audit(1790460855.819:303): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.420807][ T789] rss 135168 [ 61.469233][ T434] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 61.472753][ T789] rss_huge 0 [ 61.479222][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 61.483117][ T789] shmem 314281984 [ 61.500255][ T434] usb 1-1: device descriptor read/8, error -71 [ 61.503804][ T789] mapped_file 0 [ 61.510495][ T10] usb 3-1: device descriptor read/8, error -71 [ 61.515175][ T789] dirty 0 [ 61.606414][ T319] usb 4-1: USB disconnect, device number 11 [ 61.610935][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 61.740319][ T434] usb 1-1: device descriptor read/8, error -71 [ 61.745544][ T45] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 61.746749][ T10] usb 3-1: device descriptor read/8, error -71 [ 61.759206][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.762480][ T789] writeback 0 [ 63.081864][ T45] usb 2-1: USB disconnect, device number 24 [ 63.082933][ T434] usb usb1-port1: unable to enumerate USB device [ 63.089795][ T789] workingset_refault_anon 49 [ 64.419728][ T789] workingset_refault_file 34222 [ 64.427331][ T789] swap 127672320 [ 64.430893][ T789] swapcached 159744 [ 64.434687][ T789] pgpgin 221416 [ 64.438120][ T789] pgpgout 144616 [ 64.441663][ T789] pgfault 38790 [ 64.445111][ T789] pgmajfault 736 [ 64.448628][ T789] inactive_anon 146169856 [ 64.452952][ T789] active_anon 168386560 [ 64.457095][ T789] inactive_file 16384 [ 64.461441][ T789] active_file 0 [ 64.464886][ T789] unevictable 0 [ 64.468316][ T789] hierarchical_memory_limit 314572800 [ 64.473690][ T789] hierarchical_memsw_limit 9223372036854771712 [ 64.481284][ T789] total_cache 314298368 [ 64.485417][ T789] total_rss 135168 [ 64.489132][ T789] total_rss_huge 0 [ 64.492844][ T789] total_shmem 314281984 [ 64.496983][ T789] total_mapped_file 0 [ 64.501039][ T789] total_dirty 0 [ 64.504484][ T789] total_writeback 0 [ 64.508265][ T789] total_workingset_refault_anon 49 [ 64.513401][ T789] total_workingset_refault_file 34222 [ 64.518761][ T789] total_swap 127672320 [ 64.522824][ T789] total_swapcached 159744 [ 64.527139][ T789] total_pgpgin 221416 [ 64.531128][ T789] total_pgpgout 144616 [ 64.535181][ T789] total_pgfault 38790 [ 64.539135][ T789] total_pgmajfault 736 [ 64.543273][ T789] total_inactive_anon 146169856 [ 64.548114][ T789] total_active_anon 168386560 [ 64.552786][ T789] total_inactive_file 16384 [ 64.557274][ T789] total_active_file 0 [ 64.561244][ T789] total_unevictable 0 [ 64.565207][ T789] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.117,pid=796,uid=0 [ 64.580271][ T789] Memory cgroup out of memory: Killed process 796 (syz.0.117) total-vm:90796kB, anon-rss:1268kB, file-rss:29452kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 65.093973][ T786] syz.0.117 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 65.129158][ T786] CPU: 0 UID: 0 PID: 786 Comm: syz.0.117 Tainted: G B syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 65.129198][ T786] Tainted: [B]=BAD_PAGE [ 65.129205][ T786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.129216][ T786] Call Trace: [ 65.129223][ T786] [ 65.129231][ T786] __dump_stack+0x21/0x30 [ 65.129262][ T786] dump_stack_lvl+0x140/0x1c0 [ 65.129286][ T786] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.129311][ T786] ? ___ratelimit+0x41c/0x5c0 [ 65.129332][ T786] ? __kasan_check_write+0x18/0x20 [ 65.129353][ T786] dump_stack+0x19/0x20 [ 65.129376][ T786] dump_header+0xd9/0x460 [ 65.129400][ T786] oom_kill_process+0x35d/0x640 [ 65.129423][ T786] out_of_memory+0x5d1/0xa20 [ 65.129443][ T786] ? __cfi_out_of_memory+0x10/0x10 [ 65.129464][ T786] ? mutex_lock_killable+0x97/0x1d0 [ 65.129487][ T786] ? __cfi_mutex_lock_killable+0x10/0x10 [ 65.129512][ T786] mem_cgroup_out_of_memory+0x2c5/0x390 [ 65.129532][ T786] ? css_next_descendant_pre+0x1ec/0x210 [ 65.129554][ T786] ? __kasan_check_write+0x18/0x20 [ 65.129574][ T786] ? drain_obj_stock+0xec0/0xec0 [ 65.129595][ T786] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 65.129615][ T786] try_charge_memcg+0x925/0xe10 [ 65.129639][ T786] ? static_key_count+0x45/0x70 [ 65.129663][ T786] ? lruvec_init+0x1f1/0x280 [ 65.129684][ T786] ? __cfi_try_charge_memcg+0x10/0x10 [ 65.129709][ T786] ? __alloc_pages_noprof+0x35a/0x7e0 [ 65.129735][ T786] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 65.129760][ T786] __mem_cgroup_charge+0xfc/0x420 [ 65.129779][ T786] ? folio_add_lru+0x116/0x400 [ 65.129802][ T786] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 65.129822][ T786] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 65.129847][ T786] ? shmem_replace_folio+0x9b0/0x9b0 [ 65.129870][ T786] ? shmem_huge_global_enabled+0x2da/0x360 [ 65.129893][ T786] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 65.129914][ T786] ? __kasan_check_write+0x18/0x20 [ 65.129933][ T786] ? _raw_spin_lock+0x92/0x120 [ 65.129952][ T786] shmem_get_folio_gfp+0x5cd/0x12e0 [ 65.129974][ T786] ? shmem_get_folio+0xc0/0xc0 [ 65.129993][ T786] ? follow_page_pte+0x8fb/0xba0 [ 65.130018][ T786] ? inode_to_bdi+0x6d/0x100 [ 65.130049][ T786] shmem_write_begin+0xf4/0x260 [ 65.130073][ T786] generic_perform_write+0x32c/0x970 [ 65.130100][ T786] ? __cfi_generic_perform_write+0x10/0x10 [ 65.130124][ T786] ? generic_write_checks_count+0x426/0x540 [ 65.130150][ T786] ? file_update_time+0xa3/0x210 [ 65.130168][ T786] shmem_file_write_iter+0x105/0x130 [ 65.130193][ T786] __kernel_write_iter+0x462/0x900 [ 65.130213][ T786] ? __cfi___kernel_write_iter+0x10/0x10 [ 65.130233][ T786] ? get_dump_page+0x165/0x220 [ 65.130256][ T786] ? __asan_memset+0x39/0x50 [ 65.130275][ T786] ? iov_iter_bvec+0xc0/0x180 [ 65.130301][ T786] dump_user_range+0xb8b/0xe60 [ 65.130323][ T786] ? __cfi_dump_user_range+0x10/0x10 [ 65.130344][ T786] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 65.130372][ T786] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 65.130398][ T786] ? elf_core_dump+0x23cf/0x3840 [ 65.130423][ T786] elf_core_dump+0x2d61/0x3840 [ 65.130448][ T786] ? __cfi_elf_core_dump+0x10/0x10 [ 65.130471][ T786] ? mas_next_slot+0xf01/0xfd0 [ 65.130499][ T786] ? dump_interrupted+0xf0/0xf0 [ 65.130518][ T786] ? filp_open+0x199/0x1f0 [ 65.130542][ T786] ? 0xffffffffff600000 [ 65.130558][ T786] do_coredump+0x20d2/0x3050 [ 65.130580][ T786] ? __cfi_do_coredump+0x10/0x10 [ 65.130599][ T786] ? asm_exc_page_fault+0x2b/0x30 [ 65.130627][ T786] ? __kasan_slab_free+0x6a/0x80 [ 65.130650][ T786] ? get_signal+0xa2a/0x1490 [ 65.130675][ T786] get_signal+0x11bf/0x1490 [ 65.130701][ T786] arch_do_signal_or_restart+0xbc/0x700 [ 65.130720][ T786] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 65.130741][ T786] ? __bad_area_nosemaphore+0x2fb/0x680 [ 65.130761][ T786] irqentry_exit_to_user_mode+0x4d/0xb0 [ 65.130786][ T786] irqentry_exit+0x16/0x60 [ 65.130808][ T786] exc_page_fault+0x65/0xc0 [ 65.130830][ T786] asm_exc_page_fault+0x2b/0x30 [ 65.130851][ T786] RIP: 0033:0x7fa9d3c53bd7 [ 65.130868][ T786] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 65.130884][ T786] RSP: 002b:00007fa9d4caf120 EFLAGS: 00010202 [ 65.130902][ T786] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa9d3d9e159 [ 65.130916][ T786] RDX: 00007fa9d4caf140 RSI: 00007fa9d4caf270 RDI: 000000000000000b [ 65.130929][ T786] RBP: 00007fa9d3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 65.130943][ T786] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 65.130955][ T786] R13: 00007fa9d4026128 R14: 00007fa9d4026090 R15: 00007fff967accc8 [ 65.130972][ T786] [ 65.595555][ T786] memory: usage 307200kB, limit 307200kB, failcnt 48619 [ 65.605605][ T786] memory+swap: usage 432148kB, limit 9007199254740988kB, failcnt 0 [ 65.613572][ T786] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 65.620446][ T786] Memory cgroup stats for /syz0: [ 65.620539][ T786] cache 314535936 [ 65.629051][ T786] rss 8192 [ 65.632106][ T786] rss_huge 0 [ 65.635320][ T786] shmem 314531840 [ 65.638945][ T786] mapped_file 0 [ 65.642414][ T786] dirty 0 [ 65.645336][ T786] writeback 0 [ 65.648592][ T786] workingset_refault_anon 55 [ 65.653178][ T786] workingset_refault_file 37440 [ 65.658009][ T786] swap 127946752 [ 65.661547][ T786] swapcached 32768 [ 65.665251][ T786] pgpgin 241827 [ 65.668682][ T786] pgpgout 165027 [ 65.672220][ T786] pgfault 39849 [ 65.675662][ T786] pgmajfault 778 [ 65.679313][ T786] inactive_anon 181706752 [ 65.683682][ T786] active_anon 132861952 [ 65.687850][ T786] inactive_file 0 [ 65.691524][ T786] active_file 4096 [ 65.695230][ T786] unevictable 0 [ 65.698659][ T786] hierarchical_memory_limit 314572800 [ 65.704022][ T786] hierarchical_memsw_limit 9223372036854771712 [ 65.710178][ T786] total_cache 314535936 [ 65.714312][ T786] total_rss 8192 [ 65.717829][ T786] total_rss_huge 0 [ 65.721545][ T786] total_shmem 314531840 [ 65.725685][ T786] total_mapped_file 0 [ 65.729658][ T786] total_dirty 0 [ 65.733100][ T786] total_writeback 0 [ 65.736879][ T786] total_workingset_refault_anon 55 [ 65.741980][ T786] total_workingset_refault_file 37440 [ 65.747340][ T786] total_swap 127946752 [ 65.751403][ T786] total_swapcached 32768 [ 65.755629][ T786] total_pgpgin 241827 [ 65.759606][ T786] total_pgpgout 165027 [ 65.763657][ T786] total_pgfault 39849 [ 65.767626][ T786] total_pgmajfault 778 [ 65.771695][ T786] total_inactive_anon 181706752 [ 65.776527][ T786] total_active_anon 132861952 [ 65.781202][ T786] total_inactive_file 0 [ 65.785340][ T786] total_active_file 4096 [ 65.789578][ T786] total_unevictable 0 [ 65.793542][ T786] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.117,pid=803,uid=0 [ 65.808163][ T786] Memory cgroup out of memory: Killed process 803 (syz.0.117) total-vm:90796kB, anon-rss:1272kB, file-rss:30396kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 65.831868][ T801] syz.0.117 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 65.841649][ T801] CPU: 1 UID: 0 PID: 801 Comm: syz.0.117 Tainted: G B syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 65.841681][ T801] Tainted: [B]=BAD_PAGE [ 65.841688][ T801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.841700][ T801] Call Trace: [ 65.841707][ T801] [ 65.841715][ T801] __dump_stack+0x21/0x30 [ 65.841745][ T801] dump_stack_lvl+0x140/0x1c0 [ 65.841769][ T801] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.841793][ T801] ? ___ratelimit+0x41c/0x5c0 [ 65.841815][ T801] ? __kasan_check_write+0x18/0x20 [ 65.841836][ T801] dump_stack+0x19/0x20 [ 65.841859][ T801] dump_header+0xd9/0x460 [ 65.841884][ T801] oom_kill_process+0x35d/0x640 [ 65.841907][ T801] out_of_memory+0x5d1/0xa20 [ 65.841928][ T801] ? __cfi_out_of_memory+0x10/0x10 [ 65.841949][ T801] ? mutex_lock_killable+0x115/0x1d0 [ 65.841973][ T801] ? __cfi_mutex_lock_killable+0x10/0x10 [ 65.841998][ T801] mem_cgroup_out_of_memory+0x2c5/0x390 [ 65.842020][ T801] ? css_next_descendant_pre+0x1ec/0x210 [ 65.842042][ T801] ? __kasan_check_write+0x18/0x20 [ 65.842059][ T801] ? drain_obj_stock+0xec0/0xec0 [ 65.842076][ T801] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 65.842095][ T801] try_charge_memcg+0x925/0xe10 [ 65.842116][ T801] ? static_key_count+0x45/0x70 [ 65.842137][ T801] ? lruvec_init+0x1f1/0x280 [ 65.842156][ T801] ? __cfi_try_charge_memcg+0x10/0x10 [ 65.842178][ T801] ? __alloc_pages_noprof+0x35a/0x7e0 [ 65.842200][ T801] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 65.842223][ T801] __mem_cgroup_charge+0xfc/0x420 [ 65.842239][ T801] ? folio_add_lru+0x116/0x400 [ 65.842261][ T801] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 65.842280][ T801] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 65.842303][ T801] ? shmem_replace_folio+0x9b0/0x9b0 [ 65.842318][ T801] ? shmem_huge_global_enabled+0x2da/0x360 [ 65.842329][ T801] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 65.842341][ T801] ? __kasan_check_write+0x18/0x20 [ 65.842351][ T801] ? _raw_spin_lock+0x92/0x120 [ 65.842361][ T801] shmem_get_folio_gfp+0x5cd/0x12e0 [ 65.842373][ T801] ? shmem_get_folio+0xc0/0xc0 [ 65.842383][ T801] ? follow_page_pte+0x8fb/0xba0 [ 65.842397][ T801] ? inode_to_bdi+0x6d/0x100 [ 65.842410][ T801] shmem_write_begin+0xf4/0x260 [ 65.842422][ T801] generic_perform_write+0x32c/0x970 [ 65.842436][ T801] ? __cfi_generic_perform_write+0x10/0x10 [ 65.842449][ T801] ? generic_write_checks_count+0x426/0x540 [ 65.842469][ T801] ? file_update_time+0xa3/0x210 [ 65.842479][ T801] shmem_file_write_iter+0x105/0x130 [ 65.842492][ T801] __kernel_write_iter+0x462/0x900 [ 65.842503][ T801] ? __cfi___kernel_write_iter+0x10/0x10 [ 65.842514][ T801] ? get_dump_page+0x165/0x220 [ 65.842526][ T801] ? __asan_memset+0x39/0x50 [ 65.842536][ T801] ? iov_iter_bvec+0xc0/0x180 [ 65.842550][ T801] dump_user_range+0xb8b/0xe60 [ 65.842563][ T801] ? __cfi_dump_user_range+0x10/0x10 [ 65.842574][ T801] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 65.842590][ T801] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 65.842604][ T801] ? elf_core_dump+0x23cf/0x3840 [ 65.842617][ T801] elf_core_dump+0x2d61/0x3840 [ 65.842631][ T801] ? __cfi_elf_core_dump+0x10/0x10 [ 65.842643][ T801] ? mas_next_slot+0xf01/0xfd0 [ 65.842659][ T801] ? dump_interrupted+0xf0/0xf0 [ 65.842669][ T801] ? filp_open+0x199/0x1f0 [ 65.842682][ T801] ? 0xffffffffff600000 [ 65.842691][ T801] do_coredump+0x20d2/0x3050 [ 65.842703][ T801] ? __cfi_do_coredump+0x10/0x10 [ 65.842713][ T801] ? asm_exc_page_fault+0x2b/0x30 [ 65.842729][ T801] ? __kasan_slab_free+0x6a/0x80 [ 65.842742][ T801] ? get_signal+0xa2a/0x1490 [ 65.842756][ T801] get_signal+0x11bf/0x1490 [ 65.842770][ T801] arch_do_signal_or_restart+0xbc/0x700 [ 65.842780][ T801] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 65.842791][ T801] ? __bad_area_nosemaphore+0x2fb/0x680 [ 65.842802][ T801] irqentry_exit_to_user_mode+0x4d/0xb0 [ 65.842816][ T801] irqentry_exit+0x16/0x60 [ 65.842828][ T801] exc_page_fault+0x65/0xc0 [ 65.842840][ T801] asm_exc_page_fault+0x2b/0x30 [ 65.842851][ T801] RIP: 0033:0x7fa9d3c53bd7 [ 65.842861][ T801] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 65.842871][ T801] RSP: 002b:00007fa9d4caf120 EFLAGS: 00010202 [ 65.842881][ T801] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa9d3d9e159 [ 65.842889][ T801] RDX: 00007fa9d4caf140 RSI: 00007fa9d4caf270 RDI: 000000000000000b [ 65.842897][ T801] RBP: 00007fa9d3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 65.842903][ T801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 65.842911][ T801] R13: 00007fa9d4026128 R14: 00007fa9d4026090 R15: 00007fff967accc8 [ 65.842920][ T801] [ 65.842943][ T801] memory: usage 307200kB, limit 307200kB, failcnt 48687 [ 66.314879][ T801] memory+swap: usage 405496kB, limit 9007199254740988kB, failcnt 0 [ 66.322846][ T801] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 66.329714][ T801] Memory cgroup stats for /syz0: [ 66.329806][ T801] cache 292839424 [ 66.338322][ T801] rss 16384 [ 66.341431][ T801] rss_huge 0 [ 66.344616][ T801] shmem 292835328 [ 66.348222][ T801] mapped_file 0 [ 66.351681][ T801] dirty 0 [ 66.354606][ T801] writeback 0 [ 66.357881][ T801] workingset_refault_anon 55 [ 66.362467][ T801] workingset_refault_file 37440 [ 66.367303][ T801] swap 122351616 [ 66.370842][ T801] swapcached 24576 [ 66.374546][ T801] pgpgin 241827 [ 66.377976][ T801] pgpgout 170324 [ 66.381525][ T801] pgfault 39851 [ 66.384991][ T801] pgmajfault 778 [ 66.388513][ T801] inactive_anon 170512384 [ 66.392857][ T801] active_anon 122359808 [ 66.397001][ T801] inactive_file 0 [ 66.400627][ T801] active_file 4096 [ 66.404331][ T801] unevictable 0 [ 66.407760][ T801] hierarchical_memory_limit 314572800 [ 66.413130][ T801] hierarchical_memsw_limit 9223372036854771712 [ 66.419293][ T801] total_cache 292839424 [ 66.423434][ T801] total_rss 16384 [ 66.427037][ T801] total_rss_huge 0 [ 66.430750][ T801] total_shmem 292835328 [ 66.434890][ T801] total_mapped_file 0 [ 66.438854][ T801] total_dirty 0 [ 66.442306][ T801] total_writeback 0 [ 66.446095][ T801] total_workingset_refault_anon 55 [ 66.451196][ T801] total_workingset_refault_file 37440 [ 66.456552][ T801] total_swap 122351616 [ 66.460616][ T801] total_swapcached 24576 [ 66.464839][ T801] total_pgpgin 241827 [ 66.468789][ T801] total_pgpgout 170324 [ 66.472855][ T801] total_pgfault 39851 [ 66.476820][ T801] total_pgmajfault 778 [ 66.480878][ T801] total_inactive_anon 170512384 [ 66.485734][ T801] total_active_anon 122359808 [ 66.490404][ T801] total_inactive_file 0 [ 66.494543][ T801] total_active_file 4096 [ 66.498756][ T801] total_unevictable 0 [ 66.502726][ T801] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.117,pid=802,uid=0 [ 66.517387][ T801] Memory cgroup out of memory: Killed process 802 (syz.0.117) total-vm:90796kB, anon-rss:1272kB, file-rss:29344kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 66.888345][ T782] syz.0.117 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 66.898697][ T782] CPU: 0 UID: 0 PID: 782 Comm: syz.0.117 Tainted: G B syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 66.898731][ T782] Tainted: [B]=BAD_PAGE [ 66.898739][ T782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.898751][ T782] Call Trace: [ 66.898757][ T782] [ 66.898765][ T782] __dump_stack+0x21/0x30 [ 66.898795][ T782] dump_stack_lvl+0x140/0x1c0 [ 66.898820][ T782] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.898844][ T782] ? ___ratelimit+0x41c/0x5c0 [ 66.898866][ T782] ? __kasan_check_write+0x18/0x20 [ 66.898886][ T782] dump_stack+0x19/0x20 [ 66.898909][ T782] dump_header+0xd9/0x460 [ 66.898934][ T782] oom_kill_process+0x35d/0x640 [ 66.898956][ T782] out_of_memory+0x5d1/0xa20 [ 66.898978][ T782] ? __cfi_out_of_memory+0x10/0x10 [ 66.898998][ T782] ? mutex_lock_killable+0x97/0x1d0 [ 66.899022][ T782] ? __cfi_mutex_lock_killable+0x10/0x10 [ 66.899046][ T782] mem_cgroup_out_of_memory+0x2c5/0x390 [ 66.899068][ T782] ? css_next_descendant_pre+0x1ec/0x210 [ 66.899091][ T782] ? __kasan_check_write+0x18/0x20 [ 66.899110][ T782] ? drain_obj_stock+0xec0/0xec0 [ 66.899134][ T782] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 66.899155][ T782] try_charge_memcg+0x925/0xe10 [ 66.899179][ T782] ? static_key_count+0x45/0x70 [ 66.899203][ T782] ? lruvec_init+0x1f1/0x280 [ 66.899225][ T782] ? __cfi_try_charge_memcg+0x10/0x10 [ 66.899251][ T782] ? __alloc_pages_noprof+0x35a/0x7e0 [ 66.899278][ T782] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 66.899305][ T782] __mem_cgroup_charge+0xfc/0x420 [ 66.899324][ T782] ? folio_add_lru+0x116/0x400 [ 66.899347][ T782] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 66.899367][ T782] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 66.899399][ T782] ? shmem_replace_folio+0x9b0/0x9b0 [ 66.899423][ T782] ? shmem_huge_global_enabled+0x2da/0x360 [ 66.899445][ T782] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 66.899467][ T782] ? __kasan_check_write+0x18/0x20 [ 66.899487][ T782] ? _raw_spin_lock+0x92/0x120 [ 66.899506][ T782] shmem_get_folio_gfp+0x5cd/0x12e0 [ 66.899529][ T782] ? shmem_get_folio+0xc0/0xc0 [ 66.899548][ T782] ? follow_page_pte+0x8fb/0xba0 [ 66.899574][ T782] ? inode_to_bdi+0x6d/0x100 [ 66.899600][ T782] shmem_write_begin+0xf4/0x260 [ 66.899623][ T782] generic_perform_write+0x32c/0x970 [ 66.899649][ T782] ? __cfi_generic_perform_write+0x10/0x10 [ 66.899674][ T782] ? generic_write_checks_count+0x426/0x540 [ 66.899700][ T782] ? file_update_time+0xa3/0x210 [ 66.899718][ T782] shmem_file_write_iter+0x105/0x130 [ 66.899740][ T782] __kernel_write_iter+0x462/0x900 [ 66.899758][ T782] ? __cfi___kernel_write_iter+0x10/0x10 [ 66.899775][ T782] ? get_dump_page+0x165/0x220 [ 66.899795][ T782] ? __asan_memset+0x39/0x50 [ 66.899811][ T782] ? iov_iter_bvec+0xc0/0x180 [ 66.899834][ T782] dump_user_range+0xb8b/0xe60 [ 66.899853][ T782] ? __cfi_dump_user_range+0x10/0x10 [ 66.899871][ T782] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 66.899895][ T782] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 66.899918][ T782] ? elf_core_dump+0x23cf/0x3840 [ 66.899939][ T782] elf_core_dump+0x2d61/0x3840 [ 66.899960][ T782] ? __cfi_elf_core_dump+0x10/0x10 [ 66.899979][ T782] ? mas_next_slot+0xf01/0xfd0 [ 66.900003][ T782] ? dump_interrupted+0xf0/0xf0 [ 66.900019][ T782] ? filp_open+0x199/0x1f0 [ 66.900040][ T782] ? 0xffffffffff600000 [ 66.900054][ T782] do_coredump+0x20d2/0x3050 [ 66.900072][ T782] ? __cfi_do_coredump+0x10/0x10 [ 66.900088][ T782] ? asm_exc_page_fault+0x2b/0x30 [ 66.900113][ T782] ? __kasan_slab_free+0x6a/0x80 [ 66.900132][ T782] ? get_signal+0xa2a/0x1490 [ 66.900154][ T782] get_signal+0x11bf/0x1490 [ 66.900176][ T782] arch_do_signal_or_restart+0xbc/0x700 [ 66.900193][ T782] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 66.900210][ T782] ? __bad_area_nosemaphore+0x2fb/0x680 [ 66.900227][ T782] irqentry_exit_to_user_mode+0x4d/0xb0 [ 66.900248][ T782] irqentry_exit+0x16/0x60 [ 66.900267][ T782] exc_page_fault+0x65/0xc0 [ 66.900287][ T782] asm_exc_page_fault+0x2b/0x30 [ 66.900304][ T782] RIP: 0033:0x7fa9d3c53bd7 [ 66.900319][ T782] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 66.900333][ T782] RSP: 002b:00007fa9d4caf120 EFLAGS: 00010202 [ 66.900348][ T782] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa9d3d9e159 [ 66.900360][ T782] RDX: 00007fa9d4caf140 RSI: 00007fa9d4caf270 RDI: 000000000000000b [ 66.900371][ T782] RBP: 00007fa9d3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 66.900387][ T782] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 66.900398][ T782] R13: 00007fa9d4026128 R14: 00007fa9d4026090 R15: 00007fff967accc8 [ 66.900412][ T782] [ 67.364261][ T782] memory: usage 307200kB, limit 307200kB, failcnt 51926 [ 67.371215][ T782] memory+swap: usage 432052kB, limit 9007199254740988kB, failcnt 0 [ 67.379234][ T782] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 67.386071][ T782] Memory cgroup stats for /syz0: [ 67.386154][ T782] cache 314392576 [ 67.394690][ T782] rss 143360 [ 67.397862][ T782] rss_huge 0 [ 67.401059][ T782] shmem 314392576 [ 67.404674][ T782] mapped_file 4096 [ 67.408372][ T782] dirty 0 [ 67.411305][ T782] writeback 0 [ 67.414576][ T782] workingset_refault_anon 90 [ 67.419137][ T782] workingset_refault_file 39001 [ 67.423998][ T782] swap 127848448 [ 67.434413][ T782] swapcached 143360 [ 67.438227][ T782] pgpgin 258791 [ 67.441698][ T782] pgpgout 181991 [ 67.445235][ T782] pgfault 40463 [ 67.448667][ T782] pgmajfault 827 [ 67.452245][ T782] inactive_anon 195133440 [ 67.456564][ T782] active_anon 119439360 [ 67.460737][ T782] inactive_file 0 [ 67.464379][ T782] active_file 0 [ 67.467823][ T782] unevictable 0 [ 67.471309][ T782] hierarchical_memory_limit 314572800 [ 67.476665][ T782] hierarchical_memsw_limit 9223372036854771712 [ 67.482823][ T782] total_cache 314392576 [ 67.486967][ T782] total_rss 143360 [ 67.490681][ T782] total_rss_huge 0 [ 67.494384][ T782] total_shmem 314392576 [ 67.498507][ T782] total_mapped_file 4096 [ 67.502742][ T782] total_dirty 0 [ 67.506184][ T782] total_writeback 0 [ 67.509985][ T782] total_workingset_refault_anon 90 [ 67.515082][ T782] total_workingset_refault_file 39001 [ 67.520447][ T782] total_swap 127848448 [ 67.524498][ T782] total_swapcached 143360 [ 67.528798][ T782] total_pgpgin 258791 [ 67.532776][ T782] total_pgpgout 181991 [ 67.536849][ T782] total_pgfault 40463 [ 67.540834][ T782] total_pgmajfault 827 [ 67.544893][ T782] total_inactive_anon 195133440 [ 67.549746][ T782] total_active_anon 119439360 [ 67.554406][ T782] total_inactive_file 0 [ 67.558535][ T782] total_active_file 0 [ 67.562508][ T782] total_unevictable 0 [ 67.566475][ T782] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.117,pid=801,uid=0 [ 67.581127][ T782] Memory cgroup out of memory: Killed process 801 (syz.0.117) total-vm:90796kB, anon-rss:1272kB, file-rss:31792kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 67.614770][ T781] syz.0.117 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 67.624589][ T781] CPU: 0 UID: 0 PID: 781 Comm: syz.0.117 Tainted: G B syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 67.624622][ T781] Tainted: [B]=BAD_PAGE [ 67.624629][ T781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.624640][ T781] Call Trace: [ 67.624646][ T781] [ 67.624654][ T781] __dump_stack+0x21/0x30 [ 67.624683][ T781] dump_stack_lvl+0x140/0x1c0 [ 67.624707][ T781] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.624732][ T781] ? ___ratelimit+0x41c/0x5c0 [ 67.624753][ T781] ? __kasan_check_write+0x18/0x20 [ 67.624774][ T781] dump_stack+0x19/0x20 [ 67.624798][ T781] dump_header+0xd9/0x460 [ 67.624822][ T781] oom_kill_process+0x35d/0x640 [ 67.624844][ T781] out_of_memory+0x5d1/0xa20 [ 67.624865][ T781] ? __cfi_out_of_memory+0x10/0x10 [ 67.624885][ T781] ? mutex_lock_killable+0x115/0x1d0 [ 67.624909][ T781] ? __cfi_mutex_lock_killable+0x10/0x10 [ 67.624934][ T781] mem_cgroup_out_of_memory+0x2c5/0x390 [ 67.624955][ T781] ? css_next_descendant_pre+0x1ec/0x210 [ 67.624978][ T781] ? __kasan_check_write+0x18/0x20 [ 67.624998][ T781] ? drain_obj_stock+0xec0/0xec0 [ 67.625019][ T781] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 67.625041][ T781] try_charge_memcg+0x925/0xe10 [ 67.625065][ T781] ? static_key_count+0x45/0x70 [ 67.625090][ T781] ? lruvec_init+0x1f1/0x280 [ 67.625111][ T781] ? __cfi_try_charge_memcg+0x10/0x10 [ 67.625136][ T781] ? __alloc_pages_noprof+0x35a/0x7e0 [ 67.625163][ T781] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 67.625190][ T781] __mem_cgroup_charge+0xfc/0x420 [ 67.625209][ T781] ? folio_add_lru+0x116/0x400 [ 67.625232][ T781] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 67.625252][ T781] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 67.625277][ T781] ? shmem_replace_folio+0x9b0/0x9b0 [ 67.625300][ T781] ? shmem_huge_global_enabled+0x2da/0x360 [ 67.625322][ T781] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 67.625345][ T781] ? __kasan_check_write+0x18/0x20 [ 67.625371][ T781] ? _raw_spin_lock+0x92/0x120 [ 67.625390][ T781] shmem_get_folio_gfp+0x5cd/0x12e0 [ 67.625413][ T781] ? shmem_get_folio+0xc0/0xc0 [ 67.625433][ T781] ? follow_page_pte+0x8fb/0xba0 [ 67.625458][ T781] ? inode_to_bdi+0x6d/0x100 [ 67.625483][ T781] shmem_write_begin+0xf4/0x260 [ 67.625507][ T781] generic_perform_write+0x32c/0x970 [ 67.625534][ T781] ? __cfi_generic_perform_write+0x10/0x10 [ 67.625559][ T781] ? generic_write_checks_count+0x426/0x540 [ 67.625585][ T781] ? file_update_time+0xa3/0x210 [ 67.625602][ T781] shmem_file_write_iter+0x105/0x130 [ 67.625630][ T781] __kernel_write_iter+0x462/0x900 [ 67.625651][ T781] ? __cfi___kernel_write_iter+0x10/0x10 [ 67.625671][ T781] ? get_dump_page+0x165/0x220 [ 67.625695][ T781] ? __asan_memset+0x39/0x50 [ 67.625714][ T781] ? iov_iter_bvec+0xc0/0x180 [ 67.625739][ T781] dump_user_range+0xb8b/0xe60 [ 67.625762][ T781] ? __cfi_dump_user_range+0x10/0x10 [ 67.625783][ T781] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 67.625810][ T781] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 67.625838][ T781] ? elf_core_dump+0x23cf/0x3840 [ 67.625862][ T781] elf_core_dump+0x2d61/0x3840 [ 67.625887][ T781] ? __cfi_elf_core_dump+0x10/0x10 [ 67.625910][ T781] ? mas_next_slot+0xf01/0xfd0 [ 67.625938][ T781] ? dump_interrupted+0xf0/0xf0 [ 67.625957][ T781] ? filp_open+0x199/0x1f0 [ 67.625981][ T781] ? 0xffffffffff600000 [ 67.625998][ T781] do_coredump+0x20d2/0x3050 [ 67.626020][ T781] ? __cfi_do_coredump+0x10/0x10 [ 67.626039][ T781] ? asm_exc_page_fault+0x2b/0x30 [ 67.626067][ T781] ? __kasan_slab_free+0x6a/0x80 [ 67.626091][ T781] ? get_signal+0xa2a/0x1490 [ 67.626115][ T781] get_signal+0x11bf/0x1490 [ 67.626142][ T781] arch_do_signal_or_restart+0xbc/0x700 [ 67.626162][ T781] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 67.626183][ T781] ? __bad_area_nosemaphore+0x2fb/0x680 [ 67.626203][ T781] irqentry_exit_to_user_mode+0x4d/0xb0 [ 67.626228][ T781] irqentry_exit+0x16/0x60 [ 67.626252][ T781] exc_page_fault+0x65/0xc0 [ 67.626274][ T781] asm_exc_page_fault+0x2b/0x30 [ 67.626295][ T781] RIP: 0033:0x7fa9d3c53bd7 [ 67.626311][ T781] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 67.626328][ T781] RSP: 002b:00007fa9d4caf120 EFLAGS: 00010202 [ 67.626346][ T781] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa9d3d9e159 [ 67.626366][ T781] RDX: 00007fa9d4caf140 RSI: 00007fa9d4caf270 RDI: 000000000000000b [ 67.626379][ T781] RBP: 00007fa9d3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 67.626392][ T781] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 67.626405][ T781] R13: 00007fa9d4026128 R14: 00007fa9d4026090 R15: 00007fff967accc8 [ 67.626422][ T781] [ 67.626469][ T781] memory: usage 307200kB, limit 307200kB, failcnt 52269 [ 68.098573][ T781] memory+swap: usage 370172kB, limit 9007199254740988kB, failcnt 0 [ 68.106467][ T781] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 68.113324][ T781] Memory cgroup stats for /syz0: [ 68.113403][ T781] cache 262172672 [ 68.121941][ T781] rss 73728 [ 68.125051][ T781] rss_huge 0 [ 68.128232][ T781] shmem 262168576 [ 68.131867][ T781] mapped_file 0 [ 68.135316][ T781] dirty 0 [ 68.138224][ T781] writeback 0 [ 68.141507][ T781] workingset_refault_anon 90 [ 68.146079][ T781] workingset_refault_file 39007 [ 68.150953][ T781] swap 116715520 [ 68.154484][ T781] swapcached 143360 [ 68.158261][ T781] pgpgin 258799 [ 68.161711][ T781] pgpgout 194751 [ 68.165239][ T781] pgfault 40466 [ 68.168671][ T781] pgmajfault 829 [ 68.172209][ T781] inactive_anon 63762432 [ 68.176432][ T781] active_anon 198574080 [ 68.180585][ T781] inactive_file 0 [ 68.184206][ T781] active_file 4096 [ 68.187896][ T781] unevictable 0 [ 68.191351][ T781] hierarchical_memory_limit 314572800 [ 68.196704][ T781] hierarchical_memsw_limit 9223372036854771712 [ 68.202847][ T781] total_cache 262172672 [ 68.206984][ T781] total_rss 73728 [ 68.210608][ T781] total_rss_huge 0 [ 68.214314][ T781] total_shmem 262168576 [ 68.218441][ T781] total_mapped_file 0 [ 68.222416][ T781] total_dirty 0 [ 68.225864][ T781] total_writeback 0 [ 68.229675][ T781] total_workingset_refault_anon 90 [ 68.234766][ T781] total_workingset_refault_file 39007 [ 68.240149][ T781] total_swap 116715520 [ 68.244201][ T781] total_swapcached 143360 [ 68.248504][ T781] total_pgpgin 258799 [ 68.252476][ T781] total_pgpgout 194751 [ 68.256529][ T781] total_pgfault 40466 [ 68.260503][ T781] total_pgmajfault 829 [ 68.264561][ T781] total_inactive_anon 63762432 [ 68.269325][ T781] total_active_anon 198574080 [ 68.273986][ T781] total_inactive_file 0 [ 68.278113][ T781] total_active_file 4096 [ 68.282355][ T781] total_unevictable 0 [ 68.286320][ T781] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.117,pid=792,uid=0 [ 68.300969][ T781] Memory cgroup out of memory: Killed process 792 (syz.0.117) total-vm:90792kB, anon-rss:1392kB, file-rss:29056kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 68.742315][ T799] syz.0.117 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 68.769230][ T799] CPU: 1 UID: 0 PID: 799 Comm: syz.0.117 Tainted: G B syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 68.769267][ T799] Tainted: [B]=BAD_PAGE [ 68.769274][ T799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.769286][ T799] Call Trace: [ 68.769293][ T799] [ 68.769300][ T799] __dump_stack+0x21/0x30 [ 68.769331][ T799] dump_stack_lvl+0x140/0x1c0 [ 68.769356][ T799] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.769380][ T799] ? ___ratelimit+0x41c/0x5c0 [ 68.769402][ T799] ? __kasan_check_write+0x18/0x20 [ 68.769423][ T799] dump_stack+0x19/0x20 [ 68.769446][ T799] dump_header+0xd9/0x460 [ 68.769471][ T799] oom_kill_process+0x35d/0x640 [ 68.769494][ T799] out_of_memory+0x5d1/0xa20 [ 68.769515][ T799] ? __cfi_out_of_memory+0x10/0x10 [ 68.769536][ T799] ? mutex_lock_killable+0x97/0x1d0 [ 68.769559][ T799] ? __cfi_mutex_lock_killable+0x10/0x10 [ 68.769584][ T799] mem_cgroup_out_of_memory+0x2c5/0x390 [ 68.769605][ T799] ? css_next_descendant_pre+0x1ec/0x210 [ 68.769628][ T799] ? __kasan_check_write+0x18/0x20 [ 68.769648][ T799] ? drain_obj_stock+0xec0/0xec0 [ 68.769669][ T799] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 68.769690][ T799] try_charge_memcg+0x925/0xe10 [ 68.769714][ T799] ? static_key_count+0x45/0x70 [ 68.769738][ T799] ? lruvec_init+0x1f1/0x280 [ 68.769759][ T799] ? __cfi_try_charge_memcg+0x10/0x10 [ 68.769785][ T799] ? __alloc_pages_noprof+0x35a/0x7e0 [ 68.769811][ T799] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 68.769838][ T799] __mem_cgroup_charge+0xfc/0x420 [ 68.769857][ T799] ? folio_add_lru+0x116/0x400 [ 68.769880][ T799] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 68.769900][ T799] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 68.769925][ T799] ? shmem_replace_folio+0x9b0/0x9b0 [ 68.769949][ T799] ? shmem_huge_global_enabled+0x2da/0x360 [ 68.769971][ T799] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 68.769993][ T799] ? __kasan_check_write+0x18/0x20 [ 68.770013][ T799] ? _raw_spin_lock+0x92/0x120 [ 68.770031][ T799] shmem_get_folio_gfp+0x5cd/0x12e0 [ 68.770055][ T799] ? shmem_get_folio+0xc0/0xc0 [ 68.770075][ T799] ? follow_page_pte+0x8fb/0xba0 [ 68.770101][ T799] ? inode_to_bdi+0x6d/0x100 [ 68.770126][ T799] shmem_write_begin+0xf4/0x260 [ 68.770146][ T799] generic_perform_write+0x32c/0x970 [ 68.770169][ T799] ? __cfi_generic_perform_write+0x10/0x10 [ 68.770193][ T799] ? generic_write_checks_count+0x426/0x540 [ 68.770215][ T799] ? file_update_time+0xa3/0x210 [ 68.770236][ T799] shmem_file_write_iter+0x105/0x130 [ 68.770258][ T799] __kernel_write_iter+0x462/0x900 [ 68.770275][ T799] ? __cfi___kernel_write_iter+0x10/0x10 [ 68.770292][ T799] ? get_dump_page+0x165/0x220 [ 68.770312][ T799] ? __asan_memset+0x39/0x50 [ 68.770328][ T799] ? iov_iter_bvec+0xc0/0x180 [ 68.770350][ T799] dump_user_range+0xb8b/0xe60 [ 68.770369][ T799] ? __cfi_dump_user_range+0x10/0x10 [ 68.770387][ T799] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 68.770411][ T799] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 68.770434][ T799] ? elf_core_dump+0x23cf/0x3840 [ 68.770456][ T799] elf_core_dump+0x2d61/0x3840 [ 68.770478][ T799] ? __cfi_elf_core_dump+0x10/0x10 [ 68.770497][ T799] ? mas_next_slot+0xf01/0xfd0 [ 68.770522][ T799] ? dump_interrupted+0xf0/0xf0 [ 68.770538][ T799] ? filp_open+0x199/0x1f0 [ 68.770559][ T799] ? 0xffffffffff600000 [ 68.770572][ T799] do_coredump+0x20d2/0x3050 [ 68.770590][ T799] ? __cfi_do_coredump+0x10/0x10 [ 68.770606][ T799] ? asm_exc_page_fault+0x2b/0x30 [ 68.770630][ T799] ? __kasan_slab_free+0x6a/0x80 [ 68.770650][ T799] ? get_signal+0xa2a/0x1490 [ 68.770671][ T799] get_signal+0x11bf/0x1490 [ 68.770693][ T799] arch_do_signal_or_restart+0xbc/0x700 [ 68.770710][ T799] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 68.770728][ T799] ? __bad_area_nosemaphore+0x2fb/0x680 [ 68.770744][ T799] irqentry_exit_to_user_mode+0x4d/0xb0 [ 68.770766][ T799] irqentry_exit+0x16/0x60 [ 68.770786][ T799] exc_page_fault+0x65/0xc0 [ 68.770805][ T799] asm_exc_page_fault+0x2b/0x30 [ 68.770823][ T799] RIP: 0033:0x7fa9d3c53bd7 [ 68.770837][ T799] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 68.770852][ T799] RSP: 002b:00007fa9d4caf120 EFLAGS: 00010202 [ 68.770868][ T799] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa9d3d9e159 [ 68.770880][ T799] RDX: 00007fa9d4caf140 RSI: 00007fa9d4caf270 RDI: 000000000000000b [ 68.770893][ T799] RBP: 00007fa9d3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 68.770904][ T799] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 68.770915][ T799] R13: 00007fa9d4026128 R14: 00007fa9d4026090 R15: 00007fff967accc8 [ 68.770929][ T799] [ 68.770975][ T799] memory: usage 307200kB, limit 307200kB, failcnt 57348 [ 69.242894][ T799] memory+swap: usage 431232kB, limit 9007199254740988kB, failcnt 0 [ 69.250859][ T799] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 69.257718][ T799] Memory cgroup stats for /syz0: [ 69.257820][ T799] cache 313552896 [ 69.266364][ T799] rss 73728 [ 69.269504][ T799] rss_huge 0 [ 69.272688][ T799] shmem 313548800 [ 69.276293][ T799] mapped_file 0 [ 69.279748][ T799] dirty 0 [ 69.282670][ T799] writeback 0 [ 69.285938][ T799] workingset_refault_anon 90 [ 69.290537][ T799] workingset_refault_file 41049 [ 69.295372][ T799] swap 127008768 [ 69.298888][ T799] swapcached 974848 [ 69.302688][ T799] pgpgin 286376 [ 69.306130][ T799] pgpgout 209576 [ 69.309673][ T799] pgfault 40871 [ 69.313118][ T799] pgmajfault 844 [ 69.316636][ T799] inactive_anon 90771456 [ 69.320872][ T799] active_anon 223797248 [ 69.325017][ T799] inactive_file 0 [ 69.328634][ T799] active_file 4096 [ 69.332359][ T799] unevictable 0 [ 69.335815][ T799] hierarchical_memory_limit 314572800 [ 69.341287][ T799] hierarchical_memsw_limit 9223372036854771712 [ 69.347430][ T799] total_cache 313552896 [ 69.351583][ T799] total_rss 73728 [ 69.355201][ T799] total_rss_huge 0 [ 69.358917][ T799] total_shmem 313548800 [ 69.363063][ T799] total_mapped_file 0 [ 69.367026][ T799] total_dirty 0 [ 69.370478][ T799] total_writeback 0 [ 69.374372][ T799] total_workingset_refault_anon 90 [ 69.379489][ T799] total_workingset_refault_file 41049 [ 69.384842][ T799] total_swap 127008768 [ 69.388885][ T799] total_swapcached 974848 [ 69.393204][ T799] total_pgpgin 286376 [ 69.397169][ T799] total_pgpgout 209576 [ 69.401234][ T799] total_pgfault 40871 [ 69.405201][ T799] total_pgmajfault 844 [ 69.409264][ T799] total_inactive_anon 90771456 [ 69.414012][ T799] total_active_anon 223797248 [ 69.418658][ T799] total_inactive_file 0 [ 69.422810][ T799] total_active_file 4096 [ 69.427039][ T799] total_unevictable 0 [ 69.431019][ T799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.117,pid=799,uid=0 [ 69.445670][ T799] Memory cgroup out of memory: Killed process 799 (syz.0.117) total-vm:90796kB, anon-rss:1272kB, file-rss:30676kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 69.509340][ T786] syz.0.117 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 69.519099][ T786] CPU: 0 UID: 0 PID: 786 Comm: syz.0.117 Tainted: G B syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 69.519132][ T786] Tainted: [B]=BAD_PAGE [ 69.519139][ T786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.519152][ T786] Call Trace: [ 69.519158][ T786] [ 69.519169][ T786] __dump_stack+0x21/0x30 [ 69.519200][ T786] dump_stack_lvl+0x140/0x1c0 [ 69.519224][ T786] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.519249][ T786] ? ___ratelimit+0x41c/0x5c0 [ 69.519271][ T786] ? __kasan_check_write+0x18/0x20 [ 69.519292][ T786] dump_stack+0x19/0x20 [ 69.519315][ T786] dump_header+0xd9/0x460 [ 69.519339][ T786] oom_kill_process+0x35d/0x640 [ 69.519361][ T786] out_of_memory+0x5d1/0xa20 [ 69.519383][ T786] ? __cfi_out_of_memory+0x10/0x10 [ 69.519403][ T786] ? mutex_lock_killable+0x97/0x1d0 [ 69.519426][ T786] ? __cfi_mutex_lock_killable+0x10/0x10 [ 69.519450][ T786] mem_cgroup_out_of_memory+0x2c5/0x390 [ 69.519471][ T786] ? css_next_descendant_pre+0x1ec/0x210 [ 69.519494][ T786] ? __kasan_check_write+0x18/0x20 [ 69.519513][ T786] ? drain_obj_stock+0xec0/0xec0 [ 69.519534][ T786] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 69.519555][ T786] try_charge_memcg+0x925/0xe10 [ 69.519579][ T786] ? static_key_count+0x45/0x70 [ 69.519603][ T786] ? lruvec_init+0x1f1/0x280 [ 69.519625][ T786] ? __cfi_try_charge_memcg+0x10/0x10 [ 69.519651][ T786] ? __alloc_pages_noprof+0x35a/0x7e0 [ 69.519677][ T786] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 69.519712][ T786] __mem_cgroup_charge+0xfc/0x420 [ 69.519731][ T786] ? __alloc_pages_noprof+0x35a/0x7e0 [ 69.519756][ T786] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 69.519777][ T786] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 69.519801][ T786] ? shmem_replace_folio+0x9b0/0x9b0 [ 69.519824][ T786] ? shmem_huge_global_enabled+0x2da/0x360 [ 69.519846][ T786] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 69.519868][ T786] ? __kasan_check_write+0x18/0x20 [ 69.519888][ T786] ? _raw_spin_lock+0x92/0x120 [ 69.519906][ T786] shmem_get_folio_gfp+0x5cd/0x12e0 [ 69.519929][ T786] ? shmem_get_folio+0xc0/0xc0 [ 69.519949][ T786] ? follow_page_pte+0x8fb/0xba0 [ 69.519975][ T786] ? inode_to_bdi+0x6d/0x100 [ 69.520000][ T786] shmem_write_begin+0xf4/0x260 [ 69.520023][ T786] generic_perform_write+0x32c/0x970 [ 69.520050][ T786] ? __cfi_generic_perform_write+0x10/0x10 [ 69.520074][ T786] ? generic_write_checks_count+0x426/0x540 [ 69.520100][ T786] ? file_update_time+0xa3/0x210 [ 69.520118][ T786] shmem_file_write_iter+0x105/0x130 [ 69.520144][ T786] __kernel_write_iter+0x462/0x900 [ 69.520165][ T786] ? __cfi___kernel_write_iter+0x10/0x10 [ 69.520186][ T786] ? __asan_memset+0x39/0x50 [ 69.520205][ T786] ? iov_iter_bvec+0xc0/0x180 [ 69.520230][ T786] dump_user_range+0xb8b/0xe60 [ 69.520253][ T786] ? __cfi_dump_user_range+0x10/0x10 [ 69.520274][ T786] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 69.520301][ T786] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 69.520328][ T786] ? elf_core_dump+0x23cf/0x3840 [ 69.520352][ T786] elf_core_dump+0x2d61/0x3840 [ 69.520378][ T786] ? __cfi_elf_core_dump+0x10/0x10 [ 69.520401][ T786] ? mas_next_slot+0xf01/0xfd0 [ 69.520429][ T786] ? dump_interrupted+0xf0/0xf0 [ 69.520448][ T786] ? filp_open+0x199/0x1f0 [ 69.520473][ T786] ? 0xffffffffff600000 [ 69.520489][ T786] do_coredump+0x20d2/0x3050 [ 69.520511][ T786] ? __cfi_do_coredump+0x10/0x10 [ 69.520530][ T786] ? asm_exc_page_fault+0x2b/0x30 [ 69.520558][ T786] ? __kasan_slab_free+0x6a/0x80 [ 69.520581][ T786] ? get_signal+0xa2a/0x1490 [ 69.520605][ T786] get_signal+0x11bf/0x1490 [ 69.520632][ T786] arch_do_signal_or_restart+0xbc/0x700 [ 69.520652][ T786] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 69.520672][ T786] ? __bad_area_nosemaphore+0x2fb/0x680 [ 69.520700][ T786] irqentry_exit_to_user_mode+0x4d/0xb0 [ 69.520725][ T786] irqentry_exit+0x16/0x60 [ 69.520748][ T786] exc_page_fault+0x65/0xc0 [ 69.520771][ T786] asm_exc_page_fault+0x2b/0x30 [ 69.520793][ T786] RIP: 0033:0x7fa9d3c53bd7 [ 69.520810][ T786] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 69.520825][ T786] RSP: 002b:00007fa9d4caf120 EFLAGS: 00010202 [ 69.520843][ T786] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa9d3d9e159 [ 69.520856][ T786] RDX: 00007fa9d4caf140 RSI: 00007fa9d4caf270 RDI: 000000000000000b [ 69.520869][ T786] RBP: 00007fa9d3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 69.520881][ T786] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 69.520893][ T786] R13: 00007fa9d4026128 R14: 00007fa9d4026090 R15: 00007fff967accc8 [ 69.520909][ T786] [ 69.981581][ T786] memory: usage 274556kB, limit 307200kB, failcnt 57700 [ 69.988516][ T786] memory+swap: usage 398056kB, limit 9007199254740988kB, failcnt 0 [ 69.996430][ T786] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 70.003299][ T786] Memory cgroup stats for /syz0: [ 70.003426][ T786] cache 279564288 [ 70.012024][ T786] rss 159744 [ 70.015215][ T786] rss_huge 0 [ 70.018399][ T786] shmem 279560192 [ 70.022045][ T786] mapped_file 4096 [ 70.025751][ T786] dirty 0 [ 70.028677][ T786] writeback 0 [ 70.031979][ T786] workingset_refault_anon 247 [ 70.036649][ T786] workingset_refault_file 41049 [ 70.041511][ T786] swap 126464000 [ 70.045045][ T786] swapcached 1196032 [ 70.048926][ T786] pgpgin 293160 [ 70.052405][ T786] pgpgout 224595 [ 70.055942][ T786] pgfault 41148 [ 70.059413][ T786] pgmajfault 904 [ 70.062952][ T786] inactive_anon 4403200 [ 70.067096][ T786] active_anon 276434944 [ 70.071281][ T786] inactive_file 0 [ 70.074906][ T786] active_file 4096 [ 70.078614][ T786] unevictable 0 [ 70.082094][ T786] hierarchical_memory_limit 314572800 [ 70.087456][ T786] hierarchical_memsw_limit 9223372036854771712 [ 70.093659][ T786] total_cache 279564288 [ 70.097823][ T786] total_rss 159744 [ 70.101554][ T786] total_rss_huge 0 [ 70.105265][ T786] total_shmem 279560192 [ 70.109429][ T786] total_mapped_file 4096 [ 70.113660][ T786] total_dirty 0 [ 70.117112][ T786] total_writeback 0 [ 70.120926][ T786] total_workingset_refault_anon 247 [ 70.126115][ T786] total_workingset_refault_file 41049 [ 70.131506][ T786] total_swap 126464000 [ 70.135560][ T786] total_swapcached 1196032 [ 70.139987][ T786] total_pgpgin 293160 [ 70.143959][ T786] total_pgpgout 224595 [ 70.148015][ T786] total_pgfault 41148 [ 70.152006][ T786] total_pgmajfault 904 [ 70.156059][ T786] total_inactive_anon 4403200 [ 70.160741][ T786] total_active_anon 276434944 [ 70.165406][ T786] total_inactive_file 0 [ 70.169576][ T786] total_active_file 4096 [ 70.173803][ T786] total_unevictable 0 [ 70.177773][ T786] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.117,pid=793,uid=0 [ 70.192449][ T786] Memory cgroup out of memory: Killed process 793 (syz.0.117) total-vm:90792kB, anon-rss:1392kB, file-rss:29508kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000