last executing test programs: 4.264864949s ago: executing program 2 (id=3): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x1007, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r1, 0x103703) dup3(r2, r1, 0x80000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_connect$uac3(0x3, 0x98, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x60, 0x50, 0x7, {0x8, 0xb, 0x0, 0x0, 0x1, 0x0, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xf, 0x5}, [@mixer_unit={0x5, 0x24, 0x5, 0x1, 0xf}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0x0, 0x2, {0xa, 0x25, 0x25, 0x2, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xe, 0x4, 0x8, 0x6, 'D'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x81, 0x1, 0x4, 0x9, "", "9b82"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0x36, 0x3, {0xa, 0x25, 0x25, 0x0, 0x76, 0x38b}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0xc, 0x0, 0x4, 0xff, 0x6}, 0x1a, &(0x7f0000000340)=ANY=[@ANYBLOB="050f1a00020a1008009a00"/26]}) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f00000001c0)="1b54e014e5ef08f20cf1d1849699eb06796578e0987534a585e12860c30f8331f0eb05d9a809dca34c2bb0e57fee4d5d12282942c07d9a1c1aafb2ad6a23a5d8077d4646ec883bdb99638c1f94e125849be1c5d965d2373e5bac0000000000001388f2547345a8fed900000000000074080208729f5ce49fc085b46ba47f0bc47a495b14a3344fee0f11619df9c33b9c8b581305c6480428605fc0f26561c4595e8ec48f", 0xa4) 2.565083299s ago: executing program 1 (id=17): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x20) (rerun: 32) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000280)={0x101000, 0x0, 0x28}, 0x18) (async, rerun: 32) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async, rerun: 32) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="e81c07d3194032aedb9c38489860c5a5ab190faae0437fdc3f71c7565c8e7b45aae38fe34f2772a46fb52c53398e6bbbf37af3c93c9c56dcb5a2987457b4e618f1f31227c6d207361f6fdee349", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2800424, &(0x7f0000000200)=ANY=[]) (async) r4 = epoll_create1(0x0) epoll_wait(r4, &(0x7f0000000200)=[{}], 0x1, 0x0) close_range(r4, r1, 0x2) 2.051176863s ago: executing program 1 (id=22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x1ffe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48010000100001002bbc70e6cdfd92765b45f5197a614fb9ea000000000000000022ac141443000000000000000000001300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000010000000032000000e0000002000000000000000000000000feffffffffffffff0400000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000890000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000026bd700000000000020004006c00000000000000580002"], 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) eventfd2(0xffffffff, 0x1) 1.89181639s ago: executing program 0 (id=23): futex(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x3) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)={0x6}) (async, rerun: 64) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0010020}]}) (async, rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r5, 0x4940c000) 1.772576836s ago: executing program 1 (id=24): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0xffffff6a) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0xa, 0x4) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@local, 0x34, r6}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r6}) r7 = openat$cgroup_int(r0, &(0x7f0000000080)='cpu.max\x00', 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet6(0xa, 0x2, 0x0) r9 = socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009040001040806620007050102000200032401070502020002000324020705030200020003"], 0x0) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r7], 0x10}}, 0x0) setuid(0xee00) mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x8, 0x810, r0, 0x0) 1.567015376s ago: executing program 0 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x101000, 0x41) (async) pipe2(0x0, 0x0) pipe2(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b1, 0x0, 0x89}]}) 1.48541242s ago: executing program 0 (id=26): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x7000) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b003a00320006006300000000443aff00000000000000000000ffffac141419ff0200000000000000000000ff8c0001"], 0x76) 1.326986488s ago: executing program 0 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)={0x2c, 0x26, 0x603, 0x70bd28, 0x25dfdbfe, "", [@nested={0x1c, 0xce, 0x0, 0x1, [@typed={0xc, 0xe9, 0x0, 0x0, @str='cmdline\x00'}, @typed={0x8, 0xbf, 0x0, 0x0, @u32=0x4}, @typed={0x4, 0xe}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x2, 0x0, 0x3f, 0x8}, {0x8000, 0x6, 0x4}, {0x5, 0xd, 0xf9, 0xd4}, {0xffff, 0xd, 0x1, 0xb}, {0xad37, 0x7, 0xfd}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x2, r0, 0x400, 0x80000}) 1.263087701s ago: executing program 0 (id=28): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8, "62966124"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd2(0x4001, 0x800) r6 = eventfd2(0x4, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r6, 0x7, 0x2, r5}) close_range(r2, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000180)='enable_event:sched:sched_process_fork', 0x25) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4000800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.241632161s ago: executing program 2 (id=29): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x2, 0x1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000efff00"/88, 0x58) 1.203946873s ago: executing program 2 (id=30): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) preadv(r2, &(0x7f0000000540)=[{0x0, 0x300}, {&(0x7f0000000480)=""/179, 0xb3}], 0x2, 0x0, 0x1) (async) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="cd58259189789996e22875f90607a75ca74fbbd0207e64e856b4b82ad367a0f9bfbf2b99"], 0x6) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a00000000000001"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.180176655s ago: executing program 1 (id=31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x7, 0x3, 0x1, 0xe7, 0x92, 0x8, 0x1fd, 0xdf, 0x8, 0xff, 0x7c6a, 0x0, 0x8000000000000001, 0x0, 0x1, 0xe], 0x4}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.034635191s ago: executing program 2 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000040)=""/103, 0x67, 0x800) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000680)=0x600000, 0x4) write$binfmt_format(r2, &(0x7f00000001c0)='1\x00', 0x2) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000010c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f0000001040), &(0x7f0000001080)=0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r5, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") 1.002043523s ago: executing program 1 (id=33): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000300)={0xc0, 0x0, 0x4000}) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) (async, rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x0, 0x0}) (async) readv(r3, &(0x7f0000001680)=[{&(0x7f0000000280)=""/147, 0x93}], 0x1) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 947.024425ms ago: executing program 2 (id=34): r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x30, 0x0, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth0_virt_wifi\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0xe6}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0xa) r5 = getpgid(0xffffffffffffffff) capset(&(0x7f0000000000)={0xf1504, r5}, 0x0) capset(0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000340), 0x6, 0xa0043) ioctl$BLKRRPART(r6, 0x125f, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='.\x00', 0x1, 0x0) write$cgroup_pid(r8, &(0x7f0000000040)=r7, 0x12) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r1, 0x108000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') syz_clone3(&(0x7f0000001200)={0x40100000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r10 = fsmount(r0, 0x1, 0xd) fchdir(r10) 426.34822ms ago: executing program 2 (id=36): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000100)='auxv\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mprotect(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1000000) mount(0x0, &(0x7f0000000040)='./tracing/uprobe_events/file0\x00', &(0x7f00000000c0)='configfs\x00', 0x1020000, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001a00e7eff67a00000000000000a1", 0x12, 0x8, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200008c0}, 0x4024080) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r7, &(0x7f0000000180)='p:s/p ./file0:', 0xe) r8 = timerfd_create(0x0, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x655409fe, 0x389fd980}) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000002c0)={[0x25000, 0x2000, 0xeeee8000, 0x3ff8], 0x5, 0x9, 0x800000000}) read(r8, &(0x7f0000000400)=""/8, 0x8) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) openat(0xffffffffffffff9c, &(0x7f0000000220)='./config/usb_gadget/g1/bDeviceClass\x00', 0x1, 0x0) 289.668107ms ago: executing program 3 (id=37): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd2(0x2, 0x80800) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) splice(r4, 0x0, r5, 0x0, 0x8000000000000001, 0x1) r7 = dup(r3) syz_ublk_setup_queues(r7, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x100, 0x2, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7395, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0x2, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000002, 0x4000, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000780)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000880)=0xe8) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x810, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xfffffff6, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r10, r11, 0x3f5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0, 0x0}, &(0x7f0000001740)=0xc) keyctl$chown(0x4, 0x0, r13, r14) setresuid(r8, r10, r13) 147.160703ms ago: executing program 3 (id=38): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x2, 0x1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000f0ff00"/88, 0x58) 146.916333ms ago: executing program 3 (id=39): capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x81, 0xfffffdff, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async, rerun: 64) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async, rerun: 64) setxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {0x1, 0x1}, [], {}, [{0x8, 0x5}], {}, {0x20, 0x5}}, 0x2c, 0x3) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000006c000100"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x0) socket$inet(0x2, 0x3, 0x1) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x420}, 0x1, 0x0, 0x0, 0x4}, 0x80000) (async, rerun: 32) ioctl$SNAPSHOT_FREE(r2, 0x3305) (rerun: 32) 98.000375ms ago: executing program 3 (id=40): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190028000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000400)="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"/472, 0x1d8, 0xfffffffffffffffd) 61.887547ms ago: executing program 3 (id=41): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x108, 0x4) ptrace$pokeuser(0x6, r1, 0x118, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x48000, &(0x7f0000000140)='-@@^)\xda\x00') setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa0}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="480000000000000029000000390000002b0202"], 0x48}, 0x40c0) (async) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa0}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="480000000000000029000000390000002b0202"], 0x48}, 0x40c0) 15.04164ms ago: executing program 1 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42c01, 0x0) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x6003) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000000)={0x79}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r6, &(0x7f0000001040)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000001900)=[@hoplimit={{0x14, 0x29, 0x34, 0xd}}], 0x18}}], 0x1, 0x20000004) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x6a0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, 0x0) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000084, 0x0, 0x6}]}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000280)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ff2000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000001c0)=0x1fff) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x4) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18) rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00') 13.71517ms ago: executing program 3 (id=43): mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f0000000380)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f\xa2a\xe8P\xfc\x80\x81X\xbb\a\x00\x00\x00\x10\xa3\xc8n\xa4\'\x1fpuM\xb7\xe6:\xa0\x04\xb2\xeft\xc8\x82t\x96\xf8\xcc\xc5\xa8k\xaa\xad.$\xba\xef\"\x8c\xef\t?\x8by\b\xc0%\xa0r0}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000880), &(0x7f0000000580), 0x2, 0xc86d1c27acdfe823) (async) tkill(r2, 0x2d) (async) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = open(&(0x7f0000000540)='./file0\x00', 0x101000, 0x11) (async, rerun: 32) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) (async, rerun: 32) socket(0x29, 0x80000, 0xd) sendto$packet(r5, &(0x7f0000000800)="10031200e0ff020002004788aa96a13bb100001100007fca1a00cefa210adcce9e194983e727a5876183ec68dabc", 0x2e, 0x0, &(0x7f0000000140)={0x11, 0x1c, r6}, 0x14) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000740)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18010000120004072dbd7000fedbdf25000906004e2e4e200300000003000000400000000a0000008400000016318a1d8605e2bbed0a75f8", @ANYRES32=r6, @ANYBLOB="070000000500000006000000000000007d00010088db047a3e8be599fd90f68a0fc7e54ae32363621cca0e157ae5b1a03541e8515c73f9f37dbf9d8a952243176c262290b9115d86494ebfb644f4a794c28d9c2e8643d5c979562060bac04244ec4f7fce312a0888f61def5ffef3f51214eea9c5c96bc3ffebd9d24b7b8543cf872be30764abdb6a6e9f2fa2ed00000049000100bbfa9675b288cf2f7133bb05fa09ae9c45dae4ace4dc03ffba9646c703b574ae916906b270f483e33bbfbf2124a394e4d368f0bcc41775b9f0e916938378f54b61eea89cef000000"], 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x8000) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000780)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r4, 0x6) accept4(r7, &(0x7f0000000180)=@vsock, &(0x7f0000000240)=0x80, 0x80800) (async) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080), 0x10) (async, rerun: 32) shutdown(r1, 0x1) (rerun: 32) r9 = syz_open_procfs(r0, &(0x7f00000000c0)='net/if_inet6\x00') syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000010392aa03f4000010203010902600003010500080904000000010100000a240107000a000201020904010000010200000904010101010200000905010920000b0307072501040401000904020000010200000904020101010200000905820940000d5443dfb80104010600"], 0x0) (async) read$FUSE(r9, &(0x7f0000003c80)={0x2020}, 0xfffffceb) 0s ago: executing program 0 (id=44): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0xc0000001, 0x0, 0x0, 0xfffffec7, 0x5, 0x7, 0x8}, {0xc0000001, 0xe, 0x0, 0x1ff, 0x3, 0x6}]}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x54, 0x0, 0x2, {0xfffd, 0x1}, {0x38, 0x2}}) r2 = syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="120150020000fe206b1d01014000010203010902"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0}) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r3, &(0x7f0000000040)=@access={'system_u:object_r:gpg_helper_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x25}, 0x4c) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009040001040806620007050102000200032401070502020002000324020705030200020003240307058402000200032404"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000680)=0x600000, 0x4) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4178c40ba"], 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/30) kernel console output (not intermixed with test programs): cess permissive=1 [ 13.296643][ T36] audit: type=1400 audit(1789733264.100:63): avc: denied { siginh } for pid=230 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts. [ 21.783778][ T36] audit: type=1400 audit(1789733272.600:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.787481][ T273] cgroup: Unknown subsys name 'net' [ 21.806728][ T36] audit: type=1400 audit(1789733272.600:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.834161][ T36] audit: type=1400 audit(1789733272.630:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.834631][ T273] cgroup: Unknown subsys name 'devices' [ 21.953921][ T273] cgroup: Unknown subsys name 'hugetlb' [ 21.959746][ T273] cgroup: Unknown subsys name 'rlimit' [ 22.075240][ T36] audit: type=1400 audit(1789733272.890:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.098686][ T36] audit: type=1400 audit(1789733272.890:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.123867][ T36] audit: type=1400 audit(1789733272.890:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.148910][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.157917][ T36] audit: type=1400 audit(1789733272.980:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.183697][ T36] audit: type=1400 audit(1789733272.980:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.226501][ T36] audit: type=1400 audit(1789733273.040:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.227870][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.252182][ T36] audit: type=1400 audit(1789733273.040:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.664290][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.671404][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.678838][ T294] bridge_slave_0: entered allmulticast mode [ 23.685397][ T294] bridge_slave_0: entered promiscuous mode [ 23.693453][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.700533][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.707937][ T294] bridge_slave_1: entered allmulticast mode [ 23.714354][ T294] bridge_slave_1: entered promiscuous mode [ 23.784360][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.791618][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.798726][ T297] bridge_slave_0: entered allmulticast mode [ 23.805333][ T297] bridge_slave_0: entered promiscuous mode [ 23.825767][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.832928][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.840189][ T297] bridge_slave_1: entered allmulticast mode [ 23.846633][ T297] bridge_slave_1: entered promiscuous mode [ 23.867761][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.874968][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.882195][ T295] bridge_slave_0: entered allmulticast mode [ 23.888491][ T295] bridge_slave_0: entered promiscuous mode [ 23.898261][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.905380][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.912669][ T295] bridge_slave_1: entered allmulticast mode [ 23.918969][ T295] bridge_slave_1: entered promiscuous mode [ 24.020062][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.027774][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.034946][ T296] bridge_slave_0: entered allmulticast mode [ 24.041234][ T296] bridge_slave_0: entered promiscuous mode [ 24.048321][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.055410][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.062755][ T296] bridge_slave_1: entered allmulticast mode [ 24.069135][ T296] bridge_slave_1: entered promiscuous mode [ 24.110592][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.117697][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.125084][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.132174][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.146138][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.153353][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.160800][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.167921][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.223112][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.230311][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.237744][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.244816][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.265782][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.273390][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.281175][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.288854][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.296630][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.303994][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.318188][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.325317][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.333112][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.340154][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.366575][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.373657][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.381188][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.388306][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.416226][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.423454][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.445799][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.453092][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.471132][ T295] veth0_vlan: entered promiscuous mode [ 24.489112][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.496219][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.510865][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.518281][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.537376][ T295] veth1_macvtap: entered promiscuous mode [ 24.562271][ T294] veth0_vlan: entered promiscuous mode [ 24.573951][ T297] veth0_vlan: entered promiscuous mode [ 24.594376][ T294] veth1_macvtap: entered promiscuous mode [ 24.619987][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.647054][ T296] veth0_vlan: entered promiscuous mode [ 24.653558][ T297] veth1_macvtap: entered promiscuous mode [ 24.690903][ T296] veth1_macvtap: entered promiscuous mode [ 24.743729][ T319] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.945233][ T341] rust_binder: 340:341 error while translating object: ENOENT [ 24.953205][ T341] rust_binder: Failure in copy_transaction_data: ENOENT [ 24.953253][ T341] rust_binder: 340:341 transaction call to 340:0 failed ENOENT, code 0 size 72-24 [ 24.970738][ T341] tmpfs: Bad value for 'nr_blocks' [ 25.051621][ T310] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.091646][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.151628][ T311] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.201766][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 25.208296][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.219531][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.229452][ T310] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 25.238578][ T10] usb 3-1: device descriptor read/64, error -71 [ 25.245512][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.254753][ T310] usb 4-1: config 0 descriptor?? [ 25.260868][ T310] hub 4-1:0.0: USB hub found [ 25.301921][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 25.308616][ T311] usb 2-1: too many endpoints for config 0 interface 0 altsetting 129: 33, using maximum allowed: 30 [ 25.319981][ T311] usb 2-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 25.333338][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 25.339987][ T311] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 25.349301][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.358295][ T311] usb 2-1: config 0 descriptor?? [ 25.463480][ T310] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 25.481650][ T10] usb 3-1: device descriptor read/64, error -71 [ 25.675121][ T310] hid-generic 0003:046D:C31C.0001: item fetching failed at offset 0/1 [ 25.685424][ T310] hid-generic 0003:046D:C31C.0001: probe with driver hid-generic failed with error -22 [ 25.721981][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 25.768421][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.775701][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.783139][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.790330][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.797532][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.804801][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.812077][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.819253][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.826496][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.833749][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.840925][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.848318][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.855516][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.862723][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.870335][ T10] usb 3-1: device descriptor read/64, error -71 [ 25.871739][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.891635][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.899085][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.906663][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.913978][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.921156][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.931814][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.939078][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.946484][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.953859][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.961071][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.968367][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.977756][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.985020][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 25.995362][ T67] usb 4-1: USB disconnect, device number 2 [ 26.003988][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 26.012472][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 26.020409][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 26.027679][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 26.035150][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 26.042499][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 26.049680][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 26.056906][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 26.064127][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 26.071344][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 26.078749][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 26.086252][ T311] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 26.102041][ T311] zydacron 0003:13EC:0006.0002: hidraw0: USB HID v0.81 Device [HID 13ec:0006] on usb-dummy_hcd.1-1/input0 [ 26.141686][ T10] usb 3-1: device descriptor read/64, error -71 [ 26.186584][ T384] overlayfs: empty lowerdir [ 26.251742][ T10] usb usb3-port1: attempt power cycle [ 26.490949][ T310] usb 2-1: USB disconnect, device number 2 [ 26.591708][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 26.623665][ T10] usb 3-1: device descriptor read/8, error -71 [ 26.665062][ T392] cgroup: fork rejected by pids controller in /syz1 [ 26.752647][ T10] usb 3-1: device descriptor read/8, error -71 [ 26.992170][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 27.033561][ T10] usb 3-1: device descriptor read/8, error -71 [ 27.169853][ T10] usb 3-1: device descriptor read/8, error -71 [ 27.191594][ T67] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.212419][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 27.212438][ T36] audit: type=1400 audit(1789733278.030:144): avc: denied { create } for pid=483 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.238366][ T36] audit: type=1400 audit(1789733278.030:145): avc: denied { map } for pid=483 comm="syz.0.23" path="socket:[4506]" dev="sockfs" ino=4506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.266179][ T36] audit: type=1400 audit(1789733278.030:146): avc: denied { read } for pid=483 comm="syz.0.23" path="socket:[4506]" dev="sockfs" ino=4506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.282102][ T10] usb usb3-port1: unable to enumerate USB device [ 27.322835][ T489] Zero length message leads to an empty skb [ 27.328857][ T36] audit: type=1400 audit(1789733278.140:147): avc: denied { ioctl } for pid=488 comm="syz.1.24" path="socket:[4010]" dev="sockfs" ino=4010 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.383955][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.395304][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.405369][ T67] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 27.415739][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.425710][ T67] usb 4-1: config 0 descriptor?? [ 27.467807][ T36] audit: type=1400 audit(1789733278.280:148): avc: denied { mount } for pid=490 comm="syz.0.25" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 27.583074][ T36] audit: type=1400 audit(1789733278.400:149): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 27.633285][ T36] audit: type=1400 audit(1789733278.450:150): avc: denied { setopt } for pid=479 comm="syz.3.21" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.653718][ T36] audit: type=1400 audit(1789733278.450:151): avc: denied { write } for pid=479 comm="syz.3.21" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.748789][ T498] netlink: 'syz.0.27': attribute type 14 has an invalid length. [ 27.840228][ T67] holtek_kbd 0003:04D9:A055.0003: item fetching failed at offset 5/7 [ 27.849155][ T67] holtek_kbd 0003:04D9:A055.0003: probe with driver holtek_kbd failed with error -22 [ 27.874943][ T505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.30'. [ 27.899846][ T36] audit: type=1400 audit(1789733278.710:152): avc: denied { write } for pid=509 comm="syz.1.31" name="fib_trie" dev="proc" ino=4026532329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 27.936978][ T36] audit: type=1400 audit(1789733278.750:153): avc: denied { mmap_zero } for pid=509 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 27.944559][ T510] kvm: kvm [509]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 27.965516][ T510] kvm: kvm [509]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 28.007984][ T513] netlink: 'syz.2.32': attribute type 27 has an invalid length. [ 28.021642][ T50] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.033272][ T513] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.040861][ T513] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.051859][ T67] usb 4-1: USB disconnect, device number 3 [ 28.193237][ T50] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.214378][ T50] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.231582][ T50] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 28.251595][ T50] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 28.262995][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.282029][ T50] usb 1-1: config 0 descriptor?? [ 28.691325][ T50] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 28.708798][ T50] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 28.795644][ T537] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.990286][ T546] netlink: 'syz.3.40': attribute type 40 has an invalid length. [ 29.056934][ T333] usb 1-1: USB disconnect, device number 2 [ 29.071833][ T553] BUG: scheduling while atomic: syz.1.42/553/0x00000002 [ 29.078912][ T553] Modules linked in: [ 29.082887][ T553] CPU: 0 UID: 0 PID: 553 Comm: syz.1.42 Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 29.082924][ T553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.082947][ T553] Call Trace: [ 29.082955][ T553] [ 29.082964][ T553] __dump_stack+0x21/0x30 [ 29.083015][ T553] dump_stack_lvl+0x140/0x1c0 [ 29.083049][ T553] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.083083][ T553] ? is_bpf_text_address+0x17b/0x1a0 [ 29.083122][ T553] dump_stack+0x19/0x20 [ 29.083153][ T553] __schedule_bug+0x12b/0x200 [ 29.083179][ T553] ? find_proxy_task+0x2460/0x2460 [ 29.083207][ T553] __schedule+0xb85/0x20b0 [ 29.083234][ T553] ? is_bpf_text_address+0x17b/0x1a0 [ 29.083271][ T553] ? kernel_text_address+0xa9/0xe0 [ 29.083304][ T553] ? __sched_text_start+0x10/0x10 [ 29.083329][ T553] ? unwind_get_return_address+0x51/0x90 [ 29.083359][ T553] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 29.083387][ T553] ? arch_stack_walk+0x10a/0x170 [ 29.083413][ T553] ? __kasan_check_write+0x18/0x20 [ 29.083437][ T553] ? _raw_spin_lock_irq+0x93/0x120 [ 29.083460][ T553] ? rwsem_set_nonspinnable+0x140/0x140 [ 29.083507][ T553] schedule+0xc5/0x240 [ 29.083532][ T553] schedule_preempt_disabled+0x14/0x30 [ 29.083558][ T553] rwsem_down_read_slowpath+0x88c/0x14c0 [ 29.083594][ T553] ? down_write_killable+0x2d0/0x2d0 [ 29.083629][ T553] ? __kasan_check_write+0x18/0x20 [ 29.083654][ T553] ? downgrade_write+0x470/0x470 [ 29.083689][ T553] ? call_rcu_nocb+0x694/0xc60 [ 29.083722][ T553] down_read+0x95/0xe0 [ 29.083750][ T553] ? __cfi_down_read+0x10/0x10 [ 29.083778][ T553] kernfs_find_and_get_ns+0x76/0x130 [ 29.083809][ T553] sysfs_unmerge_group+0x66/0x130 [ 29.083838][ T553] dpm_sysfs_remove+0x64/0xd0 [ 29.083870][ T553] device_del+0x241/0xcf0 [ 29.083891][ T553] ? __cfi_class_find_device+0x10/0x10 [ 29.083918][ T553] ? __cfi_device_del+0x10/0x10 [ 29.083938][ T553] ? __kasan_check_write+0x18/0x20 [ 29.083961][ T553] ? kobject_put+0x1cc/0x2a0 [ 29.083983][ T553] device_destroy+0xb0/0x100 [ 29.084004][ T553] ? __cfi_device_destroy+0x10/0x10 [ 29.084027][ T553] ? __kasan_check_write+0x18/0x20 [ 29.084051][ T553] android_device_destroy+0x118/0x180 [ 29.084087][ T553] gadgets_drop+0x1d/0x30 [ 29.084109][ T553] ? __cfi_gadgets_drop+0x10/0x10 [ 29.084132][ T553] configfs_rmdir+0x8ba/0x9b0 [ 29.084165][ T553] vfs_rmdir+0x3db/0x560 [ 29.084200][ T553] do_rmdir+0x29a/0x590 [ 29.084234][ T553] ? __cfi_do_rmdir+0x10/0x10 [ 29.084267][ T553] ? __kasan_check_write+0x18/0x20 [ 29.084293][ T553] __x64_sys_rmdir+0x4b/0x60 [ 29.084328][ T553] x64_sys_call+0xaf7/0x2ee0 [ 29.084350][ T553] do_syscall_64+0x57/0xf0 [ 29.084371][ T553] ? clear_bhb_loop+0x50/0xa0 [ 29.084401][ T553] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.084430][ T553] RIP: 0033:0x7f3c5b99e159 [ 29.084458][ T553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.084486][ T553] RSP: 002b:00007f3c5c7c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 29.084512][ T553] RAX: ffffffffffffffda RBX: 00007f3c5bc25fa0 RCX: 00007f3c5b99e159 [ 29.084530][ T553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 29.084545][ T553] RBP: 00007f3c5ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 29.084560][ T553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.084575][ T553] R13: 00007f3c5bc26038 R14: 00007f3c5bc25fa0 R15: 00007ffe2c2d7498 [ 29.084596][ T553] [ 29.143558][ T553] ------------[ cut here ]------------ [ 29.451636][ T553] WARNING: CPU: 1 PID: 553 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 [ 29.461269][ T553] Modules linked in: [ 29.465443][ T553] CPU: 1 UID: 0 PID: 553 Comm: syz.1.42 Tainted: G W syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 29.478915][ T553] Tainted: [W]=WARN [ 29.482897][ T553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.493044][ T553] RIP: 0010:stack_depot_save_flags+0x266/0x800 [ 29.499274][ T553] Code: 48 83 3d b4 fd db 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 cc 2e 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 [ 29.519432][ T553] RSP: 0018:ffffc9000d80f980 EFLAGS: 00010206 [ 29.525607][ T553] RAX: 000000007fffffff RBX: ffff8881f530cb30 RCX: 000000000010cb30 [ 29.533782][ T553] RDX: ffff8881f530cb30 RSI: 0000000000000001 RDI: 00000000c0fa6982 [ 29.541913][ T553] RBP: ffffc9000d80f9e0 R08: 0000000094d6cbc2 R09: 00000000a82129f0 [ 29.549942][ T553] R10: 000000000000000d R11: ffffffff8175a7a0 R12: 00000000c4410cb3 [ 29.558008][ T553] R13: 0000000000000000 R14: ffffc9000d80f9f0 R15: 000000000000000d [ 29.566067][ T553] FS: 00007f3c5c7c96c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 29.575269][ T553] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.582368][ T553] CR2: 00007ffe950061c0 CR3: 00000001344c2000 CR4: 00000000003526b0 [ 29.590393][ T553] Call Trace: [ 29.593797][ T553] [ 29.596777][ T553] ? do_syscall_64+0x57/0xf0 [ 29.601510][ T553] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.607748][ T553] kasan_save_track+0x4f/0x80 [ 29.612527][ T553] ? kasan_save_track+0x3e/0x80 [ 29.612890][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.617524][ T553] ? kasan_save_free_info+0x44/0x50 [ 29.617552][ T553] ? __kasan_slab_free+0x5f/0x80 [ 29.635774][ T553] ? kfree+0x158/0x440 [ 29.639976][ T553] ? gadget_info_attr_release+0xcb/0x130 [ 29.645701][ T553] ? config_item_put+0x175/0x240 [ 29.650776][ T553] ? configfs_rmdir+0x8e8/0x9b0 [ 29.655754][ T553] ? vfs_rmdir+0x3db/0x560 [ 29.660237][ T553] ? do_rmdir+0x29a/0x590 [ 29.664664][ T553] ? __x64_sys_rmdir+0x4b/0x60 [ 29.669504][ T553] ? x64_sys_call+0xaf7/0x2ee0 [ 29.674349][ T553] ? do_syscall_64+0x57/0xf0 [ 29.678998][ T553] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.685188][ T553] kasan_save_free_info+0x44/0x50 [ 29.690532][ T553] __kasan_slab_free+0x5f/0x80 [ 29.695422][ T553] kfree+0x158/0x440 [ 29.699378][ T553] ? gadget_info_attr_release+0xcb/0x130 [ 29.705116][ T553] ? __cfi_gadget_info_attr_release+0x10/0x10 [ 29.711332][ T553] gadget_info_attr_release+0xcb/0x130 [ 29.716906][ T553] config_item_put+0x175/0x240 [ 29.721761][ T553] ? __cfi_gadgets_drop+0x10/0x10 [ 29.726846][ T553] configfs_rmdir+0x8e8/0x9b0 [ 29.731678][ C1] Clock: inserting leap second 23:59:60 UTC [ 29.737656][ T553] vfs_rmdir+0x3db/0x560 [ 29.741668][ T333] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.742023][ T553] do_rmdir+0x29a/0x590 [ 29.753740][ T553] ? __cfi_do_rmdir+0x10/0x10 [ 29.758494][ T553] ? __kasan_check_write+0x18/0x20 [ 29.763773][ T553] __x64_sys_rmdir+0x4b/0x60 [ 29.768526][ T553] x64_sys_call+0xaf7/0x2ee0 [ 29.773611][ T553] do_syscall_64+0x57/0xf0 [ 29.778169][ T553] ? clear_bhb_loop+0x50/0xa0 [ 29.783053][ T553] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.789185][ T553] RIP: 0033:0x7f3c5b99e159 [ 29.793685][ T553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.813466][ T553] RSP: 002b:00007f3c5c7c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 29.821982][ T553] RAX: ffffffffffffffda RBX: 00007f3c5bc25fa0 RCX: 00007f3c5b99e159 [ 29.830007][ T553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 29.838207][ T553] RBP: 00007f3c5ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 29.846317][ T553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.854386][ T553] R13: 00007f3c5bc26038 R14: 00007f3c5bc25fa0 R15: 00007ffe2c2d7498 [ 29.862447][ T553] [ 29.863632][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 29.865499][ T553] ---[ end trace 0000000000000000 ]--- [ 29.882068][ T553] BUG: scheduling while atomic: syz.1.42/553/0x00000000 [ 29.889069][ T553] Modules linked in: [ 29.893201][ T553] CPU: 1 UID: 0 PID: 553 Comm: syz.1.42 Tainted: G W syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 29.893240][ T553] Tainted: [W]=WARN [ 29.893249][ T553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.893262][ T553] Call Trace: [ 29.893268][ T553] [ 29.893277][ T553] __dump_stack+0x21/0x30 [ 29.893317][ T553] dump_stack_lvl+0x140/0x1c0 [ 29.893349][ T553] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.893387][ T553] dump_stack+0x19/0x20 [ 29.893420][ T553] __schedule_bug+0x12b/0x200 [ 29.893447][ T553] ? find_proxy_task+0x2460/0x2460 [ 29.893475][ T553] __schedule+0xb85/0x20b0 [ 29.893502][ T553] ? plist_check_list+0x2a1/0x2c0 [ 29.893527][ T553] ? __sched_text_start+0x10/0x10 [ 29.893551][ T553] ? plist_add+0x4d4/0x570 [ 29.893574][ T553] ? __futex_queue+0x19f/0x350 [ 29.893607][ T553] ? __cfi___futex_queue+0x10/0x10 [ 29.893639][ T553] schedule+0xc5/0x240 [ 29.893663][ T553] futex_wait_queue+0xfc/0x240 [ 29.893686][ T553] __futex_wait+0x15b/0x3d0 [ 29.893709][ T553] ? __cfi___futex_wait+0x10/0x10 [ 29.893732][ T553] ? __cfi_futex_wake_mark+0x10/0x10 [ 29.893755][ T553] ? __kasan_check_read+0x15/0x20 [ 29.893779][ T553] ? futex_wake+0x627/0x950 [ 29.893801][ T553] futex_wait+0x128/0x7c0 [ 29.893822][ T553] ? __cfi_futex_wait+0x10/0x10 [ 29.893861][ T553] do_futex+0x32a/0x510 [ 29.893893][ T553] ? __cfi_do_futex+0x10/0x10 [ 29.893924][ T553] ? __kasan_slab_free+0x6a/0x80 [ 29.893954][ T553] ? kmem_cache_free+0x1bd/0x4f0 [ 29.893981][ T553] __se_sys_futex+0x13c/0x320 [ 29.894014][ T553] ? putname+0x113/0x150 [ 29.894041][ T553] ? __x64_sys_futex+0x110/0x110 [ 29.894073][ T553] __x64_sys_futex+0xe9/0x110 [ 29.894103][ T553] x64_sys_call+0x227f/0x2ee0 [ 29.894125][ T553] do_syscall_64+0x57/0xf0 [ 29.894146][ T553] ? clear_bhb_loop+0x50/0xa0 [ 29.894174][ T553] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.894202][ T553] RIP: 0033:0x7f3c5b99e159 [ 29.894222][ T553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.894240][ T553] RSP: 002b:00007f3c5c7c90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 29.894265][ T553] RAX: ffffffffffffffda RBX: 00007f3c5bc25fa8 RCX: 00007f3c5b99e159 [ 29.894283][ T553] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3c5bc25fa8 [ 29.894299][ T553] RBP: 00007f3c5bc25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 29.894315][ T553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.894329][ T553] R13: 00007f3c5bc26038 R14: 00007ffe2c2d73b0 R15: 00007ffe2c2d7498 [ 29.894350][ T553] [ 30.169069][ T333] usb 1-1: Using ep0 maxpacket: 32 [ 30.178119][ T333] usb 1-1: unable to get BOS descriptor or descriptor too short [ 30.186747][ T333] usb 1-1: config 0 has no interfaces? [ 30.194047][ T333] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.203579][ T333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.211767][ T333] usb 1-1: Product: syz [ 30.216194][ T333] usb 1-1: Manufacturer: syz [ 30.221032][ T333] usb 1-1: SerialNumber: syz [ 30.232672][ T333] usb 1-1: config 0 descriptor?? [ 30.408852][ T10] usb 4-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 30.448684][ T563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.461615][ T10] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 30.471108][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.482067][ T563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.505609][ T333] usb 1-1: USB disconnect, device number 3 [ 30.513933][ T10] usb 4-1: Product: syz [ 30.521802][ T10] usb 4-1: Manufacturer: syz [ 30.526497][ T10] usb 4-1: SerialNumber: syz [ 31.005678][ T556] cgroup: fork rejected by pids controller in /syz3 [ 33.816452][ T582] syz.3.43 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 33.914099][ T582] CPU: 1 UID: 0 PID: 582 Comm: syz.3.43 Tainted: G W syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 33.914142][ T582] Tainted: [W]=WARN [ 33.914151][ T582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.914164][ T582] Call Trace: [ 33.914172][ T582] [ 33.914180][ T582] __dump_stack+0x21/0x30 [ 33.914218][ T582] dump_stack_lvl+0x140/0x1c0 [ 33.914246][ T582] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.914276][ T582] ? ___ratelimit+0x41c/0x5c0 [ 33.914299][ T582] ? __kasan_check_write+0x18/0x20 [ 33.914320][ T582] dump_stack+0x19/0x20 [ 33.914347][ T582] dump_header+0xd9/0x460 [ 33.914373][ T582] oom_kill_process+0x35d/0x640 [ 33.914401][ T582] out_of_memory+0x5d1/0xa20 [ 33.914427][ T582] ? __cfi_out_of_memory+0x10/0x10 [ 33.914449][ T582] ? mutex_lock_killable+0x97/0x1d0 [ 33.914474][ T582] ? __cfi_mutex_lock_killable+0x10/0x10 [ 33.914500][ T582] mem_cgroup_out_of_memory+0x2c5/0x390 [ 33.914522][ T582] ? css_next_descendant_pre+0x1ec/0x210 [ 33.914550][ T582] ? __kasan_check_write+0x18/0x20 [ 33.914570][ T582] ? drain_obj_stock+0xec0/0xec0 [ 33.914592][ T582] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 33.914614][ T582] try_charge_memcg+0x925/0xe10 [ 33.914648][ T582] ? static_key_count+0x45/0x70 [ 33.914676][ T582] ? lruvec_init+0x211/0x280 [ 33.914700][ T582] ? __cfi_try_charge_memcg+0x10/0x10 [ 33.914728][ T582] ? __alloc_pages_noprof+0x35a/0x7e0 [ 33.914758][ T582] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 33.914788][ T582] __mem_cgroup_charge+0xfc/0x420 [ 33.914809][ T582] ? do_pte_missing+0x3894/0x4440 [ 33.914836][ T582] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 33.914857][ T582] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 33.914884][ T582] ? shmem_replace_folio+0x9b0/0x9b0 [ 33.914909][ T582] ? shmem_huge_global_enabled+0x2da/0x360 [ 33.914932][ T582] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 33.914958][ T582] ? __kasan_check_write+0x18/0x20 [ 33.914977][ T582] ? _raw_spin_lock+0x92/0x120 [ 33.914996][ T582] shmem_get_folio_gfp+0x5cd/0x12e0 [ 33.915021][ T582] ? shmem_get_folio+0xc0/0xc0 [ 33.915043][ T582] ? __kasan_check_write+0x18/0x20 [ 33.915062][ T582] ? inode_to_bdi+0x6d/0x100 [ 33.915093][ T582] shmem_write_begin+0xf4/0x260 [ 33.915119][ T582] generic_perform_write+0x32c/0x970 [ 33.915147][ T582] ? inode_update_timestamps+0x4d1/0x6e0 [ 33.915178][ T582] ? __cfi_generic_perform_write+0x10/0x10 [ 33.915207][ T582] ? generic_write_checks_count+0x426/0x540 [ 33.915236][ T582] ? mnt_get_write_access_file+0x1af/0x3b0 [ 33.915265][ T582] ? mnt_put_write_access_file+0xc2/0x100 [ 33.915294][ T582] ? file_update_time+0x1de/0x210 [ 33.915323][ T582] shmem_file_write_iter+0x105/0x130 [ 33.915354][ T582] __kernel_write_iter+0x462/0x900 [ 33.915376][ T582] ? __cfi___kernel_write_iter+0x10/0x10 [ 33.915396][ T582] ? get_dump_page+0x165/0x220 [ 33.915423][ T582] ? __asan_memset+0x39/0x50 [ 33.915443][ T582] ? iov_iter_bvec+0xc0/0x180 [ 33.915473][ T582] dump_user_range+0xb8b/0xe60 [ 33.915498][ T582] ? __cfi_dump_user_range+0x10/0x10 [ 33.915520][ T582] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 33.915551][ T582] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 33.915583][ T582] elf_core_dump+0x2d61/0x3840 [ 33.915614][ T582] ? __cfi_elf_core_dump+0x10/0x10 [ 33.915646][ T582] ? mas_next_slot+0xf01/0xfd0 [ 33.915678][ T582] ? dump_interrupted+0xf0/0xf0 [ 33.915697][ T582] ? filp_open+0x199/0x1f0 [ 33.915725][ T582] ? 0xffffffffff600000 [ 33.915743][ T582] do_coredump+0x20d2/0x3050 [ 33.915767][ T582] ? __cfi_do_coredump+0x10/0x10 [ 33.915787][ T582] ? asm_exc_general_protection+0x2b/0x30 [ 33.915819][ T582] ? __kasan_slab_free+0x6a/0x80 [ 33.915843][ T582] ? get_signal+0xa2a/0x1490 [ 33.915871][ T582] get_signal+0x11bf/0x1490 [ 33.915902][ T582] arch_do_signal_or_restart+0xbc/0x700 [ 33.915922][ T582] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 33.915943][ T582] ? fixup_iopl_exception+0xe2/0x2e0 [ 33.915964][ T582] irqentry_exit_to_user_mode+0x4d/0xb0 [ 33.915991][ T582] irqentry_exit+0x16/0x60 [ 33.916019][ T582] exc_general_protection+0x152/0x1e0 [ 33.916041][ T582] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 33.916069][ T582] asm_exc_general_protection+0x2b/0x30 [ 33.916092][ T582] RIP: 0033:0x7f4b1e79e161 [ 33.916108][ T582] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 33.916125][ T582] RSP: 002b:00002000000001b0 EFLAGS: 00010217 [ 33.916144][ T582] RAX: 0000000000000000 RBX: 00007f4b1ea26090 RCX: 00007f4b1e79e159 [ 33.916159][ T582] RDX: 00002000000001c0 RSI: 00002000000001b0 RDI: 0000000000100000 [ 33.916173][ T582] RBP: 00007f4b1e83506b R08: 0000200000000240 R09: 0000200000000240 [ 33.916186][ T582] R10: 0000200000000200 R11: 0000000000000206 R12: 0000000000000000 [ 33.916199][ T582] R13: 00007f4b1ea26128 R14: 00007f4b1ea26090 R15: 00007fff9f027948 [ 33.916216][ T582] [ 34.033437][ T582] memory: usage 307200kB, limit 307200kB, failcnt 26986 [ 34.423431][ T582] memory+swap: usage 431828kB, limit 9007199254740988kB, failcnt 0 [ 34.431402][ T582] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 34.438365][ T582] Memory cgroup stats for /syz3: [ 34.438604][ T582] cache 313937920 [ 34.447330][ T582] rss 266240 [ 34.450560][ T582] rss_huge 0 [ 34.453878][ T582] shmem 313901056 [ 34.457645][ T582] mapped_file 0 [ 34.461468][ T582] dirty 0 [ 34.464504][ T582] writeback 0 [ 34.467826][ T582] workingset_refault_anon 8 [ 34.472567][ T582] workingset_refault_file 6512 [ 34.477372][ T582] swap 127619072 [ 34.480939][ T582] swapcached 376832 [ 34.485228][ T582] pgpgin 140829 [ 34.488712][ T582] pgpgout 64029 [ 34.492236][ T582] pgfault 15199 [ 34.495727][ T582] pgmajfault 237 [ 34.499283][ T582] inactive_anon 157626368 [ 34.503837][ T582] active_anon 156909568 [ 34.508045][ T582] inactive_file 0 [ 34.511825][ T582] active_file 36864 [ 34.515660][ T582] unevictable 0 [ 34.519129][ T582] hierarchical_memory_limit 314572800 [ 34.524942][ T582] hierarchical_memsw_limit 9223372036854771712 [ 34.531136][ T582] total_cache 313937920 [ 34.535394][ T582] total_rss 266240 [ 34.539248][ T582] total_rss_huge 0 [ 34.543038][ T582] total_shmem 313901056 [ 34.547329][ T582] total_mapped_file 0 [ 34.551642][ T582] total_dirty 0 [ 34.555139][ T582] total_writeback 0 [ 34.559154][ T582] total_workingset_refault_anon 8 [ 34.564243][ T582] total_workingset_refault_file 6512 [ 34.569586][ T582] total_swap 127619072 [ 34.573830][ T582] total_swapcached 376832 [ 34.578288][ T582] total_pgpgin 140829 [ 34.582352][ T582] total_pgpgout 64029 [ 34.586363][ T582] total_pgfault 15199 [ 34.590351][ T582] total_pgmajfault 237 [ 34.594468][ T582] total_inactive_anon 157626368 [ 34.599364][ T582] total_active_anon 156909568 [ 34.604151][ T582] total_inactive_file 0 [ 34.608340][ T582] total_active_file 36864 [ 34.612724][ T582] total_unevictable 0 [ 34.616747][ T582] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.43,pid=568,uid=0 [ 34.631387][ T582] Memory cgroup out of memory: Killed process 568 (syz.3.43) total-vm:90916kB, anon-rss:1388kB, file-rss:22192kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 34.881850][ T570] syz.3.43 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 34.961824][ T570] CPU: 0 UID: 0 PID: 570 Comm: syz.3.43 Tainted: G W syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 34.961872][ T570] Tainted: [W]=WARN [ 34.961880][ T570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.961894][ T570] Call Trace: [ 34.961901][ T570] [ 34.961910][ T570] __dump_stack+0x21/0x30 [ 34.961956][ T570] dump_stack_lvl+0x140/0x1c0 [ 34.961988][ T570] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.962020][ T570] ? ___ratelimit+0x41c/0x5c0 [ 34.962046][ T570] ? __kasan_check_write+0x18/0x20 [ 34.962071][ T570] dump_stack+0x19/0x20 [ 34.962102][ T570] dump_header+0xd9/0x460 [ 34.962132][ T570] oom_kill_process+0x35d/0x640 [ 34.962161][ T570] out_of_memory+0x5d1/0xa20 [ 34.962187][ T570] ? __cfi_out_of_memory+0x10/0x10 [ 34.962213][ T570] ? mutex_lock_killable+0x97/0x1d0 [ 34.962241][ T570] ? __cfi_mutex_lock_killable+0x10/0x10 [ 34.962271][ T570] mem_cgroup_out_of_memory+0x2c5/0x390 [ 34.962296][ T570] ? css_next_descendant_pre+0x1ec/0x210 [ 34.962325][ T570] ? __kasan_check_write+0x18/0x20 [ 34.962348][ T570] ? drain_obj_stock+0xec0/0xec0 [ 34.962375][ T570] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 34.962400][ T570] try_charge_memcg+0x925/0xe10 [ 34.962441][ T570] ? __cfi_try_charge_memcg+0x10/0x10 [ 34.962475][ T570] ? __alloc_pages_noprof+0x35a/0x7e0 [ 34.962511][ T570] __mem_cgroup_charge+0xfc/0x420 [ 34.962533][ T570] ? filemap_get_entry+0x41b/0x490 [ 34.962561][ T570] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 34.962587][ T570] filemap_add_folio+0x57/0x3e0 [ 34.962613][ T570] __filemap_get_folio+0x829/0xe80 [ 34.962641][ T570] ? downgrade_write+0x470/0x470 [ 34.962678][ T570] ? __cfi___filemap_get_folio+0x10/0x10 [ 34.962706][ T570] ? down_read+0x7f/0xe0 [ 34.962734][ T570] ? __cfi_down_read+0x10/0x10 [ 34.962763][ T570] ? filemap_map_pages+0x17c0/0x1b80 [ 34.962793][ T570] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 34.962825][ T570] filemap_fault+0xb8e/0x1ad0 [ 34.962855][ T570] ? __cfi_filemap_fault+0x10/0x10 [ 34.962885][ T570] ? __cfi_filemap_map_pages+0x10/0x10 [ 34.962916][ T570] ? vma_data_pages+0x105/0x140 [ 34.962947][ T570] do_pte_missing+0x3649/0x4440 [ 34.962977][ T570] ? shmem_alloc_and_add_folio+0xd84/0x10b0 [ 34.963002][ T570] ? pte_marker_clear+0x1b0/0x1b0 [ 34.963027][ T570] ? shmem_replace_folio+0x9b0/0x9b0 [ 34.963049][ T570] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 34.963068][ T570] handle_mm_fault+0x1189/0x1ba0 [ 34.963090][ T570] ? __kasan_check_write+0x18/0x20 [ 34.963111][ T570] ? __cfi_handle_mm_fault+0x10/0x10 [ 34.963133][ T570] ? follow_page_pte+0x2c0/0xba0 [ 34.963161][ T570] ? gup_must_unshare+0x1e0/0x1e0 [ 34.963186][ T570] ? vma_is_secretmem+0x11/0x50 [ 34.963213][ T570] ? check_vma_flags+0x337/0x3a0 [ 34.963238][ T570] __get_user_pages+0x114b/0x22d0 [ 34.963263][ T570] ? __kasan_check_write+0x18/0x20 [ 34.963285][ T570] ? populate_vma_page_range+0x220/0x220 [ 34.963310][ T570] ? __kernel_write_iter+0x6ff/0x900 [ 34.963330][ T570] get_dump_page+0x10c/0x220 [ 34.963355][ T570] ? __cfi_get_dump_page+0x10/0x10 [ 34.963383][ T570] ? __asan_memset+0x39/0x50 [ 34.963401][ T570] dump_user_range+0x18b/0xe60 [ 34.963424][ T570] ? __cfi_dump_user_range+0x10/0x10 [ 34.963446][ T570] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 34.963475][ T570] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 34.963504][ T570] ? elf_core_dump+0x23cf/0x3840 [ 34.963529][ T570] elf_core_dump+0x2d61/0x3840 [ 34.963555][ T570] ? __cfi_elf_core_dump+0x10/0x10 [ 34.963579][ T570] ? mas_next_slot+0xf01/0xfd0 [ 34.963608][ T570] ? dump_interrupted+0xf0/0xf0 [ 34.963626][ T570] ? filp_open+0x199/0x1f0 [ 34.963652][ T570] ? 0xffffffffff600000 [ 34.963668][ T570] do_coredump+0x20d2/0x3050 [ 34.963690][ T570] ? __cfi_do_coredump+0x10/0x10 [ 34.963707][ T570] ? asm_exc_general_protection+0x2b/0x30 [ 34.963738][ T570] ? __kasan_slab_free+0x6a/0x80 [ 34.963760][ T570] ? get_signal+0xa2a/0x1490 [ 34.963786][ T570] get_signal+0x11bf/0x1490 [ 34.963813][ T570] arch_do_signal_or_restart+0xbc/0x700 [ 34.963832][ T570] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 34.963851][ T570] ? fixup_iopl_exception+0xe2/0x2e0 [ 34.963871][ T570] irqentry_exit_to_user_mode+0x4d/0xb0 [ 34.963896][ T570] irqentry_exit+0x16/0x60 [ 34.963920][ T570] exc_general_protection+0x152/0x1e0 [ 34.963949][ T570] asm_exc_general_protection+0x2b/0x30 [ 34.963971][ T570] RIP: 0033:0x7f4b1e79e161 [ 34.963986][ T570] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 34.964001][ T570] RSP: 002b:00002000000001b0 EFLAGS: 00010217 [ 34.964019][ T570] RAX: 0000000000000000 RBX: 00007f4b1ea26090 RCX: 00007f4b1e79e159 [ 34.964032][ T570] RDX: 00002000000001c0 RSI: 00002000000001b0 RDI: 0000000000100000 [ 34.964044][ T570] RBP: 00007f4b1e83506b R08: 0000200000000240 R09: 0000200000000240 [ 34.964057][ T570] R10: 0000200000000200 R11: 0000000000000206 R12: 0000000000000000 [ 34.964069][ T570] R13: 00007f4b1ea26128 R14: 00007f4b1ea26090 R15: 00007fff9f027948 [ 34.964085][ T570] [ 34.964111][ T570] memory: usage 306592kB, limit 307200kB, failcnt 29881 [ 35.485762][ T570] memory+swap: usage 422368kB, limit 9007199254740988kB, failcnt 0 [ 35.493753][ T570] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 35.500651][ T570] Memory cgroup stats for /syz3: [ 35.500828][ T570] cache 311853056 [ 35.509926][ T570] rss 258048 [ 35.513292][ T570] rss_huge 0 [ 35.516619][ T570] shmem 307720192 [ 35.520298][ T570] mapped_file 3710976 [ 35.525071][ T570] dirty 0 [ 35.528449][ T570] writeback 0 [ 35.532143][ T570] workingset_refault_anon 8 [ 35.536707][ T570] workingset_refault_file 8203 [ 35.561576][ T570] swap 120139776 [ 35.565203][ T570] swapcached 221184 [ 35.569171][ T570] pgpgin 143887 [ 35.581578][ T570] pgpgout 67636 [ 35.585110][ T570] pgfault 15355 [ 35.588636][ T570] pgmajfault 249 [ 35.610623][ T570] inactive_anon 136073216 [ 35.623476][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 35.630734][ T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 35.652906][ T570] active_anon 171761664 [ 35.657129][ T570] inactive_file 0 [ 35.660794][ T570] active_file 4132864 [ 35.681619][ T570] unevictable 0 [ 35.685146][ T570] hierarchical_memory_limit 314572800 [ 35.701554][ T570] hierarchical_memsw_limit 9223372036854771712 [ 35.707845][ T570] total_cache 311853056 [ 35.761554][ T570] total_rss 258048 [ 35.765338][ T570] total_rss_huge 0 [ 35.769089][ T570] total_shmem 307720192 [ 35.813096][ T570] total_mapped_file 3710976 [ 35.817708][ T570] total_dirty 0 [ 35.821212][ T570] total_writeback 0 [ 35.861606][ T570] total_workingset_refault_anon 8 [ 35.873562][ T570] total_workingset_refault_file 8203 [ 35.890977][ T570] total_swap 120139776 [ 35.905047][ T570] total_swapcached 221184 [ 35.918376][ T570] total_pgpgin 143887 [ 35.931344][ T570] total_pgpgout 67636 [ 35.944304][ T570] total_pgfault 15355 [ 35.957059][ T570] total_pgmajfault 249 [ 35.971036][ T570] total_inactive_anon 136073216 [ 35.984793][ T570] total_active_anon 171761664 [ 35.999482][ T570] total_inactive_file 0 [ 36.012591][ T570] total_active_file 4132864 [ 36.028221][ T570] total_unevictable 0 [ 36.039065][ T570] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.43,pid=576,uid=0 [ 36.084891][ T570] Memory cgroup out of memory: Killed process 576 (syz.3.43) total-vm:90916kB, anon-rss:1376kB, file-rss:22028kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 36.967601][ T578] syz.3.43 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 37.079898][ T578] CPU: 0 UID: 0 PID: 578 Comm: syz.3.43 Tainted: G W syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 37.079941][ T578] Tainted: [W]=WARN [ 37.079949][ T578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.079962][ T578] Call Trace: [ 37.079969][ T578] [ 37.079978][ T578] __dump_stack+0x21/0x30 [ 37.080015][ T578] dump_stack_lvl+0x140/0x1c0 [ 37.080047][ T578] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.080079][ T578] ? ___ratelimit+0x41c/0x5c0 [ 37.080104][ T578] ? __kasan_check_write+0x18/0x20 [ 37.080129][ T578] dump_stack+0x19/0x20 [ 37.080160][ T578] dump_header+0xd9/0x460 [ 37.080190][ T578] oom_kill_process+0x35d/0x640 [ 37.080218][ T578] out_of_memory+0x5d1/0xa20 [ 37.080252][ T578] ? __cfi_out_of_memory+0x10/0x10 [ 37.080278][ T578] ? mutex_lock_killable+0x97/0x1d0 [ 37.080306][ T578] ? __cfi_mutex_lock_killable+0x10/0x10 [ 37.080337][ T578] mem_cgroup_out_of_memory+0x2c5/0x390 [ 37.080362][ T578] ? css_next_descendant_pre+0x1ec/0x210 [ 37.080391][ T578] ? __kasan_check_write+0x18/0x20 [ 37.080414][ T578] ? drain_obj_stock+0xec0/0xec0 [ 37.080440][ T578] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 37.080464][ T578] try_charge_memcg+0x925/0xe10 [ 37.080495][ T578] ? static_key_count+0x45/0x70 [ 37.080526][ T578] ? lruvec_init+0x211/0x280 [ 37.080558][ T578] ? __cfi_try_charge_memcg+0x10/0x10 [ 37.080591][ T578] ? __alloc_pages_noprof+0x35a/0x7e0 [ 37.080626][ T578] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 37.080660][ T578] __mem_cgroup_charge+0xfc/0x420 [ 37.080683][ T578] ? do_pte_missing+0x3894/0x4440 [ 37.080712][ T578] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 37.080737][ T578] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 37.080770][ T578] ? shmem_replace_folio+0x9b0/0x9b0 [ 37.080799][ T578] ? shmem_huge_global_enabled+0x2da/0x360 [ 37.080827][ T578] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 37.080854][ T578] ? __kasan_check_write+0x18/0x20 [ 37.080877][ T578] ? _raw_spin_lock+0x92/0x120 [ 37.080899][ T578] shmem_get_folio_gfp+0x5cd/0x12e0 [ 37.080928][ T578] ? shmem_get_folio+0xc0/0xc0 [ 37.080953][ T578] ? __kasan_check_write+0x18/0x20 [ 37.080976][ T578] ? inode_to_bdi+0x6d/0x100 [ 37.081010][ T578] shmem_write_begin+0xf4/0x260 [ 37.081038][ T578] generic_perform_write+0x32c/0x970 [ 37.081070][ T578] ? inode_update_timestamps+0x4d1/0x6e0 [ 37.081107][ T578] ? __cfi_generic_perform_write+0x10/0x10 [ 37.081138][ T578] ? generic_write_checks_count+0x426/0x540 [ 37.081169][ T578] ? mnt_get_write_access_file+0x1af/0x3b0 [ 37.081203][ T578] ? mnt_put_write_access_file+0xc2/0x100 [ 37.081236][ T578] ? file_update_time+0x1de/0x210 [ 37.081278][ T578] shmem_file_write_iter+0x105/0x130 [ 37.081310][ T578] __kernel_write_iter+0x462/0x900 [ 37.081335][ T578] ? __cfi___kernel_write_iter+0x10/0x10 [ 37.081359][ T578] ? get_dump_page+0x165/0x220 [ 37.081389][ T578] ? __asan_memset+0x39/0x50 [ 37.081412][ T578] ? iov_iter_bvec+0xc0/0x180 [ 37.081446][ T578] dump_user_range+0xb8b/0xe60 [ 37.081473][ T578] ? __cfi_dump_user_range+0x10/0x10 [ 37.081499][ T578] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 37.081537][ T578] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 37.081572][ T578] ? elf_core_dump+0x23cf/0x3840 [ 37.081603][ T578] elf_core_dump+0x2d61/0x3840 [ 37.081637][ T578] ? __cfi_elf_core_dump+0x10/0x10 [ 37.081667][ T578] ? mas_next_slot+0xf01/0xfd0 [ 37.081703][ T578] ? dump_interrupted+0xf0/0xf0 [ 37.081727][ T578] ? filp_open+0x199/0x1f0 [ 37.081760][ T578] ? 0xffffffffff600000 [ 37.081778][ T578] do_coredump+0x20d2/0x3050 [ 37.081806][ T578] ? __cfi_do_coredump+0x10/0x10 [ 37.081828][ T578] ? asm_exc_general_protection+0x2b/0x30 [ 37.081864][ T578] ? __kasan_slab_free+0x6a/0x80 [ 37.081892][ T578] ? get_signal+0xa2a/0x1490 [ 37.081923][ T578] get_signal+0x11bf/0x1490 [ 37.081957][ T578] arch_do_signal_or_restart+0xbc/0x700 [ 37.081979][ T578] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 37.082003][ T578] ? fixup_iopl_exception+0xe2/0x2e0 [ 37.082028][ T578] irqentry_exit_to_user_mode+0x4d/0xb0 [ 37.082059][ T578] irqentry_exit+0x16/0x60 [ 37.082087][ T578] exc_general_protection+0x152/0x1e0 [ 37.082112][ T578] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 37.082144][ T578] asm_exc_general_protection+0x2b/0x30 [ 37.082170][ T578] RIP: 0033:0x7f4b1e79e161 [ 37.082188][ T578] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 37.082207][ T578] RSP: 002b:00002000000001b0 EFLAGS: 00010217 [ 37.082227][ T578] RAX: 0000000000000000 RBX: 00007f4b1ea26090 RCX: 00007f4b1e79e159 [ 37.082251][ T578] RDX: 00002000000001c0 RSI: 00002000000001b0 RDI: 0000000000100000 [ 37.082267][ T578] RBP: 00007f4b1e83506b R08: 0000200000000240 R09: 0000200000000240 [ 37.082284][ T578] R10: 0000200000000200 R11: 0000000000000206 R12: 0000000000000000 [ 37.082298][ T578] R13: 00007f4b1ea26128 R14: 00007f4b1ea26090 R15: 00007fff9f027948 [ 37.082318][ T578] [ 37.637657][ T578] memory: usage 307200kB, limit 307200kB, failcnt 37775 [ 37.644749][ T578] memory+swap: usage 431672kB, limit 9007199254740988kB, failcnt 0 [ 37.652811][ T578] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 37.659696][ T578] Memory cgroup stats for /syz3: [ 37.659858][ T578] cache 313843712 [ 37.668579][ T578] rss 192512 [ 37.671832][ T578] rss_huge 0 [ 37.675075][ T578] shmem 313716736 [ 37.678732][ T578] mapped_file 0 [ 37.682360][ T578] dirty 0 [ 37.685349][ T578] writeback 536576 [ 37.689098][ T578] workingset_refault_anon 8 [ 37.693731][ T578] workingset_refault_file 20380 [ 37.698889][ T578] swap 127459328 [ 37.702651][ T578] swapcached 536576 [ 37.706585][ T578] pgpgin 170416 [ 37.710244][ T578] pgpgout 93616 [ 37.713796][ T578] pgfault 17012 [ 37.717318][ T578] pgmajfault 525 [ 37.720977][ T578] inactive_anon 134168576 [ 37.725460][ T578] active_anon 179752960 [ 37.729643][ T578] inactive_file 4096 [ 37.733723][ T578] active_file 0 [ 37.737208][ T578] unevictable 0 [ 37.740691][ T578] hierarchical_memory_limit 314572800 [ 37.746303][ T578] hierarchical_memsw_limit 9223372036854771712 [ 37.752589][ T578] total_cache 313843712 [ 37.756777][ T578] total_rss 192512 [ 37.760614][ T578] total_rss_huge 0 [ 37.764505][ T578] total_shmem 313716736 [ 37.768681][ T578] total_mapped_file 0 [ 37.772816][ T578] total_dirty 0 [ 37.776309][ T578] total_writeback 536576 [ 37.780671][ T578] total_workingset_refault_anon 8 [ 37.785799][ T578] total_workingset_refault_file 20380 [ 37.791286][ T578] total_swap 127459328 [ 37.795417][ T578] total_swapcached 536576 [ 37.799940][ T578] total_pgpgin 170416 [ 37.804023][ T578] total_pgpgout 93616 [ 37.808040][ T578] total_pgfault 17012 [ 37.812072][ T578] total_pgmajfault 525 [ 37.816182][ T578] total_inactive_anon 134168576 [ 37.821058][ T578] total_active_anon 179752960 [ 37.825810][ T578] total_inactive_file 4096 [ 37.830435][ T578] total_active_file 0 [ 37.834482][ T578] total_unevictable 0 [ 37.838485][ T578] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.43,pid=573,uid=0 [ 37.853170][ T578] Memory cgroup out of memory: Killed process 573 (syz.3.43) total-vm:90916kB, anon-rss:1376kB, file-rss:22060kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000 [ 38.012814][ T584] syz.3.43 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 38.070965][ T584] CPU: 0 UID: 0 PID: 584 Comm: syz.3.43 Tainted: G W syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1 [ 38.071008][ T584] Tainted: [W]=WARN [ 38.071017][ T584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.071031][ T584] Call Trace: [ 38.071038][ T584] [ 38.071048][ T584] __dump_stack+0x21/0x30 [ 38.071087][ T584] dump_stack_lvl+0x140/0x1c0 [ 38.071119][ T584] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.071152][ T584] ? ___ratelimit+0x41c/0x5c0 [ 38.071178][ T584] ? __kasan_check_write+0x18/0x20 [ 38.071203][ T584] dump_stack+0x19/0x20 [ 38.071234][ T584] dump_header+0xd9/0x460 [ 38.071265][ T584] oom_kill_process+0x35d/0x640 [ 38.071293][ T584] out_of_memory+0x5d1/0xa20 [ 38.071319][ T584] ? __cfi_out_of_memory+0x10/0x10 [ 38.071346][ T584] ? mutex_lock_killable+0x115/0x1d0 [ 38.071375][ T584] ? __cfi_mutex_lock_killable+0x10/0x10 [ 38.071406][ T584] mem_cgroup_out_of_memory+0x2c5/0x390 [ 38.071433][ T584] ? css_next_descendant_pre+0x1ec/0x210 [ 38.071462][ T584] ? __kasan_check_write+0x18/0x20 [ 38.071485][ T584] ? drain_obj_stock+0xec0/0xec0 [ 38.071515][ T584] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 38.071539][ T584] try_charge_memcg+0x925/0xe10 [ 38.071572][ T584] ? static_key_count+0x45/0x70 [ 38.071611][ T584] ? lruvec_init+0x211/0x280 [ 38.071637][ T584] ? __cfi_try_charge_memcg+0x10/0x10 [ 38.071670][ T584] ? __alloc_pages_noprof+0x35a/0x7e0 [ 38.071704][ T584] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 38.071738][ T584] __mem_cgroup_charge+0xfc/0x420 [ 38.071761][ T584] ? do_pte_missing+0x3894/0x4440 [ 38.071791][ T584] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 38.071815][ T584] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 38.071847][ T584] ? shmem_replace_folio+0x9b0/0x9b0 [ 38.071876][ T584] ? shmem_huge_global_enabled+0x2da/0x360 [ 38.071904][ T584] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 38.071931][ T584] ? __kasan_check_write+0x18/0x20 [ 38.071953][ T584] ? _raw_spin_lock+0x92/0x120 [ 38.071974][ T584] shmem_get_folio_gfp+0x5cd/0x12e0 [ 38.072003][ T584] ? shmem_get_folio+0xc0/0xc0 [ 38.072028][ T584] ? __kasan_check_write+0x18/0x20 [ 38.072051][ T584] ? inode_to_bdi+0x6d/0x100 [ 38.072092][ T584] shmem_write_begin+0xf4/0x260 [ 38.072121][ T584] generic_perform_write+0x32c/0x970 [ 38.072153][ T584] ? inode_update_timestamps+0x4d1/0x6e0 [ 38.072187][ T584] ? __cfi_generic_perform_write+0x10/0x10 [ 38.072218][ T584] ? generic_write_checks_count+0x426/0x540 [ 38.072249][ T584] ? mnt_get_write_access_file+0x1af/0x3b0 [ 38.072281][ T584] ? mnt_put_write_access_file+0xc2/0x100 [ 38.072313][ T584] ? file_update_time+0x1de/0x210 [ 38.072347][ T584] shmem_file_write_iter+0x105/0x130 [ 38.072379][ T584] __kernel_write_iter+0x462/0x900 [ 38.072404][ T584] ? __cfi___kernel_write_iter+0x10/0x10 [ 38.072428][ T584] ? get_dump_page+0x165/0x220 [ 38.072458][ T584] ? __asan_memset+0x39/0x50 [ 38.072481][ T584] ? iov_iter_bvec+0xc0/0x180 [ 38.072514][ T584] dump_user_range+0xb8b/0xe60 [ 38.072542][ T584] ? __cfi_dump_user_range+0x10/0x10 [ 38.072568][ T584] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 38.072611][ T584] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 38.072646][ T584] ? elf_core_dump+0x23cf/0x3840 [ 38.072678][ T584] elf_core_dump+0x2d61/0x3840 [ 38.072711][ T584] ? __cfi_elf_core_dump+0x10/0x10 [ 38.072741][ T584] ? mas_next_slot+0xf01/0xfd0 [ 38.072778][ T584] ? dump_interrupted+0xf0/0xf0 [ 38.072801][ T584] ? filp_open+0x199/0x1f0 [ 38.072834][ T584] ? 0xffffffffff600000 [ 38.072853][ T584] do_coredump+0x20d2/0x3050 [ 38.072880][ T584] ? __cfi_do_coredump+0x10/0x10 [ 38.072904][ T584] ? asm_exc_general_protection+0x2b/0x30 [ 38.072942][ T584] ? __kasan_slab_free+0x6a/0x80 [ 38.072970][ T584] ? get_signal+0xa2a/0x1490 [ 38.073003][ T584] get_signal+0x11bf/0x1490 [ 38.073037][ T584] arch_do_signal_or_restart+0xbc/0x700 [ 38.073060][ T584] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 38.073084][ T584] ? fixup_iopl_exception+0xe2/0x2e0 [ 38.073109][ T584] irqentry_exit_to_user_mode+0x4d/0xb0 [ 38.073141][ T584] irqentry_exit+0x16/0x60 [ 38.073170][ T584] exc_general_protection+0x152/0x1e0 [ 38.073195][ T584] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 38.073228][ T584] asm_exc_general_protection+0x2b/0x30 [ 38.073254][ T584] RIP: 0033:0x7f4b1e79e161 [ 38.073273][ T584] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 38.073293][ T584] RSP: 002b:00002000000001b0 EFLAGS: 00010217 [ 38.073314][ T584] RAX: 0000000000000000 RBX: 00007f4b1ea26090 RCX: 00007f4b1e79e159 [ 38.073330][ T584] RDX: 00002000000001c0 RSI: 00002000000001b0 RDI: 0000000000100000 [ 38.073345][ T584] RBP: 00007f4b1e83506b R08: 0000200000000240 R09: 0000200000000240 [ 38.073361][ T584] R10: 0000200000000200 R11: 0000000000000206 R12: 0000000000000000 [ 38.073375][ T584] R13: 00007f4b1ea26128 R14: 00007f4b1ea26090 R15: 00007fff9f027948 [ 38.073394][ T584] [ 38.596803][ T584] memory: usage 307064kB, limit 307200kB, failcnt 38547 [ 38.606332][ T584] memory+swap: usage 432028kB, limit 9007199254740988kB, failcnt 0 [ 38.624255][ T584] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 38.639098][ T584] Memory cgroup stats for /syz3: [ 38.639280][ T584] cache 314130432 [ 38.656265][ T584] rss 176128 [ 38.662848][ T584] rss_huge 0 [ 38.669542][ T584] shmem 306749440 [ 38.771553][ T584] mapped_file 6557696 [ 38.832449][ T584] dirty 0 [ 38.835474][ T584] writeback 0 [ 38.838841][ T584] workingset_refault_anon 8 [ 38.843417][ T584] workingset_refault_file 23504 [ 38.848394][ T584] swap 127909888 [ 38.852009][ T584] swapcached 8192 [ 38.855672][ T584] pgpgin 179082 [ 38.859174][ T584] pgpgout 102282 [ 38.862808][ T584] pgfault 17471 [ 38.866295][ T584] pgmajfault 540 [ 38.869879][ T584] inactive_anon 117952512 [ 38.874284][ T584] active_anon 187699200 [ 38.878502][ T584] inactive_file 4644864 [ 38.882738][ T584] active_file 1683456 [ 38.886926][ T584] unevictable 0 [ 38.890422][ T584] hierarchical_memory_limit 314572800 [ 38.895864][ T584] hierarchical_memsw_limit 9223372036854771712 [ 38.902127][ T584] total_cache 314130432 [ 38.906320][ T584] total_rss 176128 [ 38.910168][ T584] total_rss_huge 0 [ 38.913972][ T584] total_shmem 306749440 [ 38.918258][ T584] total_mapped_file 6557696 [ 38.922888][ T584] total_dirty 0 [ 38.926385][ T584] total_writeback 0 [ 38.930232][ T584] total_workingset_refault_anon 8 [ 38.935349][ T584] total_workingset_refault_file 23504 [ 38.940760][ T584] total_swap 127909888 [ 38.945003][ T584] total_swapcached 8192 [ 38.949277][ T584] total_pgpgin 179082 [ 38.953335][ T584] total_pgpgout 102282 [ 38.957434][ T584] total_pgfault 17471 [ 38.961448][ T584] total_pgmajfault 540 [ 38.965664][ T584] total_inactive_anon 117952512 [ 38.970544][ T584] total_active_anon 187699200 [ 38.975343][ T584] total_inactive_file 4644864 [ 38.980137][ T584] total_active_file 1683456 [ 38.984789][ T584] total_unevictable 0 [ 38.988841][ T584] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.43,pid=586,uid=0 [ 39.003518][ T584] Memory cgroup out of memory: Killed process 586 (syz.3.43) total-vm:90916kB, anon-rss:1376kB, file-rss:22000kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000