last executing test programs: 11.976098822s ago: executing program 0 (id=214): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b", 0x10, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000003240)=""/4061, 0xfd6}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000300)=""/113, 0x6e}, {&(0x7f0000002200)=""/4097, 0x1001}, {&(0x7f00000009c0)=""/250, 0xfa}, {&(0x7f0000000500)=""/286, 0x11e}, {&(0x7f0000000140)=""/73, 0x49}, {&(0x7f00000001c0)=""/257, 0x101}, {&(0x7f0000000640)=""/152, 0x98}], 0x9}, 0x72}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x1f74}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x3c, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x1}], 0x8, 0x0, 0x0) 11.537198843s ago: executing program 0 (id=216): bind$inet6(0xffffffffffffffff, 0x0, 0x0) io_setup(0x20fe, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x4, 0x11, 0x9ca, 0x81}, @ipv4=@tcp={{0xd, 0x4, 0x2, 0x8, 0x48, 0x65, 0x0, 0x40, 0x6, 0x0, @remote, @broadcast, {[@ssrr={0x89, 0x1f, 0xbb, [@rand_addr=0x64010100, @remote, @empty, @private=0xa010100, @rand_addr=0x64010100, @local, @remote]}]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x96, 0x0, 0x1ff}}}}, 0x56) 10.85445888s ago: executing program 0 (id=221): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x1, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x1, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xd11, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x6, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0x9, 0x0, 0x200, 0xcc0, 0x9, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x1, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6ea045434453412073656c662d74657374696e67206b65793059301306070000000000000000082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479aa5a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, 0xfffffffffffffffc) r3 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRES8=r2], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) 9.877225984s ago: executing program 0 (id=229): bind$inet6(0xffffffffffffffff, 0x0, 0x0) io_setup(0x20fe, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x4, 0x11, 0x9ca, 0x81}, @ipv4=@tcp={{0xd, 0x4, 0x2, 0x8, 0x48, 0x65, 0x0, 0x40, 0x6, 0x0, @remote, @broadcast, {[@ssrr={0x89, 0x1f, 0xbb, [@rand_addr=0x64010100, @remote, @empty, @private=0xa010100, @rand_addr=0x64010100, @local, @remote]}]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x96, 0x0, 0x1ff}}}}, 0x56) 3.849153094s ago: executing program 0 (id=315): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r0, 0x4b4a, 0x100000000080005) 1.904113822s ago: executing program 2 (id=346): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003ac0)=""/4095, 0xfff) 1.617292229s ago: executing program 2 (id=348): unshare(0x2040400) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fcntl$lock(r1, 0x6, 0x0) 1.617153109s ago: executing program 2 (id=349): r0 = gettid() socket$inet6(0xa, 0x80002, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) 740.927501ms ago: executing program 2 (id=367): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x40, 0x41}, 0x8000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r4 = getpgid(0xffffffffffffffff) ioprio_set$pid(0x0, r4, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getdents(r6, &(0x7f0000000100)=""/57, 0x39) ftruncate(r5, 0x2000009) sendfile(r0, r5, 0x0, 0x7ffff004) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r7, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000240)=0x6, 0x4) 309.289432ms ago: executing program 1 (id=385): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x2, 0x0) 309.144072ms ago: executing program 3 (id=386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x7c, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5e, 0xe, {{{}, {}, @device_b, @device_b, @from_mac=@broadcast}, 0x40, @default, 0x562, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @val={0x2d, 0x1a, {0xc, 0x1, 0x4, 0x0, {0x6, 0xbaa, 0x0, 0x6, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x3, 0x2}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x2, 0xf0, 0x8}}, @void}}]]}, 0x7c}}, 0x0) 309.047622ms ago: executing program 3 (id=387): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x8, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) 308.559052ms ago: executing program 1 (id=388): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8131, 0xffffffffffffffff, 0xe054d000) 273.100743ms ago: executing program 3 (id=389): unshare(0x22020600) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f00000002c0)={'\x00', 0x8, 0x3, 0x9}) 252.745524ms ago: executing program 1 (id=390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b40)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 201.259125ms ago: executing program 3 (id=391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c0001"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) 201.137285ms ago: executing program 1 (id=392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x98}}, 0x0) 201.063245ms ago: executing program 3 (id=393): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') ioctl$int_in(r1, 0x5421, 0x0) 184.363805ms ago: executing program 1 (id=394): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x2004402, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 170.612575ms ago: executing program 3 (id=395): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x50, 0xfc, 0x7, 0xfff}, {0x6, 0x9}]}) write$ppp(r0, &(0x7f00000001c0)="0002", 0x2) 104.980367ms ago: executing program 0 (id=396): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000000c0), 0x14c98, &(0x7f0000001040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 103.664957ms ago: executing program 2 (id=397): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) ioctl$RTC_ALM_SET(r0, 0x40187013, 0x0) 84.63µs ago: executing program 2 (id=398): r0 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xfffffffffffffffe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005480)=[{{&(0x7f0000000540)={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfbe}, 0x1c, 0x0}}], 0x1, 0x85dc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r0}, &(0x7f0000000780)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f0000000440)) 0s ago: executing program 1 (id=399): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x700}, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. [ 29.515585][ T36] audit: type=1400 audit(1787958729.920:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.518892][ T286] cgroup: Unknown subsys name 'net' [ 29.538240][ T36] audit: type=1400 audit(1787958729.920:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.565616][ T36] audit: type=1400 audit(1787958729.960:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.566094][ T286] cgroup: Unknown subsys name 'devices' [ 29.688366][ T286] cgroup: Unknown subsys name 'hugetlb' [ 29.693968][ T286] cgroup: Unknown subsys name 'rlimit' [ 29.790376][ T36] audit: type=1400 audit(1787958730.200:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.813549][ T36] audit: type=1400 audit(1787958730.200:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.838318][ T36] audit: type=1400 audit(1787958730.200:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.868401][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.877270][ T36] audit: type=1400 audit(1787958730.290:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.898650][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.903025][ T36] audit: type=1400 audit(1787958730.290:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.936971][ T36] audit: type=1400 audit(1787958730.310:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.962478][ T36] audit: type=1400 audit(1787958730.310:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.706654][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.713752][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.721007][ T293] bridge_slave_0: entered allmulticast mode [ 30.727674][ T293] bridge_slave_0: entered promiscuous mode [ 30.734219][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.741294][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.748386][ T293] bridge_slave_1: entered allmulticast mode [ 30.754657][ T293] bridge_slave_1: entered promiscuous mode [ 30.861505][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.868614][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.875788][ T299] bridge_slave_0: entered allmulticast mode [ 30.882098][ T299] bridge_slave_0: entered promiscuous mode [ 30.888505][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.895563][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.902701][ T299] bridge_slave_1: entered allmulticast mode [ 30.908998][ T299] bridge_slave_1: entered promiscuous mode [ 30.977866][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.984929][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.992187][ T298] bridge_slave_0: entered allmulticast mode [ 30.998478][ T298] bridge_slave_0: entered promiscuous mode [ 31.009963][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.017042][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.024339][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.031398][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.039370][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.046441][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.053505][ T298] bridge_slave_1: entered allmulticast mode [ 31.060005][ T298] bridge_slave_1: entered promiscuous mode [ 31.083483][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.090625][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.097750][ T297] bridge_slave_0: entered allmulticast mode [ 31.103943][ T297] bridge_slave_0: entered promiscuous mode [ 31.113084][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.120180][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.127305][ T297] bridge_slave_1: entered allmulticast mode [ 31.133554][ T297] bridge_slave_1: entered promiscuous mode [ 31.200674][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.207747][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.215025][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.222103][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.271675][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.279020][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.287114][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.294265][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.307080][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.314128][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.329335][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.336406][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.370780][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.377860][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.388673][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.395727][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.417798][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.424839][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.435088][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.442156][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.475216][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.482285][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.501197][ T293] veth0_vlan: entered promiscuous mode [ 31.520091][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.527148][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.538093][ T293] veth1_macvtap: entered promiscuous mode [ 31.552290][ T298] veth0_vlan: entered promiscuous mode [ 31.584169][ T299] veth0_vlan: entered promiscuous mode [ 31.592597][ T298] veth1_macvtap: entered promiscuous mode [ 31.600230][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.628379][ T297] veth0_vlan: entered promiscuous mode [ 31.657486][ T299] veth1_macvtap: entered promiscuous mode [ 31.673078][ T297] veth1_macvtap: entered promiscuous mode [ 31.714119][ T315] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.900699][ T329] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6'. [ 31.993060][ T340] tipc: Started in network mode [ 31.998195][ T340] tipc: Node identity , cluster identity 4711 [ 32.016836][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.070608][ T345] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.187867][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.202388][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.213783][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.227938][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.237434][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.257297][ T9] usb 1-1: config 0 descriptor?? [ 32.670546][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 32.679748][ T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 32.688927][ T9] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 32.804977][ T375] rust_binder: 374:375 got transaction to invalid handle 4294967295 [ 32.813136][ T375] rust_binder: 374:375 transaction async to 0:0 failed ENOENT, code 0 size 0-24 [ 32.827132][ T365] rust_binder: 374: undelivered TRANSACTION_COMPLETE [ 32.833945][ T365] rust_binder: 374: undelivered TRANSACTION_ERROR: 29201 [ 32.846345][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.909384][ T379] kvm: user requested TSC rate below hardware speed [ 32.918808][ T379] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3733584174 (7467168348 ns) > initial count (1264290008 ns). Using initial count to start timer. [ 32.947576][ T314] usb 1-1: USB disconnect, device number 2 [ 33.006474][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 33.012740][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 33.019442][ T45] usb 3-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 33.028566][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.037864][ T45] usb 3-1: config 0 descriptor?? [ 33.248873][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 33.255013][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 33.263883][ T45] usb 3-1: USB disconnect, device number 2 [ 34.025456][ T408] FAULT_INJECTION: forcing a failure. [ 34.025456][ T408] name failslab, interval 1, probability 0, space 0, times 1 [ 34.038198][ T365] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 34.046208][ T408] CPU: 0 UID: 0 PID: 408 Comm: syz.3.32 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 34.046240][ T408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.046263][ T408] Call Trace: [ 34.046270][ T408] [ 34.046278][ T408] __dump_stack+0x21/0x30 [ 34.046334][ T408] dump_stack_lvl+0x140/0x1c0 [ 34.046365][ T408] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.046398][ T408] ? __kasan_check_write+0x18/0x20 [ 34.046439][ T408] ? copy_mm+0x307/0x1da0 [ 34.046469][ T408] dump_stack+0x19/0x20 [ 34.046501][ T408] should_fail_ex+0x3c2/0x510 [ 34.046528][ T408] should_failslab+0xac/0x100 [ 34.046556][ T408] kmem_cache_alloc_noprof+0x42/0x410 [ 34.046582][ T408] ? alloc_pid+0xa5/0xb80 [ 34.046607][ T408] ? __asan_memcpy+0x5a/0x80 [ 34.046631][ T408] alloc_pid+0xa5/0xb80 [ 34.046658][ T408] copy_process+0x1467/0x3350 [ 34.046690][ T408] ? __cfi_copy_process+0x10/0x10 [ 34.046720][ T408] ? __kmalloc_cache_noprof+0x23c/0x470 [ 34.046747][ T408] ? __kasan_check_write+0x18/0x20 [ 34.046771][ T408] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 34.046798][ T408] vhost_task_create+0x1f7/0x3f0 [ 34.046823][ T408] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 34.046853][ T408] ? __cfi_vhost_task_create+0x10/0x10 [ 34.046878][ T408] ? __cfi_vhost_task_fn+0x10/0x10 [ 34.046904][ T408] ? __kasan_check_write+0x18/0x20 [ 34.046926][ T408] ? mutex_lock+0x97/0x1d0 [ 34.046950][ T408] ? __cfi_mutex_lock+0x10/0x10 [ 34.046976][ T408] ? kernel_text_address+0xa9/0xe0 [ 34.047008][ T408] kvm_mmu_post_init_vm+0x161/0x300 [ 34.047043][ T408] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 34.047086][ T408] ? _parse_integer_limit+0x195/0x1e0 [ 34.047113][ T408] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 34.047143][ T408] ? kstrtoull+0x13b/0x1e0 [ 34.047167][ T408] ? kstrtouint+0x78/0xf0 [ 34.047188][ T408] ? ioctl_has_perm+0x1bc/0x500 [ 34.047210][ T408] ? __asan_memcpy+0x5a/0x80 [ 34.047234][ T408] ? ioctl_has_perm+0x408/0x500 [ 34.047255][ T408] ? has_cap_mac_admin+0xd0/0xd0 [ 34.047277][ T408] ? __kasan_check_write+0x18/0x20 [ 34.047300][ T408] ? mutex_lock_killable+0x97/0x1d0 [ 34.047345][ T408] ? __cfi_mutex_lock_killable+0x10/0x10 [ 34.047372][ T408] ? proc_fail_nth_write+0x184/0x220 [ 34.047407][ T408] kvm_vcpu_ioctl+0xa43/0x1000 [ 34.047431][ T408] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 34.047452][ T408] ? __cfi_vfs_write+0x10/0x10 [ 34.047476][ T408] ? __kasan_check_write+0x18/0x20 [ 34.047499][ T408] ? mutex_unlock+0x90/0x240 [ 34.047521][ T408] ? __cfi_mutex_unlock+0x10/0x10 [ 34.047548][ T408] ? __fget_files+0x2bc/0x330 [ 34.047575][ T408] ? bpf_lsm_file_ioctl+0xd/0x20 [ 34.047603][ T408] ? security_file_ioctl+0x3e/0x110 [ 34.047626][ T408] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 34.047646][ T408] __se_sys_ioctl+0x123/0x1b0 [ 34.047675][ T408] __x64_sys_ioctl+0x7f/0xa0 [ 34.047703][ T408] x64_sys_call+0x1878/0x2ee0 [ 34.047722][ T408] do_syscall_64+0x57/0xf0 [ 34.047773][ T408] ? clear_bhb_loop+0x50/0xa0 [ 34.047800][ T408] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.047826][ T408] RIP: 0033:0x7f8fe0d9e159 [ 34.047852][ T408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.047872][ T408] RSP: 002b:00007f8fe1c6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 34.047901][ T408] RAX: ffffffffffffffda RBX: 00007f8fe1025fa0 RCX: 00007f8fe0d9e159 [ 34.047918][ T408] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 34.047933][ T408] RBP: 00007f8fe1c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 34.047949][ T408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.047962][ T408] R13: 00007f8fe1026038 R14: 00007f8fe1025fa0 R15: 00007ffc075231a8 [ 34.047982][ T408] [ 34.577573][ T365] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 34.590635][ T365] usb 3-1: config 127 has no interface number 0 [ 34.597094][ T365] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 34.611515][ T365] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 34.620677][ T365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.628728][ T365] usb 3-1: Product: syz [ 34.632980][ T365] usb 3-1: Manufacturer: syz [ 34.637676][ T365] usb 3-1: SerialNumber: syz [ 34.648108][ T403] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 34.692512][ T36] kauditd_printk_skb: 83 callbacks suppressed [ 34.692530][ T36] audit: type=1400 audit(1787958735.100:157): avc: denied { create } for pid=426 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.718257][ T36] audit: type=1400 audit(1787958735.100:158): avc: denied { connect } for pid=426 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.726509][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.737954][ T36] audit: type=1400 audit(1787958735.120:159): avc: denied { getopt } for pid=426 comm="syz.1.40" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.926337][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 34.936070][ T45] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 34.950935][ T45] usb 1-1: config 0 has no interface number 0 [ 34.963872][ T45] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.985845][ T45] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.005786][ T45] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 35.026357][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.035769][ T45] usb 1-1: config 0 descriptor?? [ 35.445412][ T36] audit: type=1400 audit(1787958735.850:160): avc: denied { write } for pid=409 comm="syz.0.33" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.447214][ T410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.474411][ T410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.604366][ T434] Zero length message leads to an empty skb [ 35.629402][ T36] audit: type=1400 audit(1787958736.040:161): avc: denied { bind } for pid=435 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.652119][ T36] audit: type=1400 audit(1787958736.060:162): avc: denied { write } for pid=435 comm="syz.3.43" path="socket:[5065]" dev="sockfs" ino=5065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.679546][ T36] audit: type=1400 audit(1787958736.060:163): avc: denied { read } for pid=435 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.737393][ T36] audit: type=1400 audit(1787958736.150:164): avc: denied { create } for pid=443 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.778970][ T36] audit: type=1400 audit(1787958736.160:165): avc: denied { ioctl } for pid=443 comm="syz.1.46" path="socket:[5081]" dev="sockfs" ino=5081 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.803828][ T36] audit: type=1400 audit(1787958736.160:166): avc: denied { bind } for pid=443 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.810333][ T447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 35.902676][ T452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.916357][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 35.923956][ T410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.925720][ T452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.942647][ T410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.066357][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 36.073089][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 36.081597][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 36.092722][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 36.102472][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 36.113801][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 36.124957][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 36.125030][ T45] usbhid 1-1:0.1: can't add hid device: -71 [ 36.140875][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 8192, setting to 1024 [ 36.152072][ T45] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 36.161273][ T45] usb 1-1: USB disconnect, device number 3 [ 36.167235][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 36.179817][ T31] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 36.189587][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.197734][ T31] usb 4-1: Product: syz [ 36.202040][ T31] usb 4-1: Manufacturer: syz [ 36.206716][ T31] usb 4-1: SerialNumber: syz [ 36.212602][ T31] usb 4-1: config 0 descriptor?? [ 36.219889][ T437] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 36.371169][ T457] FAULT_INJECTION: forcing a failure. [ 36.371169][ T457] name failslab, interval 1, probability 0, space 0, times 0 [ 36.383844][ T457] CPU: 1 UID: 0 PID: 457 Comm: syz.1.48 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 36.383874][ T457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.383886][ T457] Call Trace: [ 36.383893][ T457] [ 36.383901][ T457] __dump_stack+0x21/0x30 [ 36.383940][ T457] dump_stack_lvl+0x140/0x1c0 [ 36.383960][ T457] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.383993][ T457] ? __cfi_fib_validate_source+0x10/0x10 [ 36.384022][ T457] ? is_bpf_text_address+0x17b/0x1a0 [ 36.384053][ T457] dump_stack+0x19/0x20 [ 36.384081][ T457] should_fail_ex+0x3c2/0x510 [ 36.384098][ T457] should_failslab+0xac/0x100 [ 36.384116][ T457] kmem_cache_alloc_noprof+0x42/0x410 [ 36.384145][ T457] ? dst_alloc+0x13c/0x240 [ 36.384176][ T457] dst_alloc+0x13c/0x240 [ 36.384202][ T457] ip_route_input_rcu+0x18d4/0x26b0 [ 36.384237][ T457] ? ip_route_input_noref+0x150/0x150 [ 36.384256][ T457] ? inet_ehashfn+0x8f/0x220 [ 36.384290][ T457] ? __inet_lookup_established+0x707/0x760 [ 36.384313][ T457] ip_route_input_noref+0xd4/0x150 [ 36.384340][ T457] ? __cfi_ip_route_input_noref+0x10/0x10 [ 36.384382][ T457] ? tcp_v4_early_demux+0x3b9/0x8b0 [ 36.384396][ T457] ? tcp_v4_early_demux+0x56d/0x8b0 [ 36.384410][ T457] ip_rcv_finish_core+0x4ae/0x1460 [ 36.384437][ T457] ip_rcv+0xe8/0x2e0 [ 36.384474][ T457] ? __cfi_ip_rcv+0x10/0x10 [ 36.384494][ T457] ? __cfi_ip_rcv_finish+0x10/0x10 [ 36.384515][ T457] ? __cfi_ip_rcv+0x10/0x10 [ 36.384537][ T457] netif_receive_skb+0x1f5/0x7b0 [ 36.384554][ T457] ? __cfi_netif_receive_skb+0x10/0x10 [ 36.384575][ T457] ? virtio_net_hdr_to_skb+0xccf/0x1460 [ 36.384605][ T457] ? tun_rx_batched+0x171/0x7d0 [ 36.384625][ T457] tun_rx_batched+0x1d0/0x7d0 [ 36.384645][ T457] ? pskb_may_pull+0x120/0x120 [ 36.384666][ T457] tun_get_user+0x2845/0x3720 [ 36.384690][ T457] ? ptr_ring_consume+0x430/0x430 [ 36.384704][ T457] ? _parse_integer+0x2e/0x40 [ 36.384722][ T457] ? kstrtoull+0x13b/0x1e0 [ 36.384749][ T457] ? __kasan_check_write+0x18/0x20 [ 36.384770][ T457] ? ref_tracker_alloc+0x32b/0x5b0 [ 36.384815][ T457] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 36.384842][ T457] ? selinux_file_permission+0x318/0xb60 [ 36.384860][ T457] ? __kasan_check_write+0x18/0x20 [ 36.384875][ T457] ? proc_fail_nth_write+0x184/0x220 [ 36.384920][ T457] tun_chr_write_iter+0x1fa/0x310 [ 36.384942][ T457] vfs_write+0x75f/0xfd0 [ 36.384965][ T457] ? __cfi_vfs_write+0x10/0x10 [ 36.384992][ T457] ksys_write+0x145/0x260 [ 36.385008][ T457] ? xfd_validate_state+0x68/0x140 [ 36.385031][ T457] ? __cfi_ksys_write+0x10/0x10 [ 36.385069][ T457] ? __kasan_check_read+0x15/0x20 [ 36.385091][ T457] __x64_sys_write+0x7f/0x90 [ 36.385114][ T457] x64_sys_call+0x271c/0x2ee0 [ 36.385135][ T457] do_syscall_64+0x57/0xf0 [ 36.385158][ T457] ? clear_bhb_loop+0x50/0xa0 [ 36.385177][ T457] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.385214][ T457] RIP: 0033:0x7fe4e3b9e159 [ 36.385232][ T457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.385250][ T457] RSP: 002b:00007fe4e4a98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 36.385273][ T457] RAX: ffffffffffffffda RBX: 00007fe4e3e25fa0 RCX: 00007fe4e3b9e159 [ 36.385295][ T457] RDX: 0000000000000036 RSI: 0000200000004200 RDI: 0000000000000003 [ 36.385305][ T457] RBP: 00007fe4e4a98090 R08: 0000000000000000 R09: 0000000000000000 [ 36.385315][ T457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.385324][ T457] R13: 00007fe4e3e26038 R14: 00007fe4e3e25fa0 R15: 00007ffd361d3878 [ 36.385353][ T457] [ 36.747474][ T45] usb 4-1: USB disconnect, device number 2 [ 36.802988][ T365] asix 3-1:127.57: probe with driver asix failed with error -71 [ 36.812521][ T365] usb 3-1: USB disconnect, device number 3 [ 37.070517][ T489] tipc: Started in network mode [ 37.075467][ T489] tipc: Node identity , cluster identity 4711 [ 37.196331][ T365] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.266334][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 37.283136][ T498] FAULT_INJECTION: forcing a failure. [ 37.283136][ T498] name failslab, interval 1, probability 0, space 0, times 0 [ 37.296823][ T498] CPU: 0 UID: 0 PID: 498 Comm: syz.3.64 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 37.296852][ T498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.296864][ T498] Call Trace: [ 37.296871][ T498] [ 37.296879][ T498] __dump_stack+0x21/0x30 [ 37.296911][ T498] dump_stack_lvl+0x140/0x1c0 [ 37.296938][ T498] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.296965][ T498] ? is_bpf_text_address+0x17b/0x1a0 [ 37.296995][ T498] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 37.297027][ T498] dump_stack+0x19/0x20 [ 37.297082][ T498] should_fail_ex+0x3c2/0x510 [ 37.297108][ T498] should_failslab+0xac/0x100 [ 37.297135][ T498] __kmalloc_node_noprof+0x69/0x500 [ 37.297159][ T498] ? __kvmalloc_node_noprof+0x128/0x300 [ 37.297180][ T498] ? __kasan_check_write+0x18/0x20 [ 37.297203][ T498] __kvmalloc_node_noprof+0x128/0x300 [ 37.297223][ T498] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 37.297242][ T498] ? xas_start+0x317/0x3e0 [ 37.297262][ T498] ? __kasan_check_write+0x18/0x20 [ 37.297283][ T498] ? enqueue_timer+0x1c5/0x4b0 [ 37.297313][ T498] __kvm_mmu_topup_memory_cache+0x58e/0x7e0 [ 37.297359][ T498] ? mutex_unlock+0x90/0x240 [ 37.297385][ T498] kvm_mmu_topup_memory_cache+0x24/0x30 [ 37.297418][ T498] kvm_mmu_load+0xa1/0x2900 [ 37.297447][ T498] ? kvm_hv_setup_tsc_page+0x5f6/0xa80 [ 37.297479][ T498] ? vmx_flush_tlb_guest+0x1d3/0x3b0 [ 37.297506][ T498] ? kvm_apic_has_interrupt+0x77a/0x790 [ 37.297536][ T498] ? kvm_vcpu_flush_tlb_guest+0xfe/0x220 [ 37.297558][ T498] vcpu_run+0x4d72/0x7830 [ 37.297590][ T498] ? kvm_sched_clock_read+0x15/0x30 [ 37.297629][ T498] ? signal_pending+0xc0/0xc0 [ 37.297657][ T498] ? __kasan_check_write+0x18/0x20 [ 37.297679][ T498] ? xfd_validate_state+0x68/0x140 [ 37.297709][ T498] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 37.297735][ T498] ? __kasan_check_write+0x18/0x20 [ 37.297758][ T498] ? fpregs_mark_activate+0x68/0x160 [ 37.297784][ T498] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 37.297809][ T498] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 37.297837][ T498] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 37.297868][ T498] ? _parse_integer_limit+0x195/0x1e0 [ 37.297894][ T498] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 37.297925][ T498] ? kstrtoull+0x13b/0x1e0 [ 37.297947][ T498] ? kstrtouint+0x78/0xf0 [ 37.297970][ T498] ? ioctl_has_perm+0x1bc/0x500 [ 37.297993][ T498] ? __asan_memcpy+0x5a/0x80 [ 37.298015][ T498] ? ioctl_has_perm+0x408/0x500 [ 37.298043][ T498] ? has_cap_mac_admin+0xd0/0xd0 [ 37.298065][ T498] ? __kasan_check_write+0x18/0x20 [ 37.298087][ T498] ? mutex_lock_killable+0x97/0x1d0 [ 37.298113][ T498] ? __cfi_mutex_lock_killable+0x10/0x10 [ 37.298139][ T498] ? proc_fail_nth_write+0x184/0x220 [ 37.298174][ T498] kvm_vcpu_ioctl+0xa43/0x1000 [ 37.298196][ T498] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 37.298218][ T498] ? __cfi_vfs_write+0x10/0x10 [ 37.298242][ T498] ? __kasan_check_write+0x18/0x20 [ 37.298264][ T498] ? mutex_unlock+0x90/0x240 [ 37.298288][ T498] ? __cfi_mutex_unlock+0x10/0x10 [ 37.298314][ T498] ? __fget_files+0x2bc/0x330 [ 37.298342][ T498] ? bpf_lsm_file_ioctl+0xd/0x20 [ 37.298383][ T498] ? security_file_ioctl+0x3e/0x110 [ 37.298402][ T498] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 37.298422][ T498] __se_sys_ioctl+0x123/0x1b0 [ 37.298449][ T498] __x64_sys_ioctl+0x7f/0xa0 [ 37.298474][ T498] x64_sys_call+0x1878/0x2ee0 [ 37.298493][ T498] do_syscall_64+0x57/0xf0 [ 37.298523][ T498] ? clear_bhb_loop+0x50/0xa0 [ 37.298547][ T498] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.298570][ T498] RIP: 0033:0x7f8fe0d9e159 [ 37.298587][ T498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.298604][ T498] RSP: 002b:00007f8fe1c6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.298627][ T498] RAX: ffffffffffffffda RBX: 00007f8fe1025fa0 RCX: 00007f8fe0d9e159 [ 37.298642][ T498] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 37.298655][ T498] RBP: 00007f8fe1c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 37.298669][ T498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.298681][ T498] R13: 00007f8fe1026038 R14: 00007f8fe1025fa0 R15: 00007ffc075231a8 [ 37.298699][ T498] [ 37.746442][ T365] usb 3-1: Using ep0 maxpacket: 32 [ 37.752625][ T365] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 37.760867][ T365] usb 3-1: config 0 has no interface number 0 [ 37.767480][ T365] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 37.777869][ T365] usb 3-1: config 0 interface 196 has no altsetting 0 [ 37.796606][ T365] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 37.805765][ T365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.813819][ T365] usb 3-1: Product: syz [ 37.818026][ T365] usb 3-1: Manufacturer: syz [ 37.822647][ T365] usb 3-1: SerialNumber: syz [ 37.829039][ T365] usb 3-1: config 0 descriptor?? [ 37.835190][ T487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.843785][ T487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.852597][ T487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.861206][ T487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.869153][ T478] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 37.871122][ T487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.884888][ T487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.893928][ T487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.902512][ T487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.921400][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 37.929025][ T10] usb 1-1: can't read configurations, error -71 [ 38.124991][ T515] process 'syz.1.68' launched './file0' with NULL argv: empty string added [ 38.326349][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 38.477557][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.487856][ T45] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 38.497008][ T45] usb 4-1: New USB device found, idVendor=076d, idProduct=c262, bcdDevice= 0.00 [ 38.506175][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.515449][ T45] usb 4-1: config 0 descriptor?? [ 38.726554][ T514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.736049][ T514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.751951][ T45] usb 4-1: USB disconnect, device number 3 [ 38.796483][ T365] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 38.817033][ T365] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 38.965027][ T535] overlay: Bad value for 'redirect_dir' [ 38.975555][ T535] 9pnet_fd: Insufficient options for proto=fd [ 39.109281][ T554] FAULT_INJECTION: forcing a failure. [ 39.109281][ T554] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.122429][ T554] CPU: 1 UID: 0 PID: 554 Comm: syz.0.77 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 39.122460][ T554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.122486][ T554] Call Trace: [ 39.122492][ T554] [ 39.122505][ T554] __dump_stack+0x21/0x30 [ 39.122545][ T554] dump_stack_lvl+0x140/0x1c0 [ 39.122593][ T554] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.122625][ T554] ? __asan_set_shadow_00+0x12/0x20 [ 39.122658][ T554] ? do_vfs_ioctl+0x1824/0x2010 [ 39.122688][ T554] dump_stack+0x19/0x20 [ 39.122718][ T554] should_fail_ex+0x3c2/0x510 [ 39.122744][ T554] should_fail+0xf/0x20 [ 39.122768][ T554] should_fail_usercopy+0x1e/0x30 [ 39.122797][ T554] _copy_from_user+0x20/0xa0 [ 39.122826][ T554] rfcomm_dev_ioctl+0x249/0x2170 [ 39.122850][ T554] ? __cfi_rfcomm_dev_ioctl+0x10/0x10 [ 39.122883][ T554] ? ioctl_has_perm+0x39a/0x500 [ 39.122908][ T554] ? has_cap_mac_admin+0xd0/0xd0 [ 39.122933][ T554] ? proc_fail_nth_write+0x184/0x220 [ 39.122969][ T554] ? bt_sock_ioctl+0xf0/0x290 [ 39.122996][ T554] rfcomm_sock_ioctl+0x7c/0xa0 [ 39.123030][ T554] sock_do_ioctl+0x115/0x330 [ 39.123052][ T554] ? sock_show_fdinfo+0xd0/0xd0 [ 39.123074][ T554] ? __cfi_vfs_write+0x10/0x10 [ 39.123098][ T554] ? __kasan_check_write+0x18/0x20 [ 39.123120][ T554] ? mutex_unlock+0x90/0x240 [ 39.123145][ T554] sock_ioctl+0x568/0x7e0 [ 39.123177][ T554] ? __cfi_sock_ioctl+0x10/0x10 [ 39.123215][ T554] ? __fget_files+0x2bc/0x330 [ 39.123247][ T554] ? bpf_lsm_file_ioctl+0xd/0x20 [ 39.123276][ T554] ? security_file_ioctl+0x3e/0x110 [ 39.123297][ T554] ? __cfi_sock_ioctl+0x10/0x10 [ 39.123329][ T554] __se_sys_ioctl+0x123/0x1b0 [ 39.123357][ T554] __x64_sys_ioctl+0x7f/0xa0 [ 39.123384][ T554] x64_sys_call+0x1878/0x2ee0 [ 39.123406][ T554] do_syscall_64+0x57/0xf0 [ 39.123438][ T554] ? clear_bhb_loop+0x50/0xa0 [ 39.123464][ T554] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.123490][ T554] RIP: 0033:0x7f7a60f9e159 [ 39.123509][ T554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.123528][ T554] RSP: 002b:00007f7a61e92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.123553][ T554] RAX: ffffffffffffffda RBX: 00007f7a61225fa0 RCX: 00007f7a60f9e159 [ 39.123570][ T554] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 39.123586][ T554] RBP: 00007f7a61e92090 R08: 0000000000000000 R09: 0000000000000000 [ 39.123600][ T554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.123614][ T554] R13: 00007f7a61226038 R14: 00007f7a61225fa0 R15: 00007ffef5c0eff8 [ 39.123635][ T554] [ 39.394602][ T365] usb 3-1: USB disconnect, device number 4 [ 39.469869][ T365] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 39.514065][ T576] FAULT_INJECTION: forcing a failure. [ 39.514065][ T576] name failslab, interval 1, probability 0, space 0, times 0 [ 39.558420][ T576] CPU: 1 UID: 0 PID: 576 Comm: syz.3.84 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 39.558451][ T576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.558464][ T576] Call Trace: [ 39.558471][ T576] [ 39.558479][ T576] __dump_stack+0x21/0x30 [ 39.558514][ T576] dump_stack_lvl+0x140/0x1c0 [ 39.558542][ T576] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.558572][ T576] dump_stack+0x19/0x20 [ 39.558599][ T576] should_fail_ex+0x3c2/0x510 [ 39.558623][ T576] should_failslab+0xac/0x100 [ 39.558649][ T576] kmem_cache_alloc_noprof+0x42/0x410 [ 39.558672][ T576] ? ep_insert+0x46c/0x1600 [ 39.558699][ T576] ep_insert+0x46c/0x1600 [ 39.558727][ T576] ? ep_loop_check+0xa0/0xa0 [ 39.558752][ T576] ? mutex_lock+0x97/0x1d0 [ 39.558787][ T576] ? security_capable+0x44/0x130 [ 39.558812][ T576] do_epoll_ctl+0x955/0xcf0 [ 39.558839][ T576] __x64_sys_epoll_ctl+0x166/0x1b0 [ 39.558865][ T576] ? __cfi___x64_sys_epoll_ctl+0x10/0x10 [ 39.558892][ T576] ? __kasan_check_read+0x15/0x20 [ 39.558914][ T576] x64_sys_call+0x2c44/0x2ee0 [ 39.558934][ T576] do_syscall_64+0x57/0xf0 [ 39.558963][ T576] ? clear_bhb_loop+0x50/0xa0 [ 39.558987][ T576] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.559010][ T576] RIP: 0033:0x7f8fe0d9e159 [ 39.559027][ T576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.559045][ T576] RSP: 002b:00007f8fe1c6f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 39.559067][ T576] RAX: ffffffffffffffda RBX: 00007f8fe1025fa0 RCX: 00007f8fe0d9e159 [ 39.559083][ T576] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 39.559095][ T576] RBP: 00007f8fe1c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 39.559108][ T576] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 39.559122][ T576] R13: 00007f8fe1026038 R14: 00007f8fe1025fa0 R15: 00007ffc075231a8 [ 39.559140][ T576] [ 39.859034][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 39.859053][ T36] audit: type=1400 audit(1787958740.270:208): avc: denied { nlmsg_write } for pid=598 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.886336][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 39.999943][ T36] audit: type=1400 audit(1787958740.410:209): avc: denied { mount } for pid=611 comm="syz.3.93" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 40.037602][ T31] usb 2-1: config 1 has an invalid interface number: 157 but max is 2 [ 40.045869][ T31] usb 2-1: config 1 has an invalid descriptor of length 230, skipping remainder of the config [ 40.056440][ T31] usb 2-1: config 1 has no interface number 2 [ 40.062548][ T31] usb 2-1: too many endpoints for config 1 interface 157 altsetting 97: 40, using maximum allowed: 30 [ 40.073684][ T31] usb 2-1: config 1 interface 157 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 40 [ 40.086974][ T31] usb 2-1: config 1 interface 157 has no altsetting 0 [ 40.095607][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 40.104706][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.112876][ T31] usb 2-1: Product: syz [ 40.117189][ T31] usb 2-1: Manufacturer: syz [ 40.121807][ T31] usb 2-1: SerialNumber: syz [ 40.154546][ T36] audit: type=1400 audit(1787958740.560:210): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 40.184626][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 40.192178][ T365] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.212155][ T620] overlayfs: failed to resolve './file1': -2 [ 40.312096][ T625] ======================================================= [ 40.312096][ T625] WARNING: The mand mount option has been deprecated and [ 40.312096][ T625] and is ignored by this kernel. Remove the mand [ 40.312096][ T625] option from the mount to silence this warning. [ 40.312096][ T625] ======================================================= [ 40.335296][ T584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.355843][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 40.361040][ T586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.361315][ T584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.374056][ T586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.382964][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 40.386822][ T625] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 40.392706][ T36] audit: type=1400 audit(1787958740.800:211): avc: denied { mounton } for pid=624 comm="syz.3.96" path="/27/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 40.401178][ T31] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 40.425453][ T36] audit: type=1400 audit(1787958740.840:212): avc: denied { mount } for pid=624 comm="syz.3.96" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.436831][ T31] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 40.458539][ T365] usb 1-1: unable to get BOS descriptor or descriptor too short [ 40.466514][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64 [ 40.476270][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 40.489171][ T365] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 40.497039][ T365] usb 1-1: can't read configurations, error -61 [ 40.505127][ T10] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 40.505504][ T31] usb 2-1: USB disconnect, device number 2 [ 40.522440][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.536024][ T10] usb 3-1: Product: syz [ 40.541824][ T10] usb 3-1: Manufacturer: syz [ 40.547261][ T10] usb 3-1: SerialNumber: syz [ 40.553355][ T607] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 40.560847][ T607] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 40.595338][ T36] audit: type=1400 audit(1787958741.000:213): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.636337][ T365] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.749355][ T36] audit: type=1400 audit(1787958741.160:214): avc: denied { read write } for pid=631 comm="syz.3.98" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.776244][ T36] audit: type=1400 audit(1787958741.160:215): avc: denied { open } for pid=631 comm="syz.3.98" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.791321][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 40.806840][ T36] audit: type=1400 audit(1787958741.160:216): avc: denied { map } for pid=631 comm="syz.3.98" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.829900][ T36] audit: type=1400 audit(1787958741.160:217): avc: denied { create } for pid=631 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 40.833733][ T365] usb 1-1: unable to get BOS descriptor or descriptor too short [ 40.861521][ T10] usb 3-1: USB disconnect, device number 5 [ 40.874084][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.880389][ T634] fuse: Bad value for 'fd' [ 40.895137][ T365] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 40.903344][ T365] usb 1-1: can't read configurations, error -61 [ 40.909937][ T365] usb usb1-port1: attempt power cycle [ 41.246378][ T365] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 41.278089][ T365] usb 1-1: unable to get BOS descriptor or descriptor too short [ 41.287288][ T365] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 41.294965][ T365] usb 1-1: can't read configurations, error -61 [ 41.426360][ T365] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 41.436373][ T522] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 41.448176][ T365] usb 1-1: unable to get BOS descriptor or descriptor too short [ 41.457368][ T365] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 41.465012][ T365] usb 1-1: can't read configurations, error -61 [ 41.471522][ T365] usb usb1-port1: unable to enumerate USB device [ 41.484019][ T661] overlayfs: workdir and upperdir must be separate subtrees [ 41.492041][ T661] overlayfs: overlapping lowerdir path [ 41.595641][ T522] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 41.606519][ T522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 41.617663][ T522] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 41.630714][ T522] usb 2-1: New USB device found, idVendor=285e, idProduct=1205, bcdDevice= 0.00 [ 41.639976][ T522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.649368][ T522] usb 2-1: config 0 descriptor?? [ 41.654598][ T654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 41.946709][ T365] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 42.065870][ T522] usbhid 2-1:0.0: can't add hid device: -71 [ 42.073688][ T522] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 42.085560][ T522] usb 2-1: USB disconnect, device number 3 [ 42.126349][ T365] usb 3-1: Using ep0 maxpacket: 32 [ 42.132490][ T365] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 42.143901][ T365] usb 3-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 42.152990][ T365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.161013][ T365] usb 3-1: Product: syz [ 42.165241][ T365] usb 3-1: Manufacturer: syz [ 42.169883][ T365] usb 3-1: SerialNumber: syz [ 42.175507][ T672] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 42.356357][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 42.398734][ T365] usb 3-1: USB disconnect, device number 6 [ 42.410674][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.506342][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 42.512516][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.522642][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.533051][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.542195][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.550213][ T31] usb 4-1: Product: syz [ 42.554367][ T31] usb 4-1: Manufacturer: syz [ 42.558981][ T31] usb 4-1: SerialNumber: syz [ 42.707604][ T688] No source specified [ 42.776988][ T31] usb 4-1: 0:2 : does not exist [ 42.784076][ T31] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 42.798432][ T31] usb 4-1: USB disconnect, device number 4 [ 42.810729][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.952433][ T707] FAULT_INJECTION: forcing a failure. [ 42.952433][ T707] name failslab, interval 1, probability 0, space 0, times 0 [ 42.965146][ T707] CPU: 1 UID: 0 PID: 707 Comm: syz.1.126 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 42.965178][ T707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.965192][ T707] Call Trace: [ 42.965199][ T707] [ 42.965208][ T707] __dump_stack+0x21/0x30 [ 42.965246][ T707] dump_stack_lvl+0x140/0x1c0 [ 42.965278][ T707] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.965311][ T707] ? kasan_save_track+0x4f/0x80 [ 42.965338][ T707] ? kasan_save_track+0x3e/0x80 [ 42.965364][ T707] ? kasan_save_alloc_info+0x3a/0x50 [ 42.965386][ T707] ? __kmalloc_cache_node_noprof+0x225/0x430 [ 42.965412][ T707] ? __get_vm_area_node+0x150/0x390 [ 42.965447][ T707] dump_stack+0x19/0x20 [ 42.965478][ T707] should_fail_ex+0x3c2/0x510 [ 42.965506][ T707] should_failslab+0xac/0x100 [ 42.965535][ T707] kmem_cache_alloc_node_noprof+0x45/0x420 [ 42.965561][ T707] ? alloc_vmap_area+0x230/0x26f0 [ 42.965595][ T707] alloc_vmap_area+0x230/0x26f0 [ 42.965631][ T707] ? kasan_save_alloc_info+0x3a/0x50 [ 42.965654][ T707] ? vm_map_ram+0xdd0/0xdd0 [ 42.965686][ T707] ? __kmalloc_cache_node_noprof+0x225/0x430 [ 42.965712][ T707] ? __get_vm_area_node+0x150/0x390 [ 42.965747][ T707] __get_vm_area_node+0x1f8/0x390 [ 42.965782][ T707] __vmalloc_node_range_noprof+0x340/0x1300 [ 42.965818][ T707] ? copy_process+0x57c/0x3350 [ 42.965852][ T707] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 42.965888][ T707] ? kasan_save_alloc_info+0x3a/0x50 [ 42.965910][ T707] ? __kasan_slab_alloc+0x73/0x90 [ 42.965951][ T707] ? arch_dup_task_struct+0x5b/0xe0 [ 42.965985][ T707] ? __asan_memcpy+0x5a/0x80 [ 42.966008][ T707] dup_task_struct+0x5d6/0xd80 [ 42.966042][ T707] ? copy_process+0x57c/0x3350 [ 42.966071][ T707] ? _raw_spin_lock_irq+0x93/0x120 [ 42.966104][ T707] ? copy_process+0x3350/0x3350 [ 42.966143][ T707] ? __kasan_check_write+0x18/0x20 [ 42.966166][ T707] copy_process+0x57c/0x3350 [ 42.966195][ T707] ? kasan_save_alloc_info+0x3a/0x50 [ 42.966215][ T707] ? __cfi_copy_process+0x10/0x10 [ 42.966240][ T707] ? __kmalloc_cache_noprof+0x23c/0x470 [ 42.966264][ T707] ? __kasan_check_write+0x18/0x20 [ 42.966285][ T707] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 42.966314][ T707] vhost_task_create+0x1f7/0x3f0 [ 42.966337][ T707] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 42.966363][ T707] ? __cfi_vhost_task_create+0x10/0x10 [ 42.966387][ T707] ? __cfi_vhost_task_fn+0x10/0x10 [ 42.966409][ T707] ? __kasan_check_write+0x18/0x20 [ 42.966430][ T707] ? mutex_lock+0x97/0x1d0 [ 42.966452][ T707] ? __cfi_mutex_lock+0x10/0x10 [ 42.966474][ T707] ? kernel_text_address+0xa9/0xe0 [ 42.966504][ T707] kvm_mmu_post_init_vm+0x161/0x300 [ 42.966535][ T707] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 42.966564][ T707] ? _parse_integer_limit+0x195/0x1e0 [ 42.966588][ T707] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 42.966617][ T707] ? kstrtoull+0x13b/0x1e0 [ 42.966652][ T707] ? kstrtouint+0x78/0xf0 [ 42.966672][ T707] ? ioctl_has_perm+0x1bc/0x500 [ 42.966692][ T707] ? __asan_memcpy+0x5a/0x80 [ 42.966712][ T707] ? ioctl_has_perm+0x408/0x500 [ 42.966750][ T707] ? has_cap_mac_admin+0xd0/0xd0 [ 42.966772][ T707] ? __kasan_check_write+0x18/0x20 [ 42.966792][ T707] ? mutex_lock_killable+0x97/0x1d0 [ 42.966817][ T707] ? __cfi_mutex_lock_killable+0x10/0x10 [ 42.966841][ T707] ? proc_fail_nth_write+0x184/0x220 [ 42.966873][ T707] kvm_vcpu_ioctl+0xa43/0x1000 [ 42.966895][ T707] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 42.966916][ T707] ? __cfi_vfs_write+0x10/0x10 [ 42.966938][ T707] ? __kasan_check_write+0x18/0x20 [ 42.966959][ T707] ? mutex_unlock+0x90/0x240 [ 42.966981][ T707] ? __cfi_mutex_unlock+0x10/0x10 [ 42.967006][ T707] ? __fget_files+0x2bc/0x330 [ 42.967038][ T707] ? bpf_lsm_file_ioctl+0xd/0x20 [ 42.967066][ T707] ? security_file_ioctl+0x3e/0x110 [ 42.967086][ T707] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 42.967106][ T707] __se_sys_ioctl+0x123/0x1b0 [ 42.967133][ T707] __x64_sys_ioctl+0x7f/0xa0 [ 42.967158][ T707] x64_sys_call+0x1878/0x2ee0 [ 42.967178][ T707] do_syscall_64+0x57/0xf0 [ 42.967208][ T707] ? clear_bhb_loop+0x50/0xa0 [ 42.967233][ T707] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.967256][ T707] RIP: 0033:0x7fe4e3b9e159 [ 42.967273][ T707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.967290][ T707] RSP: 002b:00007fe4e4a98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.967312][ T707] RAX: ffffffffffffffda RBX: 00007fe4e3e25fa0 RCX: 00007fe4e3b9e159 [ 42.967328][ T707] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 42.967342][ T707] RBP: 00007fe4e4a98090 R08: 0000000000000000 R09: 0000000000000000 [ 42.967355][ T707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.967368][ T707] R13: 00007fe4e3e26038 R14: 00007fe4e3e25fa0 R15: 00007ffd361d3878 [ 42.967386][ T707] [ 43.452446][ T707] syz.1.126: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 43.473811][ T707] CPU: 1 UID: 0 PID: 707 Comm: syz.1.126 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 43.473840][ T707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.473852][ T707] Call Trace: [ 43.473858][ T707] [ 43.473865][ T707] __dump_stack+0x21/0x30 [ 43.473898][ T707] dump_stack_lvl+0x140/0x1c0 [ 43.473924][ T707] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.473951][ T707] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 43.473990][ T707] dump_stack+0x19/0x20 [ 43.474016][ T707] warn_alloc+0x1e7/0x2c0 [ 43.474043][ T707] ? kasan_save_track+0x3e/0x80 [ 43.474065][ T707] ? __cfi_warn_alloc+0x10/0x10 [ 43.474090][ T707] ? __get_vm_area_node+0x211/0x390 [ 43.474119][ T707] ? __get_vm_area_node+0x211/0x390 [ 43.474147][ T707] __vmalloc_node_range_noprof+0x365/0x1300 [ 43.474181][ T707] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 43.474210][ T707] ? kasan_save_alloc_info+0x3a/0x50 [ 43.474227][ T707] ? __kasan_slab_alloc+0x73/0x90 [ 43.474250][ T707] ? arch_dup_task_struct+0x5b/0xe0 [ 43.474278][ T707] ? __asan_memcpy+0x5a/0x80 [ 43.474309][ T707] dup_task_struct+0x5d6/0xd80 [ 43.474332][ T707] ? copy_process+0x57c/0x3350 [ 43.474358][ T707] ? _raw_spin_lock_irq+0x93/0x120 [ 43.474384][ T707] ? copy_process+0x3350/0x3350 [ 43.474406][ T707] ? __kasan_check_write+0x18/0x20 [ 43.474425][ T707] copy_process+0x57c/0x3350 [ 43.474450][ T707] ? kasan_save_alloc_info+0x3a/0x50 [ 43.474467][ T707] ? __cfi_copy_process+0x10/0x10 [ 43.474490][ T707] ? __kmalloc_cache_noprof+0x23c/0x470 [ 43.474511][ T707] ? __kasan_check_write+0x18/0x20 [ 43.474529][ T707] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 43.474552][ T707] vhost_task_create+0x1f7/0x3f0 [ 43.474571][ T707] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 43.474594][ T707] ? __cfi_vhost_task_create+0x10/0x10 [ 43.474615][ T707] ? __cfi_vhost_task_fn+0x10/0x10 [ 43.474633][ T707] ? __kasan_check_write+0x18/0x20 [ 43.474652][ T707] ? mutex_lock+0x97/0x1d0 [ 43.474670][ T707] ? __cfi_mutex_lock+0x10/0x10 [ 43.474689][ T707] ? kernel_text_address+0xa9/0xe0 [ 43.474717][ T707] kvm_mmu_post_init_vm+0x161/0x300 [ 43.474744][ T707] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 43.474788][ T707] ? _parse_integer_limit+0x195/0x1e0 [ 43.474810][ T707] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 43.474836][ T707] ? kstrtoull+0x13b/0x1e0 [ 43.474856][ T707] ? kstrtouint+0x78/0xf0 [ 43.474875][ T707] ? ioctl_has_perm+0x1bc/0x500 [ 43.474894][ T707] ? __asan_memcpy+0x5a/0x80 [ 43.474913][ T707] ? ioctl_has_perm+0x408/0x500 [ 43.474932][ T707] ? has_cap_mac_admin+0xd0/0xd0 [ 43.474950][ T707] ? __kasan_check_write+0x18/0x20 [ 43.474969][ T707] ? mutex_lock_killable+0x97/0x1d0 [ 43.474996][ T707] ? __cfi_mutex_lock_killable+0x10/0x10 [ 43.475018][ T707] ? proc_fail_nth_write+0x184/0x220 [ 43.475047][ T707] kvm_vcpu_ioctl+0xa43/0x1000 [ 43.475067][ T707] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 43.475085][ T707] ? __cfi_vfs_write+0x10/0x10 [ 43.475105][ T707] ? __kasan_check_write+0x18/0x20 [ 43.475124][ T707] ? mutex_unlock+0x90/0x240 [ 43.475144][ T707] ? __cfi_mutex_unlock+0x10/0x10 [ 43.475165][ T707] ? __fget_files+0x2bc/0x330 [ 43.475189][ T707] ? bpf_lsm_file_ioctl+0xd/0x20 [ 43.475214][ T707] ? security_file_ioctl+0x3e/0x110 [ 43.475232][ T707] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 43.475250][ T707] __se_sys_ioctl+0x123/0x1b0 [ 43.475274][ T707] __x64_sys_ioctl+0x7f/0xa0 [ 43.475297][ T707] x64_sys_call+0x1878/0x2ee0 [ 43.475314][ T707] do_syscall_64+0x57/0xf0 [ 43.475341][ T707] ? clear_bhb_loop+0x50/0xa0 [ 43.475364][ T707] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.475384][ T707] RIP: 0033:0x7fe4e3b9e159 [ 43.475401][ T707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.475416][ T707] RSP: 002b:00007fe4e4a98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.475436][ T707] RAX: ffffffffffffffda RBX: 00007fe4e3e25fa0 RCX: 00007fe4e3b9e159 [ 43.475450][ T707] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 43.475462][ T707] RBP: 00007fe4e4a98090 R08: 0000000000000000 R09: 0000000000000000 [ 43.475474][ T707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.475487][ T707] R13: 00007fe4e3e26038 R14: 00007fe4e3e25fa0 R15: 00007ffd361d3878 [ 43.475504][ T707] [ 43.475535][ T707] Mem-Info: [ 43.916328][ T707] active_anon:6582 inactive_anon:1 isolated_anon:0 [ 43.916328][ T707] active_file:16162 inactive_file:2295 isolated_file:0 [ 43.916328][ T707] unevictable:0 dirty:613 writeback:0 [ 43.916328][ T707] slab_reclaimable:5458 slab_unreclaimable:70255 [ 43.916328][ T707] mapped:24632 shmem:164 pagetables:824 [ 43.916328][ T707] sec_pagetables:0 bounce:0 [ 43.916328][ T707] kernel_misc_reclaimable:0 [ 43.916328][ T707] free:1531993 free_pcp:2004 free_cma:0 [ 43.973504][ T713] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 43.979928][ T707] Node 0 active_anon:26328kB inactive_anon:4kB active_file:64648kB inactive_file:9180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98528kB dirty:2452kB writeback:0kB shmem:656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4412kB pagetables:3396kB sec_pagetables:0kB all_unreclaimable? no [ 44.028219][ T707] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963384kB mlocked:0kB bounce:0kB free_pcp:5220kB local_pcp:0kB free_cma:0kB [ 44.076365][ T707] lowmem_reserve[]: 0 3921 3921 [ 44.081889][ T707] Normal free:3168732kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26328kB inactive_anon:4kB active_file:64648kB inactive_file:9180kB unevictable:0kB writepending:2452kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:4056kB local_pcp:2876kB free_cma:0kB [ 44.116122][ T707] lowmem_reserve[]: 0 0 0 [ 44.120791][ T707] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 44.137240][ T707] Normal: 443*4kB (UM) 431*8kB (UME) 471*16kB (UME) 334*32kB (M) 313*64kB (M) 58*128kB (ME) 19*256kB (UM) 4*512kB (UME) 7*1024kB (UME) 3*2048kB (UME) 754*4096kB (UM) = 3159508kB [ 44.155123][ T707] 18619 total pagecache pages [ 44.159847][ T707] 1 pages in swap cache [ 44.164018][ T707] Free swap = 124720kB [ 44.172834][ T707] Total swap = 124996kB [ 44.180354][ T707] 2097051 pages RAM [ 44.184335][ T707] 0 pages HighMem/MovableOnly [ 44.194067][ T707] 352239 pages reserved [ 44.198452][ T707] 0 pages cma reserved [ 44.205150][ T707] Memory allocations: [ 44.226034][ T707] 0 B 0 init/main.c:1477 func:do_initcalls [ 44.234753][ T707] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 44.245579][ T707] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 44.253360][ T707] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 44.262193][ T707] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 44.270471][ T707] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 44.279358][ T707] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 44.287466][ T707] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 44.320323][ T707] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 44.328450][ T707] 0 B 0 init/initramfs.c:101 func:find_link [ 44.576354][ T381] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 44.733916][ T381] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.747739][ T381] usb 1-1: not running at top speed; connect to a high speed hub [ 44.756650][ T381] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 44.768897][ T381] usb 1-1: can't read configurations, error -22 [ 44.896881][ T381] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 44.971446][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 44.971462][ T36] audit: type=1400 audit(1787959001.383:232): avc: denied { create } for pid=766 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 45.024687][ T36] audit: type=1400 audit(1787959001.383:233): avc: denied { write } for pid=766 comm="syz.3.146" path="socket:[9604]" dev="sockfs" ino=9604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 45.049847][ T381] usb 1-1: unable to get BOS descriptor or descriptor too short [ 45.058669][ T381] usb 1-1: not running at top speed; connect to a high speed hub [ 45.077407][ T381] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 45.091502][ T381] usb 1-1: can't read configurations, error -22 [ 45.101339][ T381] usb usb1-port1: attempt power cycle [ 45.145365][ T36] audit: type=1400 audit(1787959001.553:234): avc: denied { map } for pid=773 comm="syz.3.148" path="socket:[9678]" dev="sockfs" ino=9678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.345758][ T36] audit: type=1400 audit(1787959001.753:235): avc: denied { ioctl } for pid=788 comm="syz.3.154" path="mnt:[4026532398]" dev="nsfs" ino=4026532398 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.410315][ T36] audit: type=1400 audit(1787959001.823:236): avc: denied { map } for pid=792 comm="syz.1.155" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 45.461526][ T381] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 45.473259][ T799] FAULT_INJECTION: forcing a failure. [ 45.473259][ T799] name failslab, interval 1, probability 0, space 0, times 0 [ 45.486207][ T799] CPU: 1 UID: 0 PID: 799 Comm: syz.2.156 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 45.486237][ T799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.486250][ T799] Call Trace: [ 45.486258][ T799] [ 45.486266][ T799] __dump_stack+0x21/0x30 [ 45.486306][ T799] dump_stack_lvl+0x140/0x1c0 [ 45.486336][ T799] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.486369][ T799] dump_stack+0x19/0x20 [ 45.486398][ T799] should_fail_ex+0x3c2/0x510 [ 45.486427][ T799] should_failslab+0xac/0x100 [ 45.486457][ T799] kmem_cache_alloc_noprof+0x42/0x410 [ 45.486482][ T799] ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0 [ 45.486518][ T799] __kvm_mmu_topup_memory_cache+0x1dd/0x7e0 [ 45.486553][ T799] ? mutex_unlock+0x90/0x240 [ 45.486578][ T799] kvm_mmu_topup_memory_cache+0x24/0x30 [ 45.486610][ T799] kvm_mmu_load+0xa1/0x2900 [ 45.486638][ T799] ? __cfi_down_read+0x10/0x10 [ 45.486662][ T799] ? kvm_hv_setup_tsc_page+0x5f6/0xa80 [ 45.486694][ T799] ? kvm_deliver_exception_payload+0xd0/0x1e0 [ 45.486723][ T799] ? vmx_inject_exception+0x2a6/0x4c0 [ 45.486748][ T799] ? vmx_enable_irq_window+0x95/0x130 [ 45.486779][ T799] vcpu_run+0x4d72/0x7830 [ 45.486819][ T799] ? vcpu_run+0xdb1/0x7830 [ 45.486847][ T799] ? mutex_unlock+0x90/0x240 [ 45.486884][ T799] ? signal_pending+0xc0/0xc0 [ 45.486913][ T799] ? kvm_init_mmu+0x5da/0x1240 [ 45.486943][ T799] ? __set_sregs+0x155/0x1d0 [ 45.486975][ T799] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 45.487007][ T799] ? _parse_integer_limit+0x195/0x1e0 [ 45.487033][ T799] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 45.487071][ T799] ? __kasan_check_write+0x18/0x20 [ 45.487094][ T799] ? mutex_lock_killable+0x97/0x1d0 [ 45.487119][ T799] ? __cfi_mutex_lock_killable+0x10/0x10 [ 45.487144][ T799] ? proc_fail_nth_write+0x184/0x220 [ 45.487174][ T799] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 45.487207][ T799] kvm_vcpu_ioctl+0xa43/0x1000 [ 45.487230][ T799] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 45.487252][ T799] ? __cfi_vfs_write+0x10/0x10 [ 45.487276][ T799] ? __kasan_check_write+0x18/0x20 [ 45.487298][ T799] ? mutex_unlock+0x90/0x240 [ 45.487322][ T799] ? __cfi_mutex_unlock+0x10/0x10 [ 45.487349][ T799] ? __fget_files+0x2bc/0x330 [ 45.487377][ T799] ? bpf_lsm_file_ioctl+0xd/0x20 [ 45.487406][ T799] ? security_file_ioctl+0x3e/0x110 [ 45.487428][ T799] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 45.487450][ T799] __se_sys_ioctl+0x123/0x1b0 [ 45.487479][ T799] __x64_sys_ioctl+0x7f/0xa0 [ 45.487507][ T799] x64_sys_call+0x1878/0x2ee0 [ 45.487529][ T799] do_syscall_64+0x57/0xf0 [ 45.487561][ T799] ? clear_bhb_loop+0x50/0xa0 [ 45.487588][ T799] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.487612][ T799] RIP: 0033:0x7fc04c99e159 [ 45.487641][ T799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.487657][ T799] RSP: 002b:00007fc04b3f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.487679][ T799] RAX: ffffffffffffffda RBX: 00007fc04cc25fa0 RCX: 00007fc04c99e159 [ 45.487695][ T799] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 45.487709][ T799] RBP: 00007fc04b3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.487722][ T799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.487734][ T799] R13: 00007fc04cc26038 R14: 00007fc04cc25fa0 R15: 00007ffe68e519b8 [ 45.487752][ T799] [ 45.832860][ T381] usb 1-1: unable to get BOS descriptor or descriptor too short [ 45.840915][ T381] usb 1-1: not running at top speed; connect to a high speed hub [ 45.853480][ T381] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 45.861558][ T381] usb 1-1: can't read configurations, error -22 [ 45.965159][ T863] FAULT_INJECTION: forcing a failure. [ 45.965159][ T863] name failslab, interval 1, probability 0, space 0, times 0 [ 45.977853][ T863] CPU: 0 UID: 0 PID: 863 Comm: syz.2.158 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 45.977883][ T863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.977896][ T863] Call Trace: [ 45.977903][ T863] [ 45.977910][ T863] __dump_stack+0x21/0x30 [ 45.977944][ T863] dump_stack_lvl+0x140/0x1c0 [ 45.977964][ T863] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.977984][ T863] ? vms_clear_ptes+0x4eb/0x610 [ 45.978002][ T863] dump_stack+0x19/0x20 [ 45.978021][ T863] should_fail_ex+0x3c2/0x510 [ 45.978039][ T863] should_failslab+0xac/0x100 [ 45.978057][ T863] kmem_cache_alloc_noprof+0x42/0x410 [ 45.978072][ T863] ? vma_merge_new_range+0x71e/0x900 [ 45.978087][ T863] ? vm_area_alloc+0x3f/0x190 [ 45.978104][ T863] vm_area_alloc+0x3f/0x190 [ 45.978119][ T863] mmap_region+0xce2/0x1d10 [ 45.978134][ T863] ? __kernel_text_address+0x11/0x40 [ 45.978154][ T863] ? unwind_get_return_address+0x51/0x90 [ 45.978173][ T863] ? __cfi_mmap_region+0x10/0x10 [ 45.978190][ T863] ? __kasan_check_read+0x15/0x20 [ 45.978204][ T863] ? arch_get_unmapped_area_topdown+0x235/0x830 [ 45.978229][ T863] ? file_mmap_ok+0x147/0x1a0 [ 45.978243][ T863] do_mmap+0xb61/0x13b0 [ 45.978258][ T863] ? __cfi_do_mmap+0x10/0x10 [ 45.978271][ T863] ? down_write_killable+0xee/0x2d0 [ 45.978289][ T863] ? __cfi_down_write_killable+0x10/0x10 [ 45.978308][ T863] vm_mmap_pgoff+0x367/0x4b0 [ 45.978323][ T863] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 45.978337][ T863] ? __fget_files+0x2bc/0x330 [ 45.978356][ T863] ksys_mmap_pgoff+0x165/0x1e0 [ 45.978370][ T863] __x64_sys_mmap+0x121/0x140 [ 45.978384][ T863] x64_sys_call+0x13bf/0x2ee0 [ 45.978397][ T863] do_syscall_64+0x57/0xf0 [ 45.978418][ T863] ? clear_bhb_loop+0x50/0xa0 [ 45.978434][ T863] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.978450][ T863] RIP: 0033:0x7fc04c99e159 [ 45.978462][ T863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.978473][ T863] RSP: 002b:00007fc04b3f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 45.978488][ T863] RAX: ffffffffffffffda RBX: 00007fc04cc25fa0 RCX: 00007fc04c99e159 [ 45.978499][ T863] RDX: 0000000000000003 RSI: 0000000000004000 RDI: 0000200000000000 [ 45.978508][ T863] RBP: 00007fc04b3f7090 R08: 0000000000000003 R09: 0000000000000000 [ 45.978517][ T863] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 45.978525][ T863] R13: 00007fc04cc26038 R14: 00007fc04cc25fa0 R15: 00007ffe68e519b8 [ 45.978538][ T863] [ 46.036679][ T381] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 46.272817][ T381] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.283636][ T381] usb 1-1: not running at top speed; connect to a high speed hub [ 46.293887][ T381] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 46.301852][ T36] audit: type=1400 audit(1787959002.713:237): avc: denied { write } for pid=869 comm="syz.2.161" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 46.325738][ T381] usb 1-1: can't read configurations, error -22 [ 46.332322][ T381] usb usb1-port1: unable to enumerate USB device [ 46.339534][ T36] audit: type=1400 audit(1787959002.713:238): avc: denied { open } for pid=869 comm="syz.2.161" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 46.598918][ T881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=530 sclass=netlink_route_socket pid=881 comm=syz.2.165 [ 46.616351][ T365] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 46.627567][ T36] audit: type=1400 audit(1787959003.043:239): avc: denied { append } for pid=882 comm="syz.2.166" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 46.650221][ T36] audit: type=1400 audit(1787959003.043:240): avc: denied { wake_alarm } for pid=882 comm="syz.2.166" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.776335][ T365] usb 4-1: Using ep0 maxpacket: 32 [ 46.786717][ T365] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.786941][ T36] audit: type=1400 audit(1787959003.203:241): avc: denied { validate_trans } for pid=890 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 46.817841][ T365] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 46.830787][ T365] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 46.852078][ T365] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 46.866015][ T365] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.875165][ T365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 46.883258][ T365] usb 4-1: SerialNumber: syz [ 46.891916][ T873] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 46.899944][ T873] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 46.908374][ T365] hub 4-1:1.0: bad descriptor, ignoring hub [ 46.914367][ T365] hub 4-1:1.0: probe with driver hub failed with error -5 [ 46.921894][ T365] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 47.112211][ T365] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 47.200094][ T909] cgroup: subsys name conflicts with all [ 47.426456][ T365] usb 4-1: USB disconnect, device number 5 [ 47.648833][ T922] MTRR 0 not used [ 47.677631][ T924] netlink: 'syz.0.184': attribute type 4 has an invalid length. [ 47.685310][ T924] netlink: 'syz.0.184': attribute type 5 has an invalid length. [ 47.705254][ T924] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.184'. [ 48.256334][ T965] MTRR 0 not used [ 48.946339][ T365] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 49.128143][ T365] usb 4-1: Using ep0 maxpacket: 32 [ 49.147179][ T365] usb 4-1: unable to get BOS descriptor or descriptor too short [ 49.155602][ T365] usb 4-1: config 2 has an invalid interface number: 171 but max is 0 [ 49.163889][ T365] usb 4-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 49.196316][ T365] usb 4-1: config 2 has no interface number 1 [ 49.202825][ T365] usb 4-1: too many endpoints for config 2 interface 0 altsetting 51: 64, using maximum allowed: 30 [ 49.213824][ T365] usb 4-1: config 2 interface 0 altsetting 51 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 49.236314][ T365] usb 4-1: config 2 interface 171 has no altsetting 0 [ 49.243198][ T365] usb 4-1: config 2 interface 0 has no altsetting 0 [ 49.251216][ T365] usb 4-1: New USB device found, idVendor=0c52, idProduct=2833, bcdDevice=d2.c0 [ 49.260352][ T365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.276320][ T365] usb 4-1: Product: syz [ 49.281466][ T365] usb 4-1: Manufacturer: syz [ 49.286105][ T365] usb 4-1: SerialNumber: syz [ 49.291995][ T1016] mmap: syz.1.206 (1016) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.508787][ T365] usb 4-1: bad CDC descriptors [ 49.514236][ T365] ftdi_sio 4-1:2.171: FTDI USB Serial Device converter detected [ 49.526915][ T365] ftdi_sio ttyUSB0: unknown device type: 0xd2c0 [ 49.547834][ T365] ftdi_sio 4-1:2.0: FTDI USB Serial Device converter detected [ 49.555671][ T365] ftdi_sio ttyUSB1: unknown device type: 0xd2c0 [ 49.568437][ T365] usb 4-1: USB disconnect, device number 6 [ 49.591146][ T365] ftdi_sio 4-1:2.171: device disconnected [ 49.600922][ T365] ftdi_sio 4-1:2.0: device disconnected [ 50.024120][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 50.024140][ T36] audit: type=1400 audit(1787959006.433:261): avc: denied { ioctl } for pid=1020 comm="syz.0.208" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 50.277603][ T36] audit: type=1400 audit(1787959006.683:262): avc: denied { setopt } for pid=1064 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.373019][ T1024] cgroup: fork rejected by pids controller in /syz2 [ 50.516342][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 50.698783][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 50.710856][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 50.728971][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.030665][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 51.042113][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 51.063677][ T9] usb 4-1: USB disconnect, device number 7 [ 51.246811][ T36] audit: type=1400 audit(1787959007.653:263): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.546372][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 51.712502][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 51.736492][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.756351][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.784946][ T9] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 51.791187][ T36] audit: type=1400 audit(1787959008.193:264): avc: denied { getopt } for pid=1104 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.797123][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.844876][ T9] usb 3-1: Product: syz [ 51.849400][ T9] usb 3-1: Manufacturer: syz [ 51.854033][ T9] usb 3-1: SerialNumber: syz [ 51.875322][ T9] usb 3-1: selecting invalid altsetting 1 [ 51.881515][ T9] usb 3-1: unit 6 not found! [ 51.978795][ T1112] syzkaller1: entered promiscuous mode [ 51.996433][ T1112] syzkaller1: entered allmulticast mode [ 52.824239][ T959] syz.0.188 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 53.118725][ T959] CPU: 1 UID: 0 PID: 959 Comm: syz.0.188 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 53.118757][ T959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.118770][ T959] Call Trace: [ 53.118776][ T959] [ 53.118784][ T959] __dump_stack+0x21/0x30 [ 53.118817][ T959] dump_stack_lvl+0x140/0x1c0 [ 53.118843][ T959] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.118870][ T959] ? ___ratelimit+0x41c/0x5c0 [ 53.118889][ T959] ? __kasan_check_write+0x18/0x20 [ 53.118910][ T959] dump_stack+0x19/0x20 [ 53.118935][ T959] dump_header+0xd9/0x460 [ 53.118963][ T959] oom_kill_process+0x35d/0x640 [ 53.118987][ T959] out_of_memory+0x5d1/0xa20 [ 53.119010][ T959] ? __cfi_out_of_memory+0x10/0x10 [ 53.119031][ T959] ? mutex_lock_killable+0x97/0x1d0 [ 53.119053][ T959] ? __cfi_mutex_lock_killable+0x10/0x10 [ 53.119077][ T959] mem_cgroup_out_of_memory+0x2c5/0x390 [ 53.119099][ T959] ? css_next_descendant_pre+0x1ec/0x210 [ 53.119129][ T959] ? __kasan_check_write+0x18/0x20 [ 53.119167][ T959] ? drain_obj_stock+0xec0/0xec0 [ 53.119190][ T959] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 53.119213][ T959] try_charge_memcg+0x925/0xe10 [ 53.119241][ T959] ? static_key_count+0x45/0x70 [ 53.119268][ T959] ? __cfi_gfp_zone+0x1/0x10 [ 53.119292][ T959] ? __cfi_try_charge_memcg+0x10/0x10 [ 53.119321][ T959] ? __alloc_pages_noprof+0x35a/0x7e0 [ 53.119352][ T959] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 53.119383][ T959] __mem_cgroup_charge+0xfc/0x420 [ 53.119403][ T959] ? folio_add_lru+0x116/0x400 [ 53.119429][ T959] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 53.119452][ T959] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 53.119480][ T959] ? shmem_replace_folio+0x9b0/0x9b0 [ 53.119505][ T959] ? shmem_huge_global_enabled+0x2da/0x360 [ 53.119530][ T959] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 53.119561][ T959] ? __kasan_check_write+0x18/0x20 [ 53.119581][ T959] ? _raw_spin_lock+0x92/0x120 [ 53.119611][ T959] shmem_get_folio_gfp+0x5cd/0x12e0 [ 53.119638][ T959] ? shmem_get_folio+0xc0/0xc0 [ 53.119659][ T959] ? follow_page_pte+0x8fb/0xba0 [ 53.119688][ T959] ? inode_to_bdi+0x6d/0x100 [ 53.119719][ T959] shmem_write_begin+0xf4/0x260 [ 53.119744][ T959] generic_perform_write+0x32c/0x970 [ 53.119775][ T959] ? __cfi_generic_perform_write+0x10/0x10 [ 53.119803][ T959] ? generic_write_checks_count+0x426/0x540 [ 53.119832][ T959] ? file_update_time+0xa3/0x210 [ 53.119862][ T959] shmem_file_write_iter+0x105/0x130 [ 53.119891][ T959] __kernel_write_iter+0x462/0x900 [ 53.119914][ T959] ? __cfi___kernel_write_iter+0x10/0x10 [ 53.119935][ T959] ? get_dump_page+0x165/0x220 [ 53.119963][ T959] ? __asan_memset+0x39/0x50 [ 53.119984][ T959] ? iov_iter_bvec+0xc0/0x180 [ 53.120013][ T959] dump_user_range+0xb8b/0xe60 [ 53.120038][ T959] ? __cfi_dump_user_range+0x10/0x10 [ 53.120061][ T959] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 53.120093][ T959] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 53.120131][ T959] ? elf_core_dump+0x23cf/0x3840 [ 53.120158][ T959] elf_core_dump+0x2d61/0x3840 [ 53.120206][ T959] ? __cfi_elf_core_dump+0x10/0x10 [ 53.120235][ T959] ? mas_next_slot+0xf01/0xfd0 [ 53.120286][ T959] ? dump_interrupted+0xf0/0xf0 [ 53.120307][ T959] ? filp_open+0x199/0x1f0 [ 53.120335][ T959] ? 0xffffffffff600000 [ 53.120352][ T959] do_coredump+0x20d2/0x3050 [ 53.120376][ T959] ? __cfi_do_coredump+0x10/0x10 [ 53.120397][ T959] ? asm_exc_page_fault+0x2b/0x30 [ 53.120428][ T959] ? __kasan_slab_free+0x6a/0x80 [ 53.120454][ T959] ? get_signal+0xa2a/0x1490 [ 53.120481][ T959] get_signal+0x11bf/0x1490 [ 53.120512][ T959] arch_do_signal_or_restart+0xbc/0x700 [ 53.120533][ T959] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 53.120556][ T959] ? __kasan_check_read+0x15/0x20 [ 53.120577][ T959] irqentry_exit_to_user_mode+0x4d/0xb0 [ 53.120603][ T959] irqentry_exit+0x16/0x60 [ 53.120627][ T959] exc_page_fault+0x65/0xc0 [ 53.120652][ T959] asm_exc_page_fault+0x2b/0x30 [ 53.120674][ T959] RIP: 0033:0x7f7a60f9e161 [ 53.120699][ T959] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 53.120716][ T959] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 53.120735][ T959] RAX: 0000000000000000 RBX: 00007f7a61226090 RCX: 00007f7a60f9e159 [ 53.120749][ T959] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000000 [ 53.120762][ T959] RBP: 00007f7a61035024 R08: 0000000000000000 R09: 0000000000000000 [ 53.120775][ T959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.120788][ T959] R13: 00007f7a61226128 R14: 00007f7a61226090 R15: 00007ffef5c0eff8 [ 53.120806][ T959] [ 53.125780][ T959] memory: usage 307200kB, limit 307200kB, failcnt 19080 [ 53.618120][ T959] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 53.626076][ T959] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 53.688892][ T959] Memory cgroup stats for /syz0: [ 53.689078][ T959] cache 314540032 [ 53.697768][ T959] rss 32768 [ 53.700896][ T959] rss_huge 0 [ 53.704150][ T959] shmem 314531840 [ 53.707991][ T959] mapped_file 0 [ 53.711627][ T959] dirty 0 [ 53.714658][ T959] writeback 0 [ 53.717986][ T959] workingset_refault_anon 0 [ 53.722502][ T959] workingset_refault_file 2 [ 53.727062][ T959] swap 127995904 [ 53.730636][ T959] swapcached 0 [ 53.734024][ T959] pgpgin 120702 [ 53.737539][ T959] pgpgout 44413 [ 53.741003][ T959] pgfault 21324 [ 53.744474][ T959] pgmajfault 11 [ 53.750449][ T959] inactive_anon 145719296 [ 53.754838][ T959] active_anon 168845312 [ 53.769223][ T959] inactive_file 8192 [ 53.773287][ T959] active_file 0 [ 53.776794][ T959] unevictable 0 [ 53.780338][ T959] hierarchical_memory_limit 314572800 [ 53.785796][ T959] hierarchical_memsw_limit 9223372036854771712 [ 53.793228][ T959] total_cache 314540032 [ 53.797616][ T959] total_rss 32768 [ 53.801329][ T959] total_rss_huge 0 [ 53.805113][ T959] total_shmem 314531840 [ 53.810011][ T959] total_mapped_file 0 [ 53.814103][ T959] total_dirty 0 [ 53.817818][ T959] total_writeback 0 [ 53.821799][ T959] total_workingset_refault_anon 0 [ 53.827143][ T959] total_workingset_refault_file 2 [ 53.832250][ T959] total_swap 127995904 [ 53.836597][ T959] total_swapcached 0 [ 53.840608][ T959] total_pgpgin 120702 [ 53.844661][ T959] total_pgpgout 44413 [ 53.849077][ T959] total_pgfault 21324 [ 53.853157][ T959] total_pgmajfault 11 [ 53.857439][ T959] total_inactive_anon 145719296 [ 53.862359][ T959] total_active_anon 168845312 [ 53.867364][ T959] total_inactive_file 8192 [ 53.871841][ T959] total_active_file 0 [ 53.876084][ T959] total_unevictable 0 [ 53.880893][ T959] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.188,pid=945,uid=0 [ 53.895903][ T959] Memory cgroup out of memory: Killed process 945 (syz.0.188) total-vm:90792kB, anon-rss:1252kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 53.946317][ T63] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 54.137738][ T63] usb 2-1: unable to get BOS descriptor or descriptor too short [ 54.149646][ T63] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 54.171124][ T63] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 54.180477][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.196374][ T63] usb 2-1: Product: syz [ 54.200619][ T63] usb 2-1: Manufacturer: syz [ 54.207095][ T63] usb 2-1: SerialNumber: syz [ 54.224163][ T981] syz.0.188 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 54.324973][ T981] CPU: 1 UID: 0 PID: 981 Comm: syz.0.188 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 54.325021][ T981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.325036][ T981] Call Trace: [ 54.325044][ T981] [ 54.325053][ T981] __dump_stack+0x21/0x30 [ 54.325092][ T981] dump_stack_lvl+0x140/0x1c0 [ 54.325125][ T981] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.325158][ T981] ? ___ratelimit+0x41c/0x5c0 [ 54.325183][ T981] ? __kasan_check_write+0x18/0x20 [ 54.325208][ T981] dump_stack+0x19/0x20 [ 54.325238][ T981] dump_header+0xd9/0x460 [ 54.325270][ T981] oom_kill_process+0x35d/0x640 [ 54.325300][ T981] out_of_memory+0x5d1/0xa20 [ 54.325327][ T981] ? __cfi_out_of_memory+0x10/0x10 [ 54.325354][ T981] ? mutex_lock_killable+0x97/0x1d0 [ 54.325381][ T981] ? __cfi_mutex_lock_killable+0x10/0x10 [ 54.325411][ T981] mem_cgroup_out_of_memory+0x2c5/0x390 [ 54.325438][ T981] ? css_next_descendant_pre+0x1ec/0x210 [ 54.325467][ T981] ? __kasan_check_write+0x18/0x20 [ 54.325491][ T981] ? drain_obj_stock+0xec0/0xec0 [ 54.325518][ T981] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 54.325544][ T981] try_charge_memcg+0x925/0xe10 [ 54.325577][ T981] ? static_key_count+0x45/0x70 [ 54.325610][ T981] ? __cfi_gfp_zone+0x1/0x10 [ 54.325635][ T981] ? __cfi_try_charge_memcg+0x10/0x10 [ 54.325670][ T981] ? __alloc_pages_noprof+0x35a/0x7e0 [ 54.325705][ T981] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 54.325742][ T981] __mem_cgroup_charge+0xfc/0x420 [ 54.325764][ T981] ? cgroup_rstat_updated+0x144/0x800 [ 54.325790][ T981] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 54.325815][ T981] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 54.325849][ T981] ? shmem_replace_folio+0x9b0/0x9b0 [ 54.325879][ T981] ? shmem_huge_global_enabled+0x2da/0x360 [ 54.325907][ T981] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 54.325935][ T981] ? __switch_to+0xc6b/0x1320 [ 54.325981][ T981] shmem_get_folio_gfp+0x5cd/0x12e0 [ 54.326014][ T981] ? __cfi___switch_to+0x10/0x10 [ 54.326049][ T981] ? shmem_get_folio+0xc0/0xc0 [ 54.326074][ T981] ? __kasan_check_write+0x18/0x20 [ 54.326097][ T981] ? inode_to_bdi+0x6d/0x100 [ 54.326130][ T981] shmem_write_begin+0xf4/0x260 [ 54.326159][ T981] generic_perform_write+0x32c/0x970 [ 54.326190][ T981] ? inode_update_timestamps+0x4d1/0x6e0 [ 54.326226][ T981] ? __cfi_generic_perform_write+0x10/0x10 [ 54.326257][ T981] ? generic_write_checks_count+0x426/0x540 [ 54.326293][ T981] ? mnt_get_write_access_file+0x1af/0x3b0 [ 54.326325][ T981] ? mnt_put_write_access_file+0xc2/0x100 [ 54.326357][ T981] ? file_update_time+0x1de/0x210 [ 54.326391][ T981] shmem_file_write_iter+0x105/0x130 [ 54.326424][ T981] __kernel_write_iter+0x462/0x900 [ 54.326449][ T981] ? __cfi___kernel_write_iter+0x10/0x10 [ 54.326475][ T981] ? __asan_memset+0x39/0x50 [ 54.326498][ T981] ? iov_iter_bvec+0xc0/0x180 [ 54.326531][ T981] dump_user_range+0xb8b/0xe60 [ 54.326559][ T981] ? __cfi_dump_user_range+0x10/0x10 [ 54.326584][ T981] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 54.326620][ T981] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 54.326654][ T981] ? elf_core_dump+0x23cf/0x3840 [ 54.326685][ T981] elf_core_dump+0x2d61/0x3840 [ 54.326718][ T981] ? __cfi_elf_core_dump+0x10/0x10 [ 54.326747][ T981] ? mas_next_slot+0xf01/0xfd0 [ 54.326781][ T981] ? dump_interrupted+0xf0/0xf0 [ 54.326804][ T981] ? filp_open+0x199/0x1f0 [ 54.326836][ T981] ? 0xffffffffff600000 [ 54.326855][ T981] do_coredump+0x20d2/0x3050 [ 54.326883][ T981] ? __cfi_do_coredump+0x10/0x10 [ 54.326905][ T981] ? asm_exc_page_fault+0x2b/0x30 [ 54.326938][ T981] ? __kasan_slab_free+0x6a/0x80 [ 54.326967][ T981] ? get_signal+0xa2a/0x1490 [ 54.327004][ T981] get_signal+0x11bf/0x1490 [ 54.327039][ T981] arch_do_signal_or_restart+0xbc/0x700 [ 54.327061][ T981] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 54.327087][ T981] ? __kasan_check_read+0x15/0x20 [ 54.327110][ T981] irqentry_exit_to_user_mode+0x4d/0xb0 [ 54.327141][ T981] irqentry_exit+0x16/0x60 [ 54.327167][ T981] exc_page_fault+0x65/0xc0 [ 54.327193][ T981] asm_exc_page_fault+0x2b/0x30 [ 54.327217][ T981] RIP: 0033:0x7f7a60f9e161 [ 54.327235][ T981] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 54.327255][ T981] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 54.327275][ T981] RAX: 0000000000000000 RBX: 00007f7a61226090 RCX: 00007f7a60f9e159 [ 54.327292][ T981] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000000 [ 54.327306][ T981] RBP: 00007f7a61035024 R08: 0000000000000000 R09: 0000000000000000 [ 54.327321][ T981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.327335][ T981] R13: 00007f7a61226128 R14: 00007f7a61226090 R15: 00007ffef5c0eff8 [ 54.327366][ T981] [ 54.899809][ T981] memory: usage 307200kB, limit 307200kB, failcnt 20690 [ 54.906867][ T981] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 54.914775][ T981] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 54.925514][ T981] Memory cgroup stats for /syz0: [ 54.925673][ T981] cache 314474496 [ 54.934360][ T981] rss 32768 [ 54.937506][ T981] rss_huge 0 [ 54.940714][ T981] shmem 314339328 [ 54.953822][ T9] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 54.973104][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 54.996417][ T9] usb 3-1: USB disconnect, device number 7 [ 55.015034][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.094536][ T981] mapped_file 106496 [ 55.111880][ T981] dirty 0 [ 55.114875][ T981] writeback 0 [ 55.210361][ T36] audit: type=1400 audit(1787959011.623:265): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.292577][ T981] workingset_refault_anon 0 [ 55.297177][ T981] workingset_refault_file 43 [ 55.301826][ T981] swap 127995904 [ 55.305388][ T981] swapcached 0 [ 55.308936][ T36] audit: type=1400 audit(1787959011.713:266): avc: denied { execute } for pid=1146 comm="syz.3.240" name="file0" dev="tmpfs" ino=354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.331146][ T981] pgpgin 123999 [ 55.334779][ T981] pgpgout 47710 [ 55.338331][ T981] pgfault 21533 [ 55.341803][ T981] pgmajfault 15 [ 55.345279][ T981] inactive_anon 176713728 [ 55.352494][ T36] audit: type=1400 audit(1787959011.713:267): avc: denied { execute_no_trans } for pid=1146 comm="syz.3.240" path="/63/file0" dev="tmpfs" ino=354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.377288][ T981] active_anon 136409088 [ 55.381474][ T981] inactive_file 28672 [ 55.385466][ T981] active_file 0 [ 55.389247][ T981] unevictable 0 [ 55.392728][ T981] hierarchical_memory_limit 314572800 [ 55.449674][ T981] hierarchical_memsw_limit 9223372036854771712 [ 55.507331][ T981] total_cache 314474496 [ 55.513906][ T981] total_rss 32768 [ 55.517650][ T981] total_rss_huge 0 [ 55.522306][ T981] total_shmem 314339328 [ 55.529882][ T981] total_mapped_file 106496 [ 55.534462][ T981] total_dirty 0 [ 55.577459][ T981] total_writeback 0 [ 55.592056][ T981] total_workingset_refault_anon 0 [ 55.606218][ T1169] netlink: 60 bytes leftover after parsing attributes in process `syz.2.251'. [ 55.615173][ T981] total_workingset_refault_file 43 [ 55.635020][ T981] total_swap 127995904 [ 55.639212][ T981] total_swapcached 0 [ 55.649162][ T981] total_pgpgin 123999 [ 55.653287][ T981] total_pgpgout 47710 [ 55.657694][ T981] total_pgfault 21533 [ 55.661929][ T981] total_pgmajfault 15 [ 55.665957][ T981] total_inactive_anon 176713728 [ 55.681014][ T981] total_active_anon 136409088 [ 55.685735][ T981] total_inactive_file 28672 [ 55.696696][ T981] total_active_file 0 [ 55.705185][ T981] total_unevictable 0 [ 55.711764][ T981] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.188,pid=941,uid=0 [ 55.726691][ T981] Memory cgroup out of memory: Killed process 941 (syz.0.188) total-vm:90528kB, anon-rss:1244kB, file-rss:53568kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 55.873295][ T36] audit: type=1400 audit(1787959012.283:268): avc: denied { create } for pid=1179 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.136415][ T948] syz.0.188 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 56.237144][ T948] CPU: 1 UID: 0 PID: 948 Comm: syz.0.188 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 56.237182][ T948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.237197][ T948] Call Trace: [ 56.237204][ T948] [ 56.237213][ T948] __dump_stack+0x21/0x30 [ 56.237250][ T948] dump_stack_lvl+0x140/0x1c0 [ 56.237281][ T948] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.237313][ T948] ? ___ratelimit+0x41c/0x5c0 [ 56.237336][ T948] ? __kasan_check_write+0x18/0x20 [ 56.237360][ T948] dump_stack+0x19/0x20 [ 56.237390][ T948] dump_header+0xd9/0x460 [ 56.237420][ T948] oom_kill_process+0x35d/0x640 [ 56.237449][ T948] out_of_memory+0x5d1/0xa20 [ 56.237475][ T948] ? __cfi_out_of_memory+0x10/0x10 [ 56.237500][ T948] ? mutex_lock_killable+0x97/0x1d0 [ 56.237527][ T948] ? __cfi_mutex_lock_killable+0x10/0x10 [ 56.237555][ T948] mem_cgroup_out_of_memory+0x2c5/0x390 [ 56.237581][ T948] ? css_next_descendant_pre+0x1ec/0x210 [ 56.237620][ T948] ? __kasan_check_write+0x18/0x20 [ 56.237642][ T948] ? drain_obj_stock+0xec0/0xec0 [ 56.237666][ T948] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 56.237689][ T948] try_charge_memcg+0x925/0xe10 [ 56.237717][ T948] ? static_key_count+0x45/0x70 [ 56.237746][ T948] ? __cfi_gfp_zone+0x1/0x10 [ 56.237769][ T948] ? __cfi_try_charge_memcg+0x10/0x10 [ 56.237808][ T948] ? __alloc_pages_noprof+0x35a/0x7e0 [ 56.237840][ T948] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 56.237872][ T948] __mem_cgroup_charge+0xfc/0x420 [ 56.237893][ T948] ? folio_add_lru+0x116/0x400 [ 56.237920][ T948] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 56.237942][ T948] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 56.237972][ T948] ? shmem_replace_folio+0x9b0/0x9b0 [ 56.238005][ T948] ? shmem_huge_global_enabled+0x2da/0x360 [ 56.238031][ T948] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 56.238062][ T948] ? __kasan_check_write+0x18/0x20 [ 56.238084][ T948] ? _raw_spin_lock+0x92/0x120 [ 56.238114][ T948] shmem_get_folio_gfp+0x5cd/0x12e0 [ 56.238142][ T948] ? shmem_get_folio+0xc0/0xc0 [ 56.238164][ T948] ? follow_page_pte+0x8fb/0xba0 [ 56.238197][ T948] ? inode_to_bdi+0x6d/0x100 [ 56.238228][ T948] shmem_write_begin+0xf4/0x260 [ 56.238255][ T948] generic_perform_write+0x32c/0x970 [ 56.238287][ T948] ? __cfi_generic_perform_write+0x10/0x10 [ 56.238316][ T948] ? generic_write_checks_count+0x426/0x540 [ 56.238346][ T948] ? file_update_time+0xa3/0x210 [ 56.238376][ T948] shmem_file_write_iter+0x105/0x130 [ 56.238405][ T948] __kernel_write_iter+0x462/0x900 [ 56.238428][ T948] ? __cfi___kernel_write_iter+0x10/0x10 [ 56.238449][ T948] ? get_dump_page+0x165/0x220 [ 56.238478][ T948] ? __asan_memset+0x39/0x50 [ 56.238498][ T948] ? iov_iter_bvec+0xc0/0x180 [ 56.238528][ T948] dump_user_range+0xb8b/0xe60 [ 56.238553][ T948] ? __cfi_dump_user_range+0x10/0x10 [ 56.238578][ T948] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 56.238611][ T948] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 56.238644][ T948] ? elf_core_dump+0x23cf/0x3840 [ 56.238672][ T948] elf_core_dump+0x2d61/0x3840 [ 56.238703][ T948] ? __cfi_elf_core_dump+0x10/0x10 [ 56.238729][ T948] ? mas_next_slot+0xf01/0xfd0 [ 56.238761][ T948] ? dump_interrupted+0xf0/0xf0 [ 56.238782][ T948] ? filp_open+0x199/0x1f0 [ 56.238818][ T948] ? 0xffffffffff600000 [ 56.238836][ T948] do_coredump+0x20d2/0x3050 [ 56.238861][ T948] ? __cfi_do_coredump+0x10/0x10 [ 56.238881][ T948] ? asm_exc_page_fault+0x2b/0x30 [ 56.238912][ T948] ? __kasan_slab_free+0x6a/0x80 [ 56.238939][ T948] ? get_signal+0xa2a/0x1490 [ 56.238968][ T948] get_signal+0x11bf/0x1490 [ 56.238999][ T948] arch_do_signal_or_restart+0xbc/0x700 [ 56.239022][ T948] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 56.239045][ T948] ? __kasan_check_read+0x15/0x20 [ 56.239066][ T948] irqentry_exit_to_user_mode+0x4d/0xb0 [ 56.239093][ T948] irqentry_exit+0x16/0x60 [ 56.239119][ T948] exc_page_fault+0x65/0xc0 [ 56.239143][ T948] asm_exc_page_fault+0x2b/0x30 [ 56.239165][ T948] RIP: 0033:0x7f7a60f9e161 [ 56.239183][ T948] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 56.239201][ T948] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 56.239220][ T948] RAX: 0000000000000000 RBX: 00007f7a61226090 RCX: 00007f7a60f9e159 [ 56.239235][ T948] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000000 [ 56.239249][ T948] RBP: 00007f7a61035024 R08: 0000000000000000 R09: 0000000000000000 [ 56.239262][ T948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.239275][ T948] R13: 00007f7a61226128 R14: 00007f7a61226090 R15: 00007ffef5c0eff8 [ 56.239294][ T948] [ 56.308951][ T948] memory: usage 297844kB, limit 307200kB, failcnt 24092 [ 56.674174][ T36] audit: type=1326 audit(1787959013.073:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1175 comm="syz.2.261" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04c99e159 code=0x7fc00000 [ 56.757551][ T63] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 56.766368][ T63] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 56.774846][ T63] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 56.796416][ T63] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 56.805878][ T63] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 56.821831][ T36] audit: type=1400 audit(1787959013.233:270): avc: denied { read } for pid=1205 comm="syz.2.268" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.826379][ T63] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 56.866315][ T63] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 56.878369][ T63] usb 2-1: failed to enable PITCH for EP 0x82 [ 56.889107][ T36] audit: type=1400 audit(1787959013.233:271): avc: denied { open } for pid=1205 comm="syz.2.268" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.926201][ T36] audit: type=1400 audit(1787959013.333:272): avc: denied { create } for pid=1209 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.947826][ T63] usb 2-1: USB disconnect, device number 4 [ 56.967534][ T1212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.270'. [ 56.993982][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.096351][ T948] memory+swap: usage 430900kB, limit 9007199254740988kB, failcnt 0 [ 57.116326][ T948] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 57.153576][ T948] Memory cgroup stats for /syz0: [ 57.153762][ T948] cache 311484416 [ 57.165411][ T36] audit: type=1400 audit(1787959013.573:273): avc: denied { create } for pid=1231 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 57.186385][ T948] rss 32768 [ 57.189526][ T948] rss_huge 0 [ 57.192736][ T948] shmem 310882304 [ 57.373138][ T948] mapped_file 548864 [ 57.387940][ T36] audit: type=1400 audit(1787959013.773:274): avc: denied { connect } for pid=1247 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.453448][ T948] dirty 0 [ 57.485294][ T948] writeback 196608 [ 57.505363][ T948] workingset_refault_anon 6 [ 57.511671][ T948] workingset_refault_file 1095 [ 57.516681][ T948] swap 127778816 [ 57.520286][ T948] swapcached 217088 [ 57.524144][ T948] pgpgin 139429 [ 57.527905][ T948] pgpgout 63758 [ 57.531439][ T948] pgfault 22433 [ 57.534943][ T948] pgmajfault 34 [ 57.538780][ T948] inactive_anon 146268160 [ 57.543176][ T948] active_anon 163663872 [ 57.581643][ T948] inactive_file 0 [ 57.593380][ T948] active_file 49152 [ 57.609828][ T948] unevictable 0 [ 57.621648][ T948] hierarchical_memory_limit 314572800 [ 57.638455][ T948] hierarchical_memsw_limit 9223372036854771712 [ 57.663324][ T948] total_cache 311484416 [ 57.675853][ T948] total_rss 32768 [ 57.688908][ T948] total_rss_huge 0 [ 57.700039][ T948] total_shmem 310882304 [ 57.715729][ T948] total_mapped_file 548864 [ 57.723965][ T948] total_dirty 0 [ 57.733734][ T948] total_writeback 196608 [ 57.743180][ T948] total_workingset_refault_anon 6 [ 57.748263][ T948] total_workingset_refault_file 1095 [ 57.753602][ T948] total_swap 127778816 [ 57.757704][ T948] total_swapcached 217088 [ 57.762049][ T948] total_pgpgin 139429 [ 57.766091][ T948] total_pgpgout 63758 [ 57.770105][ T948] total_pgfault 22433 [ 57.778443][ T948] total_pgmajfault 34 [ 57.782455][ T948] total_inactive_anon 146268160 [ 57.787590][ T948] total_active_anon 163663872 [ 57.792649][ T948] total_inactive_file 0 [ 57.801744][ T948] total_active_file 49152 [ 57.806398][ T948] total_unevictable 0 [ 57.810537][ T948] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.188,pid=954,uid=0 [ 57.825973][ T948] Memory cgroup out of memory: Killed process 954 (syz.0.188) total-vm:90792kB, anon-rss:1252kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 58.273304][ T946] syz.0.188 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 58.321822][ T1309] FAULT_INJECTION: forcing a failure. [ 58.321822][ T1309] name failslab, interval 1, probability 0, space 0, times 0 [ 58.356334][ T1309] CPU: 0 UID: 0 PID: 1309 Comm: syz.2.316 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 58.356367][ T1309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.356399][ T1309] Call Trace: [ 58.356407][ T1309] [ 58.356415][ T1309] __dump_stack+0x21/0x30 [ 58.356471][ T1309] dump_stack_lvl+0x140/0x1c0 [ 58.356503][ T1309] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.356535][ T1309] ? futex_wake+0x666/0x950 [ 58.356567][ T1309] dump_stack+0x19/0x20 [ 58.356594][ T1309] should_fail_ex+0x3c2/0x510 [ 58.356617][ T1309] should_failslab+0xac/0x100 [ 58.356651][ T1309] __kmalloc_cache_noprof+0x41/0x470 [ 58.356675][ T1309] ? io_ring_ctx_alloc+0x61/0x1dc0 [ 58.356697][ T1309] io_ring_ctx_alloc+0x61/0x1dc0 [ 58.356717][ T1309] ? do_futex+0x32a/0x510 [ 58.356746][ T1309] io_uring_create+0x2e0/0x13f0 [ 58.356768][ T1309] ? __kasan_check_write+0x18/0x20 [ 58.356790][ T1309] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 58.356822][ T1309] ? __se_sys_futex+0x13c/0x320 [ 58.356870][ T1309] ? __x64_sys_io_uring_setup+0x80/0x80 [ 58.356906][ T1309] ? __kasan_check_write+0x18/0x20 [ 58.356931][ T1309] __x64_sys_io_uring_setup+0x5f/0x80 [ 58.356965][ T1309] x64_sys_call+0x22c0/0x2ee0 [ 58.356990][ T1309] do_syscall_64+0x57/0xf0 [ 58.357024][ T1309] ? clear_bhb_loop+0x50/0xa0 [ 58.357053][ T1309] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.357081][ T1309] RIP: 0033:0x7fc04c99e159 [ 58.357108][ T1309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.357130][ T1309] RSP: 002b:00007fc04b3f6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 58.357156][ T1309] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007fc04c99e159 [ 58.357175][ T1309] RDX: 0000200000000280 RSI: 0000200000000040 RDI: 000000000000000d [ 58.357191][ T1309] RBP: 00007fc04ca35024 R08: 0000000000000000 R09: 0000000000000000 [ 58.357208][ T1309] R10: 0000200000000300 R11: 0000000000000206 R12: 0000200000000280 [ 58.357225][ T1309] R13: 0000200000000300 R14: 0000200000000100 R15: 00007ffe68e519b8 [ 58.357246][ T1309] [ 58.440544][ T946] CPU: 1 UID: 0 PID: 946 Comm: syz.0.188 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 58.440639][ T946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.440679][ T946] Call Trace: [ 58.440698][ T946] [ 58.440719][ T946] __dump_stack+0x21/0x30 [ 58.440818][ T946] dump_stack_lvl+0x140/0x1c0 [ 58.440897][ T946] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.441001][ T946] ? ___ratelimit+0x41c/0x5c0 [ 58.441069][ T946] ? __kasan_check_write+0x18/0x20 [ 58.441141][ T946] dump_stack+0x19/0x20 [ 58.441240][ T946] dump_header+0xd9/0x460 [ 58.441320][ T946] oom_kill_process+0x35d/0x640 [ 58.441389][ T946] out_of_memory+0x5d1/0xa20 [ 58.441458][ T946] ? __cfi_out_of_memory+0x10/0x10 [ 58.441520][ T946] ? mutex_lock_killable+0x97/0x1d0 [ 58.441603][ T946] ? __cfi_mutex_lock_killable+0x10/0x10 [ 58.441662][ T946] mem_cgroup_out_of_memory+0x2c5/0x390 [ 58.441755][ T946] ? css_next_descendant_pre+0x1ec/0x210 [ 58.441859][ T946] ? __kasan_check_write+0x18/0x20 [ 58.441919][ T946] ? drain_obj_stock+0xec0/0xec0 [ 58.441991][ T946] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 58.442053][ T946] try_charge_memcg+0x925/0xe10 [ 58.442142][ T946] ? static_key_count+0x45/0x70 [ 58.442224][ T946] ? __cfi_gfp_zone+0x1/0x10 [ 58.442300][ T946] ? __cfi_try_charge_memcg+0x10/0x10 [ 58.442381][ T946] ? __alloc_pages_noprof+0x35a/0x7e0 [ 58.442463][ T946] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 58.442559][ T946] __mem_cgroup_charge+0xfc/0x420 [ 58.442613][ T946] ? folio_add_lru+0x116/0x400 [ 58.442672][ T946] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 58.442740][ T946] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 58.442821][ T946] ? shmem_replace_folio+0x9b0/0x9b0 [ 58.442891][ T946] ? shmem_huge_global_enabled+0x2da/0x360 [ 58.442961][ T946] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 58.443030][ T946] ? __kasan_check_write+0x18/0x20 [ 58.443098][ T946] ? _raw_spin_lock+0x92/0x120 [ 58.443215][ T946] shmem_get_folio_gfp+0x5cd/0x12e0 [ 58.443299][ T946] ? shmem_get_folio+0xc0/0xc0 [ 58.443369][ T946] ? follow_page_pte+0x8fb/0xba0 [ 58.443455][ T946] ? inode_to_bdi+0x6d/0x100 [ 58.443537][ T946] shmem_write_begin+0xf4/0x260 [ 58.443614][ T946] generic_perform_write+0x32c/0x970 [ 58.443700][ T946] ? __cfi_generic_perform_write+0x10/0x10 [ 58.443780][ T946] ? generic_write_checks_count+0x426/0x540 [ 58.443859][ T946] ? file_update_time+0xa3/0x210 [ 58.443941][ T946] shmem_file_write_iter+0x105/0x130 [ 58.444027][ T946] __kernel_write_iter+0x462/0x900 [ 58.444088][ T946] ? __cfi___kernel_write_iter+0x10/0x10 [ 58.444155][ T946] ? get_dump_page+0x165/0x220 [ 58.444235][ T946] ? __asan_memset+0x39/0x50 [ 58.444294][ T946] ? iov_iter_bvec+0xc0/0x180 [ 58.444373][ T946] dump_user_range+0xb8b/0xe60 [ 58.444464][ T946] ? __cfi_dump_user_range+0x10/0x10 [ 58.444585][ T946] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 58.444747][ T946] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 58.444821][ T946] ? elf_core_dump+0x23cf/0x3840 [ 58.444894][ T946] elf_core_dump+0x2d61/0x3840 [ 58.444981][ T946] ? __cfi_elf_core_dump+0x10/0x10 [ 58.445059][ T946] ? mas_next_slot+0xf01/0xfd0 [ 58.445152][ T946] ? dump_interrupted+0xf0/0xf0 [ 58.445219][ T946] ? filp_open+0x199/0x1f0 [ 58.445298][ T946] ? 0xffffffffff600000 [ 58.445349][ T946] do_coredump+0x20d2/0x3050 [ 58.445419][ T946] ? __cfi_do_coredump+0x10/0x10 [ 58.445478][ T946] ? asm_exc_page_fault+0x2b/0x30 [ 58.445566][ T946] ? __kasan_slab_free+0x6a/0x80 [ 58.445632][ T946] ? get_signal+0xa2a/0x1490 [ 58.445720][ T946] get_signal+0x11bf/0x1490 [ 58.445809][ T946] arch_do_signal_or_restart+0xbc/0x700 [ 58.445869][ T946] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 58.445939][ T946] ? __kasan_check_read+0x15/0x20 [ 58.445998][ T946] irqentry_exit_to_user_mode+0x4d/0xb0 [ 58.446101][ T946] irqentry_exit+0x16/0x60 [ 58.446193][ T946] exc_page_fault+0x65/0xc0 [ 58.446262][ T946] asm_exc_page_fault+0x2b/0x30 [ 58.446322][ T946] RIP: 0033:0x7f7a60f9e161 [ 58.446379][ T946] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 58.446429][ T946] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 58.446490][ T946] RAX: 0000000000000000 RBX: 00007f7a61226090 RCX: 00007f7a60f9e159 [ 58.446531][ T946] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000000 [ 58.446570][ T946] RBP: 00007f7a61035024 R08: 0000000000000000 R09: 0000000000000000 [ 58.446610][ T946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.446644][ T946] R13: 00007f7a61226128 R14: 00007f7a61226090 R15: 00007ffef5c0eff8 [ 58.446681][ T946] [ 58.519334][ T946] memory: usage 306176kB, limit 307200kB, failcnt 26330 [ 59.052560][ T946] memory+swap: usage 417284kB, limit 9007199254740988kB, failcnt 0 [ 59.065643][ T946] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 59.073279][ T946] Memory cgroup stats for /syz0: [ 59.073512][ T946] cache 299274240 [ 59.241766][ T946] rss 28672 [ 59.275355][ T946] rss_huge 0 [ 59.311684][ T946] shmem 297279488 [ 59.344524][ T946] mapped_file 1851392 [ 59.401799][ T946] dirty 0 [ 59.491766][ T1353] can0: slcan on ttyS3. [ 59.530083][ T1353] can0 (unregistered): slcan off ttyS3. [ 59.602329][ T946] writeback 4096 [ 59.701273][ T946] workingset_refault_anon 6 [ 59.705811][ T946] workingset_refault_file 2547 [ 59.710631][ T946] swap 127975424 [ 59.715294][ T946] swapcached 20480 [ 59.719103][ T946] pgpgin 145846 [ 59.722632][ T946] pgpgout 73280 [ 59.726107][ T946] pgfault 22808 [ 59.729625][ T946] pgmajfault 64 [ 59.733110][ T946] inactive_anon 165044224 [ 59.737471][ T946] active_anon 131346432 [ 59.741677][ T946] inactive_file 0 [ 59.745330][ T946] active_file 1994752 [ 59.749357][ T946] unevictable 0 [ 59.752841][ T946] hierarchical_memory_limit 314572800 [ 59.758308][ T946] hierarchical_memsw_limit 9223372036854771712 [ 59.764479][ T946] total_cache 299274240 [ 59.791284][ T946] total_rss 28672 [ 59.794953][ T946] total_rss_huge 0 [ 59.843082][ T946] total_shmem 297279488 [ 59.869448][ T946] total_mapped_file 1851392 [ 59.874067][ T946] total_dirty 0 [ 59.886341][ T946] total_writeback 4096 [ 59.890429][ T946] total_workingset_refault_anon 6 [ 59.895550][ T946] total_workingset_refault_file 2547 [ 59.916319][ T946] total_swap 127975424 [ 59.920409][ T946] total_swapcached 20480 [ 59.924668][ T946] total_pgpgin 145846 [ 59.936357][ T946] total_pgpgout 73280 [ 59.940359][ T946] total_pgfault 22808 [ 59.944345][ T946] total_pgmajfault 64 [ 59.959955][ T946] total_inactive_anon 165044224 [ 59.964834][ T946] total_active_anon 131346432 [ 59.972732][ T946] total_inactive_file 0 [ 59.976955][ T946] total_active_file 1994752 [ 59.981476][ T946] total_unevictable 0 [ 59.985479][ T946] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.188,pid=942,uid=0 [ 60.033337][ T946] Memory cgroup out of memory: Killed process 942 (syz.0.188) total-vm:90792kB, anon-rss:1252kB, file-rss:53632kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 60.204986][ T1369] FAULT_INJECTION: forcing a failure. [ 60.204986][ T1369] name failslab, interval 1, probability 0, space 0, times 0 [ 60.240988][ T1369] CPU: 0 UID: 0 PID: 1369 Comm: syz.1.342 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 60.241021][ T1369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.241035][ T1369] Call Trace: [ 60.241042][ T1369] [ 60.241050][ T1369] __dump_stack+0x21/0x30 [ 60.241086][ T1369] dump_stack_lvl+0x140/0x1c0 [ 60.241116][ T1369] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.241144][ T1369] ? __kasan_check_read+0x15/0x20 [ 60.241166][ T1369] ? futex_wake+0x627/0x950 [ 60.241187][ T1369] dump_stack+0x19/0x20 [ 60.241216][ T1369] should_fail_ex+0x3c2/0x510 [ 60.241242][ T1369] should_failslab+0xac/0x100 [ 60.241269][ T1369] __kmalloc_cache_noprof+0x41/0x470 [ 60.241292][ T1369] ? io_ring_ctx_alloc+0x61/0x1dc0 [ 60.241314][ T1369] io_ring_ctx_alloc+0x61/0x1dc0 [ 60.241335][ T1369] ? do_futex+0x32a/0x510 [ 60.241364][ T1369] io_uring_create+0x2e0/0x13f0 [ 60.241384][ T1369] ? __kasan_check_write+0x18/0x20 [ 60.241406][ T1369] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 60.241437][ T1369] ? __se_sys_futex+0x13c/0x320 [ 60.241465][ T1369] ? __x64_sys_io_uring_setup+0x80/0x80 [ 60.241497][ T1369] ? __kasan_check_write+0x18/0x20 [ 60.241519][ T1369] __x64_sys_io_uring_setup+0x5f/0x80 [ 60.241567][ T1369] x64_sys_call+0x22c0/0x2ee0 [ 60.241588][ T1369] do_syscall_64+0x57/0xf0 [ 60.241630][ T1369] ? clear_bhb_loop+0x50/0xa0 [ 60.241658][ T1369] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.241683][ T1369] RIP: 0033:0x7fe4e3b9e159 [ 60.241702][ T1369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.241723][ T1369] RSP: 002b:00007fe4e4a97fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 60.241746][ T1369] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007fe4e3b9e159 [ 60.241764][ T1369] RDX: 0000200000000280 RSI: 0000200000000040 RDI: 000000000000000d [ 60.241780][ T1369] RBP: 00007fe4e3c35024 R08: 0000000000000000 R09: 0000000000000000 [ 60.241795][ T1369] R10: 0000200000000300 R11: 0000000000000206 R12: 0000200000000280 [ 60.241811][ T1369] R13: 0000200000000300 R14: 0000200000000100 R15: 00007ffd361d3878 [ 60.241831][ T1369] [ 60.566741][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 60.566759][ T36] audit: type=1400 audit(1787959016.983:295): avc: denied { append } for pid=1388 comm="syz.1.351" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 60.777180][ T1401] FAULT_INJECTION: forcing a failure. [ 60.777180][ T1401] name failslab, interval 1, probability 0, space 0, times 0 [ 60.796381][ T1401] CPU: 0 UID: 0 PID: 1401 Comm: syz.1.357 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 60.796424][ T1401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.796439][ T1401] Call Trace: [ 60.796464][ T1401] [ 60.796474][ T1401] __dump_stack+0x21/0x30 [ 60.796514][ T1401] dump_stack_lvl+0x140/0x1c0 [ 60.796548][ T1401] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.796583][ T1401] dump_stack+0x19/0x20 [ 60.796614][ T1401] should_fail_ex+0x3c2/0x510 [ 60.796642][ T1401] should_failslab+0xac/0x100 [ 60.796683][ T1401] kmem_cache_alloc_noprof+0x42/0x410 [ 60.796706][ T1401] ? security_inode_alloc+0x51/0x230 [ 60.796735][ T1401] ? __cfi_make_kgid+0x10/0x10 [ 60.796763][ T1401] security_inode_alloc+0x51/0x230 [ 60.796792][ T1401] inode_init_always_gfp+0x756/0x9e0 [ 60.796820][ T1401] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 60.796848][ T1401] alloc_inode+0xc5/0x270 [ 60.796875][ T1401] ? __cfi__raw_spin_lock+0x10/0x10 [ 60.796908][ T1401] new_inode+0x25/0x1e0 [ 60.796936][ T1401] shmem_get_inode+0x352/0xc10 [ 60.796965][ T1401] shmem_mknod+0x63/0x200 [ 60.796996][ T1401] shmem_mkdir+0x3b/0x80 [ 60.797026][ T1401] vfs_mkdir+0x591/0x810 [ 60.797059][ T1401] do_mkdirat+0x240/0x530 [ 60.797089][ T1401] ? __cfi_do_mkdirat+0x10/0x10 [ 60.797120][ T1401] ? __kasan_check_write+0x18/0x20 [ 60.797142][ T1401] ? getname_flags+0x203/0x6b0 [ 60.797166][ T1401] ? __kasan_check_write+0x18/0x20 [ 60.797190][ T1401] __x64_sys_mkdirat+0x8b/0xa0 [ 60.797224][ T1401] x64_sys_call+0x2ba8/0x2ee0 [ 60.797245][ T1401] do_syscall_64+0x57/0xf0 [ 60.797278][ T1401] ? clear_bhb_loop+0x50/0xa0 [ 60.797308][ T1401] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.797332][ T1401] RIP: 0033:0x7fe4e3b9e159 [ 60.797352][ T1401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.797373][ T1401] RSP: 002b:00007fe4e4a98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 60.797409][ T1401] RAX: ffffffffffffffda RBX: 00007fe4e3e25fa0 RCX: 00007fe4e3b9e159 [ 60.797447][ T1401] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 60.797465][ T1401] RBP: 00007fe4e3c35024 R08: 0000000000000000 R09: 0000000000000000 [ 60.797482][ T1401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.797498][ T1401] R13: 00007fe4e3e26038 R14: 00007fe4e3e25fa0 R15: 00007ffd361d3878 [ 60.797520][ T1401] [ 61.432621][ T36] audit: type=1400 audit(1787959017.833:296): avc: denied { read } for pid=1427 comm="syz.3.368" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.502311][ T36] audit: type=1400 audit(1787959017.833:297): avc: denied { open } for pid=1427 comm="syz.3.368" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.985614][ T36] audit: type=1400 audit(1787959018.393:298): avc: denied { write } for pid=1483 comm="syz.3.395" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.051316][ T36] audit: type=1400 audit(1787959018.423:299): avc: denied { ioctl } for pid=1483 comm="syz.3.395" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.096652][ T1490] ------------[ cut here ]------------ [ 62.102172][ T1490] WARNING: CPU: 1 PID: 1490 at crypto/rsa-pkcs1pad.c:560 pkcs1pad_verify+0x4e4/0x700 [ 62.111701][ T1490] Modules linked in: [ 62.115625][ T1490] CPU: 1 UID: 0 PID: 1490 Comm: syz.2.398 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 62.127169][ T1490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.137516][ T1490] RIP: 0010:pkcs1pad_verify+0x4e4/0x700 [ 62.143291][ T1490] Code: 11 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 80 05 26 03 cc e8 5a 35 06 ff 0f 0b b8 ea ff ff ff eb de e8 4c 35 06 ff <0f> 0b b8 ea ff ff ff eb d0 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 5d [ 62.163008][ T1490] RSP: 0018:ffffc9000e0f7728 EFLAGS: 00010283 [ 62.169212][ T1490] RAX: ffffffff82813bf4 RBX: ffff888106248600 RCX: 0000000000080000 [ 62.177264][ T1490] RDX: ffffc90002a66000 RSI: 0000000000000a57 RDI: 0000000000000a58 [ 62.185290][ T1490] RBP: ffffc9000e0f7770 R08: ffffc9000e0f782f R09: 0000000000000000 [ 62.193340][ T1490] R10: 0000000000000000 R11: ffffffff82813710 R12: ffff888130a3ba88 [ 62.201362][ T1490] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888106248638 [ 62.209392][ T1490] FS: 00007fc04b3f76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 62.218469][ T1490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.225120][ T1490] CR2: 000000110c278e4d CR3: 00000001313da000 CR4: 00000000003526b0 [ 62.233182][ T1490] Call Trace: [ 62.236504][ T1490] [ 62.239466][ T1490] ? __asan_memcpy+0x5a/0x80 [ 62.244097][ T1490] crypto_sig_verify+0x1cd/0x260 [ 62.249114][ T1490] ? __cfi_crypto_sig_verify+0x10/0x10 [ 62.254615][ T1490] ? crypto_sig_set_pubkey+0x9a/0xb0 [ 62.260479][ T1490] public_key_verify_signature+0x654/0xa40 [ 62.266557][ T1490] ? __cfi_public_key_verify_signature+0x10/0x10 [ 62.272935][ T1490] ? keyctl_pkey_params_get+0x3b8/0x4c0 [ 62.278558][ T1490] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 62.285109][ T1490] public_key_verify_signature_2+0x47/0x60 [ 62.291004][ T1490] verify_signature+0xf0/0x120 [ 62.295828][ T1490] asymmetric_key_verify_signature+0x160/0x200 [ 62.302071][ T1490] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 62.308828][ T1490] ? should_fail+0xf/0x20 [ 62.313203][ T1490] ? __kasan_check_write+0x18/0x20 [ 62.318382][ T1490] ? _copy_from_user+0x87/0xa0 [ 62.323191][ T1490] ? memdup_user+0xb1/0x170 [ 62.327757][ T1490] keyctl_pkey_verify+0x200/0x290 [ 62.332862][ T1490] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 62.338560][ T1490] ? fdget+0x188/0x1e0 [ 62.342666][ T1490] ? __sys_sendmmsg+0x34c/0x490 [ 62.347588][ T1490] __se_sys_keyctl+0x743/0xe40 [ 62.352385][ T1490] ? __x64_sys_keyctl+0xf0/0xf0 [ 62.357312][ T1490] ? __cfi_do_futex+0x10/0x10 [ 62.362030][ T1490] ? __se_sys_futex+0x13c/0x320 [ 62.366953][ T1490] ? xfd_validate_state+0x68/0x140 [ 62.372110][ T1490] ? __kasan_check_write+0x18/0x20 [ 62.377285][ T1490] ? fpregs_restore_userregs+0x11c/0x260 [ 62.382948][ T1490] __x64_sys_keyctl+0xc3/0xf0 [ 62.387693][ T1490] x64_sys_call+0x996/0x2ee0 [ 62.392318][ T1490] do_syscall_64+0x57/0xf0 [ 62.396809][ T1490] ? clear_bhb_loop+0x50/0xa0 [ 62.401520][ T1490] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.407483][ T1490] RIP: 0033:0x7fc04c99e159 [ 62.411921][ T1490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.431605][ T1490] RSP: 002b:00007fc04b3f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 62.440072][ T1490] RAX: ffffffffffffffda RBX: 00007fc04cc25fa0 RCX: 00007fc04c99e159 [ 62.448107][ T1490] RDX: 0000200000000780 RSI: 0000200000000000 RDI: 000000000000001c [ 62.456113][ T1490] RBP: 00007fc04ca35024 R08: 0000200000000440 R09: 0000000000000000 [ 62.464141][ T1490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.472170][ T1490] R13: 00007fc04cc26038 R14: 00007fc04cc25fa0 R15: 00007ffe68e519b8 [ 62.480295][ T1490] [ 62.483354][ T1490] ---[ end trace 0000000000000000 ]--- [ 62.577703][ T956] syz.0.188 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 62.599948][ T956] CPU: 0 UID: 0 PID: 956 Comm: syz.0.188 Tainted: G W syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 62.599989][ T956] Tainted: [W]=WARN [ 62.599997][ T956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.600011][ T956] Call Trace: [ 62.600018][ T956] [ 62.600026][ T956] __dump_stack+0x21/0x30 [ 62.600064][ T956] dump_stack_lvl+0x140/0x1c0 [ 62.600095][ T956] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.600127][ T956] ? ___ratelimit+0x41c/0x5c0 [ 62.600150][ T956] ? __kasan_check_write+0x18/0x20 [ 62.600175][ T956] dump_stack+0x19/0x20 [ 62.600204][ T956] dump_header+0xd9/0x460 [ 62.600263][ T956] oom_kill_process+0x35d/0x640 [ 62.600292][ T956] out_of_memory+0x5d1/0xa20 [ 62.600319][ T956] ? __cfi_out_of_memory+0x10/0x10 [ 62.600344][ T956] ? mutex_lock_killable+0x97/0x1d0 [ 62.600371][ T956] ? __cfi_mutex_lock_killable+0x10/0x10 [ 62.600400][ T956] mem_cgroup_out_of_memory+0x2c5/0x390 [ 62.600425][ T956] ? css_next_descendant_pre+0x1ec/0x210 [ 62.600454][ T956] ? __kasan_check_write+0x18/0x20 [ 62.600478][ T956] ? drain_obj_stock+0xec0/0xec0 [ 62.600504][ T956] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 62.600529][ T956] try_charge_memcg+0x925/0xe10 [ 62.600561][ T956] ? static_key_count+0x45/0x70 [ 62.600595][ T956] ? __cfi_gfp_zone+0x1/0x10 [ 62.600620][ T956] ? __cfi_try_charge_memcg+0x10/0x10 [ 62.600664][ T956] ? __alloc_pages_noprof+0x35a/0x7e0 [ 62.600695][ T956] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 62.600724][ T956] __mem_cgroup_charge+0xfc/0x420 [ 62.600742][ T956] ? folio_add_lru+0x116/0x400 [ 62.600764][ T956] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 62.600783][ T956] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 62.600808][ T956] ? shmem_replace_folio+0x9b0/0x9b0 [ 62.600830][ T956] ? shmem_huge_global_enabled+0x2da/0x360 [ 62.600851][ T956] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 62.600872][ T956] ? __kasan_check_write+0x18/0x20 [ 62.600890][ T956] ? _raw_spin_lock+0x92/0x120 [ 62.600915][ T956] shmem_get_folio_gfp+0x5cd/0x12e0 [ 62.600938][ T956] ? shmem_get_folio+0xc0/0xc0 [ 62.600957][ T956] ? follow_page_pte+0x8fb/0xba0 [ 62.600982][ T956] ? inode_to_bdi+0x6d/0x100 [ 62.601009][ T956] shmem_write_begin+0xf4/0x260 [ 62.601031][ T956] generic_perform_write+0x32c/0x970 [ 62.601058][ T956] ? __cfi_generic_perform_write+0x10/0x10 [ 62.601082][ T956] ? generic_write_checks_count+0x426/0x540 [ 62.601108][ T956] ? file_update_time+0xa3/0x210 [ 62.601134][ T956] shmem_file_write_iter+0x105/0x130 [ 62.601159][ T956] __kernel_write_iter+0x462/0x900 [ 62.601179][ T956] ? __cfi___kernel_write_iter+0x10/0x10 [ 62.601197][ T956] ? get_dump_page+0x165/0x220 [ 62.601221][ T956] ? __asan_memset+0x39/0x50 [ 62.601245][ T956] ? iov_iter_bvec+0xc0/0x180 [ 62.601270][ T956] dump_user_range+0xb8b/0xe60 [ 62.601291][ T956] ? __cfi_dump_user_range+0x10/0x10 [ 62.601310][ T956] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 62.601338][ T956] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 62.601365][ T956] ? elf_core_dump+0x23cf/0x3840 [ 62.601388][ T956] elf_core_dump+0x2d61/0x3840 [ 62.601413][ T956] ? __cfi_elf_core_dump+0x10/0x10 [ 62.601435][ T956] ? mas_next_slot+0xf01/0xfd0 [ 62.601462][ T956] ? dump_interrupted+0xf0/0xf0 [ 62.601479][ T956] ? filp_open+0x199/0x1f0 [ 62.601504][ T956] ? 0xffffffffff600000 [ 62.601518][ T956] do_coredump+0x20d2/0x3050 [ 62.601539][ T956] ? __cfi_do_coredump+0x10/0x10 [ 62.601556][ T956] ? asm_exc_page_fault+0x2b/0x30 [ 62.601582][ T956] ? __kasan_slab_free+0x6a/0x80 [ 62.601604][ T956] ? get_signal+0xa2a/0x1490 [ 62.601628][ T956] get_signal+0x11bf/0x1490 [ 62.601654][ T956] arch_do_signal_or_restart+0xbc/0x700 [ 62.601672][ T956] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 62.601691][ T956] ? __kasan_check_read+0x15/0x20 [ 62.601709][ T956] irqentry_exit_to_user_mode+0x4d/0xb0 [ 62.601732][ T956] irqentry_exit+0x16/0x60 [ 62.601754][ T956] exc_page_fault+0x65/0xc0 [ 62.601774][ T956] asm_exc_page_fault+0x2b/0x30 [ 62.601792][ T956] RIP: 0033:0x7f7a60f9e161 [ 62.601806][ T956] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 62.601822][ T956] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 62.601839][ T956] RAX: 0000000000000000 RBX: 00007f7a61226090 RCX: 00007f7a60f9e159 [ 62.601852][ T956] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000000 [ 62.601863][ T956] RBP: 00007f7a61035024 R08: 0000000000000000 R09: 0000000000000000 [ 62.601874][ T956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.601886][ T956] R13: 00007f7a61226128 R14: 00007f7a61226090 R15: 00007ffef5c0eff8 [ 62.601901][ T956] [ 62.601946][ T956] memory: usage 307200kB, limit 307200kB, failcnt 32929 [ 63.076504][ T956] memory+swap: usage 432172kB, limit 9007199254740988kB, failcnt 0 [ 63.084504][ T956] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 63.091416][ T956] Memory cgroup stats for /syz0: [ 63.091560][ T956] cache 314359808 [ 63.100208][ T956] rss 212992 [ 63.103413][ T956] rss_huge 0 [ 63.106690][ T956] shmem 314351616 [ 63.110365][ T956] mapped_file 0 [ 63.113830][ T956] dirty 0 [ 63.116783][ T956] writeback 0 [ 63.120066][ T956] workingset_refault_anon 14 [ 63.124642][ T956] workingset_refault_file 4985 [ 63.129429][ T956] swap 127971328 [ 63.132993][ T956] swapcached 24576 [ 63.136735][ T956] pgpgin 161536 [ 63.140226][ T956] pgpgout 85247 [ 63.143762][ T956] pgfault 23936 [ 63.147248][ T956] pgmajfault 106 [ 63.150802][ T956] inactive_anon 148627456 [ 63.155120][ T956] active_anon 165937152 [ 63.159305][ T956] inactive_file 8192 [ 63.163241][ T956] active_file 0 [ 63.166723][ T956] unevictable 0 [ 63.170181][ T956] hierarchical_memory_limit 314572800 [ 63.175538][ T956] hierarchical_memsw_limit 9223372036854771712 [ 63.181712][ T956] total_cache 314359808 [ 63.185876][ T956] total_rss 212992 [ 63.189635][ T956] total_rss_huge 0 [ 63.193367][ T956] total_shmem 314351616 [ 63.197549][ T956] total_mapped_file 0 [ 63.201540][ T956] total_dirty 0 [ 63.204986][ T956] total_writeback 0 [ 63.208838][ T956] total_workingset_refault_anon 14 [ 63.213958][ T956] total_workingset_refault_file 4985 [ 63.219290][ T956] total_swap 127971328 [ 63.223361][ T956] total_swapcached 24576 [ 63.227615][ T956] total_pgpgin 161536 [ 63.231598][ T956] total_pgpgout 85247 [ 63.235565][ T956] total_pgfault 23936 [ 63.239567][ T956] total_pgmajfault 106 [ 63.243636][ T956] total_inactive_anon 148627456 [ 63.248513][ T956] total_active_anon 165937152 [ 63.253201][ T956] total_inactive_file 8192 [ 63.257628][ T956] total_active_file 0 [ 63.261608][ T956] total_unevictable 0 [ 63.265579][ T956] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.188,pid=966,uid=0 [ 63.280264][ T956] Memory cgroup out of memory: Killed process 966 (syz.0.188) total-vm:90792kB, anon-rss:1252kB, file-rss:53564kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 63.431002][ T979] syz.0.188 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 63.457818][ T979] CPU: 0 UID: 0 PID: 979 Comm: syz.0.188 Tainted: G W syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 63.457855][ T979] Tainted: [W]=WARN [ 63.457862][ T979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.457876][ T979] Call Trace: [ 63.457882][ T979] [ 63.457891][ T979] __dump_stack+0x21/0x30 [ 63.457925][ T979] dump_stack_lvl+0x140/0x1c0 [ 63.457959][ T979] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.457988][ T979] ? ___ratelimit+0x41c/0x5c0 [ 63.458009][ T979] ? __kasan_check_write+0x18/0x20 [ 63.458032][ T979] dump_stack+0x19/0x20 [ 63.458058][ T979] dump_header+0xd9/0x460 [ 63.458086][ T979] oom_kill_process+0x35d/0x640 [ 63.458110][ T979] out_of_memory+0x5d1/0xa20 [ 63.458133][ T979] ? __cfi_out_of_memory+0x10/0x10 [ 63.458157][ T979] ? mutex_lock_killable+0x97/0x1d0 [ 63.458190][ T979] ? __cfi_mutex_lock_killable+0x10/0x10 [ 63.458217][ T979] mem_cgroup_out_of_memory+0x2c5/0x390 [ 63.458242][ T979] ? css_next_descendant_pre+0x1ec/0x210 [ 63.458269][ T979] ? __kasan_check_write+0x18/0x20 [ 63.458291][ T979] ? drain_obj_stock+0xec0/0xec0 [ 63.458316][ T979] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 63.458339][ T979] try_charge_memcg+0x925/0xe10 [ 63.458369][ T979] ? static_key_count+0x45/0x70 [ 63.458398][ T979] ? __cfi_gfp_zone+0x1/0x10 [ 63.458422][ T979] ? __cfi_try_charge_memcg+0x10/0x10 [ 63.458463][ T979] ? __alloc_pages_noprof+0x35a/0x7e0 [ 63.458492][ T979] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 63.458522][ T979] __mem_cgroup_charge+0xfc/0x420 [ 63.458542][ T979] ? folio_add_lru+0x116/0x400 [ 63.458568][ T979] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 63.458590][ T979] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 63.458617][ T979] ? shmem_replace_folio+0x9b0/0x9b0 [ 63.458642][ T979] ? shmem_huge_global_enabled+0x2da/0x360 [ 63.458667][ T979] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 63.458690][ T979] ? __kasan_check_write+0x18/0x20 [ 63.458710][ T979] ? _raw_spin_lock+0x92/0x120 [ 63.458739][ T979] shmem_get_folio_gfp+0x5cd/0x12e0 [ 63.458781][ T979] ? shmem_get_folio+0xc0/0xc0 [ 63.458804][ T979] ? follow_page_pte+0x8fb/0xba0 [ 63.458834][ T979] ? inode_to_bdi+0x6d/0x100 [ 63.458866][ T979] shmem_write_begin+0xf4/0x260 [ 63.458892][ T979] generic_perform_write+0x32c/0x970 [ 63.458924][ T979] ? __cfi_generic_perform_write+0x10/0x10 [ 63.458953][ T979] ? generic_write_checks_count+0x426/0x540 [ 63.458984][ T979] ? file_update_time+0xa3/0x210 [ 63.459020][ T979] shmem_file_write_iter+0x105/0x130 [ 63.459051][ T979] __kernel_write_iter+0x462/0x900 [ 63.459074][ T979] ? __cfi___kernel_write_iter+0x10/0x10 [ 63.459097][ T979] ? get_dump_page+0x165/0x220 [ 63.459125][ T979] ? __asan_memset+0x39/0x50 [ 63.459146][ T979] ? iov_iter_bvec+0xc0/0x180 [ 63.459182][ T979] dump_user_range+0xb8b/0xe60 [ 63.459208][ T979] ? __cfi_dump_user_range+0x10/0x10 [ 63.459232][ T979] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 63.459266][ T979] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 63.459299][ T979] ? elf_core_dump+0x23cf/0x3840 [ 63.459327][ T979] elf_core_dump+0x2d61/0x3840 [ 63.459357][ T979] ? __cfi_elf_core_dump+0x10/0x10 [ 63.459385][ T979] ? mas_next_slot+0xf01/0xfd0 [ 63.459427][ T979] ? dump_interrupted+0xf0/0xf0 [ 63.459447][ T979] ? filp_open+0x199/0x1f0 [ 63.459475][ T979] ? 0xffffffffff600000 [ 63.459491][ T979] do_coredump+0x20d2/0x3050 [ 63.459515][ T979] ? __cfi_do_coredump+0x10/0x10 [ 63.459534][ T979] ? asm_exc_page_fault+0x2b/0x30 [ 63.459564][ T979] ? __kasan_slab_free+0x6a/0x80 [ 63.459589][ T979] ? get_signal+0xa2a/0x1490 [ 63.459617][ T979] get_signal+0x11bf/0x1490 [ 63.459647][ T979] arch_do_signal_or_restart+0xbc/0x700 [ 63.459667][ T979] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 63.459689][ T979] ? __kasan_check_read+0x15/0x20 [ 63.459710][ T979] irqentry_exit_to_user_mode+0x4d/0xb0 [ 63.459736][ T979] irqentry_exit+0x16/0x60 [ 63.459760][ T979] exc_page_fault+0x65/0xc0 [ 63.459783][ T979] asm_exc_page_fault+0x2b/0x30 [ 63.459804][ T979] RIP: 0033:0x7f7a60f9e161 [ 63.459837][ T979] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 63.459854][ T979] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 63.459873][ T979] RAX: 0000000000000000 RBX: 00007f7a61226090 RCX: 00007f7a60f9e159 [ 63.459888][ T979] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000000 [ 63.459900][ T979] RBP: 00007f7a61035024 R08: 0000000000000000 R09: 0000000000000000 [ 63.459914][ T979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.459927][ T979] R13: 00007f7a61226128 R14: 00007f7a61226090 R15: 00007ffef5c0eff8 [ 63.459946][ T979] [ 63.459953][ T979] memory: usage 307064kB, limit 307200kB, failcnt 33722 [ 63.935085][ T979] memory+swap: usage 420512kB, limit 9007199254740988kB, failcnt 0 [ 63.943078][ T979] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 63.949999][ T979] Memory cgroup stats for /syz0: [ 63.950733][ T979] cache 302305280 [ 63.959397][ T979] rss 217088 [ 63.962650][ T979] rss_huge 0 [ 63.966042][ T979] shmem 301666304 [ 63.969724][ T979] mapped_file 524288 [ 63.973626][ T979] dirty 4096 [ 63.976863][ T979] writeback 0 [ 63.980169][ T979] workingset_refault_anon 14 [ 63.984760][ T979] workingset_refault_file 5219 [ 63.989600][ T979] swap 127950848 [ 63.993205][ T979] swapcached 24576 [ 64.006308][ T979] pgpgin 163354 [ 64.009787][ T979] pgpgout 89976 [ 64.013278][ T979] pgfault 24015 [ 64.032826][ T979] pgmajfault 109 [ 64.061197][ T979] inactive_anon 131522560 [ 64.065557][ T979] active_anon 169041920 [ 64.096351][ T979] inactive_file 0 [ 64.100011][ T979] active_file 638976 [ 64.103917][ T979] unevictable 0 [ 64.126303][ T979] hierarchical_memory_limit 314572800 [ 64.131712][ T979] hierarchical_memsw_limit 9223372036854771712 [ 64.172855][ T979] total_cache 302305280 [ 64.199350][ T979] total_rss 217088 [ 64.203127][ T979] total_rss_huge 0 [ 64.230893][ T979] total_shmem 301666304 [ 64.235085][ T979] total_mapped_file 524288 [ 64.275107][ T979] total_dirty 4096 [ 64.283550][ T979] total_writeback 0 [ 64.295852][ T979] total_workingset_refault_anon 14 [ 64.320511][ T979] total_workingset_refault_file 5219 [ 64.325835][ T979] total_swap 127950848 [ 64.351265][ T979] total_swapcached 24576 [ 64.355540][ T979] total_pgpgin 163354 [ 64.360517][ T979] total_pgpgout 89976 [ 64.364547][ T979] total_pgfault 24015 [ 64.368583][ T979] total_pgmajfault 109 [ 64.372660][ T979] total_inactive_anon 131522560 [ 64.377599][ T979] total_active_anon 169041920 [ 64.382298][ T979] total_inactive_file 0 [ 64.386491][ T979] total_active_file 638976 [ 64.390935][ T979] total_unevictable 0 [ 64.394906][ T979] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.188,pid=953,uid=0 [ 64.409589][ T979] Memory cgroup out of memory: Killed process 953 (syz.0.188) total-vm:90792kB, anon-rss:1252kB, file-rss:53436kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 64.513733][ T978] syz.0.188 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 64.556347][ T978] CPU: 0 UID: 0 PID: 978 Comm: syz.0.188 Tainted: G W syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 64.556385][ T978] Tainted: [W]=WARN [ 64.556393][ T978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.556405][ T978] Call Trace: [ 64.556411][ T978] [ 64.556427][ T978] __dump_stack+0x21/0x30 [ 64.556463][ T978] dump_stack_lvl+0x140/0x1c0 [ 64.556492][ T978] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.556521][ T978] ? ___ratelimit+0x41c/0x5c0 [ 64.556542][ T978] ? __kasan_check_write+0x18/0x20 [ 64.556565][ T978] dump_stack+0x19/0x20 [ 64.556593][ T978] dump_header+0xd9/0x460 [ 64.556622][ T978] oom_kill_process+0x35d/0x640 [ 64.556648][ T978] out_of_memory+0x5d1/0xa20 [ 64.556673][ T978] ? __cfi_out_of_memory+0x10/0x10 [ 64.556696][ T978] ? mutex_lock_killable+0x97/0x1d0 [ 64.556726][ T978] ? __cfi_mutex_lock_killable+0x10/0x10 [ 64.556753][ T978] mem_cgroup_out_of_memory+0x2c5/0x390 [ 64.556777][ T978] ? css_next_descendant_pre+0x1ec/0x210 [ 64.556804][ T978] ? __kasan_check_write+0x18/0x20 [ 64.556824][ T978] ? drain_obj_stock+0xec0/0xec0 [ 64.556847][ T978] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 64.556869][ T978] try_charge_memcg+0x925/0xe10 [ 64.556897][ T978] ? static_key_count+0x45/0x70 [ 64.556925][ T978] ? __cfi_gfp_zone+0x1/0x10 [ 64.556949][ T978] ? __cfi_try_charge_memcg+0x10/0x10 [ 64.556980][ T978] ? __alloc_pages_noprof+0x35a/0x7e0 [ 64.557011][ T978] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 64.557043][ T978] __mem_cgroup_charge+0xfc/0x420 [ 64.557064][ T978] ? folio_add_lru+0x116/0x400 [ 64.557112][ T978] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 64.557135][ T978] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 64.557165][ T978] ? shmem_replace_folio+0x9b0/0x9b0 [ 64.557192][ T978] ? shmem_huge_global_enabled+0x2da/0x360 [ 64.557217][ T978] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 64.557242][ T978] ? __kasan_check_write+0x18/0x20 [ 64.557262][ T978] ? _raw_spin_lock+0x92/0x120 [ 64.557292][ T978] shmem_get_folio_gfp+0x5cd/0x12e0 [ 64.557319][ T978] ? shmem_get_folio+0xc0/0xc0 [ 64.557340][ T978] ? follow_page_pte+0x8fb/0xba0 [ 64.557370][ T978] ? inode_to_bdi+0x6d/0x100 [ 64.557400][ T978] shmem_write_begin+0xf4/0x260 [ 64.557426][ T978] generic_perform_write+0x32c/0x970 [ 64.557459][ T978] ? __cfi_generic_perform_write+0x10/0x10 [ 64.557487][ T978] ? generic_write_checks_count+0x426/0x540 [ 64.557518][ T978] ? file_update_time+0xa3/0x210 [ 64.557550][ T978] shmem_file_write_iter+0x105/0x130 [ 64.557579][ T978] __kernel_write_iter+0x462/0x900 [ 64.557603][ T978] ? __cfi___kernel_write_iter+0x10/0x10 [ 64.557625][ T978] ? get_dump_page+0x165/0x220 [ 64.557654][ T978] ? __asan_memset+0x39/0x50 [ 64.557675][ T978] ? iov_iter_bvec+0xc0/0x180 [ 64.557704][ T978] dump_user_range+0xb8b/0xe60 [ 64.557729][ T978] ? __cfi_dump_user_range+0x10/0x10 [ 64.557752][ T978] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 64.557784][ T978] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 64.557815][ T978] ? elf_core_dump+0x23cf/0x3840 [ 64.557842][ T978] elf_core_dump+0x2d61/0x3840 [ 64.557872][ T978] ? __cfi_elf_core_dump+0x10/0x10 [ 64.557899][ T978] ? mas_next_slot+0xf01/0xfd0 [ 64.557931][ T978] ? dump_interrupted+0xf0/0xf0 [ 64.557952][ T978] ? filp_open+0x199/0x1f0 [ 64.557981][ T978] ? 0xffffffffff600000 [ 64.557998][ T978] do_coredump+0x20d2/0x3050 [ 64.558022][ T978] ? __cfi_do_coredump+0x10/0x10 [ 64.558042][ T978] ? asm_exc_page_fault+0x2b/0x30 [ 64.558080][ T978] ? __kasan_slab_free+0x6a/0x80 [ 64.558106][ T978] ? get_signal+0xa2a/0x1490 [ 64.558136][ T978] get_signal+0x11bf/0x1490 [ 64.558167][ T978] arch_do_signal_or_restart+0xbc/0x700 [ 64.558188][ T978] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 64.558210][ T978] ? __kasan_check_read+0x15/0x20 [ 64.558231][ T978] irqentry_exit_to_user_mode+0x4d/0xb0 [ 64.558258][ T978] irqentry_exit+0x16/0x60 [ 64.558283][ T978] exc_page_fault+0x65/0xc0 [ 64.558307][ T978] asm_exc_page_fault+0x2b/0x30 [ 64.558329][ T978] RIP: 0033:0x7f7a60f9e161 [ 64.558346][ T978] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 64.558363][ T978] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 64.558381][ T978] RAX: 0000000000000000 RBX: 00007f7a61226090 RCX: 00007f7a60f9e159 [ 64.558396][ T978] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000000 [ 64.558408][ T978] RBP: 00007f7a61035024 R08: 0000000000000000 R09: 0000000000000000 [ 64.558422][ T978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.558434][ T978] R13: 00007f7a61226128 R14: 00007f7a61226090 R15: 00007ffef5c0eff8 [ 64.558452][ T978] [ 64.558460][ T978] memory: usage 301640kB, limit 307200kB, failcnt 35155 [ 65.033306][ T978] memory+swap: usage 405880kB, limit 9007199254740988kB, failcnt 0 [ 65.041301][ T978] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 65.048199][ T978] Memory cgroup stats for /syz0: [ 65.049231][ T978] cache 286953472 [ 65.057890][ T978] rss 61440 [ 65.061033][ T978] rss_huge 0 [ 65.064254][ T978] shmem 286941184 [ 65.067920][ T978] mapped_file 0 [ 65.071384][ T978] dirty 0 [ 65.074330][ T978] writeback 0 [ 65.077650][ T978] workingset_refault_anon 14 [ 65.082252][ T978] workingset_refault_file 6596 [ 65.087051][ T978] swap 127971328 [ 65.090614][ T978] swapcached 24576 [ 65.094356][ T978] pgpgin 172592 [ 65.097927][ T978] pgpgout 103031 [ 65.101479][ T978] pgfault 24198 [ 65.104946][ T978] pgmajfault 119 [ 65.108666][ T978] inactive_anon 92672000 [ 65.112922][ T978] active_anon 193806336 [ 65.117258][ T978] inactive_file 0 [ 65.120902][ T978] active_file 12288 [ 65.124718][ T978] unevictable 0 [ 65.128373][ T978] hierarchical_memory_limit 314572800 [ 65.133761][ T978] hierarchical_memsw_limit 9223372036854771712 [ 65.146312][ T978] total_cache 286953472 [ 65.150489][ T978] total_rss 61440 [ 65.154129][ T978] total_rss_huge 0 [ 65.159010][ T978] total_shmem 286941184 [ 65.176302][ T978] total_mapped_file 0 [ 65.180308][ T978] total_dirty 0 [ 65.183786][ T978] total_writeback 0 [ 65.196333][ T978] total_workingset_refault_anon 14 [ 65.201470][ T978] total_workingset_refault_file 6596 [ 65.216408][ T978] total_swap 127971328 [ 65.220502][ T978] total_swapcached 24576 [ 65.224761][ T978] total_pgpgin 172592 [ 65.242035][ T978] total_pgpgout 103031 [ 65.246137][ T978] total_pgfault 24198 [ 65.256319][ T978] total_pgmajfault 119 [ 65.260414][ T978] total_inactive_anon 92672000 [ 65.265188][ T978] total_active_anon 193806336 [ 65.286301][ T978] total_inactive_file 0 [ 65.290497][ T978] total_active_file 12288 [ 65.294845][ T978] total_unevictable 0 [ 65.316336][ T978] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.188,pid=956,uid=0 [ 65.346313][ T978] Memory cgroup out of memory: Killed process 956 (syz.0.188) total-vm:90792kB, anon-rss:1252kB, file-rss:53644kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 65.759536][ T946] syz.0.188 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 65.819168][ T946] CPU: 0 UID: 0 PID: 946 Comm: syz.0.188 Tainted: G W syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 65.819210][ T946] Tainted: [W]=WARN [ 65.819219][ T946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.819233][ T946] Call Trace: [ 65.819239][ T946] [ 65.819248][ T946] __dump_stack+0x21/0x30 [ 65.819285][ T946] dump_stack_lvl+0x140/0x1c0 [ 65.819316][ T946] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.819366][ T946] ? ___ratelimit+0x41c/0x5c0 [ 65.819390][ T946] ? __kasan_check_write+0x18/0x20 [ 65.819416][ T946] dump_stack+0x19/0x20 [ 65.819447][ T946] dump_header+0xd9/0x460 [ 65.819479][ T946] oom_kill_process+0x35d/0x640 [ 65.819508][ T946] out_of_memory+0x5d1/0xa20 [ 65.819534][ T946] ? __cfi_out_of_memory+0x10/0x10 [ 65.819561][ T946] ? mutex_lock_killable+0x97/0x1d0 [ 65.819589][ T946] ? __cfi_mutex_lock_killable+0x10/0x10 [ 65.819618][ T946] mem_cgroup_out_of_memory+0x2c5/0x390 [ 65.819645][ T946] ? css_next_descendant_pre+0x1ec/0x210 [ 65.819674][ T946] ? __kasan_check_write+0x18/0x20 [ 65.819698][ T946] ? drain_obj_stock+0xec0/0xec0 [ 65.819725][ T946] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 65.819751][ T946] try_charge_memcg+0x925/0xe10 [ 65.819783][ T946] ? static_key_count+0x45/0x70 [ 65.819814][ T946] ? __cfi_gfp_zone+0x1/0x10 [ 65.819841][ T946] ? __cfi_try_charge_memcg+0x10/0x10 [ 65.819875][ T946] ? __alloc_pages_noprof+0x35a/0x7e0 [ 65.819909][ T946] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 65.819945][ T946] __mem_cgroup_charge+0xfc/0x420 [ 65.819968][ T946] ? folio_add_lru+0x116/0x400 [ 65.819997][ T946] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 65.820031][ T946] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 65.820061][ T946] ? shmem_replace_folio+0x9b0/0x9b0 [ 65.820089][ T946] ? shmem_huge_global_enabled+0x2da/0x360 [ 65.820117][ T946] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 65.820145][ T946] ? __kasan_check_write+0x18/0x20 [ 65.820169][ T946] ? _raw_spin_lock+0x92/0x120 [ 65.820197][ T946] shmem_get_folio_gfp+0x5cd/0x12e0 [ 65.820222][ T946] ? shmem_get_folio+0xc0/0xc0 [ 65.820243][ T946] ? __kasan_check_write+0x18/0x20 [ 65.820262][ T946] ? inode_to_bdi+0x6d/0x100 [ 65.820290][ T946] shmem_write_begin+0xf4/0x260 [ 65.820314][ T946] generic_perform_write+0x32c/0x970 [ 65.820340][ T946] ? inode_update_timestamps+0x4d1/0x6e0 [ 65.820372][ T946] ? __cfi_generic_perform_write+0x10/0x10 [ 65.820398][ T946] ? generic_write_checks_count+0x426/0x540 [ 65.820424][ T946] ? mnt_get_write_access_file+0x1af/0x3b0 [ 65.820452][ T946] ? mnt_put_write_access_file+0xc2/0x100 [ 65.820480][ T946] ? file_update_time+0x1de/0x210 [ 65.820510][ T946] shmem_file_write_iter+0x105/0x130 [ 65.820550][ T946] __kernel_write_iter+0x462/0x900 [ 65.820571][ T946] ? __cfi___kernel_write_iter+0x10/0x10 [ 65.820609][ T946] ? get_dump_page+0x165/0x220 [ 65.820635][ T946] ? __asan_memset+0x39/0x50 [ 65.820656][ T946] ? iov_iter_bvec+0xc0/0x180 [ 65.820690][ T946] dump_user_range+0xb8b/0xe60 [ 65.820718][ T946] ? __cfi_dump_user_range+0x10/0x10 [ 65.820745][ T946] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 65.820777][ T946] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 65.820808][ T946] ? elf_core_dump+0x23cf/0x3840 [ 65.820834][ T946] elf_core_dump+0x2d61/0x3840 [ 65.820863][ T946] ? __cfi_elf_core_dump+0x10/0x10 [ 65.820888][ T946] ? mas_next_slot+0xf01/0xfd0 [ 65.820918][ T946] ? dump_interrupted+0xf0/0xf0 [ 65.820938][ T946] ? filp_open+0x199/0x1f0 [ 65.820965][ T946] ? 0xffffffffff600000 [ 65.820981][ T946] do_coredump+0x20d2/0x3050 [ 65.821011][ T946] ? __cfi_do_coredump+0x10/0x10 [ 65.821029][ T946] ? asm_exc_page_fault+0x2b/0x30 [ 65.821058][ T946] ? __kasan_slab_free+0x6a/0x80 [ 65.821082][ T946] ? get_signal+0xa2a/0x1490 [ 65.821109][ T946] get_signal+0x11bf/0x1490 [ 65.821137][ T946] arch_do_signal_or_restart+0xbc/0x700 [ 65.821156][ T946] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 65.821177][ T946] ? __kasan_check_read+0x15/0x20 [ 65.821197][ T946] irqentry_exit_to_user_mode+0x4d/0xb0 [ 65.821223][ T946] irqentry_exit+0x16/0x60 [ 65.821245][ T946] exc_page_fault+0x65/0xc0 [ 65.821267][ T946] asm_exc_page_fault+0x2b/0x30 [ 65.821287][ T946] RIP: 0033:0x7f7a60f9e161 [ 65.821304][ T946] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 65.821320][ T946] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 65.821337][ T946] RAX: 0000000000000000 RBX: 00007f7a61226090 RCX: 00007f7a60f9e159 [ 65.821352][ T946] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000000 [ 65.821364][ T946] RBP: 00007f7a61035024 R08: 0000000000000000 R09: 0000000000000000 [ 65.821377][ T946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.821389][ T946] R13: 00007f7a61226128 R14: 00007f7a61226090 R15: 00007ffef5c0eff8 [ 65.821406][ T946] [ 65.821414][ T946] memory: usage 307200kB, limit 307200kB, failcnt 36681 [ 66.325917][ T946] memory+swap: usage 432152kB, limit 9007199254740988kB, failcnt 0 [ 66.333981][ T946] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 66.340858][ T946] Memory cgroup stats for /syz0: [ 66.340972][ T946] cache 314490880 [ 66.349602][ T946] rss 61440 [ 66.352727][ T946] rss_huge 0 [ 66.355944][ T946] shmem 314486784 [ 66.359636][ T946] mapped_file 0 [ 66.363113][ T946] dirty 0 [ 66.366040][ T946] writeback 0 [ 66.369371][ T946] workingset_refault_anon 14 [ 66.373970][ T946] workingset_refault_file 8276 [ 66.378763][ T946] swap 127950848 [ 66.382332][ T946] swapcached 45056 [ 66.386041][ T946] pgpgin 194664 [ 66.389527][ T946] pgpgout 118375 [ 66.393084][ T946] pgfault 24663 [ 66.396570][ T946] pgmajfault 132 [ 66.400126][ T946] inactive_anon 135512064 [ 66.404447][ T946] active_anon 179056640 [ 66.408630][ T946] inactive_file 0 [ 66.412300][ T946] active_file 4096 [ 66.416025][ T946] unevictable 0 [ 66.419508][ T946] hierarchical_memory_limit 314572800 [ 66.424902][ T946] hierarchical_memsw_limit 9223372036854771712 [ 66.431137][ T946] total_cache 314490880 [ 66.435297][ T946] total_rss 61440 [ 66.438958][ T946] total_rss_huge 0 [ 66.442679][ T946] total_shmem 314486784 [ 66.446860][ T946] total_mapped_file 0 [ 66.450843][ T946] total_dirty 0 [ 66.454329][ T946] total_writeback 0 [ 66.458175][ T946] total_workingset_refault_anon 14 [ 66.463616][ T946] total_workingset_refault_file 8276 [ 66.468946][ T946] total_swap 127950848 [ 66.473025][ T946] total_swapcached 45056 [ 66.477304][ T946] total_pgpgin 194664 [ 66.481294][ T946] total_pgpgout 118375 [ 66.485355][ T946] total_pgfault 24663 [ 66.489370][ T946] total_pgmajfault 132 [ 66.493455][ T946] total_inactive_anon 135512064 [ 66.498352][ T946] total_active_anon 179056640 [ 66.503065][ T946] total_inactive_file 0 [ 66.507244][ T946] total_active_file 4096 [ 66.511494][ T946] total_unevictable 0 [ 66.515466][ T946] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.188,pid=946,uid=0 [ 66.530146][ T946] Memory cgroup out of memory: Killed process 946 (syz.0.188) total-vm:90792kB, anon-rss:1252kB, file-rss:53580kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 66.650262][ T981] syz.0.188 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 66.689663][ T981] CPU: 0 UID: 0 PID: 981 Comm: syz.0.188 Tainted: G W syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 66.689703][ T981] Tainted: [W]=WARN [ 66.689710][ T981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.689724][ T981] Call Trace: [ 66.689730][ T981] [ 66.689738][ T981] __dump_stack+0x21/0x30 [ 66.689772][ T981] dump_stack_lvl+0x140/0x1c0 [ 66.689802][ T981] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.689831][ T981] ? ___ratelimit+0x41c/0x5c0 [ 66.689853][ T981] ? __kasan_check_write+0x18/0x20 [ 66.689876][ T981] dump_stack+0x19/0x20 [ 66.689903][ T981] dump_header+0xd9/0x460 [ 66.689931][ T981] oom_kill_process+0x35d/0x640 [ 66.689958][ T981] out_of_memory+0x5d1/0xa20 [ 66.689982][ T981] ? __cfi_out_of_memory+0x10/0x10 [ 66.690006][ T981] ? mutex_lock_killable+0x97/0x1d0 [ 66.690031][ T981] ? __cfi_mutex_lock_killable+0x10/0x10 [ 66.690057][ T981] mem_cgroup_out_of_memory+0x2c5/0x390 [ 66.690081][ T981] ? css_next_descendant_pre+0x1ec/0x210 [ 66.690108][ T981] ? __kasan_check_write+0x18/0x20 [ 66.690129][ T981] ? drain_obj_stock+0xec0/0xec0 [ 66.690153][ T981] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 66.690176][ T981] try_charge_memcg+0x925/0xe10 [ 66.690209][ T981] ? __cfi_try_charge_memcg+0x10/0x10 [ 66.690240][ T981] ? __alloc_pages_noprof+0x35a/0x7e0 [ 66.690272][ T981] __mem_cgroup_charge+0xfc/0x420 [ 66.690293][ T981] ? filemap_get_entry+0x41b/0x490 [ 66.690319][ T981] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 66.690342][ T981] filemap_add_folio+0x57/0x3e0 [ 66.690366][ T981] __filemap_get_folio+0x829/0xe80 [ 66.690391][ T981] ? downgrade_write+0x470/0x470 [ 66.690424][ T981] ? __cfi___filemap_get_folio+0x10/0x10 [ 66.690450][ T981] ? down_read+0x7f/0xe0 [ 66.690474][ T981] ? __cfi_down_read+0x10/0x10 [ 66.690499][ T981] ? filemap_map_pages+0x17c0/0x1b80 [ 66.690532][ T981] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 66.690561][ T981] filemap_fault+0xb8e/0x1ad0 [ 66.690590][ T981] ? __cfi_filemap_fault+0x10/0x10 [ 66.690616][ T981] ? __cfi_filemap_map_pages+0x10/0x10 [ 66.690646][ T981] ? vma_data_pages+0x105/0x140 [ 66.690667][ T981] do_pte_missing+0x3649/0x4440 [ 66.690701][ T981] ? __sched_text_start+0x10/0x10 [ 66.690721][ T981] ? shmem_alloc_and_add_folio+0xd84/0x10b0 [ 66.690749][ T981] ? pte_marker_clear+0x1b0/0x1b0 [ 66.690777][ T981] ? irqentry_exit+0x4a/0x60 [ 66.690802][ T981] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 66.690827][ T981] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 66.690850][ T981] handle_mm_fault+0x1189/0x1ba0 [ 66.690875][ T981] ? __kasan_check_write+0x18/0x20 [ 66.690900][ T981] ? __cfi_handle_mm_fault+0x10/0x10 [ 66.690925][ T981] ? follow_page_pte+0x2c0/0xba0 [ 66.690955][ T981] ? gup_must_unshare+0x1e0/0x1e0 [ 66.690983][ T981] ? vma_is_secretmem+0x11/0x50 [ 66.691011][ T981] ? check_vma_flags+0x337/0x3a0 [ 66.691038][ T981] __get_user_pages+0x114b/0x22d0 [ 66.691066][ T981] ? __kasan_check_write+0x18/0x20 [ 66.691090][ T981] ? populate_vma_page_range+0x220/0x220 [ 66.691119][ T981] ? __kernel_write_iter+0x6ff/0x900 [ 66.691143][ T981] get_dump_page+0x10c/0x220 [ 66.691171][ T981] ? __cfi_get_dump_page+0x10/0x10 [ 66.691199][ T981] ? __asan_memset+0x39/0x50 [ 66.691221][ T981] dump_user_range+0x18b/0xe60 [ 66.691246][ T981] ? __cfi_dump_user_range+0x10/0x10 [ 66.691269][ T981] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 66.691300][ T981] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 66.691333][ T981] ? elf_core_dump+0x23cf/0x3840 [ 66.691362][ T981] elf_core_dump+0x2d61/0x3840 [ 66.691393][ T981] ? __cfi_elf_core_dump+0x10/0x10 [ 66.691420][ T981] ? mas_next_slot+0xf01/0xfd0 [ 66.691452][ T981] ? dump_interrupted+0xf0/0xf0 [ 66.691472][ T981] ? filp_open+0x199/0x1f0 [ 66.691501][ T981] ? 0xffffffffff600000 [ 66.691525][ T981] do_coredump+0x20d2/0x3050 [ 66.691550][ T981] ? __cfi_do_coredump+0x10/0x10 [ 66.691571][ T981] ? asm_exc_page_fault+0x2b/0x30 [ 66.691602][ T981] ? __kasan_slab_free+0x6a/0x80 [ 66.691628][ T981] ? get_signal+0xa2a/0x1490 [ 66.691657][ T981] get_signal+0x11bf/0x1490 [ 66.691688][ T981] arch_do_signal_or_restart+0xbc/0x700 [ 66.691710][ T981] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 66.691734][ T981] ? __kasan_check_read+0x15/0x20 [ 66.691756][ T981] irqentry_exit_to_user_mode+0x4d/0xb0 [ 66.691783][ T981] irqentry_exit+0x16/0x60 [ 66.691808][ T981] exc_page_fault+0x65/0xc0 [ 66.691833][ T981] asm_exc_page_fault+0x2b/0x30 [ 66.691855][ T981] RIP: 0033:0x7f7a60f9e161 [ 66.691872][ T981] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 66.691891][ T981] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 66.691910][ T981] RAX: 0000000000000000 RBX: 00007f7a61226090 RCX: 00007f7a60f9e159 [ 66.691926][ T981] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000000 [ 66.691940][ T981] RBP: 00007f7a61035024 R08: 0000000000000000 R09: 0000000000000000 [ 66.691953][ T981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.691967][ T981] R13: 00007f7a61226128 R14: 00007f7a61226090 R15: 00007ffef5c0eff8 [ 66.691986][ T981] [ 66.726691][ T981] memory: usage 295336kB, limit 307200kB, failcnt 37385 [ 67.216048][ T981] memory+swap: usage 392180kB, limit 9007199254740988kB, failcnt 0 [ 67.224010][ T981] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 67.230968][ T981] Memory cgroup stats for /syz0: [ 67.231121][ T981] cache 280969216 [ 67.239824][ T981] rss 53248 [ 67.242947][ T981] rss_huge 0 [ 67.246174][ T981] shmem 280961024 [ 67.249853][ T981] mapped_file 4096 [ 67.253583][ T981] dirty 0 [ 67.256561][ T981] writeback 159744 [ 67.260293][ T981] workingset_refault_anon 14 [ 67.264895][ T981] workingset_refault_file 8277 [ 67.269713][ T981] swap 120385536 [ 67.273273][ T981] swapcached 204800 [ 67.277123][ T981] pgpgin 194666 [ 67.280606][ T981] pgpgout 126523 [ 67.284166][ T981] pgfault 24663 [ 67.287672][ T981] pgmajfault 133 [ 67.291238][ T981] inactive_anon 57262080 [ 67.295755][ T981] active_anon 223514624 [ 67.306325][ T981] inactive_file 0 [ 67.310076][ T981] active_file 8192 [ 67.313815][ T981] unevictable 0 [ 67.326310][ T981] hierarchical_memory_limit 314572800 [ 67.331723][ T981] hierarchical_memsw_limit 9223372036854771712 [ 67.356315][ T981] total_cache 280969216 [ 67.360753][ T981] total_rss 53248 [ 67.364411][ T981] total_rss_huge 0 [ 67.377198][ T981] total_shmem 280961024 [ 67.382158][ T981] total_mapped_file 4096 [ 67.396319][ T981] total_dirty 0 [ 67.399906][ T981] total_writeback 159744 [ 67.404250][ T981] total_workingset_refault_anon 14 [ 67.410838][ T981] total_workingset_refault_file 8277 [ 67.416150][ T981] total_swap 120385536 [ 67.421222][ T981] total_swapcached 204800 [ 67.425584][ T981] total_pgpgin 194666 [ 67.430097][ T981] total_pgpgout 126523 [ 67.434364][ T981] total_pgfault 24663 [ 67.438640][ T981] total_pgmajfault 133 [ 67.442725][ T981] total_inactive_anon 57262080 [ 67.447760][ T981] total_active_anon 223514624 [ 67.452493][ T981] total_inactive_file 0 [ 67.456883][ T981] total_active_file 8192 [ 67.461143][ T981] total_unevictable 0 [ 67.465139][ T981] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.188,pid=980,uid=0 [ 67.480165][ T981] Memory cgroup out of memory: Killed process 980 (syz.0.188) total-vm:90792kB, anon-rss:1252kB, file-rss:53552kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000