last executing test programs: 35.681934369s ago: executing program 0 (id=1): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x4e1f, 0x0, 0x2}, {0x5, 0xb, 0x4, 0x400, 0x8001, 0x4, 0x0, 0xd3d}, {0x0, 0x137, 0x0, 0x3}, 0x7fffffff, 0x6e6bb9, 0x1}, {{@in=@empty, 0x4d6, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3502, 0x1, 0x0, 0x0, 0x0, 0x2c19, 0x3}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x2c}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 35.541736295s ago: executing program 0 (id=7): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de2010203010902120001000000000904000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40000400000000000e74"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 32.517569306s ago: executing program 0 (id=35): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r0, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x33, 0x0, 0x0, 0x8, 0x4, 0x6, 0xd2d0, 0x1, 0x5, 0x0, 0x91, 0xffffffff, 0x101, 0x3, 0x0, 0x7f, 0x0, 0x7, 0x40, 0xffffffff, 0x200008, 0xa, 0xa000000}}) 32.506706077s ago: executing program 0 (id=36): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80480, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2d, 0x4, 0x40, 0x7fff0000}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x48, 0x0, 0xfe, 0xffeffffe}, {0x16}]}, 0x10) sendto(r3, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x5b, 0x4000010, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000500)={0x8, "e3d509f2c24aa8f2"}) (async, rerun: 64) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) (rerun: 64) write$vga_arbiter(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='lock none'], 0xa) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.366691843s ago: executing program 0 (id=37): r0 = memfd_secret(0x80000) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000051) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1}, 0x6e) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) clock_adjtime(0x0, &(0x7f0000000200)={0x7e7d, 0x8000000000000001, 0x80003ffd, 0xd6, 0x9c7, 0xfff, 0x100, 0x1000000000c5e3, 0x7, 0x2000008000, 0x3, 0x7, 0xf2e9, 0x8000000000000001, 0x6, 0x2, 0x6, 0x9, 0x81, 0x6, 0xffffffffffffffff, 0x4d9, 0x3fe, 0x1fe, 0x8005, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) write(r1, &(0x7f0000000000)='6', 0x32) socket$vsock_stream(0x28, 0x1, 0x0) memfd_secret(0x80000) (async) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000051) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1}, 0x6e) (async) userfaultfd(0x1) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) clock_adjtime(0x0, &(0x7f0000000200)={0x7e7d, 0x8000000000000001, 0x80003ffd, 0xd6, 0x9c7, 0xfff, 0x100, 0x1000000000c5e3, 0x7, 0x2000008000, 0x3, 0x7, 0xf2e9, 0x8000000000000001, 0x6, 0x2, 0x6, 0x9, 0x81, 0x6, 0xffffffffffffffff, 0x4d9, 0x3fe, 0x1fe, 0x8005, 0x4}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) write(r1, &(0x7f0000000000)='6', 0x32) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) 31.986810171s ago: executing program 0 (id=40): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x27) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000180)={0x0, 0x7, {0x7, @usage, 0x0, 0x2e2bc79e, 0x6, 0x8, 0x3, 0x9, 0x0, @usage=0x81, 0x3, 0x7, [0x8, 0x6, 0xfffffffffffffff4, 0xe2c, 0x8, 0xb]}, {0xe, @usage=0x7, 0x0, 0xa, 0x7, 0x5, 0x8000000000000000, 0x40, 0x4c0, @struct={0x4, 0x4}, 0x6, 0x3ff, [0x3, 0xff, 0x32, 0x9, 0x7, 0xffffffffffffffff]}, {0x5, @usage=0x1, 0x0, 0x7, 0x1f, 0xbce, 0xe07, 0x21, 0x401, @usage=0x3, 0x64, 0x1, [0x7fffffff, 0x4, 0xc753, 0x3, 0x2, 0x9]}, {0x8000000000000001, 0x8}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000580)={r1, 0x4, 0x401}) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000580)={r1, 0x4, 0x401}) recvmmsg$unix(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012020, 0x0) (async) recvmmsg$unix(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012020, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000000c0)=0x8001, 0x4) 16.940876351s ago: executing program 32 (id=40): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x27) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000180)={0x0, 0x7, {0x7, @usage, 0x0, 0x2e2bc79e, 0x6, 0x8, 0x3, 0x9, 0x0, @usage=0x81, 0x3, 0x7, [0x8, 0x6, 0xfffffffffffffff4, 0xe2c, 0x8, 0xb]}, {0xe, @usage=0x7, 0x0, 0xa, 0x7, 0x5, 0x8000000000000000, 0x40, 0x4c0, @struct={0x4, 0x4}, 0x6, 0x3ff, [0x3, 0xff, 0x32, 0x9, 0x7, 0xffffffffffffffff]}, {0x5, @usage=0x1, 0x0, 0x7, 0x1f, 0xbce, 0xe07, 0x21, 0x401, @usage=0x3, 0x64, 0x1, [0x7fffffff, 0x4, 0xc753, 0x3, 0x2, 0x9]}, {0x8000000000000001, 0x8}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000580)={r1, 0x4, 0x401}) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000580)={r1, 0x4, 0x401}) recvmmsg$unix(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012020, 0x0) (async) recvmmsg$unix(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012020, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000000c0)=0x8001, 0x4) 16.897643073s ago: executing program 3 (id=99): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0xc2002, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000004300)={0x2300000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x2d, 0x0, 0x0, 0x0, {r1}}, 0x95) openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) r3 = getuid() quotactl$Q_QUOTAOFF(0xd0dc57b8a539a2db, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r3, 0x0) (async) quotactl$Q_QUOTAOFF(0xd0dc57b8a539a2db, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r3, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0xc3aa) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000003060301000000000000000007000005050001000700000005000100070000000900020073797a3100000000050001000700000005000100070000070000000073797a3000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x43) (async) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000003060301000000000000000007000005050001000700000005000100070000000900020073797a3100000000050001000700000005000100070000070000000073797a3000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x43) 16.822076107s ago: executing program 3 (id=100): syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009040001040806620007050102000200032401070502020002000324020705030200020003"], 0x0) r0 = fsopen(&(0x7f0000000080)='coda\x00', 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x8e23000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0xbc0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x9}, 0x1c) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x26) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="f7790066baa00066b86b4266afe2e239000f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d90f20d835080000000f22d8", 0x49}], 0xaaaaaaaaaaaaa5c, 0x47, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 15.518039148s ago: executing program 3 (id=107): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) r1 = epoll_create1(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x50000000}) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x3c, 0x3e9, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x1, 0x0, 0x5, 0x0, 0x9, 0x72, 0x0, 0x9}}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000010) sendto$inet(r0, 0x0, 0x0, 0x20040801, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 15.426665072s ago: executing program 3 (id=108): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) socket$inet(0x2, 0x2, 0x1) (async) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="36650f380ae20f21ddba6100ed6766c7442400695e00006766c7442402a5c9f6dd6766c744240600000000670f011424f20f78d200c3c54c090f20d90fc79e4a6bda302e260fc43d00", 0x49}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x80) (async) pipe2(0x0, 0x0) r8 = getpid() syz_pidfd_open(r8, 0x0) (async) r9 = fcntl$getown(r3, 0x9) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x2ba, 0x0, 0x0, 0x1000, 0x3, r9, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000280)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f, 0x0, r6}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6eaa, 0x200, 0x1, 0x395}}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) 15.210675092s ago: executing program 3 (id=111): write$ppp(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x5}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) fallocate(r1, 0x0, 0x5, 0x1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wg1\x00', &(0x7f0000000380)=@ethtool_rx_ntuple={0x35, {0x3, @tcp_ip4_spec={@empty, @multicast1, 0x4e22, 0x4e20, 0x28}, @tcp_ip4_spec={@private=0xa010102, @multicast2, 0x4e22, 0x4e24, 0x3}, 0x2, 0x7fff, 0x8, 0x10000, 0xfffffffffffffffe}}}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) openat(r2, &(0x7f0000000280)='./file0\x00', 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000000)=0x1ff) mmap(&(0x7f000011a000/0x1000)=nil, 0x1000, 0x1000003, 0x11, r7, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 15.03372934s ago: executing program 3 (id=114): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1204042, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8420, 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8420, 0x0) 9.252913649s ago: executing program 1 (id=137): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = dup3(r2, r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xd0) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x46142, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x46142, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x4, 0xb017, &(0x7f0000000140)) r7 = userfaultfd(0x80000) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f00000002c0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r8, &(0x7f00000021c0)={0x2020}, 0x2020) (async) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r9, r10, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r9, r10, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r3, 0x0, 0x1000, 0x10, &(0x7f0000000440)) (async) statx(r3, 0x0, 0x1000, 0x10, &(0x7f0000000440)) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82000, 0x1c9) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000ea2000/0x3000)=nil, 0x3000}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xb, 0x12, r11, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xb, 0x12, r11, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 9.22717074s ago: executing program 1 (id=138): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom$inet6(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, 'w\x00', "bb6710bc8150e4a1a117d7b27caf00", "fbef00", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x80}, {r2, 0x42}, {r0, 0x1040}, {r1, 0x1000}, {r0, 0x50}], 0x5, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)={[0x2]}, 0x8) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000340)={0x74, 0x0, 0x5}) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", '\x00', "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x37aa, 0x3c87, {{0x2c, 0x4, 0x0, 0x17, 0xb0, 0x64, 0x0, 0x8, 0x29, 0x0, @private=0xa010102, @empty, {[@generic={0x88, 0x6, "54ae189e"}, @generic={0x90dcce3e65192dab, 0xa, "20d4ca947bcd8272"}, @timestamp={0x44, 0x2c, 0x36, 0x0, 0x4, [0x4f6, 0x1, 0x0, 0x2, 0x8, 0x2, 0x4, 0xc6, 0x3, 0x8]}, @cipso={0x86, 0x10, 0xffffffffffffffff, [{0x0, 0xa, "80ba3291f1e023bf"}]}, @cipso={0x86, 0x41, 0x1, [{0x0, 0xc, "7b71a3e80f38b091d400"}, {0x0, 0x8, "7b2f293decef"}, {0x1, 0x8, "a8384eb65a6f"}, {0x2, 0x2}, {0x1, 0xa, "1508daf692fb9e14"}, {0x4, 0xb, "f6590557f8ddbe6bcf"}, {0x0, 0x8, "290b94bcf9fc"}]}, @ssrr={0x89, 0xf, 0xdb, [@remote, @multicast2, @private=0xa010102]}]}}}}}) sendmsg$inet(r3, &(0x7f0000000c00)={&(0x7f0000000300)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000780)="99864ddc26a80f040920006e2909402ea2fbba434ef4f8d4a392aceeea3fd4f433e609b2914eae19b959380e70de2fef3e64ca47d5742f40600c946615bb994284f5a69c3c24e4348b492abe7fd55983ffc8cf7c19d733048be87c77ba7b44ae962d00eb8e0cc12ba8c50c27d7794883dbb5c931e183b2435569add659b8da410e1509fd8fdf463455a2a139feac622b15566564d1353639ab85a1a631a733166f800fef9e7efc", 0xa7}, {&(0x7f0000000840)="ade58f07025f629ed04897f8583b2f120ebebb41a225a58310255bbf55c15c178c60a18a0bab94e4f6d827cd4e3027adecdf3614f9a1d19dba22d1c5272c48b18ef57270d433da8d9aeb03bf76280638d13af068", 0x54}, {&(0x7f00000008c0)="69d63af357526c097aa06c5c57ed7905eeda236bfb37d777d42fe9a51879a8acb4a855729ab2892e3b5dae0cabed4e9cf43ca4a3a31de4ca3fa6dd84", 0x3c}, {&(0x7f0000000900)="c1c3dc13a3", 0x5}], 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="140000000000000000000000010000004204f15600000000110000000000000000000000010000000f000000000000001c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="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"], 0x140}, 0x20004000) writev(r1, &(0x7f00000005c0), 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000640)={"f683b0d3daba2d536aae6d2902e2451a", 0x0, r5, {0xeff, 0x39a}, {0x7, 0x80000001}, 0x8, [0xd, 0x8, 0x7, 0x4, 0x9, 0x5, 0x101, 0x58, 0x8, 0x613, 0x7, 0xa, 0x9, 0x5, 0x7fff, 0x8000000007]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000c40)={"d355eeac6ebeef68be38b85eab4a7467", r6, r7, {0x2, 0x9}, {0x80000000, 0x723}, 0x3, [0x0, 0x1, 0x9, 0x1, 0xa, 0x5, 0x2, 0x5, 0x2, 0x4, 0x7, 0x1, 0x7, 0x0, 0x7, 0x8]}) r8 = add_key$fscrypt_v1(&(0x7f00000020c0), &(0x7f0000002100)={'fscrypt:', @desc1}, &(0x7f0000002140)={0x0, "9a075c94554e9fbfb8c4b9f49d397a58e25f893447611eb9d551bac19c36c26138ee8a3cf6c921a6ce3ed1ee548201c1ed35bd9c472c13aff9187ff8ddd52823", 0x20000018}, 0x48, 0xffffffffffffffff) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) keyctl$clear(0x7, r8) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) connect$inet(r9, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10) 8.80272646s ago: executing program 1 (id=140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x401, 0x401}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.457543616s ago: executing program 1 (id=141): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x40) socketpair$unix(0x1, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x7fff, 0x302142) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) r3 = dup(r1) syz_ublk_setup_queues(r3, r0, &(0x7f0000000180)={0x0, 0x6f64, 0x40, 0xfffffffe, 0x2002f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa68d, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xfffffffb}}], 0x1, 0x0, 0x0) 8.276765855s ago: executing program 1 (id=142): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) timer_create(0x0, 0x0, &(0x7f0000000100)) (async) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) (async) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 7.358775087s ago: executing program 1 (id=143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, &(0x7f0000000040)="2e0f0107b805000000b917497eb50f01c166460fe05001c4c1605d4326c4e23516a10f000000470f1399f7000000b805000000b9006000000f01c146d2d02e6726f2410fe67d6d66b8cb008ee8", 0x4d}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.458627079s ago: executing program 2 (id=159): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) syz_usb_control_io$lan78xx(r0, &(0x7f0000000780)={0x14, &(0x7f0000000640)={0x20, 0x23, 0x21, {0x21, 0x21, "0f5a574b3e5e687ef5249777a74fbdeb4ac7f5f966dc89e6eb08836c1fad9a"}}, &(0x7f0000000680)={0x0, 0x3, 0xf1, @string={0xf1, 0x3, "d1e2c68b214c29d50876244ddfd87033da6b53d18f417816634b76ae2d68bb28673376a5d476bf0b5cc04e0c94ef220a0f9b25b478e2a5f803a1c5d1f35e9b858cfd5a5a4396e3e98dc184b0b85108115d22302b48748ab8af9a8015e4a7e96f54e350027f517afa8062dbb7cda967a9a876a5921a05020f904063472ccd4694bbdd51f4761d412c395ac92eec3eebedb50111539226d1ae3d6d6b5c4f87e2255ea5716f5f0521ba1c20b851c8972c5cc7b72d0e7f9d9f90e952e46fa299e94a5326266227a3200847891c72f67f55a63bf09494c259e9c8b3ea315dd72449b41c93c2b02587e976771434d3c53111"}}}, &(0x7f0000000980)={0x34, &(0x7f00000007c0)={0x0, 0xf, 0x51, "4f39e809d43dd338434d3727da3802a4fc6d1aaf4ac3f16e7230ec3cb731ba2c9b15f5c2ec2f9d180caec3ab0cf9d37ecf1105a9c70a80fce4770f6b4820a3e8a37110f3fb6f282fe649acf8de713feacd"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000008c0)={0xc0, 0xa1, 0x4, 0xa}, &(0x7f0000000900)={0x40, 0xa0, 0x4, 0x12}, &(0x7f0000000940)={0xc0, 0xa2, 0x2f, "a61a291182b50028476f62ac91e1d5ba25051330ff1a675d4286b8c4a743dca6eb1b51df8bedecad406011dc29df03"}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004086800000000000000001090222000101008032090400000103000000092111010001223e0007058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00223e00000005200933a10185010a0e03150026e80375209501b1020a160301b1020a19031500250175089501b1020a3404169cff26e803750e95018102c0"], 0x0}, 0x0) mount$overlay(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x20001, &(0x7f0000000a40)={[{@volatile}, {@index_off}], [{@fsmagic={'fsmagic', 0x3d, 0x3bc6}}]}) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x3, 0x8, {0x8, 0x0, "16ed8e0c4ce4"}}, 0x0}, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x40, 0x3, 0x7, "29c95846b8978d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x0, 0xe, 0x3, {0x3, 0x2, "b4"}}, &(0x7f0000000040)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "5944a600859dd308a7af57f659d27edb771d87b57219f984086b3d3e9e21833f7d67a41070088ee653eac78bbfffcfe00f10e945242de0d5ed255f66a3f19a5a8e6bc69fe48bec23e15415ad2b06180d23bab0aa0e99fccb9c132738c0c03a4ee5d2e81489015dc9e437b7aebfbf8a591cbdb2486415f8cc658d67f1b7a9d89e9b711a69cf736bc4c72e76187003266c5640d5c0d6fc36ccfe05b8a1a78147236db25e865feb3819a4586d953764f116ceb8361d5866c400dc800db23b133499a5ca7534867beaa74e4280a53e696d936dedb5ba6af5eaa847a33c73a8e563dd308087dc75eabb46d13853e00b00c84320c8abb38b53"}}, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "f18401d1"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0x420}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000280)={0x0, 0xe, 0xdb, "130d4d9ffa200e76c0baeab64085de42d61e7ccd625f2de322b744fd2eee3adb588d7a10b4ff7cfdbf0c47dad267c3503cd2b496854fd21dd600b7659d9069611a6a08e42325f0a8e213be6a3da15af11bca81bc1a849b577b5e4f5895b0006997d161988be323035e0b4d1e204b24f880fbcc46e72b1e0674c3bf0cda773d8fd93cd91025a718aff88c8681e97ab876b99a673ef67fa8fc9d0d17b9f38b11a9128f5bc0a4a33878317100b49a0f12318d3eda975adaed975e1fa6198483c0e7b3c1c27ef816a986c93ab57ecdc1149f7f96f627a74e6f847e3d15"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0x59, "e57f8624e8f221c6878fdc26286f633fbbb34c42911325f279950689d8d190cbb5b1e6f2f79c32086e7be15c1a84a9c3ab79ce127dba91f91638302287423b897dcbea4ef1e1f7c369c48edc7232a11e786849ee10da5c45dc"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x2}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mremap(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) (async) syz_usb_control_io$lan78xx(r0, &(0x7f0000000780)={0x14, &(0x7f0000000640)={0x20, 0x23, 0x21, {0x21, 0x21, "0f5a574b3e5e687ef5249777a74fbdeb4ac7f5f966dc89e6eb08836c1fad9a"}}, &(0x7f0000000680)={0x0, 0x3, 0xf1, @string={0xf1, 0x3, "d1e2c68b214c29d50876244ddfd87033da6b53d18f417816634b76ae2d68bb28673376a5d476bf0b5cc04e0c94ef220a0f9b25b478e2a5f803a1c5d1f35e9b858cfd5a5a4396e3e98dc184b0b85108115d22302b48748ab8af9a8015e4a7e96f54e350027f517afa8062dbb7cda967a9a876a5921a05020f904063472ccd4694bbdd51f4761d412c395ac92eec3eebedb50111539226d1ae3d6d6b5c4f87e2255ea5716f5f0521ba1c20b851c8972c5cc7b72d0e7f9d9f90e952e46fa299e94a5326266227a3200847891c72f67f55a63bf09494c259e9c8b3ea315dd72449b41c93c2b02587e976771434d3c53111"}}}, &(0x7f0000000980)={0x34, &(0x7f00000007c0)={0x0, 0xf, 0x51, "4f39e809d43dd338434d3727da3802a4fc6d1aaf4ac3f16e7230ec3cb731ba2c9b15f5c2ec2f9d180caec3ab0cf9d37ecf1105a9c70a80fce4770f6b4820a3e8a37110f3fb6f282fe649acf8de713feacd"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000008c0)={0xc0, 0xa1, 0x4, 0xa}, &(0x7f0000000900)={0x40, 0xa0, 0x4, 0x12}, &(0x7f0000000940)={0xc0, 0xa2, 0x2f, "a61a291182b50028476f62ac91e1d5ba25051330ff1a675d4286b8c4a743dca6eb1b51df8bedecad406011dc29df03"}}) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004086800000000000000001090222000101008032090400000103000000092111010001223e0007058103"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00223e00000005200933a10185010a0e03150026e80375209501b1020a160301b1020a19031500250175089501b1020a3404169cff26e803750e95018102c0"], 0x0}, 0x0) (async) mount$overlay(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x20001, &(0x7f0000000a40)={[{@volatile}, {@index_off}], [{@fsmagic={'fsmagic', 0x3d, 0x3bc6}}]}) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x3, 0x8, {0x8, 0x0, "16ed8e0c4ce4"}}, 0x0}, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x40, 0x3, 0x7, "29c95846b8978d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x0, 0xe, 0x3, {0x3, 0x2, "b4"}}, &(0x7f0000000040)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "5944a600859dd308a7af57f659d27edb771d87b57219f984086b3d3e9e21833f7d67a41070088ee653eac78bbfffcfe00f10e945242de0d5ed255f66a3f19a5a8e6bc69fe48bec23e15415ad2b06180d23bab0aa0e99fccb9c132738c0c03a4ee5d2e81489015dc9e437b7aebfbf8a591cbdb2486415f8cc658d67f1b7a9d89e9b711a69cf736bc4c72e76187003266c5640d5c0d6fc36ccfe05b8a1a78147236db25e865feb3819a4586d953764f116ceb8361d5866c400dc800db23b133499a5ca7534867beaa74e4280a53e696d936dedb5ba6af5eaa847a33c73a8e563dd308087dc75eabb46d13853e00b00c84320c8abb38b53"}}, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "f18401d1"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0x420}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000280)={0x0, 0xe, 0xdb, "130d4d9ffa200e76c0baeab64085de42d61e7ccd625f2de322b744fd2eee3adb588d7a10b4ff7cfdbf0c47dad267c3503cd2b496854fd21dd600b7659d9069611a6a08e42325f0a8e213be6a3da15af11bca81bc1a849b577b5e4f5895b0006997d161988be323035e0b4d1e204b24f880fbcc46e72b1e0674c3bf0cda773d8fd93cd91025a718aff88c8681e97ab876b99a673ef67fa8fc9d0d17b9f38b11a9128f5bc0a4a33878317100b49a0f12318d3eda975adaed975e1fa6198483c0e7b3c1c27ef816a986c93ab57ecdc1149f7f96f627a74e6f847e3d15"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0x59, "e57f8624e8f221c6878fdc26286f633fbbb34c42911325f279950689d8d190cbb5b1e6f2f79c32086e7be15c1a84a9c3ab79ce127dba91f91638302287423b897dcbea4ef1e1f7c369c48edc7232a11e786849ee10da5c45dc"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x2}}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) 2.725891943s ago: executing program 4 (id=161): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000100)={0x2}) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000007c0)=[@wrmsr={0x65, 0x20, {0x40b, 0x7}}], 0x20}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x6a, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.534891032s ago: executing program 4 (id=162): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'erspan0\x00', 0x4}) syz_usb_connect(0x3, 0x63, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009040001040806620007050102000200032401070502020002000324020705030200020003240307058402000200032404", @ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="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", @ANYRES32, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES8=r0], 0x0) 1.309634979s ago: executing program 4 (id=163): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async, rerun: 64) setreuid(0xee00, 0x0) (async, rerun: 64) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r3}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.053410241s ago: executing program 4 (id=164): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}], 0x30}, 0x80) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x14, 0x1, 0x3, 0x801}, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, 0x0) r8 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x4, 0x2000001, 0x40010, 0xffffffffffffffff, 0x20000000) syz_ublk_add_dev(r6, r8, r3, 0x0, &(0x7f0000000180)={0x2e, 0x1d, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x1, 0x22d, 0x0, 0x0, 0x1000, 0x5, r2, 0x0, 0x1e}}}, &(0x7f0000000340)=0x0) syz_ublk_setup_queues(r6, r9, &(0x7f0000000280)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4, 0x0, r6}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8221, 0x20, 0x3, 0x24}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x3, 0xffffffff}}], 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001"], 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x14, 0x1, 0x3, 0x801}, 0x14}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r5) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) (async) socket(0x10, 0x2, 0x0) (async) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, 0x0) (async) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x4, 0x2000001, 0x40010, 0xffffffffffffffff, 0x20000000) (async) syz_ublk_add_dev(r6, r8, r3, 0x0, &(0x7f0000000180)={0x2e, 0x1d, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x1, 0x22d, 0x0, 0x0, 0x1000, 0x5, r2, 0x0, 0x1e}}}, &(0x7f0000000340)) (async) syz_ublk_setup_queues(r6, r9, &(0x7f0000000280)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4, 0x0, r6}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8221, 0x20, 0x3, 0x24}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x3, 0xffffffff}}], 0x1, 0x0, 0x0) (async) 974.759024ms ago: executing program 4 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/all/accept_local\x00', 0x101200, 0x0) (rerun: 64) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) (async, rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}, {0x77359400}}, 0x100) fallocate(r1, 0x0, 0x0, 0x1001f0) (async, rerun: 32) syz_usb_connect$midi(0x3, 0xf7, &(0x7f0000000840)=ANY=[@ANYBLOB="120150010000002030144b474000010203010902e500010109101009040000080103206f07240101000700062402030a0913240307090604db08ff75000b7f570603060d09050f10ff030909800e25010a9dbde50f92ce90d9977109050e10000406050b0e25010a0e3201ca16965a57c67b0905841e2000050fcb102501"], 0x0) (rerun: 32) 456.158658ms ago: executing program 2 (id=166): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x6, 0x10001) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000040)={0x3, 0x3, 0x7, 0x4, 0x6, 0x7f}) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000080)=0x3) (async) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000200)={0x80, 0xa, 0x0, [{0x4, 0x6, 0x0, 0x3, 0x3, 0x7, 0x1, '\x00', 0x10}, {0x1, 0x9f7e, 0xffffffffffffffff, 0x59, 0x5, 0x2, 0x50, '\x00', 0xffffffffffffffff}, {0x4, 0xe, 0x7f8, 0x8, 0x9, 0x5, 0x0, '\x00', 0xfffffffffffffff8}, {0xebe, 0x6, 0x0, 0x14, 0x7, 0x3, 0x4, '\x00', 0x7}, {0x1, 0xa828, 0x100, 0x2, 0x7, 0x7f, 0x5, '\x00', 0x6}, {0x6, 0xfffffffffffffff8, 0xdf, 0x9, 0x0, 0x4, 0x5, '\x00', 0xa}, {0x6, 0x4, 0x0, 0xf7, 0x3, 0x3, 0xfb, '\x00', 0x3}, {0x400, 0x3, 0x5c8, 0x8, 0x1, 0x40, 0xf2, '\x00', 0x100000001}, {0xfffffffffffffffc, 0x0, 0x3, 0xe3, 0x74, 0x5, 0x6, '\x00', 0x2}, {0x8000, 0x100000001, 0x9, 0x0, 0xed, 0x3, 0x3, '\x00', 0x4}]}) (async) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r3, &(0x7f0000000500)={0x7, 0x7f, 0x1}, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000540)={0xa, 0x4e22, 0x400, @local}, 0x1c) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000640)={&(0x7f0000000580)=0xa, 0x7fffffff, &(0x7f00000005c0), &(0x7f0000000600)}) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000680)=@any_dev={0x2, 0x5da, 0x0, 0x0, 0x1000, 0x8, 0xffffffffffffffff, 0x0, 0x1ea}}}, &(0x7f0000000740)=0x0) r6 = openat$incfs(r4, &(0x7f0000000780)='.log\x00', 0x20802, 0x0) (async) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x0, 0x455f, 0x8, 0x1, 0xb5}, &(0x7f00000008c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f0, 0x1, 0x3, 0x1af}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfc37, 0x4000, 0x3, 0x13b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x84b1, 0x0, 0x1, 0x2e8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7e0d, 0x20000, 0x1, 0x1bb, 0x0, r0}}], 0x4, &(0x7f0000001b40)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x4c}, 0x0, 0x0, '\x00', {0x1, 0x234, 0x0, &(0x7f0000000b40)=@buf_512="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"}}, &(0x7f0000001bc0)) (async) r9 = syz_io_uring_setup(0x6b8b, &(0x7f0000001c00)={0x0, 0xfc47, 0x8000, 0x2, 0xd6}, &(0x7f0000001c80), &(0x7f0000001cc0), &(0x7f0000001d00)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001d40)={0x0, 0x9bd, 0x80000, 0x1, 0x3bf}, &(0x7f0000001dc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x26c5, 0x10270, 0x1, 0x247}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x14f8, 0x1, 0x3, 0x1a4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6982, 0x8, 0x2, 0x3a3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8397, 0x0, 0x0, 0xd8}, 0xffffffffffffffff}], 0x4, &(0x7f0000003040)={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, '\x00', {0x4, 0xa6e, 0x0, &(0x7f0000002040)=@buf_1k="645e573cf389b14244f52ee41928c0cab2716bc128196a06040a06c9c9bf701d68125e42b0050604b61b2202d73803ae247838dee661674e8cfbfa27e4b5d4f68ec7100ecbd406876706ec7c1823193a8900d3ec506223b2e8d621cc8d575931807d292c50daa91961cec8ffd26e68db6cae4f93c16eef66e014a06c0a2a3edab7d81b53effaad83d9b85f33c3a8676e7a0d7c84d9b978f88aca1cdbc378ce11fd5ef73dff98ac211a3797a721df04f4c17b2b5e89cf9049a7eca1f8ae2f2d980912f8c1aea022014203d8353ef1bd40697bead8fd851fc601d970ffd70be42753b29b952d4a01385e82fcf4db5912ec4f7ae01e0b29b26ffb0ebcb0a17bf1274e788d1d029aaaa285b1843669958fd305a2f9883cb531f0e679ef59e185cef09221cdc0881a48c328572f8416a179b7a1ba47412adcca65b1b35ffba13367f0dbf43208080a873900d471c502244651a66e8689c5cd1b87a9fd1e82d2d987033a306cfc40456f519435038379de6934629de56879e75a407c7c62c27f5b5d360155546728ba06cbde6f57a7296da362772320d60ab4da6d81c692ec585b9e0c45f8bf8cb2ce3f2e428cc8ed7939cba8c87c4111e3d98bfab02e54ff8619ab881eb4b371e74cae170d790eb2e7b883cba8c059d2b9b5d061f6337d80628122926b7e4189e6d676180f4da9a8c70bc2141d09d65b420ec10ade3846b5907ba6259141aa573e5e43a2b2ad61226bf4e58946a106e2d1273661f41f90b7f17073064434d66d4d06ce9a92fb377da1f6d7eacf09a54bd84266443f22f656538e8456a682f68f3c7789d2759485c0fba9a54b1f230d8ab48cae8b0fa7749e7ed981abb0fdaa79137610607cd8e237aa92a33975a6f19416aa4b735b9bffcc42eafbd246c0e0956d80eb115c9f7e39fb830981af3a333bc8900893c7d8963c5cfd6432298831ecaa103c42736d43aa0f7296280c18e50fefd581270463585545d26a4c26f1a991eb8df3edc8782d266eeef518366e4775dfd6b28e2baee519dc25923ba4c31448cc6738aa1956674129caf09d9fe7031a425fce01e32b286c20951dbf731547d5f4ef30db4276df6794946f67a1bca03327cfa8eb8f54a60f51998cef9b3e63b483f3297964cc55cea9aeb1dd822e0cd3f36dcdcf7302fb0f89851e2b9d6b9fd395da7ac4c63b17d1af657bd3d087a002b9efe684e13244263becd0f4c4ad400f245e2e343c93dddd340eac874da986e72f4467f6d96c31c3bd7982355a42677aaf5f6e73cb8a1f166dbca29d8d8e010a7238e59dc4bc9a206d6274e576e1423c454fc90968389d9960a34f0aa0b012f6bac597e54092f015839676d158791425545e26155d07e6d234af06cde90b59227946ce6f692a3bad82cb25f76d8bd57030e6a291fe83550f8680870a5fc59a1efda7d4b970ab42bf9dc8d635"}}, &(0x7f00000030c0)) (async) r12 = syz_open_dev$ublk_chdev(&(0x7f0000003380), 0x0, 0x4000) syz_ublk_setup_queues(0xffffffffffffffff, r5, &(0x7f00000007c0)={0x0, 0xf505, 0x2100, 0x3, 0x103, 0x0, r6}, &(0x7f0000003100)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1818, 0x200, 0x0, 0xda, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe50, 0x40000, 0x0, 0x3ae, 0x0, r2}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb089, 0x2, 0x3, 0x2ad, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5f1, 0x20, 0x1, 0x1ae, 0x0, r10}}], 0x4, &(0x7f00000043c0)={0x2e, 0x1, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8}, 0x0, 0x0, '\x00', {0x2, 0x1e0, 0x0, &(0x7f00000033c0)=@buf_1k="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"}}, &(0x7f0000004440)) setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000004480)={0x7, "9d89ef"}, 0x6) r15 = accept4$bt_l2cap(r14, &(0x7f00000044c0)={0x1f, 0x0, @fixed}, &(0x7f0000004500)=0xe, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r15, 0x40806685, &(0x7f0000004680)={0x1, 0x1, 0x1000, 0xdd, &(0x7f0000004540)="e68e1c1047fb9926a141dbf1b23956d7fb87676581caf4e7d5e4b267ecf43da32bdf9a54024beda2d744c21a262da29214c0dc17b87e4db9e7e3a3f4e227ebeb7c12efcb3d8fe5b00b9fe3f29a031c0ea8156caca74dbdae3f3e48856c6e9b231c3405a8573e6a75110b74536f9e0a8dcfefc03bb3593747840eafadd4637e65d33b274c02a6bcc1422756ce62f4bd1c86f94c23a69ed2baa2c5c9df7f3a90d09101c8edf03d829aac42c58dd4483f18fb0f7e7ad6fc459b21912d43efe5647d1f329dc9173405195932fb0c9bf7adf7ba08287decb22942690d8459c8", 0x22, 0x0, &(0x7f0000004640)="1904db6a7e2612b271e7204d5c4eae41760a05b38dd53384e48e7ce00cb11f9f87ff"}) connect$bt_rfcomm(r11, &(0x7f0000004700)={0x1f, @any, 0x8}, 0xa) (async) r16 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r16, 0x0, 0x9, &(0x7f0000004740)="a1b55a4376651e9e8742c965775428bb045b5ecc8a50479a34b85ef5649fce8fd3a315ba0d0e8ed3e32c5bb14732b487a7d368fd699a993b445c6ed6b5701d9a164203e85ee46a08f240ae01ce7a055da537fa0f3f73060e5c6349db9af4649d", 0x60) r17 = syz_open_dev$hiddev(&(0x7f00000047c0), 0x8000, 0x422000) ioctl$HIDIOCGREPORTINFO(r17, 0xc00c4809, &(0x7f0000004800)={0x1, 0x0, 0x8000}) (async) recvfrom$inet(r16, &(0x7f0000004840)=""/104, 0x68, 0x100, 0x0, 0x0) (async) r18 = dup3(r8, r13, 0x80000) recvmmsg(r18, &(0x7f0000004cc0)=[{{&(0x7f00000048c0)=@phonet, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004940)=""/17, 0x11}, {&(0x7f0000004980)=""/151, 0x97}, {&(0x7f0000004a40)=""/147, 0x93}, {&(0x7f0000004b00)=""/131, 0x83}, {&(0x7f0000004bc0)=""/13, 0xd}, {&(0x7f0000004c00)=""/16, 0x10}], 0x6}, 0xe95a}], 0x1, 0x40, &(0x7f0000004d00)={0x77359400}) (async) fcntl$getflags(r0, 0x401) 427.07827ms ago: executing program 2 (id=167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="7c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x2, 0x0, 0x80, 0xa, 0x3, 0x5, 0x2, 0x400, 0x100, 0x8001, 0xf800, 0x5, 0x1, 0x2, 0x8000, 0x7], 0x41000, 0x200}) getsockopt$MRT6(r0, 0x29, 0xce, &(0x7f0000000080), &(0x7f0000000180)=0x4) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 365.566513ms ago: executing program 4 (id=168): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0xb68, 0xfff, 0x7, 0x0, 0x12, 0x3, 0x4, 0x4, 0x8, 0x4, 0x7, 0x85, 0x7fffffffffffffff}, {0x7ff, 0x81ff, 0x9, 0x8, 0x30, 0x81, 0x24, 0x40, 0x5, 0x3c, 0x4, 0x9, 0x3}, {0xd3, 0x80b0, 0x5, 0xff, 0x84, 0x9, 0x6, 0xe, 0x0, 0x9, 0xe, 0x6, 0x2}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='7\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='always\n', 0x7) mmap(&(0x7f0000800000/0x400000)=nil, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/lru_gen\x00', 0x2, 0x0) write(r4, &(0x7f0000000640)='+ 1 0 4', 0x7) pipe2(&(0x7f00000000c0), 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) recvmmsg(r5, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0x12}, {&(0x7f0000000180)=""/244, 0xf4}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r5, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004f80)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed002da6280c91950619c2a0e39042e0e7800ae7b041ff132d7fb40180000014c56dc066ca", 0x36}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)="a603418c14260a2a66d792cf7e1960", 0xf}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 138.948214ms ago: executing program 2 (id=169): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000080), 0xf) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) (async) unshare(0x20000400) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000400)=@keyring={'key_or_keyring:', r4}) (async) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, r3) (async) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000140)=0x2, 0x4) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x8, 0x9, 0x8, 0x8001, 0x200, 0x200}, 0x1c) 111.688735ms ago: executing program 2 (id=170): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000000)="f66b0a6288d48a02e9f980afeb1b8ce75cf874c44cc6a5d7bf7b5bf782775756202cd75b57d6b751b3f9b9c9be6dd5eef00fa20f08d01b61f113d254b6f99894e2f16f6753c71786e5de038fd9ac094beaaf4a5e42fde0162020e9c61bea903ee779c57bab3357571371a8cb531b42b31be0615dd68de3378ad0f9e5c20896ebcf2129463a51a17285f775d9df5d55fd17d5ff30beaf613a7ced55202c309558fa3e6cdf0fd89eb0c73dafa116455497c05b8bd12e81a0761f309bf4388595320507e608cdc219d56134657ab3c5ca5de8c1068e4c2eab3c3074426647e8a8b9ac206fb71ce958c05da0ee1437dff69500746b2cc81103ddcd75", 0xfa}, {&(0x7f0000000100)="58f9c418f83f3f1c08a8f6aa85304661a90ba954b1ed5fe3bc40a3c2412484a6df989cac0051c609d3d1a2457639670f5ce4ca4e6d7f34cb485ee48ae0c8c182c71afc290a8903461a6f115f8e796f7b0ae93991a7edb2f4d3c08f34b51322ea75f796baf6f243e169919564314cb4fae49ad152edd32d62e264cbf4995bc966b96a009db8c8d6f05a5473901463d6e8c16ff584e0c619843fe9aea81ad8e661f5ed09af4a3f9cd87db30a58755dc46ecb4a83a86a1ca649d48f651137571a3c78022c4a72da3b859db73e00e5fea3d81c67ee99ed09e319f2d279056a09b8a7f6773f0de8d1f1854842ab42956c8e431b3b8764b837604ae6da07e60bfca687f8f4de112bb4c4fa1a69ee8dad011f6278c278cd40f4849f6642be58895229612e9e97af48e4355d5ae4575e8f07b59a987b019d433a2e255febb860912c9053d1dd420c1d0900b669c6af93eaf04865eb72248131b64af4d41ce9c49504d252c904dfa59b0a76867ed6aa88b465fe3e775c538e2eba3f0986405111bf28cf2c523abafd29492a03193318c4ae6219373ba75b0f40c7d0a70bbb458662681acf815651e6f4481ae19bc6ce8caba9b1936a41d7b9f9a88199b893d32b413c78aeff0931fd6de5c8d9a02ca3d6ba02ab357e2b1d0dacd0b0c969d5410ffacac0ab6e083710c2334335ba6457717b44e815fcf48f150c1890a0e683bf9997b599bed97436c5d1974639e896a14496ac12ecdb90b4399dfce3459b90881f29a23aa5f8aac87fb448c246b93ba3f3bd0406ee2c8b8759b5d73064099715cca1f64e9e435228210dfa56187e1f49584fa664704966ddb6774ad212b94794240e10e3a05fb08b1cc171d3539dcbc66ef4db657c5d73589192faed33c72298ecad380bded6130954dff5c313db2886c74a26382b101c89277c5e147362febdf98c70e5e15137d16699440deb161c1ad400d1e424b8bae7f9d4a63ceea12bfb83a0cd94278a00fbceac3d8aeb2b4ef70577f5365d49d05b1ed09b48aa3d6b213c31836964a07fc9d5d582c00a1ddd665672d0b3811a638c17d7dbb7831e690d714961a5de0306a3d954a8f00e54f0db34f75c2364095c1ca0e277e11ac94da8d99cb0e88aee08da2713d88280fdd9916e1dcc7a570ce644b5889862b41833410efc76abfc666b986f2ba75c79a6b5d9aa382f3969dacab6e0596e443cf285065554f52d5c642877096a3c44ec7ba8d441262e735b63d87ecc10451139965c2350c11e3d941bf522a175c75848171e8127f363d3a35ad7b14c8e0e1a22ff938918f3db7909095229a7317d147d3a1192a7ead4d6d05375b9031ce438e207ffe1b0d8d224ad29985f83044a2dbbc44cb4b0e99f0c0b83de8f2a88eb46102c7c5fb72d4622899803ce8568fb9f61de562fd09f4bbaa40cfc8e0a9da62acbc66364c9be8d9f34d86c4a8160f1bc534aedf6b81bfbf5101fdac09d82d642a8a1281c1d716f0a236e3a598a86ab5081466c2462dc47e666b60c1587f7c4a1ec563fe88c39dd78e95f44f706e8ccce1c1870a4bd52e48ba8f0f681a587bb4842fc654f715fd2ee12de109088789fa72dd394ca9d0167e209ed196215064d81e07d04c7fee460d36b062b573215d28cca75394fe154c70d6920a24fd778a62c62df2cea221e420216f682f9be47e527994249ecd9be584bc36fe608a0f2048fcdc5ce36a0b8cd753580df917a75ef37d6adce6ed68c3e4f82208229f17df17df4de5c3862e9f47de21f8d326f1f4cff2239b343a9de657232a5212b4be37c6e015f9b4fbc40842d0bdcde62284eab9141e8e137649ba3b258eebf661e279ddf5e7f45719686b0227f111ba86cda0cc26df6992d9313a8cd53f3ca592a25ce568eed68a956e645ac87e57fe2eb09b7cebfcabc955b5cec5f924cec5bcee2a04fed8526e2ed1ef8c38faf93d0d54d78c99c33d89a46cd8337f76ffab1730059ba707b7c6d664ee9f2d112c84075ed89ce7eb90f72e5cb5fb7e0524ae0e0cb7787a4fdb6484c5700c374d5b9117a7ed41fd217b9d7235158acdce0ad63522c8c22191e499e41cfecb4b0ece7f073dc37f10b769a105ccf2b29d80dffaba2bf8629ce32d11e2ff5c9d26a7842239fb9d63995125f842cc6bc98d7bad0dac17e3a6ffeb6c3cb3785576f7b85cec95cc9f8faa912f24339911655818195e17f0c878d9941ca910f37bf50dbf14e436a685459a4ab33f55a3592bca65da0453158211deee956515bda35316557c24fc125c43034e41d3849a2a1eab88374898092348395222e8654e8fc2038ff976dbcc09ff499da7cdefee91408e2696f3152ac90206bc54ff50bb5d8a6a531c985381e51db01dd9fdf4aad3450a8dd274f373a8f7625bda19babc3434817244a51c9ad9a939f15a2749b31e3a9b46a565e9936c7161c38662a37f53f6b8aed7135dcf2d4b9f5ade8e69fa8b1f5a1c94efcf7c15e176e0f3d98f4bda29730046532c0754c509e0882b273f60233f20cc7199c45e53819c2fd81a26ec8d28e5ab48f21a7a5d3b147a29c898fd01bdf628e6fbb6158c5bf774893fb07074cd6601310566e445d3b67afa01e4e8641705e1b3fc15ce6493700e496de4fb274db349010657d574357a12c002fc14d68d686820e323e94c690cf34da78cecfadc697e69cd72b24756c765a9221f79a550ff765b59559a0fd73df4c1265ae0b9319fe12dc0b5f6ffd1705f2e308b3822b9a6f8bf4aa0774e0c96987f6c68f5abc3628bf1359ef084f40e252fcf89822d6950480183369fc8719c6f88f9393f47259483a2cac11006349f4d3acf8ba2d37da849fe53636ac4534721b4f34899b82086909c3ea808fdcd07e822263537582ea7ae446fd37fcf14e5550ce0a74ba7609ab1e41987065b850d29920d3fa1aa5b33bbe07bcadc9bef1fbe6e36b75448107c653014cf252633c5a87a5622730e059d50cb5d0dd9812900c86de95e720f0b9b382bbf997957b5b9785105c9ae88a2fac0e528e9fec55f91b6c64858730c9eda550dfd72b393dd882136d6c8e23502e5c7865a85eb9bdb7360869c9e04775475d3ad01ee9b244a8a7d4a748f86ab2f1ba4343342c7d5de66e574dbd3ee5e8835cbe4d1a6f37a8c5e7a1d09867791240abb13fa58d729e716f68a6e4f5b85ad52c713cd9d25d966295a4f679a79bd7dcc8798dd93c326b2999eadf62d060d269a409d7038812ae22d45265fd69da44602fb841fd7af7b49a71192ee5a79b8ca734ccadf397cb9c06f0c9ebffee1e6fe05f09b7775f8781f1b7fdd0161366a49324719af99067bf6cdae2868c1d6be54a56c34ac2ab09c07379f27c6204bf61e4bf07cc2a1c2e361a12befad5981a12fc81cd1e00ded0af3d5919277f256c77e5e33b2ff933729e9d9bb8f6f356a30f2c7b150b402ff0f9b521150e7573dafab1416dcfd4ecbcf42466d726b74f22b8d4629dfb2c0532e9458c3db2f6fb6d46e682caa9c18b6fd5ff136e860f0ba6bc6f056af18bae35c878f9c1199f671440a92647896bc903de15cb02899e7f4ac8523be206957ad0d175aea80aa5843ab5d5efa584ed48394a711c7cf392e5fcfb42f498b4de7868db17aaca18f55726106c2043113006c93896ed6e12c6087d3190274dff17f01fe462fe805c7ef36077b71b8cb6c977c3d176c464f58b434a40293209a8d0a6d59c318829170f279f734f5419aecb5287d93ef59c56cfd787a9dbc8050503260d7c8c6ae1c96f900e24be1ac2668e66972181d779ec2299ca1fb3a3eaf8ddc2f26499847f236b38d7abd67f7c62fd92932c533cc67736a65334cfbdf73dac6cff4c00ab456d0ed83fdb6b561d9693c2808e81ca9d9a4dde859cf2f4d45848ade169f06c77f30e3fd49361bfe5411cc5ec0e4a8b672da8c3b8429c228bf0e72487ba151d35cb6ae5f491268d0c01f047be79784a55f00210372c6f1932d9b16aa620b8c86a393178cd7f570141b22316212dc3b87a637f6e6a66bb1e60e99fa2a53ba7ff9452077f63525d026327d27587817a06f5fa031acb3d4031a866f2fbe3ec6a60a3c7c6eb16b3e5330a0d30e254f87083ee2680e96c00a308951728c206224b582382fd6b642fdea876f99dcfc2146d5556e0b78dffef83c8d23ac515e888d87fa89000883e5e44243de48844825f3e7b0a0c41d71e21019aca3f0d065306a646b8287cf60738f4d789215adaa2195fbfa61b0529eb3c5c39741e756471bee89af21cbfba556a7f2e24ce8cba4c7f04a8626b49b14f000f77ca25710dbea12f609adca183bd6a8409f25fdda419ac20ec44ed1b8c9ec9f4c389380623310405b6fd4cec6f561dae39c2f465203fa533264f7944d7343d85c2f3cd6159de992784d219cb93af138d03a7cbb3a281ba07a98832d15147b68e4008f9a1a346fc3023119b7f3ecfa02ce5b595ae2c465508e65436acc2e758a87de7e98698be6ba23b9be37da7fad820e61ac51ef1fb9d0fb96aea8b7a9cf4562ba88ee9bcb42413eeb2d5d41804b70b107e9cb289e65f4c3c7533d34bc968914ecd0e8a5ee0b3e767921934e14a6d751b48959195e092fc439c88ff049fe201f9dc8d4867572f84408815ab144da9571f9f03850c85f396628715b68ada080e6a2601917e1ee60384cccea4205c267f8cd9c7b8053a12def5d8d182f5b78d277b479fccddf01a57665a52c65b670a1f115a1dfb87b2b2cfa3504a2b710b491282920aa2478a3012ab1a5db8196b96fc6a0410924d6728258eb27bdc83d64c3618f48ff03a5c97d83c75f218c6e36d439a41f941601cbf47861413abb66a3eba5fbf6700544dfe1d722085ae7a423e59e9300bffa7c681241d9e1b52e70db6f680d0ba68c42da29da30c7169eecdfaf7ba527a04703d2f2b08e8b6ef9f5544e8b3767198957651bfef033b1fe9ffae9b9b5cfdf1df565137d68e1303a0e1ed760a33715898b72bea20c599f363337e8a77f3795d0a7bc584da2140a2ab03d1712a5965196d955d723ef2879ef5e91e2d4c4faf4613de5d610d900da5c2425dc049cbe6ce0b0be158971e54c7892dac64b19da1796ff650d9fd815f7cb197c4439430d0816d469a4dc1bf100581dc8b7736511ec5eec68ed97517630e08197a0dc690751d51ef9789c06a54fe9aed5b562878d23309e67d841d2a907fb690d730cdd2471c7264227544d2008202d418787c53258840fa81246ceb655de2b7c7014cb79165dd41ed06f73769af01fb9bba9d4c835cea7e344c25d6ddc3b0a45b3affb3f41d4a6d6e523ca367f4be40822a9e49249edeea7f371325b0fe0642a72c8384e295b04bf98dd3b90cbbfe7801d491d051635335c6e4550a501490588aa93306dc36112f8fb437aff558a7620fe1f0c60cee00cce199e871c6d3685d7a6dfa5ada0d27c6c6c5f427c4eef030b87909df5c7bae9e0824f41f1e59676c2ea5413fe509d19e7b9062132c74c95aefe4e298b5dd0660dcfcd4d7769bdf8aeaf69e38e29de4d4ca13a643bb846b2e9907e78d497a5863cd8d6191ed49b62715d79dc844af24233ee3de70f0ece7c0b0e98beacecece2534c5c68ffd718e4be69b0a87f66c12700d2c3fcaa47ec879b332055c49dfcd06677bb97214ed854d32b4ae2d3cbeb9815770c218eea4a71ee8f57bf8f5543a09b4f4664f4f1e5ffdfae2e9054a79ebdc08f15799d42b40459b915c8f838a5c316f162bee0cf4c8b46e81a44b381590f6d36af0c7733fe18a5045fcad0a4d73405b979ded9f95aeec4bc358615ea164518cd19d2390b0d317f915", 0x1000}, {&(0x7f0000001100)="b96379fe9c53082b64d0dea6c3ac7a37f532d98928ea8e13828de5f7a598bb9cf084972356b1a2b5d8789acc193e47b1237264d31bef5c766b84feb736454d7ff57b4136d8a3b4e97dc7c9ef", 0x4c}, {&(0x7f0000001480)="5c55863abb65abb6597676628cc6743e41b4a674fd3c643eeca184ac03451a5b6c3b146873f585d6947e4e19c31ded284ce533a04a8244a3d9ad9743877ac37b7a9acf648f27e60d70aedbe1a35b2c816046a53606749b5398a4357f4fb6c8c31568b95c7ff9c666d251f2787577360e8d8a746c0175ddbdf6b7e30746e748eef461cc4938664d959d0df0646f0ccd28a82294c442f840ce8b24e43dc54ff9f1cb55bae192983b04e15dd53016ea0c7cff3c8ce389a0f74d2197f27a437d9aac8dfd055d06d15660c329ddd1b3", 0xcd}, {&(0x7f0000001280)="dd8a2bf9bdde323ba3a4db188f2aac75f1ad20144b5a06a7fa5c3a877cbddf4a35b2ef53febc8cb530dec9ff6bb2911f5aa7bc41072bff68a3d9ad7f42f9c22f490af38e5fb085ca10c0e3a408ce055a48135221055f4f91b2b5fc7390e5ddd038739cf16547cdfb72740939106156cfc531b9fdb4f0c5002844dc314a6e080cf6d2fe9cf1f0b9d35626d6f0b841237130856ae31ae4e48b3f7f65e569daa09691e38ded214588c4d8609cd8147ffe2c7b9ffb8199403f823bbf30973a4b4492cec16733c4f1d86283235b22181e390ae661a4eb3504112f733242cd324048ee45055f6fd6f9e88b22405bd01300ef57f6eb1995d5e139cb7861dc8d0ca0", 0xfe}, {&(0x7f0000001380)="ea2e747332c062548cde4c535884cb136e80fe64aea6a57b842e2b5d8cd8b7c265ee7babe847a53da948864ad41e3eec9a037c259bdf", 0x36}, {&(0x7f00000013c0)="f5c215", 0x3}], 0x7) 22.770479ms ago: executing program 2 (id=171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000005c0)=0x4) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x58042, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="00000000009f97ad88ed", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCEXCL(r5, 0x540c) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x2b, 0xfffffffe, 0x30044004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) close(r3) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40}) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffd, 0x2e44) r8 = dup3(r7, r6, 0x80000) readv(r8, &(0x7f0000000440)=[{&(0x7f0000000180)=""/204, 0xcc}], 0x1) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 0s ago: executing program 33 (id=114): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1204042, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8420, 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8420, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts. [ 22.139736][ T36] audit: type=1400 audit(1789957580.709:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.140954][ T286] cgroup: Unknown subsys name 'net' [ 22.162438][ T36] audit: type=1400 audit(1789957580.709:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.189685][ T36] audit: type=1400 audit(1789957580.739:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.189891][ T286] cgroup: Unknown subsys name 'devices' [ 22.315187][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.320798][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.433217][ T36] audit: type=1400 audit(1789957580.999:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.456380][ T36] audit: type=1400 audit(1789957580.999:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.467699][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.481255][ T36] audit: type=1400 audit(1789957580.999:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.512757][ T36] audit: type=1400 audit(1789957581.069:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.538388][ T36] audit: type=1400 audit(1789957581.069:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.570959][ T36] audit: type=1400 audit(1789957581.139:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.596529][ T36] audit: type=1400 audit(1789957581.139:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.596803][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.369639][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.376779][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.384064][ T293] bridge_slave_0: entered allmulticast mode [ 23.390230][ T293] bridge_slave_0: entered promiscuous mode [ 23.398036][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.405134][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.412199][ T293] bridge_slave_1: entered allmulticast mode [ 23.418350][ T293] bridge_slave_1: entered promiscuous mode [ 23.495866][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.502919][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.510017][ T295] bridge_slave_0: entered allmulticast mode [ 23.516168][ T295] bridge_slave_0: entered promiscuous mode [ 23.522325][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.529528][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.536660][ T296] bridge_slave_0: entered allmulticast mode [ 23.542786][ T296] bridge_slave_0: entered promiscuous mode [ 23.551096][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.558168][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.565239][ T296] bridge_slave_1: entered allmulticast mode [ 23.571396][ T296] bridge_slave_1: entered promiscuous mode [ 23.577510][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.584556][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.591605][ T295] bridge_slave_1: entered allmulticast mode [ 23.597969][ T295] bridge_slave_1: entered promiscuous mode [ 23.648547][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.655638][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.662675][ T294] bridge_slave_0: entered allmulticast mode [ 23.668944][ T294] bridge_slave_0: entered promiscuous mode [ 23.685931][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.692986][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.700103][ T294] bridge_slave_1: entered allmulticast mode [ 23.706297][ T294] bridge_slave_1: entered promiscuous mode [ 23.786750][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.793826][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.801099][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.808140][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.834314][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.841464][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.848753][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.855782][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.871969][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.879045][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.886380][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.893396][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.911517][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.918587][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.925877][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.932886][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.956348][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.964026][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.971240][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.978850][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.986413][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.993737][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.025290][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.032331][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.039962][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.047009][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.062544][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.069625][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.081280][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.088350][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.116829][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.123902][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.132930][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.139995][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.170821][ T296] veth0_vlan: entered promiscuous mode [ 24.184794][ T294] veth0_vlan: entered promiscuous mode [ 24.205034][ T296] veth1_macvtap: entered promiscuous mode [ 24.216847][ T295] veth0_vlan: entered promiscuous mode [ 24.225461][ T293] veth0_vlan: entered promiscuous mode [ 24.231161][ T294] veth1_macvtap: entered promiscuous mode [ 24.246906][ T295] veth1_macvtap: entered promiscuous mode [ 24.260888][ T293] veth1_macvtap: entered promiscuous mode [ 24.297512][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.369465][ T323] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 24.369487][ T323] rust_binder: Read failure Err(EFAULT) in pid:2 [ 24.373823][ T322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.379317][ T323] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 24.402075][ T323] rust_binder: Read failure Err(EFAULT) in pid:2 [ 24.440784][ T330] rust_binder: validate_parent_fixup: new_min_offset=216, sg_entry.length=0 [ 24.447730][ T330] rust_binder: 321:330 error while translating object: EINVAL [ 24.464131][ T330] rust_binder: Failure in copy_transaction_data: EINVAL [ 24.464172][ T330] rust_binder: 321:330 transaction call to 321:0 failed EINVAL, code 0 size 112-24 [ 24.482626][ T45] rust_binder: 321: undelivered TRANSACTION_ERROR: 29201 [ 24.499083][ T333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=333 comm=syz.2.6 [ 24.733838][ T45] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 24.773536][ T311] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.895917][ T45] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 24.905138][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.913180][ T45] usb 1-1: Product: syz [ 24.917381][ T45] usb 1-1: Manufacturer: syz [ 24.921990][ T45] usb 1-1: SerialNumber: syz [ 24.927689][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.938939][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.948762][ T311] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 24.957890][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.966543][ T45] r8152-cfgselector 1-1: Unknown version 0x0000 [ 24.972799][ T45] r8152-cfgselector 1-1: config 0 descriptor?? [ 24.979789][ T311] usb 2-1: config 0 descriptor?? [ 24.985990][ T313] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 25.164605][ T313] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.174809][ T313] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.184775][ T313] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 25.193894][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 25.201946][ T313] usb 3-1: SerialNumber: syz [ 25.209306][ T313] usb 3-1: 0:2 : does not exist [ 25.279360][ T347] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3830640123 (3830640123 ns) > initial count (1447796008 ns). Using initial count to start timer. [ 25.406691][ T311] usbhid 2-1:0.0: can't add hid device: -71 [ 25.418636][ T311] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 25.427685][ T311] usb 2-1: USB disconnect, device number 2 [ 25.517732][ T358] netlink: 'syz.3.16': attribute type 3 has an invalid length. [ 25.618219][ T311] usb 3-1: USB disconnect, device number 2 [ 25.939713][ T363] Zero length message leads to an empty skb [ 25.955506][ T363] tipc: Enabling of bearer rejected, media not registered [ 26.308679][ T406] netlink: 44 bytes leftover after parsing attributes in process `syz.1.22'. [ 26.317694][ T406] netlink: 43 bytes leftover after parsing attributes in process `syz.1.22'. [ 26.328659][ T406] netlink: 'syz.1.22': attribute type 6 has an invalid length. [ 26.336426][ T406] netlink: 'syz.1.22': attribute type 5 has an invalid length. [ 26.344163][ T406] netlink: 43 bytes leftover after parsing attributes in process `syz.1.22'. [ 27.043713][ T313] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.204599][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.214447][ T313] usb 4-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 27.223520][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.232043][ T313] usb 4-1: config 0 descriptor?? [ 27.403524][ T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.507001][ T31] r8152-cfgselector 1-1: USB disconnect, device number 2 [ 27.538168][ T36] kauditd_printk_skb: 115 callbacks suppressed [ 27.538184][ T36] audit: type=1400 audit(1789957586.109:189): avc: denied { read write } for pid=478 comm="syz.0.36" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 27.570082][ T36] audit: type=1400 audit(1789957586.109:190): avc: denied { open } for pid=478 comm="syz.0.36" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 27.571990][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.606479][ T311] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.616082][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.629145][ T311] usb 3-1: Product: syz [ 27.631644][ T36] audit: type=1400 audit(1789957586.199:191): avc: denied { ioctl } for pid=482 comm="syz.0.37" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5318 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.633344][ T311] usb 3-1: Manufacturer: syz [ 27.664097][ T311] usb 3-1: SerialNumber: syz [ 27.669355][ T483] FAULT_INJECTION: forcing a failure. [ 27.669355][ T483] name failslab, interval 1, probability 0, space 0, times 0 [ 27.682246][ T483] CPU: 0 UID: 0 PID: 483 Comm: syz.0.37 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 27.682273][ T483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.682292][ T483] Call Trace: [ 27.682298][ T483] [ 27.682305][ T483] __dump_stack+0x21/0x30 [ 27.682337][ T483] dump_stack_lvl+0x140/0x1c0 [ 27.682350][ T483] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.682363][ T483] dump_stack+0x19/0x20 [ 27.682375][ T483] should_fail_ex+0x3c2/0x510 [ 27.682387][ T483] ? security_sk_alloc+0x65/0x260 [ 27.682411][ T483] should_failslab+0xac/0x100 [ 27.682434][ T483] __kmalloc_noprof+0x69/0x510 [ 27.682452][ T483] ? kasan_save_alloc_info+0x3a/0x50 [ 27.682469][ T483] ? security_sk_alloc+0x65/0x260 [ 27.682484][ T483] ? __kasan_slab_alloc+0x73/0x90 [ 27.682496][ T483] security_sk_alloc+0x65/0x260 [ 27.682509][ T483] sk_prot_alloc+0x123/0x3a0 [ 27.682522][ T483] sk_alloc+0x40/0x590 [ 27.682533][ T483] __vsock_create+0x3e/0x950 [ 27.682549][ T483] vsock_create+0x13e/0x460 [ 27.682567][ T483] __sock_create+0x3a2/0x810 [ 27.682587][ T483] __sys_socket+0xe1/0x1c0 [ 27.682606][ T483] __x64_sys_socket+0x7e/0x90 [ 27.682621][ T483] x64_sys_call+0x2608/0x2ee0 [ 27.682631][ T483] do_syscall_64+0x57/0xf0 [ 27.682640][ T483] ? clear_bhb_loop+0x50/0xa0 [ 27.682653][ T483] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.682664][ T483] RIP: 0033:0x7f8872f9e159 [ 27.682679][ T483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.682693][ T483] RSP: 002b:00007f8873eb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 27.682721][ T483] RAX: ffffffffffffffda RBX: 00007f8873225fa0 RCX: 00007f8872f9e159 [ 27.682735][ T483] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 27.682746][ T483] RBP: 00007f887303506b R08: 0000000000000000 R09: 0000000000000000 [ 27.682763][ T483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.682769][ T483] R13: 00007f8873226038 R14: 00007f8873225fa0 R15: 00007ffece771588 [ 27.682778][ T483] [ 27.895985][ T462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.908263][ T462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.926256][ T36] audit: type=1400 audit(1789957586.479:192): avc: denied { mount } for pid=490 comm="syz.1.38" name="/" dev="overlay" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.947970][ T36] audit: type=1400 audit(1789957586.489:193): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.967730][ T36] audit: type=1400 audit(1789957586.499:194): avc: denied { bind } for pid=499 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.107390][ T500] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 28.115687][ T500] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 28.124404][ T500] kvm: requested 99733 ns i8254 timer period limited to 200000 ns [ 28.132607][ T500] kvm: requested 51123 ns i8254 timer period limited to 200000 ns [ 28.140923][ T313] usbhid 4-1:0.0: can't add hid device: -71 [ 28.146924][ T313] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 28.165735][ T313] usb 4-1: USB disconnect, device number 2 [ 28.171750][ T500] kvm: requested 70400 ns i8254 timer period limited to 200000 ns [ 28.705772][ T311] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 28.712279][ T311] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 28.728248][ T311] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 28.943517][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.973673][ T31] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 29.093498][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 29.099830][ T9] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 29.108233][ T9] usb 2-1: config 0 has no interface number 0 [ 29.114571][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 29.124832][ T9] usb 2-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 65360, setting to 1024 [ 29.136314][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 29.137015][ T31] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 29.148068][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 29.155593][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.183504][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.193479][ T31] usb 4-1: Product: syz [ 29.193668][ T9] usb 2-1: Product: syz [ 29.197693][ T31] usb 4-1: Manufacturer: syz [ 29.211998][ T9] usb 2-1: Manufacturer: syz [ 29.214769][ T31] usb 4-1: SerialNumber: syz [ 29.222093][ T9] usb 2-1: SerialNumber: syz [ 29.226894][ T31] r8152-cfgselector 4-1: Unknown version 0x0000 [ 29.241951][ T9] usb 2-1: config 0 descriptor?? [ 29.244939][ T31] r8152-cfgselector 4-1: config 0 descriptor?? [ 29.253889][ T510] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 29.266018][ T510] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 29.477410][ T510] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 29.484888][ T510] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 29.693411][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 30.230194][ T311] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 30.251729][ T311] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 30.270794][ T311] usb 3-1: USB disconnect, device number 3 [ 30.291584][ T311] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 30.703540][ T311] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.863511][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 30.869959][ T311] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 30.878365][ T311] usb 3-1: config 1 has no interface number 0 [ 30.884766][ T311] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 30.895016][ T311] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 30.905314][ T311] usb 3-1: config 1 interface 105 has no altsetting 0 [ 30.913856][ T311] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 30.923059][ T311] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 30.931438][ T311] usb 3-1: Product: syz [ 30.935888][ T311] usb 3-1: Manufacturer: syz [ 30.940549][ T311] usb 3-1: SerialNumber: syz [ 30.946570][ T531] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 30.953956][ T531] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 31.362121][ T531] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 31.369598][ T531] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 31.516408][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 31.543526][ T9] asix 2-1:0.34: probe with driver asix failed with error -71 [ 31.557113][ T9] usb 2-1: USB disconnect, device number 3 [ 31.738701][ T64] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 31.784102][ T36] audit: type=1400 audit(1789957590.359:195): avc: denied { create } for pid=529 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.786368][ T311] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 31.814054][ T36] audit: type=1400 audit(1789957590.379:196): avc: denied { write } for pid=529 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.833797][ T311] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 31.855204][ T311] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 12:7f:af:a2:2b:17 [ 32.019750][ T36] audit: type=1400 audit(1789957590.589:197): avc: denied { map } for pid=574 comm="syz.3.48" path="pipe:[4765]" dev="pipefs" ino=4765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 32.055466][ T36] audit: type=1400 audit(1789957590.589:198): avc: denied { execute } for pid=574 comm="syz.3.48" path="pipe:[4765]" dev="pipefs" ino=4765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 32.172950][ T580] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 32.190479][ T580] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 32.207614][ T580] overlayfs: overlapping lowerdir path [ 32.261491][ T587] fuse: Bad value for 'user_id' [ 32.268049][ T587] fuse: Bad value for 'user_id' [ 32.297734][ T531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.307234][ T531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.315206][ T149] aqc111 3-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -32 [ 32.529540][ T311] usb 3-1: USB disconnect, device number 4 [ 32.544603][ T311] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 32.564762][ T311] aqc111 3-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 32.565866][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 32.565878][ T36] audit: type=1400 audit(1789957591.139:201): avc: denied { map } for pid=599 comm="syz.1.52" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.581513][ T311] aqc111 3-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 32.643754][ T311] aqc111 3-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 32.662072][ T311] aqc111 3-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 32.707263][ T36] audit: type=1400 audit(1789957591.279:202): avc: denied { search } for pid=609 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.746184][ T311] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 32.750087][ T36] audit: type=1400 audit(1789957591.309:203): avc: denied { read } for pid=610 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.763509][ T311] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 32.802887][ T36] audit: type=1400 audit(1789957591.309:204): avc: denied { open } for pid=610 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.827086][ T311] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 32.854526][ T36] audit: type=1400 audit(1789957591.309:205): avc: denied { getattr } for pid=610 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.919645][ T36] audit: type=1400 audit(1789957591.489:206): avc: denied { write } for pid=609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=424 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.964995][ T36] audit: type=1400 audit(1789957591.489:207): avc: denied { add_name } for pid=609 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.008465][ T36] audit: type=1400 audit(1789957591.539:208): avc: denied { remove_name } for pid=620 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=764 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.063649][ T626] overlayfs: missing 'workdir' [ 33.290100][ T634] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 33.313495][ T311] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.323832][ T634] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 33.365954][ T634] overlay: Unknown parameter '€' [ 33.380549][ T634] overlay: Unknown parameter '€' [ 33.389553][ T634] overlay: Unknown parameter '€' [ 33.406744][ T634] overlay: Unknown parameter '€' [ 33.436895][ T36] audit: type=1400 audit(1789957592.009:209): avc: denied { write } for pid=646 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.462691][ T634] overlay: Unknown parameter '€' [ 33.473483][ T311] usb 4-1: device descriptor read/64, error -71 [ 33.484773][ T36] audit: type=1400 audit(1789957592.009:210): avc: denied { bind } for pid=646 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.536406][ T634] overlay: Unknown parameter '€' [ 33.582453][ T634] overlay: Unknown parameter '€' [ 33.629865][ T657] netlink: 'syz.1.58': attribute type 1 has an invalid length. [ 33.655161][ T634] overlay: Unknown parameter '€' [ 33.663653][ T657] netlink: 'syz.1.58': attribute type 1 has an invalid length. [ 33.697673][ T634] overlay: Unknown parameter '€' [ 33.719544][ T634] overlay: Unknown parameter '€' [ 33.741228][ T311] usb 4-1: device descriptor read/64, error -71 [ 33.761066][ T634] overlay: Unknown parameter '€' [ 33.811223][ T634] overlay: Unknown parameter '€' [ 33.884419][ T634] overlay: Unknown parameter '€' [ 33.983492][ T311] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.992303][ T634] overlay: Unknown parameter '€' [ 34.102845][ T634] overlay: Unknown parameter '€' [ 34.113513][ T311] usb 4-1: device descriptor read/64, error -71 [ 34.353485][ T311] usb 4-1: device descriptor read/64, error -71 [ 34.463607][ T311] usb usb4-port1: attempt power cycle [ 34.803696][ T311] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 34.824483][ T311] usb 4-1: device descriptor read/8, error -71 [ 34.923511][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.954458][ T311] usb 4-1: device descriptor read/8, error -71 [ 35.074528][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.093486][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 35.107354][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.203483][ T311] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 35.234513][ T311] usb 4-1: device descriptor read/8, error -71 [ 35.241384][ T689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.331357][ T9] wacom 0003:056A:033B.0001: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 35.369034][ T9] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 35.384444][ T311] usb 4-1: device descriptor read/8, error -71 [ 35.391428][ T9] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.0001/input/input4 [ 35.493564][ T311] usb usb4-port1: unable to enumerate USB device [ 36.120858][ T692] page size migration: [692 (syz.3.62)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 36.121618][ T692] overlayfs: conflicting options: metacopy=off,verity=require [ 36.215596][ T697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=697 comm=syz.3.64 [ 36.983540][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.148232][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 37.171234][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.194583][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 37.212458][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 37.235925][ T9] usb 3-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 37.247295][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.263007][ T9] usb 3-1: Product: syz [ 37.276610][ T9] usb 3-1: Manufacturer: syz [ 37.287620][ T9] usb 3-1: SerialNumber: syz [ 37.632239][ T64] usb 2-1: USB disconnect, device number 4 [ 37.744778][ T717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.776319][ T312] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 37.816794][ T717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.944632][ T312] usb 4-1: config 127 has an invalid interface number: 24 but max is 0 [ 37.963108][ T64] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 37.971099][ T312] usb 4-1: config 127 has no interface number 0 [ 37.980195][ T312] usb 4-1: New USB device found, idVendor=0300, idProduct=8cfc, bcdDevice= 0.2c [ 37.993475][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.006167][ T312] usb 4-1: Product: syz [ 38.010360][ T312] usb 4-1: Manufacturer: syz [ 38.015039][ T312] usb 4-1: SerialNumber: syz [ 38.024669][ T312] usb-storage 4-1:127.24: USB Mass Storage device detected [ 38.103686][ T9] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 38.111592][ T9] usb 3-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 38.129005][ T9] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 38.145343][ T9] usb 3-1: unit 2 not found! [ 38.150040][ T64] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 38.159178][ T9] usb 3-1: unit 0 not found! [ 38.163792][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.175273][ T9] usb 3-1: USB disconnect, device number 5 [ 38.181509][ T64] usb 2-1: Product: syz [ 38.185743][ T64] usb 2-1: Manufacturer: syz [ 38.190348][ T64] usb 2-1: SerialNumber: syz [ 38.205333][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.224697][ T713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.234287][ T64] r8152-cfgselector 2-1: Unknown version 0x0000 [ 38.240551][ T64] r8152-cfgselector 2-1: config 0 descriptor?? [ 38.247251][ T713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.247428][ T725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.293681][ T725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.326350][ T64] usb 4-1: USB disconnect, device number 8 [ 38.669878][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 38.669894][ T36] audit: type=1400 audit(1789957597.239:231): avc: denied { mount } for pid=726 comm="syz.2.72" name="/" dev="configfs" ino=2550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 38.726268][ T36] audit: type=1400 audit(1789957597.239:232): avc: denied { search } for pid=726 comm="syz.2.72" name="/" dev="configfs" ino=2550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 38.748343][ T36] audit: type=1400 audit(1789957597.239:233): avc: denied { write } for pid=726 comm="syz.2.72" name="usb_gadget" dev="configfs" ino=2551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 38.771183][ T36] audit: type=1400 audit(1789957597.239:234): avc: denied { add_name } for pid=726 comm="syz.2.72" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 38.791313][ T36] audit: type=1400 audit(1789957597.239:235): avc: denied { create } for pid=726 comm="syz.2.72" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 38.811087][ T36] audit: type=1400 audit(1789957597.249:236): avc: denied { write } for pid=726 comm="syz.2.72" name="bcdUSB" dev="configfs" ino=7411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 38.833807][ T36] audit: type=1400 audit(1789957597.249:237): avc: denied { open } for pid=726 comm="syz.2.72" path="/15/config/usb_gadget/g1/bcdUSB" dev="configfs" ino=7411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 38.865103][ T36] audit: type=1400 audit(1789957597.289:238): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 38.894795][ T36] audit: type=1400 audit(1789957597.459:239): avc: denied { map } for pid=739 comm="syz.3.74" path="socket:[7432]" dev="sockfs" ino=7432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.917754][ T36] audit: type=1400 audit(1789957597.459:240): avc: denied { read } for pid=739 comm="syz.3.74" path="socket:[7432]" dev="sockfs" ino=7432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.256776][ T758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 39.286660][ T758] rust_binder: 757:758 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 39.323486][ T758] rust_binder: Write failure EINVAL in pid:114 [ 39.957512][ T645] syz.2.56 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 40.025385][ T645] CPU: 1 UID: 0 PID: 645 Comm: syz.2.56 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 40.025414][ T645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.025425][ T645] Call Trace: [ 40.025431][ T645] [ 40.025438][ T645] __dump_stack+0x21/0x30 [ 40.025467][ T645] dump_stack_lvl+0x140/0x1c0 [ 40.025488][ T645] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.025508][ T645] ? ___ratelimit+0x41c/0x5c0 [ 40.025527][ T645] ? __kasan_check_write+0x18/0x20 [ 40.025548][ T645] dump_stack+0x19/0x20 [ 40.025570][ T645] dump_header+0xd9/0x460 [ 40.025593][ T645] oom_kill_process+0x35d/0x640 [ 40.025615][ T645] out_of_memory+0x5d1/0xa20 [ 40.025636][ T645] ? __cfi_out_of_memory+0x10/0x10 [ 40.025657][ T645] ? mutex_lock_killable+0x97/0x1d0 [ 40.025678][ T645] ? __cfi_mutex_lock_killable+0x10/0x10 [ 40.025700][ T645] mem_cgroup_out_of_memory+0x2c5/0x390 [ 40.025718][ T645] ? css_next_descendant_pre+0x1ec/0x210 [ 40.025740][ T645] ? __kasan_check_write+0x18/0x20 [ 40.025758][ T645] ? drain_obj_stock+0xec0/0xec0 [ 40.025779][ T645] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 40.025799][ T645] try_charge_memcg+0x925/0xe10 [ 40.025823][ T645] ? static_key_count+0x45/0x70 [ 40.025844][ T645] ? lruvec_init+0x211/0x280 [ 40.025864][ T645] ? __cfi_try_charge_memcg+0x10/0x10 [ 40.025888][ T645] ? __alloc_pages_noprof+0x35a/0x7e0 [ 40.025913][ T645] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 40.025938][ T645] __mem_cgroup_charge+0xfc/0x420 [ 40.025956][ T645] ? do_pte_missing+0x3894/0x4440 [ 40.025979][ T645] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 40.025998][ T645] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 40.026023][ T645] ? shmem_replace_folio+0x9b0/0x9b0 [ 40.026044][ T645] ? shmem_huge_global_enabled+0x2da/0x360 [ 40.026065][ T645] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 40.026086][ T645] ? __kasan_check_write+0x18/0x20 [ 40.026104][ T645] ? _raw_spin_lock+0x92/0x120 [ 40.026122][ T645] shmem_get_folio_gfp+0x5cd/0x12e0 [ 40.026144][ T645] ? shmem_get_folio+0xc0/0xc0 [ 40.026164][ T645] ? __kasan_check_write+0x18/0x20 [ 40.026181][ T645] ? inode_to_bdi+0x6d/0x100 [ 40.026206][ T645] shmem_write_begin+0xf4/0x260 [ 40.026228][ T645] generic_perform_write+0x32c/0x970 [ 40.026251][ T645] ? inode_update_timestamps+0x4d1/0x6e0 [ 40.026277][ T645] ? __cfi_generic_perform_write+0x10/0x10 [ 40.026300][ T645] ? generic_write_checks_count+0x426/0x540 [ 40.026324][ T645] ? mnt_get_write_access_file+0x1af/0x3b0 [ 40.026354][ T645] ? mnt_put_write_access_file+0xc2/0x100 [ 40.026378][ T645] ? file_update_time+0x1de/0x210 [ 40.026403][ T645] shmem_file_write_iter+0x105/0x130 [ 40.026427][ T645] __kernel_write_iter+0x462/0x900 [ 40.026447][ T645] ? __cfi___kernel_write_iter+0x10/0x10 [ 40.026466][ T645] ? get_dump_page+0x165/0x220 [ 40.026489][ T645] ? __asan_memset+0x39/0x50 [ 40.026507][ T645] ? iov_iter_bvec+0xc0/0x180 [ 40.026531][ T645] dump_user_range+0xb8b/0xe60 [ 40.026553][ T645] ? __cfi_dump_user_range+0x10/0x10 [ 40.026573][ T645] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 40.026599][ T645] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 40.026625][ T645] ? elf_core_dump+0x23cf/0x3840 [ 40.026648][ T645] elf_core_dump+0x2d61/0x3840 [ 40.026673][ T645] ? __cfi_elf_core_dump+0x10/0x10 [ 40.026695][ T645] ? mas_next_slot+0xf01/0xfd0 [ 40.026721][ T645] ? dump_interrupted+0xf0/0xf0 [ 40.026739][ T645] ? filp_open+0x199/0x1f0 [ 40.026763][ T645] ? 0xffffffffff600000 [ 40.026779][ T645] do_coredump+0x20d2/0x3050 [ 40.026800][ T645] ? __cfi_do_coredump+0x10/0x10 [ 40.026818][ T645] ? asm_exc_page_fault+0x2b/0x30 [ 40.026844][ T645] ? __kasan_slab_free+0x6a/0x80 [ 40.026866][ T645] ? get_signal+0xa2a/0x1490 [ 40.026889][ T645] get_signal+0x11bf/0x1490 [ 40.026914][ T645] arch_do_signal_or_restart+0xbc/0x700 [ 40.026932][ T645] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 40.026952][ T645] ? fpregs_restore_userregs+0x11c/0x260 [ 40.026975][ T645] irqentry_exit_to_user_mode+0x4d/0xb0 [ 40.026999][ T645] irqentry_exit+0x16/0x60 [ 40.027020][ T645] exc_page_fault+0x65/0xc0 [ 40.027042][ T645] asm_exc_page_fault+0x2b/0x30 [ 40.027062][ T645] RIP: 0033:0x7f563319e159 [ 40.027082][ T645] Code: Unable to access opcode bytes at 0x7f563319e12f. [ 40.027091][ T645] RSP: 002b:00007f563408dfd8 EFLAGS: 00010206 [ 40.027109][ T645] RAX: 0000000000000000 RBX: 00007f5633426180 RCX: 00007f563319e159 [ 40.027123][ T645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001048200 [ 40.027134][ T645] RBP: 00007f563323506b R08: 0000000000000000 R09: 0000000000000000 [ 40.027146][ T645] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 40.027162][ T645] R13: 00007f5633426218 R14: 00007f5633426180 R15: 00007ffeec24a278 [ 40.027176][ T645] [ 40.062566][ T645] memory: usage 307072kB, limit 307200kB, failcnt 17364 [ 40.512876][ T645] memory+swap: usage 432112kB, limit 9007199254740988kB, failcnt 0 [ 40.520840][ T645] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 40.527742][ T645] Memory cgroup stats for /syz2: [ 40.527909][ T645] cache 314441728 [ 40.536816][ T645] rss 45056 [ 40.539929][ T645] rss_huge 0 [ 40.543124][ T645] shmem 314388480 [ 40.578839][ T645] mapped_file 0 [ 40.586563][ T645] dirty 0 [ 40.589730][ T645] writeback 0 [ 40.593223][ T645] workingset_refault_anon 37 [ 40.598219][ T645] workingset_refault_file 940 [ 40.603009][ T645] swap 127909888 [ 40.606854][ T645] swapcached 81920 [ 40.610837][ T645] pgpgin 121173 [ 40.614566][ T645] pgpgout 44374 [ 40.618129][ T645] pgfault 12513 [ 40.621623][ T645] pgmajfault 64 [ 40.625498][ T645] inactive_anon 88834048 [ 40.629830][ T645] active_anon 225681408 [ 40.634204][ T645] inactive_file 32768 [ 40.638189][ T645] active_file 20480 [ 40.641989][ T645] unevictable 0 [ 40.646080][ T645] hierarchical_memory_limit 314572800 [ 40.662958][ T31] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 40.663501][ T645] hierarchical_memsw_limit 9223372036854771712 [ 40.688343][ T645] total_cache 314441728 [ 40.698593][ T645] total_rss 45056 [ 40.702321][ T645] total_rss_huge 0 [ 40.706532][ T645] total_shmem 314388480 [ 40.710727][ T645] total_mapped_file 0 [ 40.715455][ T645] total_dirty 0 [ 40.718930][ T645] total_writeback 0 [ 40.723009][ T645] total_workingset_refault_anon 37 [ 40.728429][ T645] total_workingset_refault_file 940 [ 40.734026][ T645] total_swap 127909888 [ 40.751121][ T645] total_swapcached 81920 [ 40.756794][ T645] total_pgpgin 121173 [ 40.760832][ T645] total_pgpgout 44374 [ 40.771677][ T645] total_pgfault 12513 [ 40.775890][ T645] total_pgmajfault 64 [ 40.779871][ T645] total_inactive_anon 88834048 [ 40.788988][ T645] total_active_anon 225681408 [ 40.795843][ T645] total_inactive_file 32768 [ 40.802694][ T645] total_active_file 20480 [ 40.811627][ T645] total_unevictable 0 [ 40.823502][ T645] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.56,pid=676,uid=0 [ 40.853551][ T645] Memory cgroup out of memory: Killed process 676 (syz.2.56) total-vm:99476kB, anon-rss:0kB, file-rss:51636kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 41.221608][ T806] netlink: 140 bytes leftover after parsing attributes in process `syz.3.92'. [ 41.250052][ T806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.92'. [ 41.276513][ T669] syz.2.56 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 41.293520][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 41.329560][ T669] CPU: 0 UID: 0 PID: 669 Comm: syz.2.56 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 41.329594][ T669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.329605][ T669] Call Trace: [ 41.329611][ T669] [ 41.329619][ T669] __dump_stack+0x21/0x30 [ 41.329648][ T669] dump_stack_lvl+0x140/0x1c0 [ 41.329671][ T669] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.329694][ T669] ? ___ratelimit+0x41c/0x5c0 [ 41.329714][ T669] ? __kasan_check_write+0x18/0x20 [ 41.329734][ T669] dump_stack+0x19/0x20 [ 41.329756][ T669] dump_header+0xd9/0x460 [ 41.329778][ T669] oom_kill_process+0x35d/0x640 [ 41.329800][ T669] out_of_memory+0x5d1/0xa20 [ 41.329819][ T669] ? __cfi_out_of_memory+0x10/0x10 [ 41.329839][ T669] ? mutex_lock_killable+0x115/0x1d0 [ 41.329860][ T669] ? __cfi_mutex_lock_killable+0x10/0x10 [ 41.329883][ T669] mem_cgroup_out_of_memory+0x2c5/0x390 [ 41.329909][ T669] ? css_next_descendant_pre+0x1ec/0x210 [ 41.329931][ T669] ? __kasan_check_write+0x18/0x20 [ 41.329950][ T669] ? drain_obj_stock+0xec0/0xec0 [ 41.329970][ T669] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 41.329990][ T669] try_charge_memcg+0x925/0xe10 [ 41.330013][ T669] ? static_key_count+0x45/0x70 [ 41.330037][ T669] ? lruvec_init+0x211/0x280 [ 41.330056][ T669] ? __cfi_try_charge_memcg+0x10/0x10 [ 41.330080][ T669] ? __alloc_pages_noprof+0x35a/0x7e0 [ 41.330106][ T669] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 41.330135][ T669] __mem_cgroup_charge+0xfc/0x420 [ 41.330157][ T669] ? do_pte_missing+0x3894/0x4440 [ 41.330179][ T669] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 41.330195][ T669] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 41.330216][ T669] ? shmem_replace_folio+0x9b0/0x9b0 [ 41.330236][ T669] ? shmem_huge_global_enabled+0x2da/0x360 [ 41.330256][ T669] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 41.330281][ T669] ? __kasan_check_write+0x18/0x20 [ 41.330295][ T669] ? _raw_spin_lock+0x92/0x120 [ 41.330311][ T669] shmem_get_folio_gfp+0x5cd/0x12e0 [ 41.330331][ T669] ? shmem_get_folio+0xc0/0xc0 [ 41.330349][ T669] ? __kasan_check_write+0x18/0x20 [ 41.330365][ T669] ? inode_to_bdi+0x6d/0x100 [ 41.330388][ T669] shmem_write_begin+0xf4/0x260 [ 41.330408][ T669] generic_perform_write+0x32c/0x970 [ 41.330430][ T669] ? inode_update_timestamps+0x4d1/0x6e0 [ 41.330455][ T669] ? __cfi_generic_perform_write+0x10/0x10 [ 41.330478][ T669] ? generic_write_checks_count+0x426/0x540 [ 41.330502][ T669] ? mnt_get_write_access_file+0x1af/0x3b0 [ 41.330527][ T669] ? mnt_put_write_access_file+0xc2/0x100 [ 41.330550][ T669] ? file_update_time+0x1de/0x210 [ 41.330575][ T669] shmem_file_write_iter+0x105/0x130 [ 41.330598][ T669] __kernel_write_iter+0x462/0x900 [ 41.330619][ T669] ? __cfi___kernel_write_iter+0x10/0x10 [ 41.330637][ T669] ? get_dump_page+0x165/0x220 [ 41.330661][ T669] ? __asan_memset+0x39/0x50 [ 41.330678][ T669] ? iov_iter_bvec+0xc0/0x180 [ 41.330703][ T669] dump_user_range+0xb8b/0xe60 [ 41.330725][ T669] ? __cfi_dump_user_range+0x10/0x10 [ 41.330745][ T669] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 41.330771][ T669] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 41.330796][ T669] ? elf_core_dump+0x23cf/0x3840 [ 41.330819][ T669] elf_core_dump+0x2d61/0x3840 [ 41.330843][ T669] ? __cfi_elf_core_dump+0x10/0x10 [ 41.330864][ T669] ? mas_next_slot+0xf01/0xfd0 [ 41.330891][ T669] ? dump_interrupted+0xf0/0xf0 [ 41.330909][ T669] ? filp_open+0x199/0x1f0 [ 41.330931][ T669] ? 0xffffffffff600000 [ 41.330946][ T669] do_coredump+0x20d2/0x3050 [ 41.330968][ T669] ? __cfi_do_coredump+0x10/0x10 [ 41.330985][ T669] ? asm_exc_page_fault+0x2b/0x30 [ 41.331012][ T669] ? __kasan_slab_free+0x6a/0x80 [ 41.331033][ T669] ? get_signal+0xa2a/0x1490 [ 41.331056][ T669] get_signal+0x11bf/0x1490 [ 41.331081][ T669] arch_do_signal_or_restart+0xbc/0x700 [ 41.331099][ T669] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 41.331119][ T669] ? fpregs_restore_userregs+0x11c/0x260 [ 41.331141][ T669] irqentry_exit_to_user_mode+0x4d/0xb0 [ 41.331165][ T669] irqentry_exit+0x16/0x60 [ 41.331186][ T669] exc_page_fault+0x65/0xc0 [ 41.331207][ T669] asm_exc_page_fault+0x2b/0x30 [ 41.331227][ T669] RIP: 0033:0x7f563319e159 [ 41.331246][ T669] Code: Unable to access opcode bytes at 0x7f563319e12f. [ 41.331256][ T669] RSP: 002b:00007f563408dfd8 EFLAGS: 00010206 [ 41.331279][ T669] RAX: 0000000000000000 RBX: 00007f5633426180 RCX: 00007f563319e159 [ 41.331292][ T669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001048200 [ 41.331304][ T669] RBP: 00007f563323506b R08: 0000000000000000 R09: 0000000000000000 [ 41.331316][ T669] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 41.331327][ T669] R13: 00007f5633426218 R14: 00007f5633426180 R15: 00007ffeec24a278 [ 41.331343][ T669] [ 41.331351][ T669] memory: usage 305056kB, limit 307200kB, failcnt 21338 [ 41.513534][ T311] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 41.518253][ T669] memory+swap: usage 410404kB, limit 9007199254740988kB, failcnt 0 [ 41.674480][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.677753][ T669] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 41.682521][ T311] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 41.687440][ T669] Memory cgroup stats for /syz2: [ 41.687566][ T669] cache 298254336 [ 41.692779][ T311] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.697039][ T669] rss 196608 [ 41.843664][ T311] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 41.848596][ T669] rss_huge 0 [ 41.856703][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.869310][ T669] shmem 298078208 [ 41.893514][ T311] usb 4-1: Product: syz [ 41.896513][ T669] mapped_file 8192 [ 41.900542][ T311] usb 4-1: Manufacturer: syz [ 41.900557][ T311] usb 4-1: SerialNumber: syz [ 41.918173][ T669] dirty 8192 [ 41.921514][ T806] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 41.929074][ T669] writeback 0 [ 41.929217][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 41.932928][ T311] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 41.941398][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.952892][ T669] workingset_refault_anon 37 [ 41.966425][ T311] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 41.977372][ T311] usbserial_generic 4-1:1.0: generic converter detected [ 41.980887][ T9] usb 2-1: Product: syz [ 41.984563][ T669] workingset_refault_file 989 [ 42.001111][ T9] usb 2-1: Manufacturer: syz [ 42.005779][ T9] usb 2-1: SerialNumber: syz [ 42.006374][ T311] usb 4-1: generic converter now attached to ttyUSB0 [ 42.017153][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 42.026049][ T669] swap 122003456 [ 42.033509][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 42.051993][ T669] swapcached 81920 [ 42.059792][ T669] pgpgin 121263 [ 42.063345][ T669] pgpgout 48379 [ 42.067005][ T669] pgfault 12620 [ 42.071589][ T669] pgmajfault 69 [ 42.075346][ T669] inactive_anon 86138880 [ 42.079595][ T669] active_anon 212209664 [ 42.084017][ T669] inactive_file 0 [ 42.087948][ T669] active_file 159744 [ 42.091851][ T669] unevictable 0 [ 42.095613][ T669] hierarchical_memory_limit 314572800 [ 42.101039][ T669] hierarchical_memsw_limit 9223372036854771712 [ 42.111275][ T669] total_cache 298254336 [ 42.115624][ T669] total_rss 196608 [ 42.119344][ T669] total_rss_huge 0 [ 42.123126][ T669] total_shmem 298078208 [ 42.130318][ T669] total_mapped_file 8192 [ 42.134828][ T669] total_dirty 8192 [ 42.138548][ T669] total_writeback 0 [ 42.142355][ T669] total_workingset_refault_anon 37 [ 42.147704][ T806] SELinux: policydb magic number 0x700 does not match expected magic number 0xf97cff8c [ 42.147941][ T669] total_workingset_refault_file 989 [ 42.166941][ T669] total_swap 122003456 [ 42.177827][ T806] SELinux: failed to load policy [ 42.181216][ T669] total_swapcached 81920 [ 42.187531][ T669] total_pgpgin 121263 [ 42.190653][ T312] usb 4-1: USB disconnect, device number 9 [ 42.191613][ T669] total_pgpgout 48379 [ 42.198452][ T312] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 42.211603][ T669] total_pgfault 12620 [ 42.221607][ T669] total_pgmajfault 69 [ 42.226595][ T312] usbserial_generic 4-1:1.0: device disconnected [ 42.229200][ T669] total_inactive_anon 86138880 [ 42.242028][ T669] total_active_anon 212209664 [ 42.246312][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 42.251406][ T669] total_inactive_file 0 [ 42.257400][ T669] total_active_file 159744 [ 42.261898][ T669] total_unevictable 0 [ 42.263209][ T9] r8152-cfgselector 2-1: bad CDC descriptors [ 42.266128][ T669] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.56,pid=675,uid=0 [ 42.282100][ T9] r8152-cfgselector 2-1: USB disconnect, device number 6 [ 42.290221][ T669] Memory cgroup out of memory: Killed process 675 (syz.2.56) total-vm:93200kB, anon-rss:0kB, file-rss:45352kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 42.526720][ T653] syz.2.56 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 42.606274][ T653] CPU: 1 UID: 0 PID: 653 Comm: syz.2.56 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 42.606312][ T653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.606329][ T653] Call Trace: [ 42.606335][ T653] [ 42.606343][ T653] __dump_stack+0x21/0x30 [ 42.606378][ T653] dump_stack_lvl+0x140/0x1c0 [ 42.606401][ T653] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.606424][ T653] ? ___ratelimit+0x41c/0x5c0 [ 42.606444][ T653] ? __kasan_check_write+0x18/0x20 [ 42.606463][ T653] dump_stack+0x19/0x20 [ 42.606492][ T653] dump_header+0xd9/0x460 [ 42.606521][ T653] oom_kill_process+0x35d/0x640 [ 42.606542][ T653] out_of_memory+0x5d1/0xa20 [ 42.606562][ T653] ? __cfi_out_of_memory+0x10/0x10 [ 42.606582][ T653] ? mutex_lock_killable+0x115/0x1d0 [ 42.606604][ T653] ? __cfi_mutex_lock_killable+0x10/0x10 [ 42.606627][ T653] mem_cgroup_out_of_memory+0x2c5/0x390 [ 42.606646][ T653] ? css_next_descendant_pre+0x1ec/0x210 [ 42.606668][ T653] ? __kasan_check_write+0x18/0x20 [ 42.606686][ T653] ? drain_obj_stock+0xec0/0xec0 [ 42.606706][ T653] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 42.606726][ T653] try_charge_memcg+0x925/0xe10 [ 42.606751][ T653] ? __cfi_try_charge_memcg+0x10/0x10 [ 42.606776][ T653] ? __alloc_pages_noprof+0x35a/0x7e0 [ 42.606808][ T653] __mem_cgroup_charge+0xfc/0x420 [ 42.606826][ T653] ? filemap_get_entry+0x41b/0x490 [ 42.606846][ T653] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 42.606866][ T653] filemap_add_folio+0x57/0x3e0 [ 42.606886][ T653] __filemap_get_folio+0x829/0xe80 [ 42.606906][ T653] ? downgrade_write+0x470/0x470 [ 42.606937][ T653] ? __cfi___filemap_get_folio+0x10/0x10 [ 42.606958][ T653] ? down_read+0x7f/0xe0 [ 42.606979][ T653] ? __cfi_down_read+0x10/0x10 [ 42.607000][ T653] ? filemap_map_pages+0x17c0/0x1b80 [ 42.607022][ T653] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 42.607045][ T653] filemap_fault+0xb8e/0x1ad0 [ 42.607068][ T653] ? __cfi_filemap_fault+0x10/0x10 [ 42.607090][ T653] ? __cfi_filemap_map_pages+0x10/0x10 [ 42.607113][ T653] ? vma_data_pages+0x105/0x140 [ 42.607131][ T653] do_pte_missing+0x3649/0x4440 [ 42.607155][ T653] ? shmem_alloc_and_add_folio+0xd84/0x10b0 [ 42.607184][ T653] ? pte_marker_clear+0x1b0/0x1b0 [ 42.607211][ T653] ? shmem_replace_folio+0x9b0/0x9b0 [ 42.607232][ T653] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 42.607251][ T653] handle_mm_fault+0x1189/0x1ba0 [ 42.607272][ T653] ? __kasan_check_write+0x18/0x20 [ 42.607293][ T653] ? __cfi_handle_mm_fault+0x10/0x10 [ 42.607316][ T653] ? follow_page_pte+0x2c0/0xba0 [ 42.607341][ T653] ? gup_must_unshare+0x1e0/0x1e0 [ 42.607364][ T653] ? vma_is_secretmem+0x11/0x50 [ 42.607388][ T653] ? check_vma_flags+0x337/0x3a0 [ 42.607411][ T653] __get_user_pages+0x114b/0x22d0 [ 42.607434][ T653] ? __kasan_check_write+0x18/0x20 [ 42.607455][ T653] ? populate_vma_page_range+0x220/0x220 [ 42.607477][ T653] ? __kernel_write_iter+0x6ff/0x900 [ 42.607498][ T653] get_dump_page+0x10c/0x220 [ 42.607520][ T653] ? __cfi_get_dump_page+0x10/0x10 [ 42.607542][ T653] ? __asan_memset+0x39/0x50 [ 42.607560][ T653] dump_user_range+0x18b/0xe60 [ 42.607582][ T653] ? __cfi_dump_user_range+0x10/0x10 [ 42.607602][ T653] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 42.607628][ T653] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 42.607653][ T653] ? elf_core_dump+0x23cf/0x3840 [ 42.607676][ T653] elf_core_dump+0x2d61/0x3840 [ 42.607700][ T653] ? __cfi_elf_core_dump+0x10/0x10 [ 42.607721][ T653] ? mas_next_slot+0xf01/0xfd0 [ 42.607748][ T653] ? dump_interrupted+0xf0/0xf0 [ 42.607766][ T653] ? filp_open+0x199/0x1f0 [ 42.607790][ T653] ? 0xffffffffff600000 [ 42.607804][ T653] do_coredump+0x20d2/0x3050 [ 42.607825][ T653] ? __cfi_do_coredump+0x10/0x10 [ 42.607843][ T653] ? asm_exc_page_fault+0x2b/0x30 [ 42.607870][ T653] ? __kasan_slab_free+0x6a/0x80 [ 42.607891][ T653] ? get_signal+0xa2a/0x1490 [ 42.607915][ T653] get_signal+0x11bf/0x1490 [ 42.607940][ T653] arch_do_signal_or_restart+0xbc/0x700 [ 42.607959][ T653] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 42.607979][ T653] ? fpregs_restore_userregs+0x11c/0x260 [ 42.608001][ T653] irqentry_exit_to_user_mode+0x4d/0xb0 [ 42.608024][ T653] irqentry_exit+0x16/0x60 [ 42.608045][ T653] exc_page_fault+0x65/0xc0 [ 42.608066][ T653] asm_exc_page_fault+0x2b/0x30 [ 42.608086][ T653] RIP: 0033:0x7f563319e159 [ 42.608107][ T653] Code: Unable to access opcode bytes at 0x7f563319e12f. [ 42.608116][ T653] RSP: 002b:00007f563408dfd8 EFLAGS: 00010206 [ 42.608134][ T653] RAX: 0000000000000000 RBX: 00007f5633426180 RCX: 00007f563319e159 [ 42.608147][ T653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001048200 [ 42.608159][ T653] RBP: 00007f563323506b R08: 0000000000000000 R09: 0000000000000000 [ 42.608177][ T653] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 42.608188][ T653] R13: 00007f5633426218 R14: 00007f5633426180 R15: 00007ffeec24a278 [ 42.608204][ T653] [ 42.793496][ T653] memory: usage 307200kB, limit 307200kB, failcnt 22066 [ 43.103543][ T821] sd 0:0:1:0: PR command failed: 1026 [ 43.104070][ T653] memory+swap: usage 427888kB, limit 9007199254740988kB, failcnt 0 [ 43.117211][ T653] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 43.124843][ T653] Memory cgroup stats for /syz2: [ 43.124977][ T653] cache 313749504 [ 43.133722][ T653] rss 196608 [ 43.137255][ T653] rss_huge 0 [ 43.140456][ T653] shmem 303681536 [ 43.144312][ T653] mapped_file 9572352 [ 43.144577][ T821] sd 0:0:1:0: Sense Key : 0x5 [current] [ 43.148483][ T653] dirty 36864 [ 43.157230][ T653] writeback 339968 [ 43.160941][ T653] workingset_refault_anon 37 [ 43.165546][ T653] workingset_refault_file 2691 [ 43.170302][ T653] swap 123887616 [ 43.173894][ T653] swapcached 344064 [ 43.177821][ T653] pgpgin 132822 [ 43.181276][ T653] pgpgout 56091 [ 43.184765][ T653] pgfault 13492 [ 43.188223][ T653] pgmajfault 85 [ 43.191709][ T653] inactive_anon 222658560 [ 43.196078][ T653] active_anon 80818176 [ 43.200141][ T653] inactive_file 9039872 [ 43.204277][ T821] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 43.209394][ T653] active_file 1028096 [ 43.213630][ T653] unevictable 0 [ 43.217091][ T653] hierarchical_memory_limit 314572800 [ 43.222458][ T653] hierarchical_memsw_limit 9223372036854771712 [ 43.228754][ T653] total_cache 313749504 [ 43.232909][ T653] total_rss 196608 [ 43.267051][ T653] total_rss_huge 0 [ 43.270824][ T653] total_shmem 303681536 [ 43.357534][ T653] total_mapped_file 9572352 [ 43.379005][ T390] bridge_slave_1: left allmulticast mode [ 43.384726][ T390] bridge_slave_1: left promiscuous mode [ 43.390499][ T390] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.401257][ T653] total_dirty 36864 [ 43.405418][ T390] bridge_slave_0: left allmulticast mode [ 43.411068][ T390] bridge_slave_0: left promiscuous mode [ 43.422670][ T653] total_writeback 339968 [ 43.423552][ T390] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.432924][ T653] total_workingset_refault_anon 37 [ 43.446458][ T841] netlink: 'syz.2.102': attribute type 16 has an invalid length. [ 43.461544][ T653] total_workingset_refault_file 2691 [ 43.474343][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 43.484246][ T841] netlink: 'syz.2.102': attribute type 2 has an invalid length. [ 43.501749][ T653] total_swap 123887616 [ 43.520042][ T653] total_swapcached 344064 [ 43.543569][ T841] netlink: 64114 bytes leftover after parsing attributes in process `syz.2.102'. [ 43.544986][ T653] total_pgpgin 132822 [ 43.561617][ T390] veth1_macvtap: left promiscuous mode [ 43.567249][ T390] veth0_vlan: left promiscuous mode [ 43.586901][ T653] total_pgpgout 56091 [ 43.607640][ T653] total_pgfault 13492 [ 43.634525][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.657879][ T9] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 43.674969][ T9] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 43.676326][ T839] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.684288][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.701631][ T839] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.703489][ T9] usb 4-1: Product: syz [ 43.710459][ T839] bridge_slave_0: entered allmulticast mode [ 43.712924][ T9] usb 4-1: Manufacturer: syz [ 43.723472][ T9] usb 4-1: SerialNumber: syz [ 43.724693][ T653] total_pgmajfault 85 [ 43.731461][ T9] usb-storage 4-1:1.0: USB Mass Storage device detected [ 43.735241][ T839] bridge_slave_0: entered promiscuous mode [ 43.745611][ T9] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 43.758031][ T9] scsi host1: usb-storage 4-1:1.0 [ 43.759411][ T839] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.786716][ T839] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.798195][ T839] bridge_slave_1: entered allmulticast mode [ 43.799837][ T653] total_inactive_anon 222658560 [ 43.809478][ T839] bridge_slave_1: entered promiscuous mode [ 43.810185][ T653] total_active_anon 80818176 [ 43.854345][ T653] total_inactive_file 9039872 [ 43.859079][ T653] total_active_file 1028096 [ 43.896584][ T839] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.903669][ T839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.910965][ T839] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.918024][ T839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.941923][ T653] total_unevictable 0 [ 43.946626][ T829] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.969567][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 43.969580][ T36] audit: type=1400 audit(1789957602.539:273): avc: denied { bind } for pid=828 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.970739][ T9] usb 4-1: USB disconnect, device number 10 [ 43.975762][ T36] audit: type=1400 audit(1789957602.539:274): avc: denied { name_bind } for pid=828 comm="syz.3.100" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 44.005437][ T653] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 44.032373][ T390] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.048707][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.055777][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.065363][ T36] audit: type=1400 audit(1789957602.539:275): avc: denied { node_bind } for pid=828 comm="syz.3.100" saddr=fe80::40 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 44.067632][ T653] ,cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.56,pid=673,uid=0 [ 44.124374][ T839] veth0_vlan: entered promiscuous mode [ 44.137194][ T653] Memory cgroup out of memory: Killed process 673 (syz.2.56) total-vm:93200kB, anon-rss:0kB, file-rss:45372kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 44.166390][ T839] veth1_macvtap: entered promiscuous mode [ 44.202314][ T36] audit: type=1400 audit(1789957602.769:276): avc: denied { mount } for pid=839 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.250949][ T36] audit: type=1400 audit(1789957602.769:277): avc: denied { mounton } for pid=839 comm="syz-executor" path="/root/syzkaller.5sWyWC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 44.410880][ T864] rust_binder: Error in use_page_slow: ESRCH [ 44.410904][ T864] rust_binder: use_range failure ESRCH [ 44.430905][ T864] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 44.440992][ T864] rust_binder: Failure in copy_transaction_data: ESRCH [ 44.453848][ T864] rust_binder: 863:864 transaction call to 863:0 failed ESRCH, code 0 size 0-0 [ 44.477317][ T31] rust_binder: 863: undelivered TRANSACTION_ERROR: 29201 [ 44.496636][ T866] netlink: 'syz.4.106': attribute type 1 has an invalid length. [ 44.518968][ T866] netlink: 60 bytes leftover after parsing attributes in process `syz.4.106'. [ 44.534572][ T36] audit: type=1400 audit(1789957603.109:278): avc: denied { nlmsg_write } for pid=867 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 44.573685][ T36] audit: type=1326 audit(1789957603.109:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=865 comm="syz.4.106" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72a6b9e159 code=0x0 [ 44.853257][ T36] audit: type=1400 audit(1789957603.419:280): avc: denied { setopt } for pid=882 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.915893][ T36] audit: type=1400 audit(1789957603.489:281): avc: denied { mount } for pid=880 comm="syz.3.111" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 44.951262][ T888] capability: warning: `syz.4.113' uses 32-bit capabilities (legacy support in use) [ 44.953342][ T36] audit: type=1400 audit(1789957603.519:282): avc: denied { ioctl } for pid=887 comm="syz.4.113" path="socket:[8477]" dev="sockfs" ino=8477 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.157102][ T896] netlink: 248 bytes leftover after parsing attributes in process `syz.1.117'. [ 45.206911][ T897] netlink: 104 bytes leftover after parsing attributes in process `syz.1.117'. [ 46.164132][ T38] oom_reaper: reaped process 673 (syz.2.56), now anon-rss:0kB, file-rss:45372kB, shmem-rss:0kB [ 46.222788][ T671] syz.2.56 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 46.240021][ T671] CPU: 0 UID: 0 PID: 671 Comm: syz.2.56 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 46.240053][ T671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.240065][ T671] Call Trace: [ 46.240071][ T671] [ 46.240078][ T671] __dump_stack+0x21/0x30 [ 46.240107][ T671] dump_stack_lvl+0x140/0x1c0 [ 46.240131][ T671] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.240155][ T671] ? ___ratelimit+0x41c/0x5c0 [ 46.240174][ T671] ? __kasan_check_write+0x18/0x20 [ 46.240193][ T671] dump_stack+0x19/0x20 [ 46.240213][ T671] dump_header+0xd9/0x460 [ 46.240234][ T671] oom_kill_process+0x35d/0x640 [ 46.240253][ T671] ? __pv_queued_spin_lock_slowpath+0xa1e/0xe90 [ 46.240273][ T671] out_of_memory+0x5d1/0xa20 [ 46.240291][ T671] ? __cfi_out_of_memory+0x10/0x10 [ 46.240309][ T671] ? mutex_lock_killable+0x97/0x1d0 [ 46.240329][ T671] ? __cfi_mutex_lock_killable+0x10/0x10 [ 46.240350][ T671] mem_cgroup_out_of_memory+0x2c5/0x390 [ 46.240376][ T671] ? css_next_descendant_pre+0x1ec/0x210 [ 46.240396][ T671] ? __kasan_check_write+0x18/0x20 [ 46.240413][ T671] ? drain_obj_stock+0xec0/0xec0 [ 46.240431][ T671] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 46.240449][ T671] try_charge_memcg+0x925/0xe10 [ 46.240471][ T671] ? static_key_count+0x45/0x70 [ 46.240492][ T671] ? lruvec_init+0x211/0x280 [ 46.240510][ T671] ? __cfi_try_charge_memcg+0x10/0x10 [ 46.240532][ T671] ? __alloc_pages_noprof+0x35a/0x7e0 [ 46.240556][ T671] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 46.240579][ T671] __mem_cgroup_charge+0xfc/0x420 [ 46.240595][ T671] ? do_pte_missing+0x3894/0x4440 [ 46.240616][ T671] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 46.240634][ T671] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 46.240655][ T671] ? shmem_replace_folio+0x9b0/0x9b0 [ 46.240675][ T671] ? shmem_huge_global_enabled+0x2da/0x360 [ 46.240694][ T671] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 46.240713][ T671] ? __kasan_check_write+0x18/0x20 [ 46.240730][ T671] ? _raw_spin_lock+0x92/0x120 [ 46.240746][ T671] shmem_get_folio_gfp+0x5cd/0x12e0 [ 46.240766][ T671] ? shmem_get_folio+0xc0/0xc0 [ 46.240784][ T671] ? __kasan_check_write+0x18/0x20 [ 46.240800][ T671] ? inode_to_bdi+0x6d/0x100 [ 46.240823][ T671] shmem_write_begin+0xf4/0x260 [ 46.240843][ T671] generic_perform_write+0x32c/0x970 [ 46.240864][ T671] ? inode_update_timestamps+0x4d1/0x6e0 [ 46.240889][ T671] ? __cfi_generic_perform_write+0x10/0x10 [ 46.240910][ T671] ? generic_write_checks_count+0x426/0x540 [ 46.240931][ T671] ? mnt_get_write_access_file+0x1af/0x3b0 [ 46.240953][ T671] ? mnt_put_write_access_file+0xc2/0x100 [ 46.240976][ T671] ? file_update_time+0x1de/0x210 [ 46.240998][ T671] shmem_file_write_iter+0x105/0x130 [ 46.241020][ T671] __kernel_write_iter+0x462/0x900 [ 46.241038][ T671] ? __cfi___kernel_write_iter+0x10/0x10 [ 46.241055][ T671] ? get_dump_page+0x165/0x220 [ 46.241077][ T671] ? __asan_memset+0x39/0x50 [ 46.241093][ T671] ? iov_iter_bvec+0xc0/0x180 [ 46.241115][ T671] dump_user_range+0xb8b/0xe60 [ 46.241135][ T671] ? __cfi_dump_user_range+0x10/0x10 [ 46.241153][ T671] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 46.241177][ T671] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 46.241201][ T671] ? elf_core_dump+0x23cf/0x3840 [ 46.241222][ T671] elf_core_dump+0x2d61/0x3840 [ 46.241244][ T671] ? __cfi_elf_core_dump+0x10/0x10 [ 46.241264][ T671] ? mas_next_slot+0xf01/0xfd0 [ 46.241289][ T671] ? dump_interrupted+0xf0/0xf0 [ 46.241306][ T671] ? filp_open+0x199/0x1f0 [ 46.241327][ T671] ? 0xffffffffff600000 [ 46.241341][ T671] do_coredump+0x20d2/0x3050 [ 46.241365][ T671] ? __cfi_do_coredump+0x10/0x10 [ 46.241386][ T671] ? asm_exc_page_fault+0x2b/0x30 [ 46.241412][ T671] ? __kasan_slab_free+0x6a/0x80 [ 46.241431][ T671] ? get_signal+0xa2a/0x1490 [ 46.241453][ T671] get_signal+0x11bf/0x1490 [ 46.241475][ T671] arch_do_signal_or_restart+0xbc/0x700 [ 46.241493][ T671] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 46.241511][ T671] ? fpregs_restore_userregs+0x11c/0x260 [ 46.241531][ T671] irqentry_exit_to_user_mode+0x4d/0xb0 [ 46.241553][ T671] irqentry_exit+0x16/0x60 [ 46.241573][ T671] exc_page_fault+0x65/0xc0 [ 46.241592][ T671] asm_exc_page_fault+0x2b/0x30 [ 46.241610][ T671] RIP: 0033:0x7f563319e159 [ 46.241628][ T671] Code: Unable to access opcode bytes at 0x7f563319e12f. [ 46.241637][ T671] RSP: 002b:00007f563408dfd8 EFLAGS: 00010206 [ 46.241653][ T671] RAX: 0000000000000000 RBX: 00007f5633426180 RCX: 00007f563319e159 [ 46.241665][ T671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001048200 [ 46.241677][ T671] RBP: 00007f563323506b R08: 0000000000000000 R09: 0000000000000000 [ 46.241688][ T671] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 46.241698][ T671] R13: 00007f5633426218 R14: 00007f5633426180 R15: 00007ffeec24a278 [ 46.241713][ T671] [ 46.241719][ T671] memory: usage 307200kB, limit 307200kB, failcnt 31357 [ 46.744273][ T908] overlayfs: failed to resolve './file0': -40 [ 47.005229][ T920] sit0: entered promiscuous mode [ 47.025463][ T920] netlink: 'syz.4.123': attribute type 1 has an invalid length. [ 47.027027][ T916] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 47.033131][ T920] netlink: 1 bytes leftover after parsing attributes in process `syz.4.123'. [ 47.036354][ T919] netlink: 'syz.4.123': attribute type 1 has an invalid length. [ 47.073532][ T916] overlayfs: missing 'lowerdir' [ 47.078916][ T920] tmpfs: Bad value for 'nr_blocks' [ 47.096812][ T919] netlink: 1 bytes leftover after parsing attributes in process `syz.4.123'. [ 47.303873][ T927] incfs: Options parsing error. -22 [ 47.319362][ T927] incfs: mount failed -22 [ 47.329482][ T671] memory+swap: usage 421864kB, limit 9007199254740988kB, failcnt 0 [ 47.353505][ T671] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 47.373511][ T312] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 47.391188][ T671] Memory cgroup stats for /syz2: [ 47.391328][ T671] cache 307335168 [ 47.421492][ T671] rss 90112 [ 47.431587][ T671] rss_huge 0 [ 47.444013][ T671] shmem 302542848 [ 47.447678][ T671] mapped_file 4583424 [ 47.451651][ T671] dirty 0 [ 47.464802][ T671] writeback 16384 [ 47.468472][ T671] workingset_refault_anon 43 [ 47.473060][ T671] workingset_refault_file 6948 [ 47.508245][ T671] swap 127975424 [ 47.511874][ T671] swapcached 16384 [ 47.532688][ T671] pgpgin 145029 [ 47.537538][ T312] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 47.553490][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 47.571014][ T312] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 47.584068][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 47.591633][ T671] pgpgout 69970 [ 47.595230][ T671] pgfault 14237 [ 47.609553][ T312] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 47.618749][ T671] pgmajfault 152 [ 47.622297][ T671] inactive_anon 168091648 [ 47.626709][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.634764][ T671] active_anon 134557696 [ 47.638918][ T671] inactive_file 0 [ 47.642556][ T671] active_file 4792320 [ 47.647350][ T312] usb 5-1: config 0 descriptor?? [ 47.652572][ T923] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 47.680031][ T671] unevictable 0 [ 47.683574][ T671] hierarchical_memory_limit 314572800 [ 47.688964][ T671] hierarchical_memsw_limit 9223372036854771712 [ 47.705276][ T671] total_cache 307335168 [ 47.709480][ T671] total_rss 90112 [ 47.713130][ T671] total_rss_huge 0 [ 47.733496][ T671] total_shmem 302542848 [ 47.743560][ T671] total_mapped_file 4583424 [ 47.748239][ T671] total_dirty 0 [ 47.751875][ T671] total_writeback 16384 [ 47.768845][ T9] usb 2-1: no configurations [ 47.773554][ T9] usb 2-1: can't read configurations, error -22 [ 47.789762][ T671] total_workingset_refault_anon 43 [ 47.797908][ T671] total_workingset_refault_file 6948 [ 47.803246][ T671] total_swap 127975424 [ 47.829101][ T671] total_swapcached 16384 [ 47.833403][ T671] total_pgpgin 145029 [ 47.855628][ T671] total_pgpgout 69970 [ 47.870675][ T671] total_pgfault 14237 [ 47.884840][ T671] total_pgmajfault 152 [ 47.888972][ T671] total_inactive_anon 168091648 [ 47.914956][ T671] total_active_anon 134557696 [ 47.919683][ T671] total_inactive_file 0 [ 47.931186][ T671] total_active_file 4792320 [ 47.935822][ T671] total_unevictable 0 [ 47.939817][ T671] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.56,pid=674,uid=0 [ 47.954514][ T671] Memory cgroup out of memory: Killed process 674 (syz.2.56) total-vm:93200kB, anon-rss:0kB, file-rss:45568kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 48.067762][ T312] petalynx 0003:18B1:0037.0002: ignoring exceeding usage max [ 48.082649][ T312] petalynx 0003:18B1:0037.0002: hidraw0: USB HID v0.81 Device [HID 18b1:0037] on usb-dummy_hcd.4-1/input0 [ 48.109525][ T670] syz.2.56 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 48.153350][ T670] CPU: 0 UID: 0 PID: 670 Comm: syz.2.56 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 48.153387][ T670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.153398][ T670] Call Trace: [ 48.153405][ T670] [ 48.153413][ T670] __dump_stack+0x21/0x30 [ 48.153444][ T670] dump_stack_lvl+0x140/0x1c0 [ 48.153465][ T670] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.153488][ T670] ? ___ratelimit+0x41c/0x5c0 [ 48.153509][ T670] ? __kasan_check_write+0x18/0x20 [ 48.153531][ T670] dump_stack+0x19/0x20 [ 48.153554][ T670] dump_header+0xd9/0x460 [ 48.153585][ T670] oom_kill_process+0x35d/0x640 [ 48.153608][ T670] out_of_memory+0x5d1/0xa20 [ 48.153629][ T670] ? __cfi_out_of_memory+0x10/0x10 [ 48.153649][ T670] ? mutex_lock_killable+0x115/0x1d0 [ 48.153672][ T670] ? __cfi_mutex_lock_killable+0x10/0x10 [ 48.153696][ T670] mem_cgroup_out_of_memory+0x2c5/0x390 [ 48.153717][ T670] ? css_next_descendant_pre+0x1ec/0x210 [ 48.153740][ T670] ? __kasan_check_write+0x18/0x20 [ 48.153759][ T670] ? drain_obj_stock+0xec0/0xec0 [ 48.153780][ T670] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 48.153801][ T670] try_charge_memcg+0x925/0xe10 [ 48.153825][ T670] ? static_key_count+0x45/0x70 [ 48.153849][ T670] ? lruvec_init+0x211/0x280 [ 48.153870][ T670] ? __cfi_try_charge_memcg+0x10/0x10 [ 48.153894][ T670] ? __alloc_pages_noprof+0x35a/0x7e0 [ 48.153920][ T670] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 48.153946][ T670] __mem_cgroup_charge+0xfc/0x420 [ 48.153964][ T670] ? do_pte_missing+0x3894/0x4440 [ 48.153986][ T670] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 48.154006][ T670] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 48.154030][ T670] ? shmem_replace_folio+0x9b0/0x9b0 [ 48.154053][ T670] ? shmem_huge_global_enabled+0x2da/0x360 [ 48.154074][ T670] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 48.154095][ T670] ? __kasan_check_write+0x18/0x20 [ 48.154114][ T670] ? _raw_spin_lock+0x92/0x120 [ 48.154132][ T670] shmem_get_folio_gfp+0x5cd/0x12e0 [ 48.154155][ T670] ? shmem_get_folio+0xc0/0xc0 [ 48.154175][ T670] ? __kasan_check_write+0x18/0x20 [ 48.154194][ T670] ? inode_to_bdi+0x6d/0x100 [ 48.154219][ T670] shmem_write_begin+0xf4/0x260 [ 48.154241][ T670] generic_perform_write+0x32c/0x970 [ 48.154266][ T670] ? inode_update_timestamps+0x4d1/0x6e0 [ 48.154294][ T670] ? __cfi_generic_perform_write+0x10/0x10 [ 48.154317][ T670] ? generic_write_checks_count+0x426/0x540 [ 48.154341][ T670] ? mnt_get_write_access_file+0x1af/0x3b0 [ 48.154367][ T670] ? mnt_put_write_access_file+0xc2/0x100 [ 48.154393][ T670] ? file_update_time+0x1de/0x210 [ 48.154418][ T670] shmem_file_write_iter+0x105/0x130 [ 48.154443][ T670] __kernel_write_iter+0x462/0x900 [ 48.154464][ T670] ? __cfi___kernel_write_iter+0x10/0x10 [ 48.154483][ T670] ? get_dump_page+0x165/0x220 [ 48.154508][ T670] ? __asan_memset+0x39/0x50 [ 48.154526][ T670] ? iov_iter_bvec+0xc0/0x180 [ 48.154551][ T670] dump_user_range+0xb8b/0xe60 [ 48.154578][ T670] ? __cfi_dump_user_range+0x10/0x10 [ 48.154599][ T670] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 48.154625][ T670] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 48.154647][ T670] ? elf_core_dump+0x23cf/0x3840 [ 48.154670][ T670] elf_core_dump+0x2d61/0x3840 [ 48.154693][ T670] ? __cfi_elf_core_dump+0x10/0x10 [ 48.154715][ T670] ? mas_next_slot+0xf01/0xfd0 [ 48.154743][ T670] ? dump_interrupted+0xf0/0xf0 [ 48.154761][ T670] ? filp_open+0x199/0x1f0 [ 48.154785][ T670] ? 0xffffffffff600000 [ 48.154800][ T670] do_coredump+0x20d2/0x3050 [ 48.154822][ T670] ? __cfi_do_coredump+0x10/0x10 [ 48.154840][ T670] ? asm_exc_page_fault+0x2b/0x30 [ 48.154867][ T670] ? __kasan_slab_free+0x6a/0x80 [ 48.154889][ T670] ? get_signal+0xa2a/0x1490 [ 48.154918][ T670] get_signal+0x11bf/0x1490 [ 48.154943][ T670] arch_do_signal_or_restart+0xbc/0x700 [ 48.154963][ T670] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 48.154983][ T670] ? fpregs_restore_userregs+0x11c/0x260 [ 48.155005][ T670] irqentry_exit_to_user_mode+0x4d/0xb0 [ 48.155029][ T670] irqentry_exit+0x16/0x60 [ 48.155051][ T670] exc_page_fault+0x65/0xc0 [ 48.155072][ T670] asm_exc_page_fault+0x2b/0x30 [ 48.155092][ T670] RIP: 0033:0x7f563319e159 [ 48.155112][ T670] Code: Unable to access opcode bytes at 0x7f563319e12f. [ 48.155121][ T670] RSP: 002b:00007f563408dfd8 EFLAGS: 00010206 [ 48.155139][ T670] RAX: 0000000000000000 RBX: 00007f5633426180 RCX: 00007f563319e159 [ 48.155152][ T670] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001048200 [ 48.155165][ T670] RBP: 00007f563323506b R08: 0000000000000000 R09: 0000000000000000 [ 48.155178][ T670] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 48.155189][ T670] R13: 00007f5633426218 R14: 00007f5633426180 R15: 00007ffeec24a278 [ 48.155205][ T670] [ 48.634055][ T722] usb 5-1: USB disconnect, device number 2 [ 48.704946][ T670] memory: usage 307008kB, limit 307200kB, failcnt 37921 [ 48.712180][ T670] memory+swap: usage 429148kB, limit 9007199254740988kB, failcnt 0 [ 48.843521][ T670] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 48.881794][ T670] Memory cgroup stats for /syz2: [ 48.881934][ T670] cache 287727616 [ 48.922211][ T670] rss 53248 [ 48.925591][ T670] rss_huge 0 [ 48.934478][ T670] shmem 284626944 [ 48.961459][ T670] mapped_file 1433600 [ 48.985591][ T670] dirty 4096 [ 49.019214][ T670] writeback 0 [ 49.022539][ T670] workingset_refault_anon 48 [ 49.053646][ T670] workingset_refault_file 10475 [ 49.058533][ T670] swap 114364416 [ 49.123489][ T670] swapcached 20480 [ 49.127305][ T670] pgpgin 155816 [ 49.130767][ T670] pgpgout 85534 [ 49.173492][ T670] pgfault 14782 [ 49.192200][ T670] pgmajfault 193 [ 49.196334][ T670] inactive_anon 213155840 [ 49.200730][ T670] active_anon 71090176 [ 49.213469][ T670] inactive_file 0 [ 49.217276][ T670] active_file 3100672 [ 49.221252][ T670] unevictable 0 [ 49.243023][ T670] hierarchical_memory_limit 314572800 [ 49.248559][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 49.268734][ T670] hierarchical_memsw_limit 9223372036854771712 [ 49.286477][ T670] total_cache 287727616 [ 49.290688][ T670] total_rss 53248 [ 49.342310][ T670] total_rss_huge 0 [ 49.357236][ T670] total_shmem 284626944 [ 49.361431][ T670] total_mapped_file 1433600 [ 49.383577][ T670] total_dirty 4096 [ 49.393641][ T670] total_writeback 0 [ 49.397488][ T670] total_workingset_refault_anon 48 [ 49.405181][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 49.414386][ T9] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 49.422476][ T9] usb 2-1: Product: syz [ 49.434381][ T9] usb 2-1: config 0 descriptor?? [ 49.441005][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 49.466392][ T670] total_workingset_refault_file 10475 [ 49.475435][ T9] usb 2-1: Detected FT232H [ 49.494274][ T722] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 49.513465][ T670] total_swap 114364416 [ 49.523726][ T670] total_swapcached 20480 [ 49.530062][ T670] total_pgpgin 155816 [ 49.548315][ T670] total_pgpgout 85534 [ 49.552639][ T670] total_pgfault 14782 [ 49.593539][ T670] total_pgmajfault 193 [ 49.599164][ T670] total_inactive_anon 213155840 [ 49.623579][ T670] total_active_anon 71090176 [ 49.628239][ T670] total_inactive_file 0 [ 49.641041][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 49.653765][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 49.661215][ T9] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 49.668082][ T722] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.680125][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 49.688502][ T722] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.698496][ T9] usb 2-1: USB disconnect, device number 8 [ 49.706803][ T722] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.716186][ T722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.724234][ T670] total_active_file 3100672 [ 49.729111][ T722] usb 5-1: Product: syz [ 49.733364][ T722] usb 5-1: Manufacturer: syz [ 49.738532][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 49.748152][ T722] usb 5-1: SerialNumber: syz [ 49.753269][ T670] total_unevictable 0 [ 49.765429][ T9] ftdi_sio 2-1:0.0: device disconnected [ 49.773156][ T670] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.56,pid=672,uid=0 [ 49.793491][ T670] Memory cgroup out of memory: Killed process 672 (syz.2.56) total-vm:86924kB, anon-rss:0kB, file-rss:41140kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 49.972027][ T935] kvm: kvm [934]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 50.193618][ T722] usb 5-1: 0:2 : does not exist [ 50.201720][ T722] usb 5-1: unit 9 not found! [ 50.216331][ T722] usb 5-1: USB disconnect, device number 3 [ 50.236110][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.373611][ T952] netlink: 192 bytes leftover after parsing attributes in process `syz.2.132'. [ 50.556576][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 50.556592][ T36] audit: type=1400 audit(1789957609.129:290): avc: denied { load_policy } for pid=956 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 50.583552][ T957] SELinux: policydb magic number 0xffffffed does not match expected magic number 0xf97cff8c [ 50.613501][ T957] SELinux: failed to load policy [ 50.754015][ T36] audit: type=1400 audit(1789957609.329:291): avc: denied { read write } for pid=964 comm="syz.1.137" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.812338][ T36] audit: type=1400 audit(1789957609.329:292): avc: denied { open } for pid=964 comm="syz.1.137" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.856077][ T36] audit: type=1400 audit(1789957609.369:293): avc: denied { ioctl } for pid=964 comm="syz.1.137" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x556c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.913508][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 51.061222][ T36] audit: type=1400 audit(1789957609.629:294): avc: denied { ioctl } for pid=967 comm="syz.1.138" path="socket:[7077]" dev="sockfs" ino=7077 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.093566][ T31] usb 5-1: device descriptor read/64, error -71 [ 51.343475][ T31] usb 5-1: device descriptor read/64, error -71 [ 51.443526][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 51.463141][ T973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.559941][ T973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.583509][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 51.595304][ T978] futex_wake_op: syz.1.141 tries to shift op by 144; fix this program [ 51.603475][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 51.616096][ T9] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 51.630863][ T667] syz.2.56 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 51.633474][ T9] usb 3-1: config 0 has no interface number 1 [ 51.655086][ T9] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 51.673164][ T9] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 51.696058][ T9] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 51.717232][ T9] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 51.733495][ T31] usb 5-1: device descriptor read/64, error -71 [ 51.736825][ T9] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 51.759793][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 51.795109][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 12336, setting to 1024 [ 51.806782][ T667] CPU: 0 UID: 0 PID: 667 Comm: syz.2.56 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 51.806819][ T667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.806831][ T667] Call Trace: [ 51.806837][ T667] [ 51.806845][ T667] __dump_stack+0x21/0x30 [ 51.806873][ T667] dump_stack_lvl+0x140/0x1c0 [ 51.806896][ T667] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.806919][ T667] ? ___ratelimit+0x41c/0x5c0 [ 51.806940][ T667] ? __kasan_check_write+0x18/0x20 [ 51.806960][ T667] dump_stack+0x19/0x20 [ 51.806982][ T667] dump_header+0xd9/0x460 [ 51.807005][ T667] oom_kill_process+0x35d/0x640 [ 51.807026][ T667] out_of_memory+0x5d1/0xa20 [ 51.807046][ T667] ? __cfi_out_of_memory+0x10/0x10 [ 51.807066][ T667] ? mutex_lock_killable+0x97/0x1d0 [ 51.807088][ T667] ? __cfi_mutex_lock_killable+0x10/0x10 [ 51.807111][ T667] mem_cgroup_out_of_memory+0x2c5/0x390 [ 51.807132][ T667] ? css_next_descendant_pre+0x1ec/0x210 [ 51.807154][ T667] ? __kasan_check_write+0x18/0x20 [ 51.807173][ T667] ? drain_obj_stock+0xec0/0xec0 [ 51.807193][ T667] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 51.807212][ T667] try_charge_memcg+0x925/0xe10 [ 51.807235][ T667] ? static_key_count+0x45/0x70 [ 51.807259][ T667] ? lruvec_init+0x211/0x280 [ 51.807280][ T667] ? __cfi_try_charge_memcg+0x10/0x10 [ 51.807304][ T667] ? __alloc_pages_noprof+0x35a/0x7e0 [ 51.807329][ T667] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 51.807354][ T667] __mem_cgroup_charge+0xfc/0x420 [ 51.807372][ T667] ? do_pte_missing+0x3894/0x4440 [ 51.807394][ T667] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 51.807414][ T667] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 51.807439][ T667] ? shmem_replace_folio+0x9b0/0x9b0 [ 51.807460][ T667] ? shmem_huge_global_enabled+0x2da/0x360 [ 51.807482][ T667] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 51.807503][ T667] ? __kasan_check_write+0x18/0x20 [ 51.807521][ T667] ? _raw_spin_lock+0x92/0x120 [ 51.807543][ T667] shmem_get_folio_gfp+0x5cd/0x12e0 [ 51.807565][ T667] ? shmem_get_folio+0xc0/0xc0 [ 51.807584][ T667] ? follow_page_pte+0x8fb/0xba0 [ 51.807608][ T667] ? inode_to_bdi+0x6d/0x100 [ 51.807633][ T667] shmem_write_begin+0xf4/0x260 [ 51.807655][ T667] generic_perform_write+0x32c/0x970 [ 51.807682][ T667] ? __cfi_generic_perform_write+0x10/0x10 [ 51.807704][ T667] ? generic_write_checks_count+0x426/0x540 [ 51.807730][ T667] ? file_update_time+0xa3/0x210 [ 51.807754][ T667] shmem_file_write_iter+0x105/0x130 [ 51.807778][ T667] __kernel_write_iter+0x462/0x900 [ 51.807798][ T667] ? __cfi___kernel_write_iter+0x10/0x10 [ 51.807824][ T667] ? get_dump_page+0x165/0x220 [ 51.807848][ T667] ? __asan_memset+0x39/0x50 [ 51.807865][ T667] ? iov_iter_bvec+0xc0/0x180 [ 51.807890][ T667] dump_user_range+0xb8b/0xe60 [ 51.807910][ T667] ? __cfi_dump_user_range+0x10/0x10 [ 51.807928][ T667] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 51.807953][ T667] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 51.807975][ T667] ? elf_core_dump+0x23cf/0x3840 [ 51.807997][ T667] elf_core_dump+0x2d61/0x3840 [ 51.808021][ T667] ? __cfi_elf_core_dump+0x10/0x10 [ 51.808043][ T667] ? mas_next_slot+0xf01/0xfd0 [ 51.808070][ T667] ? dump_interrupted+0xf0/0xf0 [ 51.808088][ T667] ? filp_open+0x199/0x1f0 [ 51.808113][ T667] ? 0xffffffffff600000 [ 51.808129][ T667] do_coredump+0x20d2/0x3050 [ 51.808150][ T667] ? __cfi_do_coredump+0x10/0x10 [ 51.808168][ T667] ? asm_exc_page_fault+0x2b/0x30 [ 51.808195][ T667] ? __kasan_slab_free+0x6a/0x80 [ 51.808216][ T667] ? get_signal+0xa2a/0x1490 [ 51.808240][ T667] get_signal+0x11bf/0x1490 [ 51.808266][ T667] arch_do_signal_or_restart+0xbc/0x700 [ 51.808284][ T667] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 51.808303][ T667] ? fpregs_restore_userregs+0x11c/0x260 [ 51.808325][ T667] irqentry_exit_to_user_mode+0x4d/0xb0 [ 51.808349][ T667] irqentry_exit+0x16/0x60 [ 51.808370][ T667] exc_page_fault+0x65/0xc0 [ 51.808391][ T667] asm_exc_page_fault+0x2b/0x30 [ 51.808411][ T667] RIP: 0033:0x7f563319e159 [ 51.808430][ T667] Code: Unable to access opcode bytes at 0x7f563319e12f. [ 51.808440][ T667] RSP: 002b:00007f563408dfd8 EFLAGS: 00010206 [ 51.808458][ T667] RAX: 0000000000000000 RBX: 00007f5633426180 RCX: 00007f563319e159 [ 51.808472][ T667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001048200 [ 51.808484][ T667] RBP: 00007f563323506b R08: 0000000000000000 R09: 0000000000000000 [ 51.808496][ T667] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 51.808507][ T667] R13: 00007f5633426218 R14: 00007f5633426180 R15: 00007ffeec24a278 [ 51.808524][ T667] [ 51.808531][ T667] memory: usage 307200kB, limit 307200kB, failcnt 43873 [ 51.993477][ T31] usb 5-1: device descriptor read/64, error -71 [ 51.994926][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 52.035724][ T667] memory+swap: usage 432140kB, limit 9007199254740988kB, failcnt 0 [ 52.054581][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 52.090718][ T667] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 52.123474][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.124202][ T36] audit: type=1400 audit(1789957610.639:295): avc: denied { mounton } for pid=979 comm="syz.1.142" path="/46/mnt/mnt/file0" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:mnt_t tclass=dir permissive=1 [ 52.130874][ T9] usb 3-1: Product: syz [ 52.133765][ T36] audit: type=1400 audit(1789957610.639:296): avc: denied { unlink } for pid=979 comm="syz.1.142" name="#9" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:mnt_t tclass=chr_file permissive=1 [ 52.137524][ T667] Memory cgroup stats for [ 52.142173][ T31] usb usb5-port1: attempt power cycle [ 52.147137][ T9] usb 3-1: Manufacturer: syz [ 52.223794][ T667] /syz2 [ 52.231844][ T9] usb 3-1: SerialNumber: syz [ 52.253503][ T667] : [ 52.256347][ T9] usb 3-1: config 0 descriptor?? [ 52.260567][ T667] cache 314417152 [ 52.343627][ T972] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 52.360998][ T667] rss 155648 [ 52.404230][ T667] rss_huge 0 [ 52.407500][ T667] shmem 314384384 [ 52.411141][ T667] mapped_file 0 [ 52.414854][ T667] dirty 0 [ 52.417807][ T667] writeback 0 [ 52.421089][ T667] workingset_refault_anon 61 [ 52.426123][ T667] workingset_refault_file 14441 [ 52.430986][ T667] swap 127938560 [ 52.434821][ T667] swapcached 4096 [ 52.439407][ T667] pgpgin 196719 [ 52.442878][ T667] pgpgout 119919 [ 52.446694][ T667] pgfault 16918 [ 52.450154][ T667] pgmajfault 262 [ 52.455153][ T667] inactive_anon 257896448 [ 52.459636][ T667] active_anon 56643584 [ 52.463955][ T667] inactive_file 0 [ 52.469705][ T667] active_file 32768 [ 52.476826][ T667] unevictable 0 [ 52.480296][ T667] hierarchical_memory_limit 314572800 [ 52.485758][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 52.493729][ T667] hierarchical_memsw_limit 9223372036854771712 [ 52.499887][ T667] total_cache 314417152 [ 52.504258][ T667] total_rss 155648 [ 52.507977][ T667] total_rss_huge 0 [ 52.511689][ T667] total_shmem 314384384 [ 52.516265][ T667] total_mapped_file 0 [ 52.520574][ T667] total_dirty 0 [ 52.524282][ T31] usb 5-1: device descriptor read/8, error -71 [ 52.530583][ T667] total_writeback 0 [ 52.534544][ T667] total_workingset_refault_anon 61 [ 52.539652][ T667] total_workingset_refault_file 14441 [ 52.545462][ T667] total_swap 127938560 [ 52.549534][ T667] total_swapcached 4096 [ 52.553929][ T667] total_pgpgin 196719 [ 52.557911][ T667] total_pgpgout 119919 [ 52.561974][ T667] total_pgfault 16918 [ 52.566229][ T667] total_pgmajfault 262 [ 52.570296][ T667] total_inactive_anon 257896448 [ 52.575345][ T667] total_active_anon 56643584 [ 52.579930][ T667] total_inactive_file 0 [ 52.584292][ T667] total_active_file 32768 [ 52.588707][ T667] total_unevictable 0 [ 52.592684][ T667] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.56,pid=671,uid=0 [ 52.607593][ T667] Memory cgroup out of memory: Killed process 671 (syz.2.56) total-vm:86924kB, anon-rss:0kB, file-rss:39132kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 52.654473][ T31] usb 5-1: device descriptor read/8, error -71 [ 52.684539][ T313] usb 3-1: USB disconnect, device number 6 [ 52.815248][ T36] audit: type=1400 audit(1789957611.389:297): avc: denied { rmdir } for pid=293 comm="syz-executor" name="proc" dev="sda1" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.903503][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 52.944484][ T31] usb 5-1: device descriptor read/8, error -71 [ 53.074484][ T31] usb 5-1: device descriptor read/8, error -71 [ 53.194028][ T31] usb usb5-port1: unable to enumerate USB device [ 53.603698][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 53.668668][ T36] audit: type=1400 audit(1789957612.239:298): avc: denied { mount } for pid=991 comm="syz.4.146" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 53.783491][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 53.823498][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.853476][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 53.873481][ T31] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 53.882558][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.914245][ T31] usb 3-1: config 0 descriptor?? [ 54.033476][ T311] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 54.085355][ T36] audit: type=1400 audit(1789957612.659:299): avc: denied { setattr } for pid=293 comm="syz-executor" path="/46/mnt/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 54.224594][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.253526][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.263347][ T311] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 54.288617][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.314407][ T110] udevd[110]: could not touch /run/udev/queue: No such file or directory [ 54.327658][ T311] usb 5-1: config 0 descriptor?? [ 54.475362][ T31] HID 045e:07da: Invalid code 65791 type 1 [ 54.506371][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input8 [ 54.535925][ T31] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 54.555403][ T1001] udevd[1001]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 54.753857][ T311] usbhid 5-1:0.0: can't add hid device: -71 [ 54.759892][ T311] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 54.794783][ T311] usb 5-1: USB disconnect, device number 8 [ 55.466865][ T990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.467431][ T9] usb 3-1: USB disconnect, device number 7 [ 56.412063][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 56.412080][ T36] audit: type=1400 audit(1789957614.979:302): avc: denied { view } for pid=1029 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 56.485418][ T1032] 9pnet_fd: Insufficient options for proto=fd [ 56.491572][ T36] audit: type=1400 audit(1789957615.059:303): avc: denied { setattr } for pid=1031 comm="syz.4.157" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 56.544417][ T36] audit: type=1400 audit(1789957615.059:304): avc: denied { mounton } for pid=1031 comm="syz.4.157" path="/26/file0" dev="tmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.883937][ T722] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 57.035088][ T722] usb 3-1: Using ep0 maxpacket: 16 [ 57.054777][ T722] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 57.062899][ T722] usb 3-1: config 0 has no interface number 0 [ 57.083519][ T722] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 57.104839][ T722] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 57.125409][ T722] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 57.134715][ T722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.142716][ T722] usb 3-1: Product: syz [ 57.154915][ T722] usb 3-1: Manufacturer: syz [ 57.159541][ T722] usb 3-1: SerialNumber: syz [ 57.178514][ T722] usb 3-1: config 0 descriptor?? [ 57.193737][ T1036] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 57.200954][ T1036] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 57.454421][ T1036] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 57.461663][ T1036] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 57.465356][ T36] audit: type=1400 audit(1789957616.029:305): avc: denied { create } for pid=1046 comm="syz.4.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.489502][ T1047] erspan0: mtu less than device minimum [ 57.533476][ T36] audit: type=1400 audit(1789957616.059:306): avc: denied { ioctl } for pid=1046 comm="syz.4.162" path="socket:[9329]" dev="sockfs" ino=9329 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.723659][ T722] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 57.743492][ T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 57.916960][ T31] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 57.923857][ T722] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 57 [ 57.926146][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.964882][ T31] usb 5-1: Product: syz [ 57.979260][ T31] usb 5-1: Manufacturer: syz [ 57.989352][ T31] usb 5-1: SerialNumber: syz [ 58.002215][ T31] usb 5-1: UAS is ignored for this device, using usb-storage instead [ 58.021013][ T31] usb 5-1: UAS is ignored for this device, using usb-storage instead [ 58.033470][ T31] usb-storage 5-1:1.0: USB Mass Storage device detected [ 58.053881][ T31] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 58.074275][ T31] scsi host1: usb-storage 5-1:1.0 [ 58.206827][ T31] usb 5-1: USB disconnect, device number 9 [ 58.878503][ T36] audit: type=1400 audit(1789957617.449:307): avc: denied { execmem } for pid=1052 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 59.030399][ T36] audit: type=1400 audit(1789957617.599:308): avc: denied { mounton } for pid=1066 comm="syz.4.165" path="/33/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 59.045747][ T1072] overlayfs: failed to resolve './file0': -2 [ 59.528102][ T1076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.543641][ T1076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.567000][ T722] usb 3-1: USB disconnect, device number 8 [ 59.643904][ T36] audit: type=1400 audit(1789957618.219:309): avc: denied { create } for pid=1081 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.664627][ T1082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.167'. [ 59.695669][ T36] audit: type=1400 audit(1789957618.239:310): avc: denied { write } for pid=1081 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.743530][ T36] audit: type=1400 audit(1789957618.239:311): avc: denied { nlmsg_write } for pid=1081 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) [ 60.010577][ T1098] input: syz0 as /devices/virtual/input/input9 [ 60.227939][ T1019] bridge_slave_1: left allmulticast mode [ 60.234600][ T1019] bridge_slave_1: left promiscuous mode [ 60.240708][ T1019] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.248258][ T1019] bridge_slave_0: left allmulticast mode [ 60.254011][ T1019] bridge_slave_0: left promiscuous mode [ 60.259599][ T1019] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.416312][ T1019] veth1_macvtap: left promiscuous mode [ 60.595960][ T1019] bridge_slave_1: left allmulticast mode [ 60.601620][ T1019] bridge_slave_1: left promiscuous mode [ 60.607382][ T1019] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.614883][ T1019] bridge_slave_0: left allmulticast mode [ 60.620521][ T1019] bridge_slave_0: left promiscuous mode [ 60.626136][ T1019] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.633839][ T1019] bridge_slave_1: left allmulticast mode [ 60.639467][ T1019] bridge_slave_1: left promiscuous mode [ 60.645174][ T1019] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.652574][ T1019] bridge_slave_0: left allmulticast mode [ 60.658290][ T1019] bridge_slave_0: left promiscuous mode [ 60.663924][ T1019] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.671438][ T1019] bridge_slave_1: left allmulticast mode [ 60.677172][ T1019] bridge_slave_1: left promiscuous mode [ 60.682762][ T1019] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.690251][ T1019] bridge_slave_0: left allmulticast mode [ 60.695895][ T1019] bridge_slave_0: left promiscuous mode [ 60.701462][ T1019] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.927668][ T1019] veth1_macvtap: left promiscuous mode [ 60.933177][ T1019] veth0_vlan: left promiscuous mode [ 60.938704][ T1019] veth1_macvtap: left promiscuous mode [ 60.944279][ T1019] veth0_vlan: left promiscuous mode [ 60.949653][ T1019] veth1_macvtap: left promiscuous mode [ 60.955177][ T1019] veth0_vlan: left promiscuous mode