last executing test programs: 1m25.197829687s ago: executing program 2 (id=17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="0f20e035000010000f22e0b805000000b9000001000f01d948b86a283008000000000f23d00f21f835000000010f23f80f782e66480f3a22bc10080000000066b8a3008ed0f33e0f32b925020000b800000000ba008000000f30b9010300000f32450f01c5", 0x65}], 0x1, 0x44, 0x0, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000480)={@multicast1, @local}, 0xc) (async, rerun: 32) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) (async, rerun: 32) connect$inet(r4, &(0x7f0000000540)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 32) r5 = syz_ublk_setup_io_uring(0x34c9, &(0x7f0000000100)={0x0, 0x7f01, 0x80, 0x1, 0x350}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) syz_ublk_setup_io_uring(0x2d84, &(0x7f0000000240)={0x0, 0x50c4, 0x10000, 0x3, 0x2b, 0x0, r5}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) (async, rerun: 32) r6 = socket$inet6(0xa, 0x2, 0x3a) (rerun: 32) sendto$inet6(r6, &(0x7f0000000380)="800037bbfa9ba1ce", 0x8, 0x48840, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffe}, 0x1c) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) 1m24.828792455s ago: executing program 2 (id=19): mknod$loop(&(0x7f0000000700)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x80, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000028c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002940)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000004940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000006a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006b00)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x39e6, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x14}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000006b80)='./file0\x00', 0x80101, 0x101) chmod(&(0x7f0000006d00)='./file0\x00', 0x84) 1m23.983472471s ago: executing program 2 (id=27): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000003c0)=0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x1a, &(0x7f0000000400)=ANY=[], 0x18) sendmsg$can_bcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5, 0x901, 0xfffffbff, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x6, 0x74, 0x1, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x2, 0x3, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x8044) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00222200000096010006010083000000002a90a027b3ff82e875988b147043022effffb3"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m22.138013599s ago: executing program 2 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./tracefs\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs/dynamic_events\x00', 0x2, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)='#', 0x1}, {&(0x7f0000000540)="729fcb93f7ccd8331b2019e038c381d3049ae083682383a290a2362a7de00ba2e50a7c1e395b1d24b7fee4d1837aa8ce10194785ef579c8d86675aa5feb408b221650245b5691ad61ec1d02d995f13765d5e15e3aada0d336a1f405c842371686421f79d8fdb3046ed01c4e434248ac3e4f3e7e8e6935b2011bf09547b06dc01448f82c49294e65da85c258c00123463ac73f0e0b612094b5c60b95034122c1fe8f223561695ce0d107fae6710c22d72f8199be528c76f61f1e43c5195a417ce64f160c84c76f00059fef1e5366f7483ed303a6e8330800e57037ef69a", 0x5}], 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) fsetxattr(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1], &(0x7f0000000040), 0x0, 0x3) r2 = syz_clone(0x2008000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='.\x00', 0x0, 0x115) getdents(r6, &(0x7f00000007c0)=""/61, 0x3d) getdents64(r6, &(0x7f0000000800)=""/4096, 0x1000) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000700)={0x79, 0x0, 0x45}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000680)={'bridge0\x00', @random="01000020109b"}) getdents64(r1, &(0x7f00000000c0)=""/190, 0xbe) ptrace(0x4211, r2) r7 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r7, r7, 0x0) getsockopt$inet_int(r7, 0x0, 0x7, 0x0, &(0x7f0000000000)=0xfffffffffffffe6d) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000033a80)=""/102380, 0x18fec}, {0x0}], 0x2, 0x0, 0x4) getdents(r1, &(0x7f0000000180)=""/141, 0x8d) 1m22.065915777s ago: executing program 2 (id=38): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a"], 0x6c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0xc0000103, 0x0, 0x6}]}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setreuid(0xffffffffffffffff, 0xee01) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) 1m21.971221316s ago: executing program 2 (id=39): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000680), 0x80080, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000240)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_expedited', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="2dfc363b84d03ad083ea08988af2b7055d1c4e1a37d98a8226a9d3dda401e525ec25c8f318ec491be2a429dd7aedfabdb6bd3da4533d291dfe801ea43da456e765b006fd", @ANYRES16=0x0, @ANYRES64=r3], 0x28) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000100)="8902040400", 0x5) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x768}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) ioctl$RTC_PIE_OFF(r0, 0x7006) 1m21.968376246s ago: executing program 32 (id=39): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000680), 0x80080, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000240)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_expedited', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="2dfc363b84d03ad083ea08988af2b7055d1c4e1a37d98a8226a9d3dda401e525ec25c8f318ec491be2a429dd7aedfabdb6bd3da4533d291dfe801ea43da456e765b006fd", @ANYRES16=0x0, @ANYRES64=r3], 0x28) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000100)="8902040400", 0x5) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x768}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) ioctl$RTC_PIE_OFF(r0, 0x7006) 48.243400694s ago: executing program 1 (id=321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af60, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f00000000c0)) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0x0) 48.114745627s ago: executing program 1 (id=325): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) 48.110413497s ago: executing program 1 (id=327): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x20240000, 0x1, 0x802, 0x7, 0xa15, 0x0, 0x0, 0x80, 0x400}}, 0x50) r1 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000001a280)={0x0, 0x0, &(0x7f000001a2c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff01000000000000000000000000000101040000000000009201000000000000203ad4f58f818735ffff0000000000001c250800000000000200000000000000fbffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002800000000000000480003"], 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) 48.047676954s ago: executing program 1 (id=330): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @empty, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb29d453e94df581d7575dd5b7ff0f58e200", '\x00\t\x00', "1f00000000000080"}, 0x38) (async) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="81454920f4355b30bdcac3903eea1ab1c967", 0x12}, {&(0x7f00000002c0)="f19b4cfeaddd0a9327aac595a43dcc7a8529acc1318575", 0x17}, {&(0x7f0000000300)="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", 0x818}], 0x3) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x2b, {0x0, "0f20e035000010000f22e066b8aa000f00d8f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x73}) ioctl$KVM_RUN(r5, 0xae80, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) 47.941552905s ago: executing program 1 (id=331): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xc801}, 0x24044884) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x20) write$P9_RVERSION(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0900000008003950323030302e754741cf9fa076000a12ee6b"], 0x15) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/bridge0/brif/bridge_slave_0/multicast_router\x00', 0x82041, 0x102) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8000) write(r2, &(0x7f0000000300)='3', 0x4e) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000d0f000/0x4000)=nil) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x100000000001f, &(0x7f0000000000)=0x1, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 47.905551328s ago: executing program 1 (id=332): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="02031b003000140058006ef6c68700a43a0100000000000000000000000000000001"], 0xd6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x90, 0xfffffffffffffffe, r3, {0x7, 0x2b, 0x0, 0x2b418842, 0x6, 0x200, 0xfffffffd, 0x0, 0x0, 0x0, 0x100}}, 0x50) r4 = fsopen(&(0x7f0000000340)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000380)='{:\'\xff\xc5\x00', 0xfffffffffffffffe, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='-[}\x00', r5) add_key$user(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000540)="b6f6e62dc7627213a7c3aef38b9a1795be06809880a09f95e6f7f3d97fd159955952a4472b6af10ecb317654bb0e838563e7f56eff88edfecf65c193a9ae00236d735004d0d69afab8f2d06635ffd041b6e304424b953944184f14930ccf000000000000", 0x64, r5) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x100002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000400)={0x1, 0x0, [{0x80000007, 0x3, 0x800002, 0xfffffff3, 0x7a2a}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = fsopen(&(0x7f0000000480)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) r11 = openat$cgroup_subtree(r10, &(0x7f00000004c0), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000500)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r11, &(0x7f0000000600)=ANY=[@ANYBLOB='+cpu'], 0xb) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000440)={0x1, 0x0, [{0x80000007, 0xef6, 0x428c, 0x950, 0x8}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 32.833349634s ago: executing program 33 (id=332): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="02031b003000140058006ef6c68700a43a0100000000000000000000000000000001"], 0xd6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x90, 0xfffffffffffffffe, r3, {0x7, 0x2b, 0x0, 0x2b418842, 0x6, 0x200, 0xfffffffd, 0x0, 0x0, 0x0, 0x100}}, 0x50) r4 = fsopen(&(0x7f0000000340)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000380)='{:\'\xff\xc5\x00', 0xfffffffffffffffe, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='-[}\x00', r5) add_key$user(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000540)="b6f6e62dc7627213a7c3aef38b9a1795be06809880a09f95e6f7f3d97fd159955952a4472b6af10ecb317654bb0e838563e7f56eff88edfecf65c193a9ae00236d735004d0d69afab8f2d06635ffd041b6e304424b953944184f14930ccf000000000000", 0x64, r5) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x100002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000400)={0x1, 0x0, [{0x80000007, 0x3, 0x800002, 0xfffffff3, 0x7a2a}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = fsopen(&(0x7f0000000480)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) r11 = openat$cgroup_subtree(r10, &(0x7f00000004c0), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000500)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r11, &(0x7f0000000600)=ANY=[@ANYBLOB='+cpu'], 0xb) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000440)={0x1, 0x0, [{0x80000007, 0xef6, 0x428c, 0x950, 0x8}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 7.012981786s ago: executing program 4 (id=677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@code={0xa, 0x89, {"66670f212f430f011e48b80098000000000000c461e65f0d020000000f3235000800000f300f21f84d3500ab9062006200f8b9830000400f3243b3c79d0300000066baf80c2e0f01caef66bafc0ced670f01c866baf80cb860965a80d726bafc0c66b8480066ef643e3666460f388253afc40261cf6c30d8"}}], 0x89}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000008c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.304536828s ago: executing program 4 (id=679): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000700)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x0, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x2, 0x2}, @flat=@binder={0x73622a85, 0x0, 0x3, 0x3}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}]}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)) r3 = getuid() r4 = openat(0xffffffffffffff9c, &(0x7f0000002740)='./cgroup\x00', 0x40000, 0x6) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002780)='/sys/power/disk', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000027c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r6, r5, &(0x7f0000002800)=0x1, 0x8) ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000002840)={0xaa, 0x541}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000002880)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f00000028c0)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) setrlimit(0x40000000000008, &(0x7f0000002900)) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMPNS(r8, 0x8907, 0x0) syz_clone3(&(0x7f0000002940)={0x200840000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2000, 0x380, &(0x7f0000000400)) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0) 4.382596484s ago: executing program 5 (id=681): r0 = socket$inet(0x2, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000180)=0xffffffff, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r2 = gettid() (rerun: 32) r3 = getpid() (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$inet(0x2, 0x2, 0x1) (async, rerun: 32) pipe(&(0x7f0000000580)={0xffffffffffffffff}) (async) r5 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x3, 0x3a) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) (async) r8 = syz_ublk_setup_io_uring(0x4, &(0x7f00000000c0)={0x0, 0x6, 0x80}, &(0x7f0000000640)=0x0, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r9, r5, 0x68, 0x1) (async) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000740)=0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r4, r10, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffff5, 0x7f, 0x0, r12}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x65ee, 0x40, 0x4, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x40, 0x7fffffff, 0x3aa, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bffc, 0x2ba, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x411a, 0x10, 0xfffffffe, 0x270}}], 0x1, 0x0, 0x0) (async) rt_tgsigqueueinfo(r3, r2, 0x5, &(0x7f00000002c0)={0x2, 0xffffffff, 0x6}) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) rt_tgsigqueueinfo(r2, r3, 0x41, &(0x7f0000000340)={0x25, 0x7ff, 0x2}) syz_kvm_setup_syzos_vm$x86(r13, &(0x7f0000c00000/0x400000)=nil) 4.108930922s ago: executing program 0 (id=686): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x3017ae21e1b03b3e, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x1, 0x0, 0x1, 0x8000, 0x24, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @raw_ptr={0x70742a85, 0x0, &(0x7f0000000440)="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", 0x1a1}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}]}) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x5001}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', 0x1}) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="03031b003000320006006300000000443aff00000000000000000000ffffac141419ff02000000000000000000000000000192"], 0xfdef) r7 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000beb000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control32=0x4016, 0xff, 0x300000, 0xfffffffffffffffc}}, @nested_vmlaunch={0x12f, 0x18, 0x2}], 0x80}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) 3.924996371s ago: executing program 0 (id=688): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0xff, 0x4, 0x8, @remote, @empty, 0x1, 0x1, 0x6, 0x1}}) (async, rerun: 32) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async, rerun: 32) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x8000000000000000, 0x8, 0x800000000, 0x0, 0x0, 0x1d}, {0x0, 0x9, 0x0, 0x2dd}, 0x7ff, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in=@broadcast, 0x3505, 0x3}, {{@in=@rand_addr=0x64010100, 0x0, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x4, 0x2, 0x80, 0x0, 0xffffffff}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x60004004}, 0x0) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) (async) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000240)) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_usb_connect(0x2, 0xb3, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc0201011124020101020000000000000000020000092403020101000100090d0100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e2405"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) (rerun: 64) 3.901864123s ago: executing program 5 (id=689): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1) close_range(r1, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000240)={0x2, 0xd7}, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c8) mkdirat(0xffffffffffffff9c, 0x0, 0x387) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000100)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000001c0)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000200), 0x4) sendto$inet(r3, &(0x7f0000000280), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f00000002c0)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, 0x0) 3.33947736s ago: executing program 0 (id=692): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@verity_off}], [], 0x2c}) chdir(&(0x7f00000002c0)='./file0\x00') r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000700)={{'\x00', 0x2}, {0x9}, 0x80, 0x0, 0x0, &(0x7f00000000c0)='./file2\x00', &(0x7f0000000100)='./file2\x00', &(0x7f0000000340)="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", 0x17f, 0x0, &(0x7f00000004c0)={0x2, 0x111, {0x0, 0xc, 0x5b, "791523f6880b5d3283d810ccb8387211d13ad27df070a5918a75193e46e3eacfccf8022ad9cf1b7afb758845b0543bf41afe04ddcd0110e6ac1d8e73c40662e517c2689e6bbf4e9b2bb4d34d5785f810fd6ec04f46f886", 0xad, "ec360ef74b92bf593fd76ae6cf9d7065ce9c795f833a7e25e7e16a9af2ae660d972449b554ff9dd3e36c69c513fb5da3ad86d4a2e4009b776ce4b9820c2cfb6a050e922397ecb69f7b972a4a029c6e9a329d9196d8bf45a3650118d8f7db9d5b55556e32f4689eb752c0ca760f1f3bec16f896e9644992f81b215e0c8ff50699099a8592147e00011436923d8d0344cd8a4edfb1359e43fbe1491c809b66ba7cde76bdfa2348b4a5bd520c5c13"}, 0xf9, "8bd34eded0f8088bc7d09d167de36ff3dc31fc3af913d03e1a6b35b02ebca4aeba9aeba508be677831f43f952b138b819e3dc9b848afa70e4248567b71f32946e79873a1199295ff548f11ab251db0dfad91709767571b684fe8e4830a8c94a717a2138800f4331a8ecf5c0cb79266007cdbb80f9196c4cf302ae540cefb18821517c0d5fcede031d456bae91373a2fb5c35d4df1fe72c075637f13c66b85db5ab5dd95dac00c833776305f4df841c646bba260673f5f424f63b3ce84fe9021c4fced55290600ad83d2741b72e076e54cf347af6a92cdfb4732968e4b34dec2699f1b3d32c804659eb7a4282cdc719ebb801cb213d0682d2a0"}, 0x216}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) pipe(&(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0x128}, 0x0) syz_ublk_setup_io_uring(0x3, &(0x7f00000008c0)={0x0, 0x4}, &(0x7f0000000940), 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a80)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000ac0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000840), 0x10) setsockopt$sock_int(r8, 0x1, 0x1d, &(0x7f0000000e00)=0x2, 0x4) recvmmsg(r8, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{0x0}, {&(0x7f0000000ec0)=""/224, 0x38}], 0x2}, 0x8}], 0x1, 0x10022, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) syz_ublk_setup_queues(r7, r5, &(0x7f0000000b00)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000b80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) shutdown(r1, 0x1) close(0x3) 3.284423776s ago: executing program 4 (id=693): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x0, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0x0, 0x2, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x3, 0x3}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}]}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x1000000}) 3.196908005s ago: executing program 4 (id=694): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x0, 0x21) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="98000080", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2519000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000600)=@ethtool_cmd={0x7, 0x5, 0x3, 0x401, 0x1, 0x51, 0x6, 0xa, 0x9, 0x85, 0x0, 0x102, 0x401, 0x5, 0x5, 0x8, [0x80000005, 0x9]}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000280)=@v2={0x2, @aes128, 0x8, '\x00', @a}) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0xfffffffe}}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x0, 0x62, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501"], 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0xe000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfe, 0x0, 0x8, 0x6, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0x8080000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0xeeee8000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x40, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0xd, 0x3, 0x3, 0x2, 0xa1, 0x20, 0x0, 0x3}, {0x10000, 0xd000, 0xc, 0x28, 0x40, 0x7, 0x8, 0x41, 0x26, 0x0, 0x0, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x130, 0x0, 0x0, 0xd000, [0x3, 0xfffffffffffffffb, 0x40000000001]}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./debug\x00', 0x1ed) mount(0x0, &(0x7f00000004c0)='./debug\x00', &(0x7f0000000500)='debugfs\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB="a183000000040000000005000000080003000c86ace68cd485ff"], 0x88}, 0x1, 0x0, 0x0, 0x8810}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./debug/kvm/mmu_shadow_zapped\x00', 0x1, 0x0) write(r9, &(0x7f0000000580)='1', 0x1) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000000)=@sg0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) 2.443641382s ago: executing program 0 (id=697): socket(0x1e, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x7, &(0x7f0000000040)={0x0, 0x2a, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x77359400}}, &(0x7f0000000100)) inotify_init() mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000000)=0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@multicast1, @dev={0xac, 0x14, 0x14, 0x7c}}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x21) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'sit0\x00', 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000102"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000007c0)={[0x0, 0x100000000, 0x0, 0x4e, 0x100000, 0x0, 0x9c79, 0x8000000, 0x0, 0x800000, 0xf2, 0x2, 0x5, 0x800000000000000, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x101302, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000008c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x9, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 2.438788292s ago: executing program 5 (id=698): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x40200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000dc0)=[@text16={0x10, &(0x7f0000000e00)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100baf80c66b89498d98a66efbafc0c66eddfdfbaa10066b80098000066ef", 0x52}], 0x1, 0x58, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.25760563s ago: executing program 0 (id=699): ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x10040, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010007081000418e00000004fcff", 0x58}], 0x1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x41) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 2.217721885s ago: executing program 0 (id=700): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000500)={'syz0\x00', {0x17, 0x7, 0x6, 0xfffa}, 0x37, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x5, 0x2, 0x8, 0x100007b, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0xfffffffe, 0x24, 0x4000009, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x40, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x4, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x4f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x4, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0x3, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x80000001, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000037c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003840)=@any_dev={0x3, 0xc26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000003880)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000038c0)={0x0, 0x1, 0x3000, 0x3, 0x255, 0x0, r3}, 0x0, 0x1, &(0x7f0000003940)={0x2e, 0xe, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000003a40)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0d002b80080002"], 0x30}], 0x1}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x2, 0x4, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7, 0x80, 0x8001, 0x6}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000003780)={'team0\x00', 0x2}) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000003740)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000020c0)=""/227, 0xe3}, {&(0x7f00000021c0)=""/217, 0xd9}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/161, 0xa1}, {&(0x7f0000003380)=""/144, 0x90}, {&(0x7f0000003440)=""/145, 0x91}, {&(0x7f0000003500)=""/128, 0x80}, {&(0x7f0000003580)=""/276, 0x114}, {&(0x7f00000036c0)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0xfffffff6}, {{0x0, 0x0, 0x0}, 0xfffffffb}, {{0x0, 0x0, 0x0}, 0xffffffde}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x41, 0x0}, 0xfffffffd}], 0x7, 0x40000100, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000480)={0x34, 0x17, 0x1, {0x2b, './proc/sys/net/ipv6/conf/default/forwarding'}}, 0x34) syz_usb_connect(0x1, 0x1467, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000002080)={0xa, &(0x7f0000001f80)={0xa, 0x6, 0x300, 0x3a, 0x7, 0x5, 0x40, 0x8}, 0x5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="050f05edff"], 0x2, [{0x2, &(0x7f0000002000)=ANY=[@ANYBLOB="0201"]}, {0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x807}}]}) write(r8, &(0x7f00000004c0)='f', 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$UI_SET_ABSBIT(r8, 0x40045567, 0x38) 2.170776249s ago: executing program 5 (id=701): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x24) open$dir(&(0x7f0000000680)='./mnt\x00', 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) (async) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x80) (async) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88ce359bdb00143c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='./dev/sda1\x00', &(0x7f0000000540)='./mnt\x00', &(0x7f00000005c0)='ext4\x00', 0x1008c10, 0x0) (async) mount(&(0x7f0000000480)=@filename='./dev/sda1\x00', &(0x7f0000000540)='./mnt\x00', &(0x7f00000005c0)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000600)='./file0\x00') (async) chdir(&(0x7f0000000600)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001dc0)={0x0, 0x0, "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", "c914b903be05ed0bf3f5b0259276dbed6bc04cac1716b9d734e0a17c5a324d2b02dccd8b56f6611e839dbf7ab78aadf3669378a8fd3d3a8301068d31c96eb294182e9074136e0a9e4b73f9b1e76c5714c213dd1a0e2dbf2113e3485a3cc777a84f68eac39ca57b19ba73b8226ff26d7f4d8e5f5ad8cf5b09e2472b83b9d33437061f1cd46edfcfd657c36c9010877583d20501f5e72a270bcf16e742e2ba8ed651813f9e34b3a92610bb40189df5341f883f4362dca9b7266460294e1356b2dd411ddd555c3122708e21f8532c9df0c2e11ac1178f8980900e4205677e1ade2322a145fd39c0501952b370677c7302d74ea3de6b4a7752c270520590864781a8cdbdbdc9a1e4704226d89ca8b0c5486a10f7750b7bf3bd723294ead06c548bd8b1f0f638edf9247f74ee1e1b5378292b9841f593d395bb71154983803667dfa30c9b6f2d98204c371b518a63bc553447a23a57156776bac712527e9732c9a233f9db26e35a17f1b6d5f36f1ce9a6a21b785cc763fc7cb7cf94c070b3f3e9558497c8cf331632b6d387296037af57c92f2eceda28adf5763c81f2be6beefb7ef6fa2ebb71ab6cfff82baee67b8abb3066bfbad50592ca8397e3bf48d4fbd159b50904156835e5378d72d0c72b4e29c48de09299f3e9aef9efb33f66ee35708ea77b5eaf1c3282a059b59ffe3623a12c7259921c0f0bd1b458f6862c78c30f3cffd14311240afc44bc852975fdf9a4240acb4257915594c87667021f3394ed68afd826e6c52acb868042e3b1bcfa4154cb0dffcc522e90a22b036b1d1f236d9e25c74570ad2438c609c272cb2951511b53cdc2443a3ff04a72559417ec3e3c15fe5c5b3e161b5582adbcc278100d0db60ef346883dfa14ef25977670ca4e36d1a5f845e71d595e9b3b6c543a283da0ddbc181071cc7050b6b7d9155a2aa562ece25dbf42ed97b894c1af7aa3a6d7460f400ad849ca9f6b8d12dc7309224301647fceaa7d72aa0ee43e0b9be2b7c76850a644695fee3791ef1ad49d5381fe8361caacfc6608d3b98451b220cf7675aaf460ad7c5496475a8e706f9ce1e0f0b2787ef3993051c2b5f8c414379fca6df72fc53e14a6eecdc122a81daf788854ab826627a998b3c37704569760564cd085af49ca993d754faa5c94c2474a30d6d864766c53fd05137eaaf5df73d299932545edc8a5b0ba2476fa365cc7035271d2f9e8118a8be51fb033704af13cc7b186a726f6d167b909d9c7b441a793e46598e667feea7f76361e946314b592c342786169e7edd8bab315cfb185efd4708f1d44e958873e09ecbc88d1096478177fdaa98e1cb5d4aa64517fa6132d12d5707a7a091c30bca3e2902163054c8ff2c8e61ddcdb960d7aee61dd79fe7b4fd6a11cede76f139c7520ed65764335d503d9c8b38f99872514fd49f50543718bbe72f3a0ef8f69ee00024652b91f56176c9c21193738c89ec31c464ddc845c0b9a9bc7ad38c9547cdcd4054e9579e4dbc6b2183962f9c19c8161bc66b895fe4e8bbd5f2d2aa879b670f8ef041134c17e6dd1034bbe09896309d6c7d6a07b0cec95a9d0241630dacabab669338060d1c4fdf795dcc52a681ce179e7269b736a25d1b419357f4ddd97928590590998f3648d26b964f367ca3dad06d84a97ce32d4b530e19d28ae589bfdf27a1f9224501826c1aa7011ac9cc27efa362fdd652050b65395d906ea5bcbf0ffe6ff3c698c3d1fe326886d50a46db6b8d1b6b9da7516dd29998b1522c3b466d8899d4acd39a48d777ed905f8e1df0dc5d6a53e8c9d5f7b65c5ab104edb74bdcc920aa480e71863048234aac8d8338d6b90582f2c28785b6e01a0e8e1b53b49d1008458776613d303eb6df2a22842b46ec31f2232cc65da4a13e3e55f60c9703ae60e19d86575c435b1c0daa7fc10fdca866074ad16a26f1f49813e5739db25becf8cebd81ad75a8dd895632ad7c9977cd912502fd85a18a979fc046ec21bdf597e3ebdfbc9b7f556646300198b53e63de1241c51e2233a668a2fd14664cf512cb0ce290ba1cb67da75ce66ce5f12c073edb17b5927a38af8bb92819c3781e12e2ea779cfa2e8023dfabccfd85115d4c9c79b41e4fc71a3b8c98e8658d01aa4d44c35ca6e6d3958568a037302fb7d677ca83b2239a2aa33aabb68318d37eaccca4da8aea204b4df550e53c8c62386d90f4c391ed192bd88dd7f8c50db847c161e8df45e7bbc1b40418bdd7c7eee3029abaf7a83d4c73db5f0f0d3dd053f9d63a2d33a635708d03fa2fda27c6c8575c7b92feb528b6424e7b8d6a14f4396fc12431c3f7fcac5823f903980b907f6fcf76c0cab1047e3b572213b105fb7a7b39d9dca6e8b350a9f0d30e2dcf5c60b447d9cc037d4bc49557454838f0b79cffb4bd541f259decf4ff53eb148385aa96da61903514935f7377438ff8bff40981ac929a76d114d1d249a1fd580bde9b919fbc854c91be4f4739c1c737909ac6fe49a6422d13334488a975c1cbdf551967e217d1ee404fc4322693af3b3b2cb9ef870e29b3a5f7252c86cde1acd14cd4fb5e503f92b0dcff3bb08752f143d23911386bf0e88a2ab0fb2a0ae66eddcf5493b35e7d446cfd4919a44dacca0003f335509b348f948bc7854b433c9f6ccbee54c63394711c601b78335044d0df057e1424159c3d46c39a3c8296aec816928772367a39c4b6ca84220f1403121626f4240cef8f16423775bb7b85e8f2db388fa5b2161bceca1589be4e92014c83c568f7b7e64aad91039310e8b26155e36078acdc5d136b5a06f813e6f3ec0f0a07235cf2c76a5ee29640c52c44ccd62b6d60a3096a23cf89ce9a836ce131cdaef800598727a0712c4e49beac9007f7393950055217b893f22165882f0228bed045a20e7aad14b48efa5c8abfddf08598111de5e6c5d9316948615dcc127719c6a4c4f30e313ab73faafb7f6f90231feec8f3866dc4d5b506c9f1cb26a6a3cec45ac0fed10821d9eb53c0deaf0cfde40a3fbbd9bd1b1ee6a33ea66acff709bfa8303a9b216b1e1f6b4cbb696d9445715d313deba528e92e1a6fff62ba6a8f63d5deea48e41f597fbc628c383617c1eada0509f6ceb7d727439ebb410a7a9326c32f2265dfef49c2044a928da87e6c39035c1cb5634ae50fc64755d18c661c764a2cc039c10e211b57f66f2c0cfa8bf79f8966f2d3c3821b5360d1a7f73ff5d2d1a5d89a7cd6111c72da688b567b0f011a0fac4833532b2dbce0e390f3f4d8f8bed63904b2b626ee31ef2654dc1a26ac448adc7c700ae23957de7dc3de3fc6b089a1a2ca78813caa464b2abb0fc97a82e8623654bf938dcc657ef2353126c7b3bab5c73d2caff1f8f84b429b40f8728323edb2a316a2f66219bf85e7724e382900b42f32d7d6cec4ddd86b3d28a1a3eb0c7d2b88eb510dcefc5a887be0b085994396527647a6116358cb5b197da0c95d332a629d975163c66cf58c2085e2e1d1eedd3a6a81f3477ba31b240684470a0ff2b183f899745066321fb2c5dded4f4b4e816040daff882bc35073d8683b3e3308d19f06b40ad2e7d5dc286e30100ca21e93bd63e262d9d452d91c4d3de032d10b514b9ab098a4eb220c98b72d57b782c68307643e7df0cc215ff1cc53554abc6927730561c61180f539f31d58b81930a367d7df43da69c4cfa8a39a189b15e22dea44ac24ac40b678e0ce879c3187197ae8cbcd7c5004aa1abf3d9ec5492df0fd0abb1944e543e42a5dc371ad69b742c8c5ec3d503b67756c664a45b572d3d04a1eaa15f8b108380d4f36374fafbb6a8fc16039ca16183d79f7c9e81c03d07462371cb03b2d6b183d4a9681b0217f9da8042933a5b93b5f1a3dd42b3d73c6ec11aaa6f785a0e9faaa5985e3fd8e06a2402d4ca553a783bbb2fd79205a135eac7c8c6d1569b42da28bb2c33e32f7af0401e31a73261d7a8f5a62146e8601fae6a7289a8c2bc98a2d630e1a26b7d11706003db71b7a0a6aa925c48a31258990baeed3386aaf237db70387218e326fcb94d93961441382e169875465f007e4bfb8ba1a6abb92d5f5cd25a1409ada1e7de7980684c17235c8c390e17c1502ab32a1292720ff10a78db19afe5021839e41ecd7261f7ddf7bd385c340b2af8bd415fbdda5426c483264bf53ea3a18758c335d71fcd92297356b5e73280a35f0ca22a3dcc6162fcd47e27dbc6c2d0b1ed3c79b2a297449602d2653637fe5e77a22a4937b6ab73fe69c2b450ea015567965acc7a030dd8ece5475c7d30596be959179032f6bb62806617680163b7959d0efbca242def2b4bb8b27766de6cc40ef0c44d23e6480b1d489d3e784d6929a4167e3e9b3e1831c7f73353d388704ae6db1d109b78426508fda709cb8e88a682e74c4df4c4f24136a374f3117875f99b960a2d4667840254ee66ab745bfb2a6000486ce4c778e4d1e7caa489641ee7e8b1cef8948d391356a2710eac02998997cba3e0934208b6f7d1163bf018ccaa386ce4abb144a2b7143e10cc8bfb66e0b57a504c963b5749636a2073457f77452b39b7e5147c6990ddee7fbd43f41bfa67787d3ad8c9893928fc1e1fd3cea0af2543cc4b4a5e532b92eb41140b136f1835121756d6967a8176b4e1187bb58e5dad95d45f6e65a56d63fd69c7307093ce65e510bf8d49fa5704e1e9ee087d013855db1541ee95f8f2de2269354b104788c625e99ece667a8267b1fd8ee156901c01e0853f5846ad918cd696def96be7b023c6464113704298a081396238a2208e48b8d21415ba9649dc797d9daf3eac592816874a4c780fb6642c965b5195a1e38a80afb2de6d6f3aa06a89a1d56a068a64f9212efb70fff1b3fc4c046af4a6abe130d751cdc6c9b3a82ead87736331afd13526323f4759e3f04255a841d15b665f0075dced3de61176c3c6f2cd598925e6121730657cc981b4397bb9cb5ab56b241ba390cc4bd87b44a0d838ceb8d1b8e9096199bdac55302350239d48173d68d57772d5312abc3e049d00d6561f5615b570caab7e3bf7cfe0b9b250fab114f3da080f4d8ceeabf62b8208c5b5cb4eb2259254c7e385da8ef4b0889f6d4a6fbf2bf16e215579da78ec2a654e79e3abf8b25cac0043651e9a76d332130f52d7d0093a577838ced3c2feb7ea3ac6f038be9c4382f64104e6e2018ef0e47c1c02ba49ed63aa3194842dff016b0ea9babf45fa08be4af0f79f3732d3be5d2a46b4ec668109bda73ed608ef5b051892f39b29932e7dcb16c00700561d22bfffe95dcd45db636c99c34aadd257eeca033dfbbc67a76d5aa36521b7f841685056ec4171d6b50bacbd9f8f1f23264727bc65e34d37c7fb36d2d501cf4c5adbc9519a620925cdb512de60646a6f331cae99aff7f3e226c30910897320a924104556ce64814f6d56df28e8"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001dc0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002dc0)={0x3, [{0x0, r3}, {0x0, r3}, {}, {0x0, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {}, {r4, r3}, {r4, r3}, {0x0, r3}, {r4}, {0x0, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {}, {r4, r3}, {r4, r3}, {0x0, r3}, {}, {0x0, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r4}, {}, {r4, r3}, {r4, r3}, {r4}, {r4, r3}, {0x0, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {}, {r4, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {r4}, {0x0, r3}, {0x0, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {}, {0x0, r3}, {r4, r3}, {0x0, r3}, {r4}, {0x0, r3}, {r4, r3}, {}, {0x0, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {}, {r4, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {}, {r4, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {}, {0x0, r3}, {r4, r3}, {r4, r3}, {}, {0x0, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {}, {0x0, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {r4}, {}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4}, {0x0, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r4}, {r4, r3}, {r4, r3}, {r4}, {r4, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}, {r4, r3}, {r4, r3}, {0x0, r3}, {0x0, r3}], 0x4, "b842ba8a9c8a9e"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000003dc0)={{r5, 0x4, 0x1, 0x0, 0x4, 0x7, 0x1, 0x8, 0xc16, 0x5, 0x2, 0x2, 0x0, 0x1}}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000003dc0)={{r5, 0x4, 0x1, 0x0, 0x4, 0x7, 0x1, 0x8, 0xc16, 0x5, 0x2, 0x2, 0x0, 0x1}}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004dc0)='./file2\x00', 0x18d042, 0x15) pwrite64(r6, &(0x7f0000004e00)="ff", 0x58200, 0xfb2200) 1.527686845s ago: executing program 5 (id=702): syz_usb_connect(0x0, 0x74, &(0x7f0000002780)=ANY=[@ANYBLOB="120101027f615a08041c1500ec670102030109026200010205100909042205000206"], &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x0, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x2, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=[r0, r2], 0x8}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}]}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1a2) mkdir(&(0x7f0000000300)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f0000002580), 0x0, &(0x7f0000002800)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}]}) r3 = open(&(0x7f0000002600)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f0000002640)='./bus\x00') unlink(&(0x7f0000002680)='./file0\x00') mkdirat(r3, &(0x7f00000026c0)='./file0\x00', 0xf3) symlink(&(0x7f0000002700)='.\x00', &(0x7f0000002740)='./file0\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x44, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008014}, 0x880c1) 1.294212419s ago: executing program 4 (id=706): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020508090c00000000000000ffdbdf25030006003300000002004e22e0000002000000000000000002000100000004d500000401010000c0050005003c2000000a"], 0x60}}, 0x4000000) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000140001000000000000000000020000000400000014000900ff01000600000000000000000000000115000280bf"], 0x44}}, 0x0) (async, rerun: 32) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (rerun: 32) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) 1.08786626s ago: executing program 4 (id=710): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/msr/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000001480)=ANY=[@ANYBLOB="1201010200000020cd0c350040000102030109026e000301004002080b02ff010130040904000000010130000a24010f0a000100000009040100000102300009040101010102300009050109400003031058252508000000020b00090402000001023000090402d494728b003ddee2820900020302030a252502000000480600"], &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0}) 767.393812ms ago: executing program 3 (id=714): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000c40)={0x2020}, 0x2020) 756.098474ms ago: executing program 3 (id=715): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0xffffffff, 0x6, 0x3, 0xd}, 0x14) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000040)=""/83, &(0x7f00000000c0)=0x53) close(r0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x26) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x10003, 0x1, 0xb000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) landlock_create_ruleset(&(0x7f0000000180)={0x10110, 0x5, 0x2, 0x21, 0x5, 0x1}, 0x30, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x9c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x33}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x280, 0x0) r5 = eventfd(0x7f) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000380)={0x2, 0x9000, 0x2, r5, 0x8}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r6, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x12) getsockopt$inet6_tcp_int(r0, 0x6, 0x3b, &(0x7f0000000540), &(0x7f0000000580)=0x4) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f00000005c0)) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000600)={0x0, 0x10001}) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c000804}, 0x4) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r7, &(0x7f0000000740)={0x1f, @any, 0x3}, 0xa) openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x220000, 0x0) r8 = signalfd4(r1, &(0x7f00000007c0)={[0x8]}, 0x8, 0x800) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000800)={0x1, 0x2}, 0x0) r9 = fsopen(&(0x7f0000000840)='coda\x00', 0x1) ioctl$AUTOFS_IOC_FAIL(r9, 0x9361, 0x4) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x8, &(0x7f0000000880)=0xafa, 0x4) 728.326226ms ago: executing program 3 (id=716): socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0xb8}}, 0x20040014) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000002c0)=0x6, 0x4) socket$vsock_seqpacket(0x28, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0xa5c, 0xc601) sendmsg$vsock_stream(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000000c0)="91d3641f616494317ec29659119a7208fca567dd63a0b22523d1fc4d7358a2aa6f02543d6d884838e4cb6f0dc1b541f0f0e46cd8be2a763cc18123aae9", 0x3d}, {&(0x7f0000000100)="1b5b12a55112305f86174c2159f41d1e9dd67d9933487a5e865e799d48a829065fa4650e5a9efef10e4b9c6cd1bef6fbd181bdca8ae51cfb20209c570826ad9550fcf1fdce1f8828fe6caf4024f55e2a4b59b7c42ee8bab10a7757b160a5699be1f27f93909c235bbb6e3cf17e3e8b802fea734fc3f82bd8a00df98f6d1347ffb7fc5cea528ff112a5bba4e2694b5b00d4511106f2", 0x95}, {&(0x7f00000001c0)="da3d9f251ef537fda38312f645a8d759c942f38f9e3749fc1b4304c4b08f00689be3fd9f24c06477558b8c198f0af7760ad3255742f34656ccd90020313c9912bac9ef2bea9e168ba15d8717161fea75bab0e4b9ff66924b9bf81524bee698756b0f3d3424934733aaba7e1de32cf42cb8c8e5828f877a1e84b30b7d138765033df05555bed6cbd156f6ff9e378d55051ee0dc11420ae996112c3c0b1328bdd8574a40d054a0542ea4b069527af3af", 0xaf}, {&(0x7f0000000400)="ec7a53286a31ae41e6bd89c25ccb0e4fde5d461ac226b0668bd585c21d827a18d752ccfa882d6842b4baef29bbcc400839077842cea1a02baed44344d64acbd56486ff9e678b31a044a179a13276d3721e7ee06a5a896186b70c97ed0f96d4eb8e62109abcabfbcf67fc44cdb7e9747455c08550c00a42cab8bd561396dcd1a9c83f6f029c3924c50edd17d199d349149d504b0281b9950cefc9869acc7b17a85949b7a48c341d7a51c3376df4792f77abe4f5ee3a00941cc3052de286078139bf9d57cd32b525f661c78e918b5bf3d211f79d10c50bf2e8d36ce2a8b8e4c5d34966ef31dfc876bed4623feab378d61a2d506ae4b45998666aa9935b60a2a4c6570186969145131088277df02f70e3e02bd57001be858cc0e738d0b921e2e25a71385163395ffc2e00bf1e0020a3e0f4b61ffaf600e7d2cd500e59ee1aca18dd750bc66f3da0225ef639b95f40f76a672d6cadac34b788229d12c002c930e282b343733f94a6e2194be5f4529e190d2b9def087a369d9d7a63f79868297258b065d3fe10d0eff4b51a7cb582ec36eaca393553b601533681b0616c09e33f8feef7069ba603560aa612e2d9564aa7b9b7cd783eefa12fb72f71976c0ec7bebc2306491b3fea564398e074942e4b21ea7ed9e45dbc448840b110f0d28507952f182a54eae36791e5f20904a97cba73adb5ff330505bd8025fed6ea822a5f6d29bad42db6fc2f4f51ad8a288f2cd1ccb1e2fa7c95cdc93b00912d6b54721ce738c962bb5cea1f4339983efbbf35bd5fd238af300f1d359055fccd374d73053e83bc06f92ae38c12140ed9643716c7711559adcaac1a9de2508bb1702c68c1fd7956e2809517dde2f96fe026d51cced780c1e0fa5e3665450c6eeed0a711d41932e47d6ae990a79edf5235522154356a7b91b8de16cdb1711ba28a5dc18cccb70c4f5138d4ba4233f37a232a029f7fb6b2ad6cd871f62f64dcc2b3a9d0e9ec1f93481ade13fb9b9cff1f2bb66423f83c3211e38b9adc492c20fc5537872b0b1ccab3bd48e6f9f5694d4f8f28c16c5951aacc6975576c9dfc9dd4bc8f9f75f7d21b07feb6d79139dafb77c10d5876a48ee4d49eca1bf1fcc46c15b2b80b15335206717f5249c782ee326159bbfce0ce10ba4ac000cb21f6122c0c0420a3781a83321c9f9f61eee5ab4e295e0d2201ecdb59b00c70ddde3c25797eb76dbf98b96b376d5a33603d5fb0f3d9b32f605bd8a5dea52b5381539c6aa3e0a7b0e0f7ffb132f1fa325d979662730c2e0cd0c8b5b40ee9047861ea787a6c30618e413b1e4d47f09c7e4d536dd3cf12db43bd0184361f39bbfee50871cb56918de42ccbd0623966f1df17069d127d27a8a8fb6e02fa4b31372258499838166217c41e8d9650ec98e5e19c6acb3de23a790bb97462f5e704e910ffe84d2bebfeb0fc31a5ace83fa2d3051c5ac2a8a3afb795e6e91db18ae9803da678c1f10a6c0e2e1c203560b1eb1eba0905473f5c4d8947e656361ed1df56dd0e8d4fc3a043522c410476fe29e59faae433b3dc053510ad9d5eebc8383250a4a41f6e0ba92514e137816e15962eddc36c0d2e8ed203a7479990656a4d32e9ef0029796042204408a17d43116e4160883ea197d503e2dc66e69d56d2e9e222094f9327eb5e40447c7fd607387114e22e5beefc8d89459498a508ad33a7f4bb4899ea36be5f808308ab7ffffd8c01ba5016c3eb6b3a36b76201fba350241a604f167c4ba9816cf850b9d08835dfc89b20b200e8788b4cb5381853f712e2a576fbaf4ddce7e06c983a97862c6f45393cbdca421c40a60e29b39bb05c5e96ab7a45fc4cbf9f6a5659877ed309b1f9a4c793384115c01035227252145c67729577b8965332673cb2841173f17301d18f273dd604f69d122f6c14989b5520ca925bf617812f50b0c1c4b023943107cf37e92835ddfa6a836b326c58dc1053ea35f9f9b469d19aa385bbb35ccde36bdccd8432b68218acc19cdc41e8708efd5c2f412caa34b3c3e2080280df002089ef898184f7353e7615bd4d667d6cb261e97e84bf0d9813750c41b254315e74e5a001281b86f89b299712afe4638424dda2b8543ba4b32e8e4ce1e7975901acd6421e4cbee6acdfbeb6af78c9196f85971ee341fd0b2b7a54a8ecdaf77336a13e027f23c34f1c21abfabcb0553b1bbc4ba8003822c63c0d72d133f2557e6b1395c4878b914b995f3dc713fe55f681cd54e230c71fdcd17a2b2228f94100e865490058771323629115a2b5bd3e85d5e75b05bb9f2725242fe19bc32c9db9448494c29e987850da29d3006757ab9a4146bbf050758fa1f6cf04d691994e8c8d3dc23f08ef02fefba82ee72ccda10993ebb44a32aa93c00645b9ef13c81e465e6eb7e2fbda255f5d10b8f8f3b5a0decac859bb3f2d25a36641e89c2a9e85e8ec814990c642f1cd3b27e679b3884ce596c9c2178af12845ff59de4adc1a5162a696931f034092dc3c8831702848cd35afd395b864279c510e983dfffa2bf89f20a7f6ac00129deb08b8049a3d8480ff216a4833bdc8bcae86db802c7dc45bd43a18484d63514ee5b1a847a98996f45122bb37b025d7a10e9642e0a9c063b8257eb6ac1d7e51791fc44a0578d8601195f8fa47ee76542661ff4a71823aef55c4b1442c9542796a694164d6f0c576c74e15a31a3f3de394c41079942a5aefd67ea3f23f60b8e3aed1b6b7e039f904eb63e9f5b057b6c086563163e4e16c3e40927d95bd43726f8197b7a358e95b2761b99b7f394a3ef2f1a78faec17abca3d93510d29891a46763039dd0c454ce96f662f9406b7e89bff65a9ed5ca6b3566e519c801a6909cbca8ab5eab1a7a271e03c1f0a4f3c2602febc790ff6b3973a827ce5639c31e39e81fd29085aefa4d61a9645282907531c01f35ff7dc4454d91b6df74060a4a5bd94eb549af7293dc6128e0f918bb01a29ef601143ff4299121eff5fdf9fe55fde3bd4ded54f88f22897c27aa16d5905e7b5da59a19f3f152cfd4483636fdc6123aa44382ab442e328f2b7081fded2ccd643fa777b4360ae31af53361ab68a2cace2f2d244d41a728afe5574cf7d57027d7bf804be2da08333b04d4c932f508cec9e3e8e747059a9fabc3157ad99a79e39a94a5c7993f1b15f9e1a63d3042d8e2b642cbd162af29d1683d1b7bccc2e80633095ad2a2a755ee1d23839fbb7f746e8cbef203cdbdf738d77078057d4cd83a2f7daef1179b2e4345646130a787ee9c868f49d848f75eef1387f297aff4024c5f8b85137821d899d34a95e69b1257b7228e5a5de5f778ce99774ca8371d943b841e4e0e27f94fae2dc3ce778c37bf42357b328a45b01c715e579fc993b2627c9935cce62b54f3bb1b299dcfa1c2d6a2fb67655e9fb43076d2cff5b27f6abb8fcfe82a1e03d7c1f38e646589c94a507e1c4af04fbe5dc0a0d76c18ef985c8e796cdcc57004f7010be1d5640ef81453c2a1f784ca515ab26845d0fccf10206c5df42be33258c93f89f470755aa66eddf24e03d60a9d8a0491dd47f749586f7fbc777b5345658c0918a7e6e10eba2c7acbb505bf11b2dba15ada810c794f123634f4e2f055e8ae2a35796aee0dc2c1bf47bcc635514a00f656a4ff00e069f2c5e08e2e1ef79ac2b402c94897c43041986aaf632956d7cdf06e8f3543d5521a9c17ad7d2d3027502cdfb3b33f4d4ec7ba51e4307df929a2206db1efb4736a4e98ee2dfc0b31f67f24c5982dadd88cb2ec4a9b6bc5529426a15464807b1f5f16f396c23166e323e402c22cb244fbbdcac594dd8432d99196b3231b6f5d7e44cbecef741e5e3044e7eee18fcd6911eded597137baca1a6894198b87087f7ae38973cf1f47929ebd43ad823c8e0733ccd733a70138ad8e7687fccfb465f17247d23b4231f67a8a41a76d1f8710a9a3b2fb3a4deba49fa0870db5b9fdfe32d9e32b54528b3550a1ebbb0fdc5fae4a3e6e58e1ff18ddc9375b824ed5f88fe4c7a83ba459dc628ece916616f0374a3d302341d57b2359ff81a6c3931c3fe4c463871848cc740a36cbfe2dbb0e9113d4fe55c68828d5a080faee1f8904502cb8bd9a2702e9cf9221949557e566d1121f5cfa58eb1f7e76d55429546e384c8ac45dcd8ffe4bd5217f3e746cbf749ef9661732b7ce16251d8e4bda9bb39c39795a7b19510649b32b935ad3e044e1e7eae6e9b6030d216aa7a8a4e161594d382f96fcc34f6af3a704a0f56e5c4f34b425d8213db92c6e3684a53153eeba80523140869d8766028f2c56b066387a8b331aeebbbc9851578c214539e80147458b9f0041ff4075a62ab014a3978818968e610c2bed37edf54a10ffa1fc9e2355ac5c7e5b5fdbb5d62afb0f22019b0c42456de98a36862df35cb36c2b5896f7f3372e94969fa2fd4cf7779f650eb0dc3b0321f27f9002e4fdd1331be9a79f87958f9e8c24118bfa7c0ac6f669a91854026e3e3a7b7e596ebfb004e46c958cae8966d2f3884ebf39794d9d6e6f16dd563881e44ff49e65faaeafff78560b65db4ea9e2cfb931cece7b93524db69b077a664f79c7a943d3a3ea793025bdfcf44ef5d09b5d50384ef23b1e76d89e230526f17ae60823aeb099065f6c57351b0fb1b4b4304438373050ee9f9c67c81655b0e632962dfd51631c4487c206e8471a5c96fa91993386a887c575eb528a21d7e3d712f4b0ed2f58b2ad61f5ca7d37b1139f9f0edcf0b460060d3cdcaebce4a92060e3b4904a329282b70ed88986a9fe6ac1a736e0315d71c85fe9d73eadd3c6b57f04e0d14791daf0e8f096172672c469da3935fad5aae454703322d506a4b77ce644d9dcfb7cf38b1359d4fe51ecf7ee4d925206e2b622b24b213ed275d2ab7ce5d4a40216ca233b5dd34c1f1533aafa961c4547d60de7326eb8e5ca7683c7736d627ee0257fb9f6a41c144c3cd5250bcb92073661d045bd727c9bc4ba15e15b2008f0f757a9246d71b2f3ca02f3923d737c3f43d5b3adfc6f28deabcba1db8450ae1b4777ef0547750b2ee74264c9f1ea608d12464f57accf701a1cd9c98cfb4380e17a4f3794caf26d1e9033eb7a251c07a9f1743d9a4b59b201eb39d987e6c8c5782f19a9e1cf3c92e20e01aa9e2a7291243b2dd2999512e46589efbf24899edb96f19cc9aec954812f1126af1b0b411e0522d08707811b990539afaf8a5bf73c4661e80c98da9f8032c3d2a4c70c2943c2353cd631c9b60e69f600ecf83a33bb7bdd3c68e4160ffe8d6a2b0bca9fb414693aa2b9c87032d473b12dc50fe6fdb70ec4d7d9f2e403a2d3ce72160b5c020beea2f2b07a36016a127ef65529287a09cc83b5ba3f046e7661075946c36bc1f2fc794517e29eba0e2062e1df49cabe57cc33e23aad5bab6fa034b6307d2a2e327dd47946bd81dac759e48349df30406427365519f24226ff95d718ce1781ccdede31b39d29cfe86845bdb338116ca0020fcda024d7a0aac6093707498a3b9bf90ab0674af9cf6fd8f9aa24575b855c09bf218c91eede1cd4ea4ed10a1bba842f75c9784551743f40d3b932fe93f31e35cff3522939b4e21064827161c32afa051836164913a5167b2fefa87bc527f0ddd30d68cf58e9d88e97f0a0fe57b9e26a9bad3aae3144ffe73c3b3df1c149a495e5b0cb7ca9b061c8ec9924f22ee92033b2e46ebc2e62172578da722992f2a0dce8e91ee53b8d90d569646aee4376bacd10af3ad86d8b25ac49d7d905c3a84066f4134369534072072d35958bdadfe7039fa241c96d1c14903a17b87da3ea8cad13a354323d629e", 0x1000}], 0x4}, 0xc004080) clock_gettime(0x9e77661b8e7af6c7, 0x0) timerfd_create(0x8, 0x0) socket(0x11, 0x3, 0x0) timerfd_create(0x9, 0x0) r4 = memfd_secret(0x80000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001800)='/proc/crypto\x00', 0x0, 0x0) lseek(r5, 0x10001, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001480)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001500)=@any_dev={0x1, 0x10f, 0x0, 0x0, 0x1000, 0x7c3}}}, &(0x7f0000001540)=0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000001580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcbba, 0x40040, 0x2, 0x4000091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20000, 0x7, 0x13a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec73, 0x10000, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4a4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d03}]}) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000340)={0x2, 0x4e21, 0x2, @empty}, 0x1c, 0x0}}], 0x1, 0x1000) 573.988722ms ago: executing program 3 (id=717): r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000000)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) symlinkat(&(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00', r2, &(0x7f0000000280)='./cgroup.cpu/cpuset.cpus\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) 573.420082ms ago: executing program 3 (id=718): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="ca00"]) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0xfeffffff, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 551.244054ms ago: executing program 3 (id=719): syz_open_procfs(0x0, &(0x7f0000000180)='gid_map\x00') (async) userfaultfd(0x801) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) (async) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @local}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) (async) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRESOCT=r0], 0x0) 0s ago: executing program 5 (id=720): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0xf}, 0x2, 0x0, &(0x7f0000000040)={0x0, 0xf, 0x24, 0x4, 0x4}, 0x8, 0x7, 0x32e7, 0x0, 0x7fffffff, 0xff, 0x0}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000002c0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x8}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x1563, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0xffffff00, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x82, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x30, 0x6, 0x2, 0x1000000, 0x489, 0x6, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x7, 0x7, 0xad, 0x6, 0x809, 0x40, 0x7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x7f, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x434, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x200, 0xfffffffe, 0x9, 0x8, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x200006, 0x5, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x8, 0x3, 0xc7, 0xffc, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x101, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0xa, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000007c0)={0x802}, 0x10) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000800)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000008c0)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0xfebc) kernel console output (not intermixed with test programs): te+0x10/0x10 [ 94.868443][ T2197] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 94.868467][ T2197] ? hook_file_ioctl+0x1ef/0x590 [ 94.868492][ T2197] ? __cfi_hook_file_ioctl+0x10/0x10 [ 94.868515][ T2197] ? __cfi_do_futex+0x10/0x10 [ 94.868544][ T2197] ? vm_mmap_pgoff+0x152/0x4b0 [ 94.868570][ T2197] ? __fget_files+0x2bc/0x330 [ 94.868591][ T2197] ? bpf_lsm_file_ioctl+0xd/0x20 [ 94.868609][ T2197] ? security_file_ioctl+0x3e/0x110 [ 94.868632][ T2197] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 94.868647][ T2197] __se_sys_ioctl+0x123/0x1b0 [ 94.868665][ T2197] __x64_sys_ioctl+0x7f/0xa0 [ 94.868681][ T2197] x64_sys_call+0x1878/0x2ee0 [ 94.868699][ T2197] do_syscall_64+0x57/0xf0 [ 94.868715][ T2197] ? clear_bhb_loop+0x50/0xa0 [ 94.868737][ T2197] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.868759][ T2197] RIP: 0033:0x7f9762d9fb19 [ 94.868775][ T2197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.868789][ T2197] RSP: 002b:00007f9763cc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.868807][ T2197] RAX: ffffffffffffffda RBX: 00007f9763025fa0 RCX: 00007f9762d9fb19 [ 94.868819][ T2197] RDX: 0000000000000001 RSI: 000000000000ae41 RDI: 0000000000000009 [ 94.868828][ T2197] RBP: 00007f9762e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 94.868838][ T2197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.868849][ T2197] R13: 00007f9763026038 R14: 00007f9763025fa0 R15: 00007ffc591d79b8 [ 94.868862][ T2197] [ 94.868868][ T2197] kvm: failed to allocate vcpu's emulator [ 94.875580][ T2204] rust_binder: 2203:2204 failed to claim space for a BINDER_TYPE_PTR (offset: 112, limit: 112, size: 32) [ 95.157633][ T2204] rust_binder: 2203:2204 error while translating object: EINVAL [ 95.165420][ T2204] rust_binder: 2203:2204 transaction async to 2203:0 failed EINVAL, code 1 size 88-24 line thread.rs:926 [ 95.192359][ T2207] overlayfs: disabling nfs_export due to verity=on [ 95.201568][ T2209] overlay: filesystem on ./file0 not supported as upperdir [ 95.224391][ T2213] fuse: Unknown parameter '€' [ 95.240175][ T367] rust_binder: 2203: undelivered TRANSACTION_ERROR: 29201 [ 95.261385][ T2217] ./dev/sda1: Can't lookup blockdev [ 95.291140][ T2226] rust_binder: 2225:2226 transaction async to 2225:0 failed EINVAL, code 1 size 0-24 line thread.rs:1244 [ 95.314444][ T691] rust_binder: 2229: undelivered transaction 282, process died [ 95.440854][ T2240] rust_binder: 2239:2240 error while translating object: ENOENT [ 95.448587][ T2240] rust_binder: 2239:2240 transaction async to 2239:0 failed ENOENT, code 0 size 88-24 line thread.rs:878 [ 95.520399][ T367] rust_binder: 2239: undelivered TRANSACTION_ERROR: 29201 [ 95.540523][ T367] rust_binder: 2241: undelivered transaction 292, process died [ 95.582523][ T2254] rust_binder: 2253:2254 transaction async to 2253:0 failed EINVAL, code 1 size 0-24 line thread.rs:1244 [ 95.608758][ T342] rust_binder: 2255: undelivered transaction 302, process died [ 95.621215][ T691] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 95.685097][ T2265] FAULT_INJECTION: forcing a failure. [ 95.685097][ T2265] name failslab, interval 1, probability 0, space 0, times 0 [ 95.698186][ T2265] CPU: 0 UID: 0 PID: 2265 Comm: syz.4.566 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 95.698224][ T2265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.698237][ T2265] Call Trace: [ 95.698244][ T2265] [ 95.698252][ T2265] __dump_stack+0x21/0x30 [ 95.698277][ T2265] dump_stack_lvl+0x140/0x1c0 [ 95.698297][ T2265] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.698317][ T2265] dump_stack+0x19/0x20 [ 95.698333][ T2265] should_fail_ex+0x3c2/0x510 [ 95.698363][ T2265] should_failslab+0xac/0x100 [ 95.698385][ T2265] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 95.698413][ T2265] ? get_random_u32+0x2ef/0x4e0 [ 95.698436][ T2265] ? __d_alloc+0x42/0x8c0 [ 95.698465][ T2265] __d_alloc+0x42/0x8c0 [ 95.698489][ T2265] ? __cfi_inode_set_ctime_current+0x10/0x10 [ 95.698513][ T2265] d_alloc_pseudo+0x23/0xc0 [ 95.698539][ T2265] alloc_file_pseudo+0xde/0x1f0 [ 95.698562][ T2265] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 95.698585][ T2265] ? shmem_get_inode+0x81c/0xc10 [ 95.698607][ T2265] ? __kasan_check_write+0x18/0x20 [ 95.698632][ T2265] ? clear_nlink+0x8e/0xf0 [ 95.698649][ T2265] __shmem_file_setup+0x242/0x2c0 [ 95.698665][ T2265] shmem_zero_setup+0x90/0x130 [ 95.698683][ T2265] mmap_region+0x1659/0x1d10 [ 95.698709][ T2265] ? __cfi_mmap_region+0x10/0x10 [ 95.698733][ T2265] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 95.698751][ T2265] ? __cfi_try_to_wake_up+0x10/0x10 [ 95.698765][ T2265] ? __kasan_check_read+0x15/0x20 [ 95.698779][ T2265] ? __get_unmapped_area+0x406/0x470 [ 95.698792][ T2265] do_mmap+0xa47/0x1370 [ 95.698805][ T2265] ? __cfi_selinux_mmap_file+0x10/0x10 [ 95.698824][ T2265] ? __cfi_do_mmap+0x10/0x10 [ 95.698857][ T2265] ? __kasan_check_write+0x18/0x20 [ 95.698883][ T2265] ? down_write_killable+0xee/0x2d0 [ 95.698903][ T2265] ? __cfi_down_write_killable+0x10/0x10 [ 95.698916][ T2265] ? do_futex+0x37d/0x510 [ 95.698927][ T2265] vm_mmap_pgoff+0x367/0x4b0 [ 95.698941][ T2265] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 95.698954][ T2265] ? __kasan_check_read+0x15/0x20 [ 95.698967][ T2265] ? native_tss_update_io_bitmap+0x3c3/0x5d0 [ 95.698979][ T2265] ? xfd_validate_state+0x68/0x140 [ 95.698989][ T2265] ksys_mmap_pgoff+0xfa/0x1e0 [ 95.699002][ T2265] ? __kasan_check_write+0x18/0x20 [ 95.699015][ T2265] __x64_sys_mmap+0x121/0x140 [ 95.699026][ T2265] x64_sys_call+0x13bf/0x2ee0 [ 95.699037][ T2265] do_syscall_64+0x57/0xf0 [ 95.699047][ T2265] ? clear_bhb_loop+0x50/0xa0 [ 95.699061][ T2265] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.699073][ T2265] RIP: 0033:0x7fbbe359fb19 [ 95.699084][ T2265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.699093][ T2265] RSP: 002b:00007fbbe4491028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 95.699105][ T2265] RAX: ffffffffffffffda RBX: 00007fbbe3825fa0 RCX: 00007fbbe359fb19 [ 95.699113][ T2265] RDX: 0000000003000003 RSI: 0000000000fbe000 RDI: 0000200000000000 [ 95.699120][ T2265] RBP: 00007fbbe3637b70 R08: ffffffffffffffff R09: 0000000000000000 [ 95.699127][ T2265] R10: 0000000000004031 R11: 0000000000000246 R12: 0000000000000000 [ 95.699133][ T2265] R13: 00007fbbe3826038 R14: 00007fbbe3825fa0 R15: 00007ffc923ccaf8 [ 95.699142][ T2265] [ 95.769470][ T691] usb 1-1: Using ep0 maxpacket: 16 [ 96.027450][ T691] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.035941][ T691] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 96.048457][ T691] usb 1-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 96.057663][ T691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.065797][ T691] usb 1-1: Product: syz [ 96.070053][ T691] usb 1-1: Manufacturer: Ъ [ 96.074639][ T691] usb 1-1: SerialNumber: syz [ 96.116485][ T2279] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.569'. [ 96.125897][ T2279] 0ªX¹¦Dö»: renamed from ifb1 (while UP) [ 96.139860][ T2279] 0ªX¹¦Dö»: entered allmulticast mode [ 96.284209][ T2302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.304370][ T2302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.320722][ T691] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 96.336837][ T691] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 96.355483][ T691] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 96.386899][ T691] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 96.417396][ T691] usb 1-1: USB disconnect, device number 31 [ 96.434405][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.472733][ T2319] fuse: Bad value for 'user_id' [ 96.485604][ T2319] fuse: Bad value for 'user_id' [ 96.492557][ T2319] overlayfs: missing 'workdir' [ 96.536062][ T342] rust_binder: 2266: undelivered TRANSACTION_ERROR: 29189 [ 96.593759][ T2331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2331 comm=syz.5.578 [ 96.622054][ T2331] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 97.048342][ T2403] 9pnet_fd: Insufficient options for proto=fd [ 97.056652][ T2406] 9pnet_fd: Insufficient options for proto=fd [ 97.362439][ T2426] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 97.438553][ T2460] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.446503][ T367] rust_binder: 2459: undelivered TRANSACTION_ERROR: 29189 [ 97.513016][ T2482] IPv6: A: Disabled Multicast RS [ 97.523764][ T2487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2487 comm=syz.0.596 [ 97.577119][ T367] drivers/android/binder/rust_binder_main.rs:288: 6 callbacks suppressed [ 97.577139][ T367] rust_binder: 2495: undelivered TRANSACTION_COMPLETE [ 97.620465][ T2505] rust_binder: 2503:2505 transaction async to 0:0 failed EINVAL, code 1 size 72-24 line process.rs:950 [ 97.644385][ T342] rust_binder: 2503: undelivered TRANSACTION_ERROR: 29201 [ 97.659609][ T2513] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 97.693352][ T2526] netlink: 72 bytes leftover after parsing attributes in process `syz.5.605'. [ 97.703265][ T2526] netlink: 48 bytes leftover after parsing attributes in process `syz.5.605'. [ 97.723982][ T2532] cgroup: Invalid name [ 97.949516][ T342] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 97.979449][ T367] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 98.099478][ T342] usb 6-1: Using ep0 maxpacket: 8 [ 98.105656][ T342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.116638][ T342] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 98.129619][ T342] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 98.138707][ T342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.149207][ T342] usb 6-1: config 0 descriptor?? [ 98.159437][ T367] usb 1-1: Using ep0 maxpacket: 16 [ 98.162215][ T342] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count [ 98.173261][ T367] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.178149][ T342] usbhid 6-1:0.0: can't add hid device: -22 [ 98.189480][ T367] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.199312][ T342] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 98.204938][ T367] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 98.223882][ T367] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.232470][ T367] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 98.243051][ T367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.258880][ T367] usb 1-1: config 0 descriptor?? [ 98.369624][ T1216] usb 6-1: USB disconnect, device number 5 [ 98.819455][ T1216] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 98.897093][ T9] usb 1-1: USB disconnect, device number 32 [ 98.911129][ T342] rust_binder: 2701: undelivered TRANSACTION_COMPLETE [ 98.981121][ T1216] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.999882][ T1216] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.014086][ T1216] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.030083][ T1216] usb 5-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 99.040051][ T1216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.051621][ T1216] usb 5-1: config 0 descriptor?? [ 99.119806][ T342] rust_binder: 2733: undelivered TRANSACTION_COMPLETE [ 99.280106][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 99.280123][ T36] audit: type=1400 audit(1793730882.559:10442): avc: denied { read } for pid=2736 comm="syz.5.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.338124][ T36] audit: type=1400 audit(1793730882.619:10443): avc: denied { write } for pid=2736 comm="syz.5.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.421352][ T2771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.613'. [ 99.462050][ T1216] wacom 0003:056A:003F.000A: unknown main item tag 0x0 [ 99.485970][ T1216] wacom 0003:056A:003F.000A: unknown main item tag 0x0 [ 99.503735][ T1216] wacom 0003:056A:003F.000A: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.4-1/input0 [ 99.541555][ T36] audit: type=1400 audit(1793730882.829:10444): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 99.584544][ T1216] drivers/android/binder/transaction.rs:754: 7 callbacks suppressed [ 99.584565][ T1216] rust_binder: 2785: undelivered transaction 356, process died [ 99.600612][ T367] rust_binder: 2785: undelivered TRANSACTION_COMPLETE [ 99.666511][ T1216] usb 5-1: USB disconnect, device number 20 [ 99.849469][ T691] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 100.001428][ T691] usb 1-1: unable to get BOS descriptor or descriptor too short [ 100.013438][ T691] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.023750][ T691] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.034125][ T691] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 100.046404][ T691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.055778][ T691] usb 1-1: Product: syz [ 100.060031][ T691] usb 1-1: Manufacturer: syz [ 100.064791][ T691] usb 1-1: SerialNumber: syz [ 100.282099][ T2790] fuse: Unknown parameter '0x0000000000000004' [ 100.294649][ T36] audit: type=1400 audit(1793730883.579:10445): avc: denied { shutdown } for pid=2788 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.310266][ T367] rust_binder: 2852: undelivered TRANSACTION_COMPLETE [ 100.322776][ T691] usb 1-1: selecting invalid altsetting 1 [ 100.334562][ T367] rust_binder: 2852: undelivered transaction 364, process died [ 100.340532][ T691] usb 1-1: unit 3 not found! [ 100.347002][ T691] usb 1-1: cannot request logical cluster ID: 0 (err: -71) [ 100.364544][ T691] usb 1-1: invalid MIXER UNIT descriptor 6 [ 100.377710][ T36] audit: type=1400 audit(1793730883.659:10446): avc: denied { mounton } for pid=2858 comm="syz.4.623" path="/183/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 100.400773][ T691] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 100.429936][ T691] usb 1-1: USB disconnect, device number 33 [ 100.442207][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 100.590941][ T2859] hub 1-0:1.0: USB hub found [ 100.597482][ T2859] hub 1-0:1.0: 1 port detected [ 100.835907][ T36] audit: type=1400 audit(1793730884.119:10447): avc: denied { connect } for pid=2891 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.895970][ T36] audit: type=1400 audit(1793730884.159:10448): avc: denied { read } for pid=2891 comm="syz.0.625" path="socket:[27194]" dev="sockfs" ino=27194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.929603][ T36] audit: type=1400 audit(1793730884.159:10449): avc: denied { accept } for pid=2891 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 101.026972][ T1216] rust_binder: 2902: undelivered TRANSACTION_COMPLETE [ 101.034590][ T342] rust_binder: 2902: undelivered transaction 372, process died [ 101.130451][ T367] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 101.289448][ T367] usb 1-1: Using ep0 maxpacket: 32 [ 101.299750][ T367] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 101.307941][ T367] usb 1-1: config 0 has no interface number 0 [ 101.334508][ T367] usb 1-1: config 0 interface 184 has no altsetting 0 [ 101.354888][ T367] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 101.364267][ T367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.378766][ T367] usb 1-1: Product: syz [ 101.383194][ T367] usb 1-1: Manufacturer: syz [ 101.393180][ T367] usb 1-1: SerialNumber: syz [ 101.399460][ T342] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 101.402133][ T367] usb 1-1: config 0 descriptor?? [ 101.420238][ T367] smsc75xx v1.0.0 [ 101.559465][ T342] usb 5-1: Using ep0 maxpacket: 32 [ 101.575595][ T342] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.587667][ T342] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.611056][ T342] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 101.622350][ T342] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 101.638628][ T342] usb 5-1: Product: syz [ 101.643279][ T367] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 101.645889][ T342] usb 5-1: Manufacturer: syz [ 101.668948][ T367] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 101.681071][ T342] hub 5-1:4.0: USB hub found [ 101.700352][ T691] rust_binder: 2965: undelivered TRANSACTION_COMPLETE [ 101.714574][ T691] rust_binder: 2965: undelivered transaction 380, process died [ 101.729482][ T311] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 101.833651][ T367] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 101.854677][ T367] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 101.874922][ T367] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 101.895890][ T367] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 101.911600][ T311] usb 6-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=ab.79 [ 101.927474][ T367] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 101.929089][ T342] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 101.949708][ T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.960983][ T311] usb 6-1: Product: syz [ 101.970923][ T311] usb 6-1: Manufacturer: syz [ 101.975551][ T311] usb 6-1: SerialNumber: syz [ 101.990874][ T342] usb 5-1: USB disconnect, device number 21 [ 102.005881][ T311] ftdi_sio 6-1:4.0: FTDI USB Serial Device converter detected [ 102.020059][ T311] ftdi_sio ttyUSB0: unknown device type: 0xab79 [ 102.198214][ T2959] netlink: 'syz.0.627': attribute type 32 has an invalid length. [ 102.218078][ T342] usb 6-1: USB disconnect, device number 6 [ 102.224752][ T342] ftdi_sio 6-1:4.0: device disconnected [ 102.232552][ T2959] netlink: 'syz.0.627': attribute type 32 has an invalid length. [ 102.248894][ T2959] netlink: 'syz.0.627': attribute type 32 has an invalid length. [ 102.267527][ T2959] netlink: 'syz.0.627': attribute type 32 has an invalid length. [ 102.286453][ T2959] netlink: 'syz.0.627': attribute type 32 has an invalid length. [ 102.295906][ T2822] syz.5.612 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 102.299746][ T2959] netlink: 'syz.0.627': attribute type 32 has an invalid length. [ 102.307926][ T2822] CPU: 0 UID: 0 PID: 2822 Comm: syz.5.612 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 102.307955][ T2822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.307966][ T2822] Call Trace: [ 102.307973][ T2822] [ 102.307980][ T2822] __dump_stack+0x21/0x30 [ 102.308002][ T2822] dump_stack_lvl+0x140/0x1c0 [ 102.308019][ T2822] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.308043][ T2822] ? ___ratelimit+0x41c/0x5c0 [ 102.308064][ T2822] ? __kasan_check_write+0x18/0x20 [ 102.308090][ T2822] dump_stack+0x19/0x20 [ 102.308106][ T2822] dump_header+0xd9/0x460 [ 102.308131][ T2822] oom_kill_process+0x35d/0x640 [ 102.308148][ T2822] out_of_memory+0x5d1/0xa20 [ 102.308165][ T2822] ? __cfi_out_of_memory+0x10/0x10 [ 102.308181][ T2822] ? mutex_lock_killable+0x97/0x1d0 [ 102.308204][ T2822] ? __cfi_mutex_lock_killable+0x10/0x10 [ 102.308229][ T2822] mem_cgroup_out_of_memory+0x2c5/0x390 [ 102.308254][ T2822] ? css_next_descendant_pre+0x1ec/0x210 [ 102.308272][ T2822] ? __kasan_check_write+0x18/0x20 [ 102.308296][ T2822] ? drain_obj_stock+0xec0/0xec0 [ 102.308322][ T2822] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 102.308347][ T2822] try_charge_memcg+0x925/0xe10 [ 102.308367][ T2822] ? static_key_count+0x45/0x70 [ 102.308387][ T2822] ? lruvec_init+0x201/0x280 [ 102.308404][ T2822] ? __cfi_try_charge_memcg+0x10/0x10 [ 102.308426][ T2822] ? __alloc_pages_noprof+0x35a/0x7e0 [ 102.308448][ T2822] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 102.308476][ T2822] __mem_cgroup_charge+0xfc/0x420 [ 102.308500][ T2822] ? folio_add_lru+0x116/0x400 [ 102.308519][ T2822] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 102.308545][ T2822] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 102.308566][ T2822] ? shmem_replace_folio+0x9b0/0x9b0 [ 102.308585][ T2822] ? shmem_huge_global_enabled+0x2da/0x360 [ 102.308612][ T2822] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 102.308638][ T2822] ? __kasan_check_write+0x18/0x20 [ 102.308667][ T2822] ? _raw_spin_lock+0x92/0x120 [ 102.308686][ T2822] shmem_get_folio_gfp+0x5cd/0x12e0 [ 102.308705][ T2822] ? shmem_get_folio+0xc0/0xc0 [ 102.308720][ T2822] ? follow_page_pte+0x8fb/0xba0 [ 102.308741][ T2822] ? inode_to_bdi+0x6d/0x100 [ 102.308763][ T2822] shmem_write_begin+0xf4/0x260 [ 102.308782][ T2822] generic_perform_write+0x329/0x970 [ 102.308805][ T2822] ? __cfi_generic_perform_write+0x10/0x10 [ 102.308825][ T2822] ? generic_write_checks_count+0x426/0x540 [ 102.308846][ T2822] ? file_update_time+0xa3/0x210 [ 102.308869][ T2822] shmem_file_write_iter+0x105/0x130 [ 102.308890][ T2822] __kernel_write_iter+0x462/0x900 [ 102.308916][ T2822] ? __cfi___kernel_write_iter+0x10/0x10 [ 102.308940][ T2822] ? get_dump_page+0x165/0x220 [ 102.308964][ T2822] ? __asan_memset+0x39/0x50 [ 102.308988][ T2822] ? iov_iter_bvec+0xc0/0x180 [ 102.309009][ T2822] dump_user_range+0xb8b/0xe60 [ 102.309041][ T2822] ? __cfi_dump_user_range+0x10/0x10 [ 102.309067][ T2822] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 102.309087][ T2822] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 102.309106][ T2822] ? elf_core_dump+0x23cf/0x3840 [ 102.309127][ T2822] elf_core_dump+0x2d61/0x3840 [ 102.309148][ T2822] ? __cfi_elf_core_dump+0x10/0x10 [ 102.309167][ T2822] ? mas_next_slot+0xf01/0xfd0 [ 102.309196][ T2822] ? dump_interrupted+0xf0/0xf0 [ 102.309220][ T2822] ? filp_open+0x199/0x1f0 [ 102.309241][ T2822] ? 0xffffffffff600000 [ 102.309256][ T2822] do_coredump+0x20d5/0x3050 [ 102.309283][ T2822] ? __cfi_do_coredump+0x10/0x10 [ 102.309306][ T2822] ? asm_exc_page_fault+0x2b/0x30 [ 102.309335][ T2822] ? __kasan_slab_free+0x6a/0x80 [ 102.309353][ T2822] ? get_signal+0xa2a/0x1490 [ 102.309370][ T2822] get_signal+0x11bf/0x1490 [ 102.309388][ T2822] arch_do_signal_or_restart+0xbc/0x700 [ 102.309409][ T2822] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 102.309430][ T2822] ? __bad_area_nosemaphore+0x2fb/0x680 [ 102.309450][ T2822] irqentry_exit_to_user_mode+0x4d/0xb0 [ 102.309487][ T2822] irqentry_exit+0x16/0x60 [ 102.309509][ T2822] exc_page_fault+0x65/0xc0 [ 102.309532][ T2822] asm_exc_page_fault+0x2b/0x30 [ 102.309553][ T2822] RIP: 0033:0x7f9762c54db7 [ 102.309568][ T2822] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 22 24 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 102.309583][ T2822] RSP: 002b:00007f9763b86120 EFLAGS: 00010202 [ 102.309601][ T2822] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9762d9fb19 [ 102.309613][ T2822] RDX: 00007f9763b86140 RSI: 00007f9763b86270 RDI: 000000000000000b [ 102.309626][ T2822] RBP: 00007f9762e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 102.309639][ T2822] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 102.309651][ T2822] R13: 00007f9763026128 R14: 00007f9763026090 R15: 00007ffc591d79b8 [ 102.309665][ T2822] [ 102.309728][ T2822] memory: usage 307200kB, limit 307200kB, failcnt 10294 [ 102.337292][ T2959] netlink: 'syz.0.627': attribute type 32 has an invalid length. [ 102.394433][ T2822] memory+swap: usage 365864kB, limit 9007199254740988kB, failcnt 0 [ 102.400559][ T2959] netlink: 'syz.0.627': attribute type 32 has an invalid length. [ 102.440247][ T2822] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 102.451888][ T2959] netlink: 'syz.0.627': attribute type 32 has an invalid length. [ 102.527859][ T2822] Memory cgroup stats for [ 102.749538][ T2959] netlink: 'syz.0.627': attribute type 32 has an invalid length. [ 102.760481][ T2822] /syz5: [ 102.833721][ T2822] cache 312492032 [ 102.842001][ T3032] SELinux: Context system_u:object_r:fonts_t:s0 is not valid (left unmapped). [ 102.852270][ T36] audit: type=1400 audit(1793730886.129:10450): avc: denied { relabelfrom } for pid=3030 comm="syz.4.635" name="TCPv6" dev="sockfs" ino=27353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 102.885896][ T2822] rss 2080768 [ 102.889220][ T2822] rss_huge 0 [ 102.893528][ T3038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.639'. [ 102.902741][ T36] audit: type=1400 audit(1793730886.159:10451): avc: denied { relabelto } for pid=3030 comm="syz.4.635" name="TCPv6" dev="sockfs" ino=27353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:fonts_t:s0" [ 102.903367][ T3039] FAULT_INJECTION: forcing a failure. [ 102.903367][ T3039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.935439][ T2822] shmem 312479744 [ 102.950710][ T2822] mapped_file 0 [ 102.954381][ T2822] dirty 0 [ 102.961165][ T2822] writeback 0 [ 102.964518][ T2822] workingset_refault_anon 43 [ 102.969202][ T2822] workingset_refault_file 328 [ 102.976294][ T311] rust_binder: 3041: undelivered TRANSACTION_COMPLETE [ 102.978456][ T2822] swap 60071936 [ 102.983208][ T3044] SELinux: syz.4.640 (3044) set checkreqprot to 1. This is no longer supported. [ 102.986900][ T2822] swapcached 0 [ 102.999277][ T2822] pgpgin 96140 [ 103.002742][ T311] rust_binder: 3041: undelivered transaction 396, process died [ 103.004870][ T2822] pgpgout 19851 [ 103.010457][ T3039] CPU: 1 UID: 0 PID: 3039 Comm: syz.3.638 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 103.010485][ T3039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.010498][ T3039] Call Trace: [ 103.010503][ T3039] [ 103.010510][ T3039] __dump_stack+0x21/0x30 [ 103.010539][ T3039] dump_stack_lvl+0x140/0x1c0 [ 103.010556][ T3039] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.010575][ T3039] dump_stack+0x19/0x20 [ 103.010591][ T3039] should_fail_ex+0x3c2/0x510 [ 103.010617][ T3039] should_fail+0xf/0x20 [ 103.010641][ T3039] should_fail_usercopy+0x1e/0x30 [ 103.010659][ T3039] _copy_from_user+0x20/0xa0 [ 103.010679][ T3039] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x6e9/0x4200 [ 103.010710][ T3039] ? __asan_set_shadow_00+0x12/0x20 [ 103.010732][ T3039] ? do_vfs_ioctl+0x1824/0x2010 [ 103.010751][ T3039] ? arch_stack_walk+0x10a/0x170 [ 103.010771][ T3039] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 103.010791][ T3039] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 103.010820][ T3039] ? _parse_integer+0x2e/0x40 [ 103.010846][ T3039] ? ioctl_has_perm+0x39a/0x500 [ 103.010871][ T3039] ? has_cap_mac_admin+0xd0/0xd0 [ 103.010896][ T3039] ? proc_fail_nth_write+0x184/0x220 [ 103.010918][ T3039] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 103.010941][ T3039] ? selinux_file_ioctl+0x732/0x1480 [ 103.010965][ T3039] ? vfs_write+0xbd2/0xfd0 [ 103.010989][ T3039] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 103.011013][ T3039] ? hook_file_ioctl+0x1ef/0x590 [ 103.011035][ T3039] ? __cfi_vfs_write+0x10/0x10 [ 103.011056][ T3039] ? __cfi_hook_file_ioctl+0x10/0x10 [ 103.011078][ T3039] ? __kasan_check_write+0x18/0x20 [ 103.011101][ T3039] ? mutex_unlock+0x90/0x240 [ 103.011123][ T3039] ? __cfi_mutex_unlock+0x10/0x10 [ 103.011145][ T3039] ? __fget_files+0x2bc/0x330 [ 103.011164][ T3039] ? bpf_lsm_file_ioctl+0xd/0x20 [ 103.011183][ T3039] ? security_file_ioctl+0x3e/0x110 [ 103.011207][ T3039] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 103.011235][ T3039] __se_sys_ioctl+0x123/0x1b0 [ 103.011253][ T3039] __x64_sys_ioctl+0x7f/0xa0 [ 103.011272][ T3039] x64_sys_call+0x1878/0x2ee0 [ 103.011290][ T3039] do_syscall_64+0x57/0xf0 [ 103.011308][ T3039] ? clear_bhb_loop+0x50/0xa0 [ 103.011332][ T3039] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.011354][ T3039] RIP: 0033:0x7fb45cb9fb19 [ 103.011369][ T3039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.011385][ T3039] RSP: 002b:00007fb45d994028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.011405][ T3039] RAX: ffffffffffffffda RBX: 00007fb45ce25fa0 RCX: 00007fb45cb9fb19 [ 103.011418][ T3039] RDX: 0000200000000000 RSI: 00000000c018620b RDI: 0000000000000004 [ 103.011430][ T3039] RBP: 00007fb45d994090 R08: 0000000000000000 R09: 0000000000000000 [ 103.011442][ T3039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.011454][ T3039] R13: 00007fb45ce26038 R14: 00007fb45ce25fa0 R15: 00007ffc4e4d7628 [ 103.011469][ T3039] [ 103.017307][ T311] rust_binder: 3036: undelivered transaction 388, process died [ 103.032458][ T2822] pgfault 14097 [ 103.035717][ T342] rust_binder: 3036: undelivered TRANSACTION_COMPLETE [ 103.052483][ T2822] pgmajfault 33 [ 103.365556][ T2822] inactive_anon 49152 [ 103.369643][ T2822] active_anon 314511360 [ 103.373811][ T2822] inactive_file 12288 [ 103.377890][ T2822] active_file 0 [ 103.381483][ T2822] unevictable 0 [ 103.384939][ T2822] hierarchical_memory_limit 314572800 [ 103.390354][ T2822] hierarchical_memsw_limit 9223372036854771712 [ 103.396502][ T2822] total_cache 312492032 [ 103.400884][ T2822] total_rss 2080768 [ 103.404707][ T2822] total_rss_huge 0 [ 103.408433][ T2822] total_shmem 312479744 [ 103.412628][ T2822] total_mapped_file 0 [ 103.416609][ T2822] total_dirty 0 [ 103.420109][ T2822] total_writeback 0 [ 103.423917][ T2822] total_workingset_refault_anon 43 [ 103.429032][ T2822] total_workingset_refault_file 328 [ 103.434290][ T2822] total_swap 60071936 [ 103.438298][ T2822] total_swapcached 0 [ 103.442232][ T2822] total_pgpgin 96140 [ 103.446214][ T2822] total_pgpgout 19851 [ 103.450229][ T2822] total_pgfault 14097 [ 103.454207][ T2822] total_pgmajfault 33 [ 103.458189][ T2822] total_inactive_anon 49152 [ 103.462758][ T367] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 103.470408][ T2822] total_active_anon 314511360 [ 103.475175][ T2822] total_inactive_file 12288 [ 103.479911][ T2822] total_active_file 0 [ 103.483941][ T2822] total_unevictable 0 [ 103.488015][ T2822] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.612,pid=2822,uid=0 [ 103.502881][ T2822] Memory cgroup out of memory: Killed process 2822 (syz.5.612) total-vm:171316kB, anon-rss:1288kB, file-rss:118508kB, shmem-rss:0kB, UID:0 pgtables:300kB oom_score_adj:1000 [ 103.640386][ T367] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.654708][ T367] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 103.663910][ T367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.684147][ T367] usb 4-1: config 0 descriptor?? [ 103.795550][ T342] rust_binder: 3043: undelivered TRANSACTION_COMPLETE [ 103.803321][ T1216] rust_binder: 3043: undelivered transaction 404, process died [ 103.891766][ T367] usbhid 4-1:0.0: can't add hid device: -71 [ 103.898242][ T367] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 103.910695][ T311] usb 1-1: USB disconnect, device number 34 [ 103.919377][ T367] usb 4-1: USB disconnect, device number 22 [ 103.968620][ T3130] Invalid logical block size (230) [ 103.989461][ T9] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 103.999250][ T2750] syz.5.612 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 104.019898][ T2750] CPU: 1 UID: 0 PID: 2750 Comm: syz.5.612 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 104.019929][ T2750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.019941][ T2750] Call Trace: [ 104.019947][ T2750] [ 104.019954][ T2750] __dump_stack+0x21/0x30 [ 104.019977][ T2750] dump_stack_lvl+0x140/0x1c0 [ 104.019994][ T2750] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.020011][ T2750] ? ___ratelimit+0x41c/0x5c0 [ 104.020032][ T2750] ? __kasan_check_write+0x18/0x20 [ 104.020057][ T2750] dump_stack+0x19/0x20 [ 104.020073][ T2750] dump_header+0xd9/0x460 [ 104.020099][ T2750] oom_kill_process+0x35d/0x640 [ 104.020118][ T2750] out_of_memory+0x5d1/0xa20 [ 104.020135][ T2750] ? __cfi_out_of_memory+0x10/0x10 [ 104.020151][ T2750] ? mutex_lock_killable+0x97/0x1d0 [ 104.020175][ T2750] ? __cfi_mutex_lock_killable+0x10/0x10 [ 104.020199][ T2750] mem_cgroup_out_of_memory+0x2c5/0x390 [ 104.020225][ T2750] ? css_next_descendant_pre+0x1ec/0x210 [ 104.020243][ T2750] ? __kasan_check_write+0x18/0x20 [ 104.020268][ T2750] ? drain_obj_stock+0xec0/0xec0 [ 104.020294][ T2750] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 104.020349][ T2750] try_charge_memcg+0x925/0xe10 [ 104.020370][ T2750] ? static_key_count+0x45/0x70 [ 104.020390][ T2750] ? lruvec_init+0x201/0x280 [ 104.020408][ T2750] ? __cfi_try_charge_memcg+0x10/0x10 [ 104.020430][ T2750] ? __alloc_pages_noprof+0x35a/0x7e0 [ 104.020452][ T2750] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 104.020479][ T2750] __mem_cgroup_charge+0xfc/0x420 [ 104.020502][ T2750] ? folio_add_lru+0x116/0x400 [ 104.020521][ T2750] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 104.020546][ T2750] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 104.020568][ T2750] ? shmem_replace_folio+0x9b0/0x9b0 [ 104.020587][ T2750] ? shmem_huge_global_enabled+0x2da/0x360 [ 104.020613][ T2750] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 104.020634][ T2750] ? __kasan_check_write+0x18/0x20 [ 104.020658][ T2750] ? _raw_spin_lock+0x92/0x120 [ 104.020676][ T2750] shmem_get_folio_gfp+0x5cd/0x12e0 [ 104.020695][ T2750] ? shmem_get_folio+0xc0/0xc0 [ 104.020711][ T2750] ? follow_page_pte+0x8fb/0xba0 [ 104.020732][ T2750] ? inode_to_bdi+0x6d/0x100 [ 104.020754][ T2750] shmem_write_begin+0xf4/0x260 [ 104.020773][ T2750] generic_perform_write+0x329/0x970 [ 104.020796][ T2750] ? __cfi_generic_perform_write+0x10/0x10 [ 104.020817][ T2750] ? generic_write_checks_count+0x426/0x540 [ 104.020839][ T2750] ? file_update_time+0xa3/0x210 [ 104.020862][ T2750] shmem_file_write_iter+0x105/0x130 [ 104.020883][ T2750] __kernel_write_iter+0x462/0x900 [ 104.020909][ T2750] ? __cfi___kernel_write_iter+0x10/0x10 [ 104.020934][ T2750] ? get_dump_page+0x165/0x220 [ 104.020953][ T2750] ? __asan_memset+0x39/0x50 [ 104.020977][ T2750] ? iov_iter_bvec+0xc0/0x180 [ 104.020998][ T2750] dump_user_range+0xb8b/0xe60 [ 104.021026][ T2750] ? __cfi_dump_user_range+0x10/0x10 [ 104.021052][ T2750] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 104.021072][ T2750] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 104.021092][ T2750] ? elf_core_dump+0x293a/0x3840 [ 104.021113][ T2750] elf_core_dump+0x2d61/0x3840 [ 104.021135][ T2750] ? __cfi_elf_core_dump+0x10/0x10 [ 104.021155][ T2750] ? mas_next_slot+0xf01/0xfd0 [ 104.021178][ T2750] ? irqentry_exit+0x4a/0x60 [ 104.021203][ T2750] ? dump_vma_snapshot+0xb17/0xf90 [ 104.021231][ T2750] ? dump_interrupted+0xf0/0xf0 [ 104.021256][ T2750] ? 0xffffffffff600000 [ 104.021271][ T2750] do_coredump+0x20d5/0x3050 [ 104.021299][ T2750] ? __cfi_do_coredump+0x10/0x10 [ 104.021328][ T2750] ? asm_exc_page_fault+0x2b/0x30 [ 104.021358][ T2750] ? __kasan_slab_free+0x6a/0x80 [ 104.021376][ T2750] ? get_signal+0xa2a/0x1490 [ 104.021394][ T2750] get_signal+0x11bf/0x1490 [ 104.021412][ T2750] arch_do_signal_or_restart+0xbc/0x700 [ 104.021433][ T2750] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 104.021454][ T2750] ? __bad_area_nosemaphore+0x2fb/0x680 [ 104.021476][ T2750] irqentry_exit_to_user_mode+0x4d/0xb0 [ 104.021501][ T2750] irqentry_exit+0x16/0x60 [ 104.021524][ T2750] exc_page_fault+0x65/0xc0 [ 104.021547][ T2750] asm_exc_page_fault+0x2b/0x30 [ 104.021568][ T2750] RIP: 0033:0x7f9762c54db7 [ 104.021584][ T2750] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 22 24 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 104.021600][ T2750] RSP: 002b:00007f9763b86120 EFLAGS: 00010202 [ 104.021618][ T2750] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9762d9fb19 [ 104.021631][ T2750] RDX: 00007f9763b86140 RSI: 00007f9763b86270 RDI: 000000000000000b [ 104.021645][ T2750] RBP: 00007f9762e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 104.021657][ T2750] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 104.021669][ T2750] R13: 00007f9763026128 R14: 00007f9763026090 R15: 00007ffc591d79b8 [ 104.021685][ T2750] [ 104.021746][ T2750] memory: usage 307200kB, limit 307200kB, failcnt 11982 [ 104.150279][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 104.157889][ T2750] memory+swap: usage 365808kB, limit 9007199254740988kB, failcnt 0 [ 104.164169][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.165172][ T2750] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 104.172157][ T9] usb 6-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 104.174945][ T2750] Memory cgroup stats for [ 104.180782][ T9] usb 6-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 104.186273][ T2750] /syz5 [ 104.222938][ T9] usb 6-1: Product: syz [ 104.228050][ T2750] : [ 104.230205][ T9] usb 6-1: Manufacturer: syz [ 104.232859][ T2750] cache 312557568 [ 104.239470][ T367] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 104.243100][ T2750] rss 1970176 [ 104.253279][ T9] usb 6-1: Found UVC 1.00 device syz (225a:e1d4) [ 104.254805][ T2750] rss_huge 0 [ 104.269519][ T9] usb 6-1: No streaming interface found for terminal 2. [ 104.270024][ T2750] shmem 312545280 [ 104.399468][ T1216] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 104.403302][ T2750] mapped_file 0 [ 104.430476][ T367] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.441310][ T2750] dirty 0 [ 104.451899][ T367] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 104.455048][ T2750] writeback 0 [ 104.466718][ T367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.492928][ T342] rust_binder: 3051: undelivered TRANSACTION_COMPLETE [ 104.512487][ T367] usb 4-1: config 0 descriptor?? [ 104.515511][ T2750] workingset_refault_anon 58 [ 104.650014][ T1216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.652582][ T311] usb 6-1: USB disconnect, device number 7 [ 104.657551][ T1216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.666095][ T2750] workingset_refault_file 989 [ 104.683453][ T1216] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 104.696308][ T2750] swap 60014592 [ 104.706921][ T1216] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 104.709455][ T2750] swapcached 57344 [ 104.718649][ T2750] pgpgin 101413 [ 104.722412][ T2750] pgpgout 25124 [ 104.725881][ T2750] pgfault 14608 [ 104.725910][ T1216] usb 5-1: Manufacturer: syz [ 104.729335][ T2750] pgmajfault 53 [ 104.729345][ T2750] inactive_anon 312868864 [ 104.729351][ T2750] active_anon 1691648 [ 104.729357][ T2750] inactive_file 12288 [ 104.729363][ T2750] active_file 0 [ 104.729369][ T2750] unevictable 0 [ 104.729375][ T2750] hierarchical_memory_limit 314572800 [ 104.742654][ T367] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 104.747617][ T2750] hierarchical_memsw_limit 9223372036854771712 [ 104.752919][ T1216] usb 5-1: config 0 descriptor?? [ 104.757728][ T2750] total_cache 312557568 [ 104.772489][ T367] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000B/input/input17 [ 104.786806][ T2750] total_rss 1970176 [ 104.801360][ T2750] total_rss_huge 0 [ 104.805098][ T2750] total_shmem 312545280 [ 104.809251][ T2750] total_mapped_file 0 [ 104.813306][ T2750] total_dirty 0 [ 104.816773][ T2750] total_writeback 0 [ 104.820694][ T2750] total_workingset_refault_anon 58 [ 104.825848][ T2750] total_workingset_refault_file 989 [ 104.831089][ T2750] total_swap 60014592 [ 104.835084][ T2750] total_swapcached 57344 [ 104.839375][ T2750] total_pgpgin 101413 [ 104.843390][ T2750] total_pgpgout 25124 [ 104.847371][ T2750] total_pgfault 14608 [ 104.851425][ T2750] total_pgmajfault 53 [ 104.855402][ T2750] total_inactive_anon 312868864 [ 104.860833][ T2750] total_active_anon 1691648 [ 104.865390][ T2750] total_inactive_file 12288 [ 104.869963][ T2750] total_active_file 0 [ 104.873965][ T2750] total_unevictable 0 [ 104.877986][ T2750] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.612,pid=2814,uid=0 [ 104.881625][ T367] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 104.908886][ T2750] Memory cgroup out of memory: Killed process 2814 (syz.5.612) total-vm:168112kB, anon-rss:1416kB, file-rss:120040kB, shmem-rss:0kB, UID:0 pgtables:304kB oom_score_adj:1000 [ 104.946526][ T311] usb 4-1: USB disconnect, device number 23 [ 105.079076][ T807] rust_binder: 3051: undelivered transaction 412, process died [ 105.205258][ T1216] usbhid 5-1:0.0: can't add hid device: -71 [ 105.221496][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 105.221514][ T36] audit: type=1400 audit(1793730888.509:10455): avc: denied { read } for pid=3205 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 105.249509][ T1216] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 105.271252][ T1216] usb 5-1: USB disconnect, device number 22 [ 105.290525][ T2748] syz.5.612 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 105.343463][ T2748] CPU: 0 UID: 0 PID: 2748 Comm: syz.5.612 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 105.343496][ T2748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.343510][ T2748] Call Trace: [ 105.343515][ T2748] [ 105.343521][ T2748] __dump_stack+0x21/0x30 [ 105.343542][ T2748] dump_stack_lvl+0x140/0x1c0 [ 105.343558][ T2748] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.343575][ T2748] ? ___ratelimit+0x41c/0x5c0 [ 105.343597][ T2748] ? __kasan_check_write+0x18/0x20 [ 105.343622][ T2748] dump_stack+0x19/0x20 [ 105.343638][ T2748] dump_header+0xd9/0x460 [ 105.343671][ T2748] oom_kill_process+0x35d/0x640 [ 105.343690][ T2748] out_of_memory+0x5d1/0xa20 [ 105.343707][ T2748] ? __cfi_out_of_memory+0x10/0x10 [ 105.343724][ T2748] ? mutex_lock_killable+0x97/0x1d0 [ 105.343747][ T2748] ? __cfi_mutex_lock_killable+0x10/0x10 [ 105.343773][ T2748] mem_cgroup_out_of_memory+0x2c5/0x390 [ 105.343800][ T2748] ? css_next_descendant_pre+0x1ec/0x210 [ 105.343819][ T2748] ? __kasan_check_write+0x18/0x20 [ 105.343844][ T2748] ? drain_obj_stock+0xec0/0xec0 [ 105.343872][ T2748] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 105.343899][ T2748] try_charge_memcg+0x925/0xe10 [ 105.343924][ T2748] ? __cfi_try_charge_memcg+0x10/0x10 [ 105.343948][ T2748] ? __alloc_pages_noprof+0x35a/0x7e0 [ 105.343973][ T2748] __mem_cgroup_charge+0xfc/0x420 [ 105.343998][ T2748] ? filemap_get_entry+0x41b/0x490 [ 105.344018][ T2748] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 105.344046][ T2748] filemap_add_folio+0x57/0x3e0 [ 105.344064][ T2748] __filemap_get_folio+0x829/0xe80 [ 105.344084][ T2748] ? downgrade_write+0x470/0x470 [ 105.344108][ T2748] ? __cfi___filemap_get_folio+0x10/0x10 [ 105.344127][ T2748] ? down_read+0x7f/0xe0 [ 105.344150][ T2748] ? __cfi_down_read+0x10/0x10 [ 105.344174][ T2748] ? filemap_map_pages+0x17c0/0x1b80 [ 105.344195][ T2748] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 105.344217][ T2748] filemap_fault+0xc0d/0x1b50 [ 105.344237][ T2748] ? __kasan_check_write+0x18/0x20 [ 105.344265][ T2748] ? __cfi_filemap_fault+0x10/0x10 [ 105.344285][ T2748] ? __cfi_filemap_map_pages+0x10/0x10 [ 105.344307][ T2748] ? vma_data_pages+0x105/0x140 [ 105.344332][ T2748] do_pte_missing+0x3649/0x4440 [ 105.344355][ T2748] ? shmem_alloc_and_add_folio+0xd84/0x10b0 [ 105.344376][ T2748] ? pte_marker_clear+0x1b0/0x1b0 [ 105.344395][ T2748] ? shmem_replace_folio+0x9b0/0x9b0 [ 105.344415][ T2748] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 105.344437][ T2748] handle_mm_fault+0x1189/0x1ba0 [ 105.344454][ T2748] ? __kasan_check_write+0x18/0x20 [ 105.344479][ T2748] ? __cfi_handle_mm_fault+0x10/0x10 [ 105.344497][ T2748] ? follow_page_pte+0x2c0/0xba0 [ 105.344541][ T2748] ? gup_must_unshare+0x1e0/0x1e0 [ 105.344563][ T2748] ? vma_is_secretmem+0x11/0x50 [ 105.344583][ T2748] ? check_vma_flags+0x337/0x3a0 [ 105.344604][ T2748] __get_user_pages+0x114b/0x22d0 [ 105.344627][ T2748] ? __kasan_check_write+0x18/0x20 [ 105.344663][ T2748] ? populate_vma_page_range+0x220/0x220 [ 105.344685][ T2748] ? __kernel_write_iter+0x6ff/0x900 [ 105.344712][ T2748] get_dump_page+0x10c/0x220 [ 105.344733][ T2748] ? __cfi_get_dump_page+0x10/0x10 [ 105.344754][ T2748] ? __kernel_write_iter+0x10/0x900 [ 105.344776][ T2748] dump_user_range+0x18b/0xe60 [ 105.344802][ T2748] ? __cfi_dump_user_range+0x10/0x10 [ 105.344828][ T2748] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 105.344850][ T2748] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 105.344872][ T2748] ? elf_core_dump+0x23cf/0x3840 [ 105.344894][ T2748] elf_core_dump+0x2d61/0x3840 [ 105.344918][ T2748] ? __cfi_elf_core_dump+0x10/0x10 [ 105.344939][ T2748] ? mas_next_slot+0xf01/0xfd0 [ 105.344967][ T2748] ? dump_interrupted+0xf0/0xf0 [ 105.344993][ T2748] ? filp_open+0x199/0x1f0 [ 105.345015][ T2748] ? 0xffffffffff600000 [ 105.345032][ T2748] do_coredump+0x20d5/0x3050 [ 105.345061][ T2748] ? __cfi_do_coredump+0x10/0x10 [ 105.345087][ T2748] ? asm_exc_page_fault+0x2b/0x30 [ 105.345116][ T2748] ? __kasan_slab_free+0x6a/0x80 [ 105.345136][ T2748] ? get_signal+0xa2a/0x1490 [ 105.345154][ T2748] get_signal+0x11bf/0x1490 [ 105.345175][ T2748] arch_do_signal_or_restart+0xbc/0x700 [ 105.345195][ T2748] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 105.345219][ T2748] ? __bad_area_nosemaphore+0x2fb/0x680 [ 105.345243][ T2748] irqentry_exit_to_user_mode+0x4d/0xb0 [ 105.345270][ T2748] irqentry_exit+0x16/0x60 [ 105.345295][ T2748] exc_page_fault+0x65/0xc0 [ 105.345325][ T2748] asm_exc_page_fault+0x2b/0x30 [ 105.345349][ T2748] RIP: 0033:0x7f9762c54db7 [ 105.345366][ T2748] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 22 24 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 105.345383][ T2748] RSP: 002b:00007f9763b86120 EFLAGS: 00010202 [ 105.345401][ T2748] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9762d9fb19 [ 105.345416][ T2748] RDX: 00007f9763b86140 RSI: 00007f9763b86270 RDI: 000000000000000b [ 105.345431][ T2748] RBP: 00007f9762e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 105.345444][ T2748] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 105.345457][ T2748] R13: 00007f9763026128 R14: 00007f9763026090 R15: 00007ffc591d79b8 [ 105.345474][ T2748] [ 105.345482][ T2748] memory: usage 307200kB, limit 307200kB, failcnt 14253 [ 105.458225][ T3238] FAULT_INJECTION: forcing a failure. [ 105.458225][ T3238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.463115][ T367] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 105.468482][ T3238] CPU: 1 UID: 0 PID: 3238 Comm: syz.3.652 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 105.468512][ T3238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.468525][ T3238] Call Trace: [ 105.468531][ T3238] [ 105.468539][ T3238] __dump_stack+0x21/0x30 [ 105.468560][ T3238] dump_stack_lvl+0x140/0x1c0 [ 105.468578][ T3238] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.468597][ T3238] dump_stack+0x19/0x20 [ 105.468613][ T3238] should_fail_ex+0x3c2/0x510 [ 105.468639][ T3238] should_fail+0xf/0x20 [ 105.468663][ T3238] should_fail_usercopy+0x1e/0x30 [ 105.468682][ T3238] _copy_to_user+0x24/0xa0 [ 105.468703][ T3238] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x3bc0/0x4200 [ 105.468734][ T3238] ? __asan_set_shadow_00+0x12/0x20 [ 105.468758][ T3238] ? do_vfs_ioctl+0x1824/0x2010 [ 105.468778][ T3238] ? arch_stack_walk+0x10a/0x170 [ 105.468798][ T3238] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 105.468818][ T3238] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 105.468848][ T3238] ? _parse_integer+0x2e/0x40 [ 105.468875][ T3238] ? ioctl_has_perm+0x39a/0x500 [ 105.468900][ T3238] ? has_cap_mac_admin+0xd0/0xd0 [ 105.468926][ T3238] ? proc_fail_nth_write+0x184/0x220 [ 105.468949][ T3238] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 105.468972][ T3238] ? selinux_file_ioctl+0x732/0x1480 [ 105.468997][ T3238] ? vfs_write+0xbd2/0xfd0 [ 105.469022][ T3238] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 105.469047][ T3238] ? hook_file_ioctl+0x1ef/0x590 [ 105.469071][ T3238] ? __cfi_hook_file_ioctl+0x10/0x10 [ 105.469106][ T3238] ? __kasan_check_write+0x18/0x20 [ 105.469137][ T3238] ? __cfi_mutex_unlock+0x10/0x10 [ 105.469162][ T3238] ? __fget_files+0x2bc/0x330 [ 105.469181][ T3238] ? bpf_lsm_file_ioctl+0xd/0x20 [ 105.469201][ T3238] ? security_file_ioctl+0x3e/0x110 [ 105.469226][ T3238] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 105.469254][ T3238] __se_sys_ioctl+0x123/0x1b0 [ 105.469274][ T3238] __x64_sys_ioctl+0x7f/0xa0 [ 105.469293][ T3238] x64_sys_call+0x1878/0x2ee0 [ 105.469312][ T3238] do_syscall_64+0x57/0xf0 [ 105.469330][ T3238] ? clear_bhb_loop+0x50/0xa0 [ 105.469354][ T3238] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.469378][ T3238] RIP: 0033:0x7fb45cb9fb19 [ 105.469397][ T3238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.469413][ T3238] RSP: 002b:00007fb45d994028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.469433][ T3238] RAX: ffffffffffffffda RBX: 00007fb45ce25fa0 RCX: 00007fb45cb9fb19 [ 105.469448][ T3238] RDX: 0000200000000000 RSI: 00000000c018620b RDI: 0000000000000004 [ 105.469461][ T3238] RBP: 00007fb45d994090 R08: 0000000000000000 R09: 0000000000000000 [ 105.469473][ T3238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.469485][ T3238] R13: 00007fb45ce26038 R14: 00007fb45ce25fa0 R15: 00007ffc4e4d7628 [ 105.469501][ T3238] [ 105.471607][ T311] rust_binder: 3237: undelivered TRANSACTION_COMPLETE [ 105.478156][ T2748] memory+swap: usage 365792kB, limit 9007199254740988kB, failcnt 0 [ 105.495531][ T342] rust_binder: 3237: undelivered transaction 420, process died [ 105.503502][ T2748] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 105.516408][ T342] rust_binder: 3241: undelivered TRANSACTION_COMPLETE [ 105.529670][ T2748] Memory cgroup stats for [ 105.536267][ T311] rust_binder: 3241: undelivered transaction 428, process died [ 105.543284][ T2748] /syz5 [ 105.789463][ T311] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 105.804410][ T2748] : [ 105.970466][ T311] usb 4-1: config 7 has an invalid interface number: 122 but max is 0 [ 105.977424][ T2748] cache 313532416 [ 105.989491][ T311] usb 4-1: config 7 has no interface number 0 [ 106.017858][ T2748] rss 987136 [ 106.038401][ T311] usb 4-1: too many endpoints for config 7 interface 122 altsetting 166: 75, using maximum allowed: 30 [ 106.043404][ T2748] rss_huge 0 [ 106.055355][ T311] usb 4-1: config 7 interface 122 altsetting 166 has 0 endpoint descriptors, different from the interface descriptor's value: 75 [ 106.101092][ T2748] shmem 313520128 [ 106.119328][ T311] usb 4-1: config 7 interface 122 has no altsetting 0 [ 106.123722][ T1216] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 106.131888][ T311] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 106.148074][ T367] usb 6-1: unable to get BOS descriptor or descriptor too short [ 106.159456][ T2748] mapped_file 0 [ 106.165868][ T367] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 106.166843][ T2748] dirty 0 [ 106.176366][ T367] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.181546][ T2748] writeback 0 [ 106.189244][ T367] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 106.206061][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.207666][ T367] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 106.215928][ T2748] workingset_refault_anon 60 [ 106.239160][ T367] usb 6-1: string descriptor 0 read error: -22 [ 106.242246][ T2748] workingset_refault_file 2122 [ 106.249458][ T367] usb 6-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 106.260415][ T2748] swap 59998208 [ 106.273877][ T367] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.290719][ T2748] swapcached 73728 [ 106.297318][ T367] usb 6-1: low speed audio streaming not supported [ 106.307335][ T2748] pgpgin 108149 [ 106.313205][ T367] usb 6-1: low speed audio streaming not supported [ 106.337482][ T2748] pgpgout 31860 [ 106.344363][ T1216] usb 5-1: config 0 interface 0 has no altsetting 0 [ 106.361204][ T2748] pgfault 14981 [ 106.370033][ T1216] usb 5-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 106.378226][ T2748] pgmajfault 85 [ 106.383667][ T1216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.389349][ T2748] inactive_anon 306196480 [ 106.400431][ T1216] usb 5-1: config 0 descriptor?? [ 106.428228][ T2748] active_anon 8364032 [ 106.474610][ T311] usb 4-1: string descriptor 0 read error: -71 [ 106.477362][ T2748] inactive_file 12288 [ 106.486486][ T2748] active_file 0 [ 106.490242][ T2748] unevictable 0 [ 106.493715][ T2748] hierarchical_memory_limit 314572800 [ 106.501408][ T2748] hierarchical_memsw_limit 9223372036854771712 [ 106.501421][ T311] usb 4-1: Cannot read MAC address [ 106.501437][ T2748] total_cache 313532416 [ 106.501446][ T2748] total_rss 987136 [ 106.507626][ T311] MOSCHIP usb-ethernet driver 4-1:7.122: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 106.527521][ T2748] total_rss_huge 0 [ 106.544347][ T311] usb 4-1: USB disconnect, device number 24 [ 106.551326][ T3200] FAULT_INJECTION: forcing a failure. [ 106.551326][ T3200] name failslab, interval 1, probability 0, space 0, times 0 [ 106.562691][ T2748] total_shmem 313520128 [ 106.565990][ T3200] CPU: 0 UID: 0 PID: 3200 Comm: syz.5.647 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 106.566024][ T3200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 106.566038][ T3200] Call Trace: [ 106.566044][ T3200] [ 106.566052][ T3200] __dump_stack+0x21/0x30 [ 106.566077][ T3200] dump_stack_lvl+0x140/0x1c0 [ 106.566096][ T3200] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.566117][ T3200] dump_stack+0x19/0x20 [ 106.566134][ T3200] should_fail_ex+0x3c2/0x510 [ 106.566162][ T3200] should_failslab+0xac/0x100 [ 106.566183][ T3200] kmem_cache_alloc_noprof+0x42/0x410 [ 106.566210][ T3200] ? fib_insert_alias+0x2a6/0x1200 [ 106.566232][ T3200] fib_insert_alias+0x2a6/0x1200 [ 106.566250][ T3200] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 106.566276][ T3200] ? fib_table_insert+0x68c/0x1ef0 [ 106.566296][ T3200] fib_table_insert+0x843/0x1ef0 [ 106.566317][ T3200] ? consume_skb+0x65/0x1a0 [ 106.566339][ T3200] fib_add_ifaddr+0x351/0xdc0 [ 106.566366][ T3200] ? __cfi_fib_add_ifaddr+0x10/0x10 [ 106.566393][ T3200] ? __kasan_check_write+0x18/0x20 [ 106.566418][ T3200] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 106.566438][ T3200] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 106.566458][ T3200] ? kmem_cache_free+0x1bd/0x4f0 [ 106.566484][ T3200] ? __kfree_skb+0x18f/0x210 [ 106.566505][ T3200] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 106.566525][ T3200] ? __wake_up+0x169/0x190 [ 106.566549][ T3200] ? consume_skb+0x91/0x1a0 [ 106.566572][ T3200] ? downgrade_write+0x470/0x470 [ 106.566594][ T3200] fib_inetaddr_event+0x161/0x320 [ 106.566621][ T3200] ? __cfi_fib_inetaddr_event+0x10/0x10 [ 106.566648][ T3200] notifier_call_chain+0x106/0x2b0 [ 106.566670][ T3200] blocking_notifier_call_chain+0x6a/0x90 [ 106.566691][ T3200] __inet_insert_ifa+0x857/0xa80 [ 106.566720][ T3200] ? blocking_notifier_call_chain+0x75/0x90 [ 106.566742][ T3200] ? __inet_del_ifa+0xb03/0xda0 [ 106.566767][ T3200] ? inet_rcu_free_ifa+0xe0/0xe0 [ 106.566793][ T3200] ? full_name_hash+0xa1/0xf0 [ 106.566814][ T3200] devinet_ioctl+0x1333/0x1af0 [ 106.566841][ T3200] ? __cfi_devinet_ioctl+0x10/0x10 [ 106.566866][ T3200] ? _copy_from_user+0x87/0xa0 [ 106.566887][ T3200] ? get_user_ifreq+0x130/0x180 [ 106.566914][ T3200] inet_ioctl+0x431/0x570 [ 106.566932][ T3200] ? __cfi_inet_ioctl+0x10/0x10 [ 106.566953][ T3200] ? __cfi_futex_wait+0x10/0x10 [ 106.566984][ T3200] sock_do_ioctl+0x118/0x330 [ 106.567002][ T3200] ? sock_show_fdinfo+0xd0/0xd0 [ 106.567020][ T3200] ? hook_file_ioctl+0x1ef/0x590 [ 106.567045][ T3200] ? errseq_sample+0x48/0x70 [ 106.567067][ T3200] ? hook_file_truncate+0x230/0x2b0 [ 106.567092][ T3200] ? __cfi_do_futex+0x10/0x10 [ 106.567113][ T3200] sock_ioctl+0x568/0x7e0 [ 106.567130][ T3200] ? __cfi_sock_ioctl+0x10/0x10 [ 106.567147][ T3200] ? __fget_files+0x2bc/0x330 [ 106.567167][ T3200] ? bpf_lsm_file_ioctl+0xd/0x20 [ 106.567187][ T3200] ? security_file_ioctl+0x3e/0x110 [ 106.567213][ T3200] ? __cfi_sock_ioctl+0x10/0x10 [ 106.567230][ T3200] __se_sys_ioctl+0x123/0x1b0 [ 106.567249][ T3200] __x64_sys_ioctl+0x7f/0xa0 [ 106.567270][ T3200] x64_sys_call+0x1878/0x2ee0 [ 106.567290][ T3200] do_syscall_64+0x57/0xf0 [ 106.567309][ T3200] ? clear_bhb_loop+0x50/0xa0 [ 106.567333][ T3200] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.567357][ T3200] RIP: 0033:0x7f9762d9fb19 [ 106.567374][ T3200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.567390][ T3200] RSP: 002b:00007f9763cc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.567411][ T3200] RAX: ffffffffffffffda RBX: 00007f9763025fa0 RCX: 00007f9762d9fb19 [ 106.567426][ T3200] RDX: 00002000000002c0 RSI: 000000000000891c RDI: 0000000000000006 [ 106.567440][ T3200] RBP: 00007f9762e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 106.567452][ T3200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.567465][ T3200] R13: 00007f9763026038 R14: 00007f9763025fa0 R15: 00007ffc591d79b8 [ 106.567482][ T3200] [ 106.569377][ T367] usb 6-1: USB disconnect, device number 8 [ 106.595695][ T2748] total_mapped_file 0 [ 106.869630][ T1216] usbhid 5-1:0.0: can't add hid device: -71 [ 106.871888][ T2748] total_dirty 0 [ 106.876363][ T1216] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 106.882382][ T2748] total_writeback 0 [ 106.901696][ T1216] usb 5-1: USB disconnect, device number 23 [ 106.907884][ T2748] total_workingset_refault_anon 60 [ 107.022647][ T2748] total_workingset_refault_file 2122 [ 107.038419][ T2748] total_swap 59998208 [ 107.038773][ T3357] futex_wake_op: syz.3.658 tries to shift op by 144; fix this program [ 107.042766][ T2748] total_swapcached 73728 [ 107.059605][ T2748] total_pgpgin 108149 [ 107.063618][ T2748] total_pgpgout 31860 [ 107.068283][ T2748] total_pgfault 14981 [ 107.072354][ T807] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 107.080172][ T2748] total_pgmajfault 85 [ 107.084161][ T2748] total_inactive_anon 306196480 [ 107.089011][ T2748] total_active_anon 8364032 [ 107.094326][ T2748] total_inactive_file 12288 [ 107.098931][ T2748] total_active_file 0 [ 107.103354][ T2748] total_unevictable 0 [ 107.107402][ T2748] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.612,pid=2806,uid=0 [ 107.122566][ T2748] Memory cgroup out of memory: Killed process 2806 (syz.5.612) total-vm:164908kB, anon-rss:1416kB, file-rss:119012kB, shmem-rss:0kB, UID:0 pgtables:300kB oom_score_adj:1000 [ 107.250515][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.270607][ T807] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 107.288785][ T807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.299266][ T807] usb 1-1: config 0 descriptor?? [ 107.311797][ T2760] syz.5.612 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 107.341194][ T2760] CPU: 1 UID: 0 PID: 2760 Comm: syz.5.612 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 107.341232][ T2760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 107.341245][ T2760] Call Trace: [ 107.341250][ T2760] [ 107.341258][ T2760] __dump_stack+0x21/0x30 [ 107.341280][ T2760] dump_stack_lvl+0x140/0x1c0 [ 107.341296][ T2760] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.341313][ T2760] ? ___ratelimit+0x41c/0x5c0 [ 107.341333][ T2760] ? __kasan_check_write+0x18/0x20 [ 107.341356][ T2760] dump_stack+0x19/0x20 [ 107.341372][ T2760] dump_header+0xd9/0x460 [ 107.341406][ T2760] oom_kill_process+0x35d/0x640 [ 107.341424][ T2760] out_of_memory+0x5d1/0xa20 [ 107.341442][ T2760] ? __cfi_out_of_memory+0x10/0x10 [ 107.341458][ T2760] ? mutex_lock_killable+0x97/0x1d0 [ 107.341481][ T2760] ? __cfi_mutex_lock_killable+0x10/0x10 [ 107.341507][ T2760] mem_cgroup_out_of_memory+0x2c5/0x390 [ 107.341534][ T2760] ? css_next_descendant_pre+0x1ec/0x210 [ 107.341554][ T2760] ? __kasan_check_write+0x18/0x20 [ 107.341579][ T2760] ? drain_obj_stock+0xec0/0xec0 [ 107.341607][ T2760] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 107.341634][ T2760] try_charge_memcg+0x925/0xe10 [ 107.341656][ T2760] ? static_key_count+0x45/0x70 [ 107.341677][ T2760] ? lruvec_init+0x201/0x280 [ 107.341696][ T2760] ? __cfi_try_charge_memcg+0x10/0x10 [ 107.341719][ T2760] ? __alloc_pages_noprof+0x35a/0x7e0 [ 107.341743][ T2760] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 107.341768][ T2760] __mem_cgroup_charge+0xfc/0x420 [ 107.341793][ T2760] ? folio_add_lru+0x116/0x400 [ 107.341813][ T2760] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 107.341840][ T2760] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 107.341862][ T2760] ? shmem_replace_folio+0x9b0/0x9b0 [ 107.341881][ T2760] ? shmem_huge_global_enabled+0x2da/0x360 [ 107.341910][ T2760] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 107.341937][ T2760] ? __kasan_check_write+0x18/0x20 [ 107.341962][ T2760] ? _raw_spin_lock+0x92/0x120 [ 107.341981][ T2760] shmem_get_folio_gfp+0x5cd/0x12e0 [ 107.342001][ T2760] ? shmem_get_folio+0xc0/0xc0 [ 107.342019][ T2760] ? follow_page_pte+0x8fb/0xba0 [ 107.342042][ T2760] ? inode_to_bdi+0x6d/0x100 [ 107.342065][ T2760] shmem_write_begin+0xf4/0x260 [ 107.342084][ T2760] generic_perform_write+0x329/0x970 [ 107.342106][ T2760] ? __cfi_generic_perform_write+0x10/0x10 [ 107.342128][ T2760] ? generic_write_checks_count+0x426/0x540 [ 107.342147][ T2760] ? file_update_time+0xa3/0x210 [ 107.342169][ T2760] shmem_file_write_iter+0x105/0x130 [ 107.342189][ T2760] __kernel_write_iter+0x462/0x900 [ 107.342214][ T2760] ? __cfi___kernel_write_iter+0x10/0x10 [ 107.342237][ T2760] ? get_dump_page+0x165/0x220 [ 107.342256][ T2760] ? __asan_memset+0x39/0x50 [ 107.342280][ T2760] ? iov_iter_bvec+0xc0/0x180 [ 107.342302][ T2760] dump_user_range+0xb8b/0xe60 [ 107.342331][ T2760] ? __cfi_dump_user_range+0x10/0x10 [ 107.342357][ T2760] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 107.342384][ T2760] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 107.342406][ T2760] ? elf_core_dump+0x23cf/0x3840 [ 107.342428][ T2760] elf_core_dump+0x2d61/0x3840 [ 107.342451][ T2760] ? __cfi_elf_core_dump+0x10/0x10 [ 107.342472][ T2760] ? mas_next_slot+0xf01/0xfd0 [ 107.342500][ T2760] ? dump_interrupted+0xf0/0xf0 [ 107.342524][ T2760] ? filp_open+0x199/0x1f0 [ 107.342547][ T2760] ? 0xffffffffff600000 [ 107.342563][ T2760] do_coredump+0x20d5/0x3050 [ 107.342592][ T2760] ? __cfi_do_coredump+0x10/0x10 [ 107.342617][ T2760] ? asm_exc_page_fault+0x2b/0x30 [ 107.342649][ T2760] ? __kasan_slab_free+0x6a/0x80 [ 107.342667][ T2760] ? get_signal+0xa2a/0x1490 [ 107.342684][ T2760] get_signal+0x11bf/0x1490 [ 107.342702][ T2760] arch_do_signal_or_restart+0xbc/0x700 [ 107.342724][ T2760] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 107.342747][ T2760] ? __bad_area_nosemaphore+0x2fb/0x680 [ 107.342769][ T2760] irqentry_exit_to_user_mode+0x4d/0xb0 [ 107.342795][ T2760] irqentry_exit+0x16/0x60 [ 107.342818][ T2760] exc_page_fault+0x65/0xc0 [ 107.342841][ T2760] asm_exc_page_fault+0x2b/0x30 [ 107.342861][ T2760] RIP: 0033:0x7f9762c54db7 [ 107.342876][ T2760] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 22 24 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 107.342893][ T2760] RSP: 002b:00007f9763b86120 EFLAGS: 00010202 [ 107.342910][ T2760] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9762d9fb19 [ 107.342924][ T2760] RDX: 00007f9763b86140 RSI: 00007f9763b86270 RDI: 000000000000000b [ 107.342937][ T2760] RBP: 00007f9762e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 107.342950][ T2760] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 107.342963][ T2760] R13: 00007f9763026128 R14: 00007f9763026090 R15: 00007ffc591d79b8 [ 107.342978][ T2760] [ 107.343071][ T2760] memory: usage 302908kB, limit 307200kB, failcnt 14974 [ 107.814795][ T2760] memory+swap: usage 365620kB, limit 9007199254740988kB, failcnt 0 [ 107.822836][ T2760] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 107.830897][ T807] usbhid 1-1:0.0: can't add hid device: -71 [ 107.836860][ T807] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 107.847211][ T807] usb 1-1: USB disconnect, device number 35 [ 107.865800][ T2760] Memory cgroup stats for /syz5: [ 107.865931][ T2760] cache 313716736 [ 107.880899][ T3390] input: syz0 as /devices/virtual/input/input18 [ 107.885240][ T2760] rss 708608 [ 107.955900][ T2760] rss_huge 0 [ 107.970946][ T2760] shmem 311504896 [ 107.987569][ T2760] mapped_file 1966080 [ 108.012266][ T2760] dirty 0 [ 108.028457][ T2760] writeback 0 [ 108.049708][ T2760] workingset_refault_anon 60 [ 108.060664][ T2760] workingset_refault_file 3000 [ 108.065030][ T311] rust_binder: 3403: undelivered transaction 438, process died [ 108.065468][ T2760] swap 60002304 [ 108.074847][ T311] rust_binder: 3403: undelivered TRANSACTION_COMPLETE [ 108.099013][ T1216] rust_binder: 3407: undelivered TRANSACTION_COMPLETE [ 108.106974][ T2760] swapcached 69632 [ 108.119522][ T1216] rust_binder: 3407: undelivered transaction 446, process died [ 108.127201][ T2760] pgpgin 114634 [ 108.139461][ T807] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 108.142918][ T2760] pgpgout 38358 [ 108.171877][ T2760] pgfault 15192 [ 108.175381][ T2760] pgmajfault 92 [ 108.178846][ T2760] inactive_anon 280748032 [ 108.184973][ T2760] active_anon 31383552 [ 108.189341][ T2760] inactive_file 692224 [ 108.193534][ T367] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 108.193711][ T2760] active_file 1433600 [ 108.205639][ T2760] unevictable 0 [ 108.209369][ T2760] hierarchical_memory_limit 314572800 [ 108.218676][ T2760] hierarchical_memsw_limit 9223372036854771712 [ 108.236965][ T2760] total_cache 313716736 [ 108.242577][ T2760] total_rss 708608 [ 108.246370][ T2760] total_rss_huge 0 [ 108.250530][ T2760] total_shmem 311504896 [ 108.262285][ T2760] total_mapped_file 1966080 [ 108.266852][ T2760] total_dirty 0 [ 108.273398][ T2760] total_writeback 0 [ 108.283475][ T2760] total_workingset_refault_anon 60 [ 108.288610][ T2760] total_workingset_refault_file 3000 [ 108.294249][ T2760] total_swap 60002304 [ 108.298238][ T2760] total_swapcached 69632 [ 108.302834][ T2760] total_pgpgin 114634 [ 108.306992][ T2760] total_pgpgout 38358 [ 108.311621][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.326814][ T2760] total_pgfault 15192 [ 108.341389][ T807] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 108.344303][ T1216] rust_binder: 3433: undelivered TRANSACTION_COMPLETE [ 108.350518][ T2760] total_pgmajfault 92 [ 108.364123][ T807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.370534][ T1216] rust_binder: 3433: undelivered transaction 454, process died [ 108.376128][ T2760] total_inactive_anon 280748032 [ 108.381573][ T367] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 108.386952][ T2760] total_active_anon 31383552 [ 108.399595][ T807] usb 1-1: config 0 descriptor?? [ 108.399594][ T367] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 108.406665][ T2760] total_inactive_file 692224 [ 108.417772][ T1216] rust_binder: 3433: undelivered freeze notification, 0000000000000001 [ 108.437410][ T2760] total_active_file 1433600 [ 108.442117][ T2760] total_unevictable 0 [ 108.446565][ T367] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.449918][ T2760] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.612,pid=2792,uid=0 [ 108.459444][ T367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 108.471360][ T2760] Memory cgroup out of memory: Killed process 2792 (syz.5.612) total-vm:161704kB, anon-rss:1416kB, file-rss:124000kB, shmem-rss:0kB, UID:0 pgtables:312kB oom_score_adj:1000 [ 108.485908][ T367] usb 5-1: SerialNumber: syz [ 108.503738][ T367] usb 5-1: bad CDC descriptors [ 108.730070][ T3390] netlink: 96 bytes leftover after parsing attributes in process `syz.4.663'. [ 108.782981][ T367] usb 5-1: USB disconnect, device number 24 [ 108.802422][ T2747] syz.5.612 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 108.833945][ T807] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 108.858052][ T807] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000C/input/input19 [ 108.875483][ T2747] CPU: 1 UID: 0 PID: 2747 Comm: syz.5.612 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 108.875511][ T2747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.875524][ T2747] Call Trace: [ 108.875531][ T2747] [ 108.875537][ T2747] __dump_stack+0x21/0x30 [ 108.875562][ T2747] dump_stack_lvl+0x140/0x1c0 [ 108.875580][ T2747] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.875598][ T2747] ? ___ratelimit+0x41c/0x5c0 [ 108.875620][ T2747] ? __kasan_check_write+0x18/0x20 [ 108.875648][ T2747] dump_stack+0x19/0x20 [ 108.875665][ T2747] dump_header+0xd9/0x460 [ 108.875691][ T2747] oom_kill_process+0x35d/0x640 [ 108.875711][ T2747] out_of_memory+0x5d1/0xa20 [ 108.875729][ T2747] ? __cfi_out_of_memory+0x10/0x10 [ 108.875747][ T2747] ? mutex_lock_killable+0x97/0x1d0 [ 108.875771][ T2747] ? __cfi_mutex_lock_killable+0x10/0x10 [ 108.875795][ T2747] mem_cgroup_out_of_memory+0x2c5/0x390 [ 108.875832][ T2747] ? css_next_descendant_pre+0x1ec/0x210 [ 108.875851][ T2747] ? __kasan_check_write+0x18/0x20 [ 108.875876][ T2747] ? drain_obj_stock+0xec0/0xec0 [ 108.875904][ T2747] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 108.875930][ T2747] try_charge_memcg+0x925/0xe10 [ 108.875952][ T2747] ? static_key_count+0x45/0x70 [ 108.875973][ T2747] ? lruvec_init+0x201/0x280 [ 108.875991][ T2747] ? __cfi_try_charge_memcg+0x10/0x10 [ 108.876014][ T2747] ? __alloc_pages_noprof+0x35a/0x7e0 [ 108.876040][ T2747] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 108.876065][ T2747] __mem_cgroup_charge+0xfc/0x420 [ 108.876091][ T2747] ? folio_add_lru+0x116/0x400 [ 108.876111][ T2747] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 108.876139][ T2747] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 108.876162][ T2747] ? shmem_replace_folio+0x9b0/0x9b0 [ 108.876182][ T2747] ? shmem_huge_global_enabled+0x2da/0x360 [ 108.876210][ T2747] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 108.876237][ T2747] ? __kasan_check_write+0x18/0x20 [ 108.876262][ T2747] ? _raw_spin_lock+0x92/0x120 [ 108.876279][ T2747] shmem_get_folio_gfp+0x5cd/0x12e0 [ 108.876298][ T2747] ? shmem_get_folio+0xc0/0xc0 [ 108.876315][ T2747] ? __kasan_check_write+0x18/0x20 [ 108.876340][ T2747] ? inode_to_bdi+0x6d/0x100 [ 108.876364][ T2747] shmem_write_begin+0xf4/0x260 [ 108.876382][ T2747] generic_perform_write+0x329/0x970 [ 108.876405][ T2747] ? inode_update_timestamps+0x4d1/0x6e0 [ 108.876430][ T2747] ? __cfi_generic_perform_write+0x10/0x10 [ 108.876452][ T2747] ? generic_write_checks_count+0x426/0x540 [ 108.876474][ T2747] ? mnt_get_write_access_file+0x1af/0x3b0 [ 108.876497][ T2747] ? mnt_put_write_access_file+0xc2/0x100 [ 108.876521][ T2747] ? file_update_time+0x1de/0x210 [ 108.876544][ T2747] shmem_file_write_iter+0x105/0x130 [ 108.876566][ T2747] __kernel_write_iter+0x462/0x900 [ 108.876593][ T2747] ? __cfi___kernel_write_iter+0x10/0x10 [ 108.876620][ T2747] ? get_dump_page+0x165/0x220 [ 108.876642][ T2747] ? __asan_memset+0x39/0x50 [ 108.876667][ T2747] ? iov_iter_bvec+0xc0/0x180 [ 108.876690][ T2747] dump_user_range+0xb8b/0xe60 [ 108.876718][ T2747] ? __cfi_dump_user_range+0x10/0x10 [ 108.876745][ T2747] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 108.876765][ T2747] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 108.876787][ T2747] ? elf_core_dump+0x23cf/0x3840 [ 108.876815][ T2747] elf_core_dump+0x2d61/0x3840 [ 108.876838][ T2747] ? __cfi_elf_core_dump+0x10/0x10 [ 108.876859][ T2747] ? mas_next_slot+0xf01/0xfd0 [ 108.876889][ T2747] ? dump_interrupted+0xf0/0xf0 [ 108.876913][ T2747] ? filp_open+0x199/0x1f0 [ 108.876935][ T2747] ? 0xffffffffff600000 [ 108.876951][ T2747] do_coredump+0x20d5/0x3050 [ 108.876979][ T2747] ? __cfi_do_coredump+0x10/0x10 [ 108.877004][ T2747] ? asm_exc_page_fault+0x2b/0x30 [ 108.877035][ T2747] ? __kasan_slab_free+0x6a/0x80 [ 108.877054][ T2747] ? get_signal+0xa2a/0x1490 [ 108.877071][ T2747] get_signal+0x11bf/0x1490 [ 108.877091][ T2747] arch_do_signal_or_restart+0xbc/0x700 [ 108.877113][ T2747] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 108.877135][ T2747] ? __bad_area_nosemaphore+0x2fb/0x680 [ 108.877159][ T2747] irqentry_exit_to_user_mode+0x4d/0xb0 [ 108.877186][ T2747] irqentry_exit+0x16/0x60 [ 108.877209][ T2747] exc_page_fault+0x65/0xc0 [ 108.877233][ T2747] asm_exc_page_fault+0x2b/0x30 [ 108.877257][ T2747] RIP: 0033:0x7f9762c54db7 [ 108.877272][ T2747] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 22 24 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 108.877288][ T2747] RSP: 002b:00007f9763b86120 EFLAGS: 00010202 [ 108.877305][ T2747] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9762d9fb19 [ 108.877319][ T2747] RDX: 00007f9763b86140 RSI: 00007f9763b86270 RDI: 000000000000000b [ 108.877333][ T2747] RBP: 00007f9762e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 108.877346][ T2747] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 108.877358][ T2747] R13: 00007f9763026128 R14: 00007f9763026090 R15: 00007ffc591d79b8 [ 108.877375][ T2747] [ 108.877402][ T2747] memory: usage 307012kB, limit 307200kB, failcnt 18104 [ 109.369936][ T2747] memory+swap: usage 365836kB, limit 9007199254740988kB, failcnt 0 [ 109.382268][ T807] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 109.414252][ T807] usb 1-1: USB disconnect, device number 36 [ 109.420072][ T36] audit: type=1400 audit(1793730892.699:10456): avc: denied { create } for pid=3501 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.443193][ T2747] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 109.453346][ T3502] validate_nla: 55 callbacks suppressed [ 109.453363][ T3502] netlink: 'syz.3.672': attribute type 4 has an invalid length. [ 109.473644][ T36] audit: type=1400 audit(1793730892.729:10457): avc: denied { bpf } for pid=3501 comm="syz.3.672" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.476482][ T2747] Memory cgroup stats for /syz5: [ 109.496577][ T2747] cache 313982976 [ 109.510600][ T2747] rss 589824 [ 109.517106][ T2747] rss_huge 0 [ 109.520602][ T2747] shmem 313978880 [ 109.524493][ T2747] mapped_file 0 [ 109.527949][ T2747] dirty 0 [ 109.533069][ T2747] writeback 0 [ 109.536373][ T2747] workingset_refault_anon 63 [ 109.541082][ T2747] workingset_refault_file 4222 [ 109.545843][ T2747] swap 60055552 [ 109.549302][ T2747] swapcached 16384 [ 109.553072][ T2747] pgpgin 124599 [ 109.556525][ T2747] pgpgout 48310 [ 109.560187][ T2747] pgfault 15506 [ 109.563637][ T2747] pgmajfault 116 [ 109.567176][ T2747] inactive_anon 256507904 [ 109.571567][ T2747] active_anon 58060800 [ 109.575733][ T2747] inactive_file 4096 [ 109.579766][ T2747] active_file 0 [ 109.583226][ T2747] unevictable 0 [ 109.586680][ T2747] hierarchical_memory_limit 314572800 [ 109.592106][ T2747] hierarchical_memsw_limit 9223372036854771712 [ 109.603352][ T2747] total_cache 313982976 [ 109.607541][ T2747] total_rss 589824 [ 109.612717][ T2747] total_rss_huge 0 [ 109.616443][ T2747] total_shmem 313978880 [ 109.621166][ T2747] total_mapped_file 0 [ 109.625157][ T2747] total_dirty 0 [ 109.628616][ T2747] total_writeback 0 [ 109.632715][ T2747] total_workingset_refault_anon 63 [ 109.637828][ T2747] total_workingset_refault_file 4222 [ 109.645610][ T2747] total_swap 60055552 [ 109.649783][ T2747] total_swapcached 16384 [ 109.654025][ T2747] total_pgpgin 124599 [ 109.658000][ T2747] total_pgpgout 48310 [ 109.662260][ T2747] total_pgfault 15506 [ 109.666240][ T2747] total_pgmajfault 116 [ 109.670521][ T2747] total_inactive_anon 256507904 [ 109.675371][ T2747] total_active_anon 58060800 [ 109.680189][ T2747] total_inactive_file 4096 [ 109.684607][ T2747] total_active_file 0 [ 109.688594][ T2747] total_unevictable 0 [ 109.692852][ T2747] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.612,pid=2765,uid=0 [ 109.707801][ T2747] Memory cgroup out of memory: Killed process 2765 (syz.5.612) total-vm:142480kB, anon-rss:1416kB, file-rss:105460kB, shmem-rss:0kB, UID:0 pgtables:296kB oom_score_adj:1000 [ 109.759449][ T1216] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 109.767707][ T807] rust_binder: 3536: undelivered transaction 462, process died [ 109.788217][ T807] rust_binder: 3536: undelivered TRANSACTION_COMPLETE [ 109.819882][ T3543] FAULT_INJECTION: forcing a failure. [ 109.819882][ T3543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.877989][ T3543] CPU: 1 UID: 0 PID: 3543 Comm: syz.5.661 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 109.878024][ T3543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.878037][ T3543] Call Trace: [ 109.878043][ T3543] [ 109.878052][ T3543] __dump_stack+0x21/0x30 [ 109.878076][ T3543] dump_stack_lvl+0x140/0x1c0 [ 109.878095][ T3543] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.878113][ T3543] ? check_stack_object+0x138/0x150 [ 109.878141][ T3543] dump_stack+0x19/0x20 [ 109.878158][ T3543] should_fail_ex+0x3c2/0x510 [ 109.878186][ T3543] should_fail+0xf/0x20 [ 109.878211][ T3543] should_fail_usercopy+0x1e/0x30 [ 109.878230][ T3543] _copy_to_user+0x24/0xa0 [ 109.878249][ T3543] simple_read_from_buffer+0xed/0x160 [ 109.878269][ T3543] proc_fail_nth_read+0x1aa/0x220 [ 109.878291][ T3543] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 109.878315][ T3543] ? bpf_lsm_file_permission+0xd/0x20 [ 109.878336][ T3543] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 109.878360][ T3543] vfs_read+0x288/0xc70 [ 109.878386][ T3543] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 109.878415][ T3543] ? __cfi_vfs_read+0x10/0x10 [ 109.878441][ T3543] ? __kasan_check_write+0x18/0x20 [ 109.878468][ T3543] ? mutex_lock+0x97/0x1d0 [ 109.878492][ T3543] ? __cfi_mutex_lock+0x10/0x10 [ 109.878518][ T3543] ksys_read+0x145/0x260 [ 109.878545][ T3543] ? __cfi_ksys_read+0x10/0x10 [ 109.878571][ T3543] ? __kasan_check_write+0x18/0x20 [ 109.878597][ T3543] ? fput+0x1a4/0x230 [ 109.878618][ T3543] ? __kasan_check_read+0x15/0x20 [ 109.878645][ T3543] __x64_sys_read+0x7f/0x90 [ 109.878718][ T3543] x64_sys_call+0x2638/0x2ee0 [ 109.878739][ T3543] do_syscall_64+0x57/0xf0 [ 109.878759][ T3543] ? clear_bhb_loop+0x50/0xa0 [ 109.878785][ T3543] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.878810][ T3543] RIP: 0033:0x7f9762d6034e [ 109.878828][ T3543] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.878846][ T3543] RSP: 002b:00007f9763cc6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.878869][ T3543] RAX: ffffffffffffffda RBX: 00007f9763cc76c0 RCX: 00007f9762d6034e [ 109.878885][ T3543] RDX: 000000000000000f RSI: 00007f9763cc70a0 RDI: 0000000000000005 [ 109.878898][ T3543] RBP: 00007f9763cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 109.878912][ T3543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.878925][ T3543] R13: 00007f9763026038 R14: 00007f9763025fa0 R15: 00007ffc591d79b8 [ 109.878943][ T3543] [ 109.943299][ T1216] usb 4-1: device descriptor read/64, error -71 [ 109.946095][ T2746] syz.5.612 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 109.982289][ T3550] rust_binder: 3549:3550 got transaction with invalid offset [ 109.985507][ T2746] CPU: 1 UID: 0 PID: 2746 Comm: syz.5.612 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 109.985534][ T2746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.985546][ T2746] Call Trace: [ 109.985552][ T2746] [ 109.985558][ T2746] __dump_stack+0x21/0x30 [ 109.985580][ T2746] dump_stack_lvl+0x140/0x1c0 [ 109.985598][ T2746] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.985614][ T2746] ? ___ratelimit+0x41c/0x5c0 [ 109.985634][ T2746] ? __kasan_check_write+0x18/0x20 [ 109.985657][ T2746] dump_stack+0x19/0x20 [ 109.985673][ T2746] dump_header+0xd9/0x460 [ 109.985696][ T2746] oom_kill_process+0x35d/0x640 [ 109.985714][ T2746] out_of_memory+0x5d1/0xa20 [ 109.985731][ T2746] ? __cfi_out_of_memory+0x10/0x10 [ 109.985745][ T2746] ? mutex_lock_killable+0x97/0x1d0 [ 109.985769][ T2746] ? __cfi_mutex_lock_killable+0x10/0x10 [ 109.985793][ T2746] mem_cgroup_out_of_memory+0x2c5/0x390 [ 109.985817][ T2746] ? css_next_descendant_pre+0x1ec/0x210 [ 109.985837][ T2746] ? __kasan_check_write+0x18/0x20 [ 109.985861][ T2746] ? drain_obj_stock+0xec0/0xec0 [ 109.985889][ T2746] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 109.985915][ T2746] try_charge_memcg+0x925/0xe10 [ 109.985937][ T2746] ? static_key_count+0x45/0x70 [ 109.985956][ T2746] ? lruvec_init+0x201/0x280 [ 109.985974][ T2746] ? __cfi_try_charge_memcg+0x10/0x10 [ 109.985996][ T2746] ? __alloc_pages_noprof+0x35a/0x7e0 [ 109.986019][ T2746] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 109.986043][ T2746] __mem_cgroup_charge+0xfc/0x420 [ 109.986067][ T2746] ? folio_add_lru+0x116/0x400 [ 109.986087][ T2746] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 109.986112][ T2746] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 109.986134][ T2746] ? shmem_replace_folio+0x9b0/0x9b0 [ 109.986153][ T2746] ? shmem_huge_global_enabled+0x2da/0x360 [ 109.986180][ T2746] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 109.986215][ T2746] ? __kasan_check_write+0x18/0x20 [ 109.986240][ T2746] ? _raw_spin_lock+0x92/0x120 [ 109.986258][ T2746] shmem_get_folio_gfp+0x5cd/0x12e0 [ 109.986278][ T2746] ? shmem_get_folio+0xc0/0xc0 [ 109.986294][ T2746] ? follow_page_pte+0x8fb/0xba0 [ 109.986320][ T2746] ? inode_to_bdi+0x6d/0x100 [ 109.986344][ T2746] shmem_write_begin+0xf4/0x260 [ 109.986362][ T2746] generic_perform_write+0x329/0x970 [ 109.986386][ T2746] ? __cfi_generic_perform_write+0x10/0x10 [ 109.986407][ T2746] ? generic_write_checks_count+0x426/0x540 [ 109.986430][ T2746] ? file_update_time+0xa3/0x210 [ 109.986452][ T2746] shmem_file_write_iter+0x105/0x130 [ 109.986474][ T2746] __kernel_write_iter+0x462/0x900 [ 109.986500][ T2746] ? __cfi___kernel_write_iter+0x10/0x10 [ 109.986528][ T2746] ? get_dump_page+0x165/0x220 [ 109.986549][ T2746] ? __asan_memset+0x39/0x50 [ 109.986573][ T2746] ? iov_iter_bvec+0xc0/0x180 [ 109.986593][ T2746] dump_user_range+0xb8b/0xe60 [ 109.986621][ T2746] ? __cfi_dump_user_range+0x10/0x10 [ 109.986648][ T2746] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 109.986668][ T2746] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 109.986688][ T2746] ? elf_core_dump+0x23cf/0x3840 [ 109.986708][ T2746] elf_core_dump+0x2d61/0x3840 [ 109.986730][ T2746] ? __cfi_elf_core_dump+0x10/0x10 [ 109.986750][ T2746] ? mas_next_slot+0xf01/0xfd0 [ 109.986778][ T2746] ? dump_interrupted+0xf0/0xf0 [ 109.986802][ T2746] ? filp_open+0x199/0x1f0 [ 109.986823][ T2746] ? 0xffffffffff600000 [ 109.986839][ T2746] do_coredump+0x20d5/0x3050 [ 109.986866][ T2746] ? __cfi_do_coredump+0x10/0x10 [ 109.986889][ T2746] ? asm_exc_page_fault+0x2b/0x30 [ 109.986918][ T2746] ? __kasan_slab_free+0x6a/0x80 [ 109.986937][ T2746] ? get_signal+0xa2a/0x1490 [ 109.986954][ T2746] get_signal+0x11bf/0x1490 [ 109.986973][ T2746] arch_do_signal_or_restart+0xbc/0x700 [ 109.986994][ T2746] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 109.987015][ T2746] ? __bad_area_nosemaphore+0x2fb/0x680 [ 109.987037][ T2746] irqentry_exit_to_user_mode+0x4d/0xb0 [ 109.987062][ T2746] irqentry_exit+0x16/0x60 [ 109.987085][ T2746] exc_page_fault+0x65/0xc0 [ 109.987107][ T2746] asm_exc_page_fault+0x2b/0x30 [ 109.987129][ T2746] RIP: 0033:0x7f9762c54db7 [ 109.987145][ T2746] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 22 24 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 109.987161][ T2746] RSP: 002b:00007f9763b86120 EFLAGS: 00010202 [ 109.987178][ T2746] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9762d9fb19 [ 109.987190][ T2746] RDX: 00007f9763b86140 RSI: 00007f9763b86270 RDI: 000000000000000b [ 109.987209][ T2746] RBP: 00007f9762e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 109.987222][ T2746] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 109.987234][ T2746] R13: 00007f9763026128 R14: 00007f9763026090 R15: 00007ffc591d79b8 [ 109.987251][ T2746] [ 109.987259][ T2746] memory: usage 307192kB, limit 307200kB, failcnt 21853 [ 109.991841][ T3550] rust_binder: 3549:3550 transaction async to 3549:0 failed EINVAL, code 1 size 72-24 line thread.rs:1239 [ 109.995601][ T2746] memory+swap: usage 365840kB, limit 9007199254740988kB, failcnt 0 [ 110.012596][ T9] rust_binder: 3549: undelivered TRANSACTION_ERROR: 29201 [ 110.023259][ T2746] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 110.059295][ T9] rust_binder: 3542: undelivered TRANSACTION_COMPLETE [ 110.139576][ T807] rust_binder: 3542: undelivered transaction 470, process died [ 110.148286][ T367] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 110.189437][ T2746] Memory cgroup stats for [ 110.359452][ T1216] usb 4-1: device descriptor read/64, error -71 [ 110.363647][ T2746] /syz5 [ 110.369680][ T367] usb 1-1: device descriptor read/64, error -71 [ 110.383134][ T2746] : [ 110.629482][ T367] usb 1-1: device descriptor read/64, error -71 [ 110.632706][ T2746] cache 314081280 [ 110.642147][ T1216] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 110.646712][ T2746] rss 483328 [ 110.718170][ T2746] rss_huge 0 [ 110.735439][ T2746] shmem 314023936 [ 110.739138][ T2746] mapped_file 4096 [ 110.743100][ T2746] dirty 0 [ 110.746071][ T2746] writeback 0 [ 110.749355][ T2746] workingset_refault_anon 65 [ 110.755486][ T2746] workingset_refault_file 5222 [ 110.761251][ T2746] swap 60051456 [ 110.764786][ T2746] swapcached 20480 [ 110.768612][ T2746] pgpgin 134939 [ 110.773262][ T2746] pgpgout 58650 [ 110.776724][ T2746] pgfault 15696 [ 110.782820][ T2746] pgmajfault 134 [ 110.786496][ T2746] inactive_anon 251699200 [ 110.790916][ T1216] usb 4-1: device descriptor read/64, error -71 [ 110.797398][ T2746] active_anon 62816256 [ 110.801601][ T2746] inactive_file 57344 [ 110.805578][ T2746] active_file 0 [ 110.809126][ T2746] unevictable 0 [ 110.813225][ T2746] hierarchical_memory_limit 314572800 [ 110.818606][ T2746] hierarchical_memsw_limit 9223372036854771712 [ 110.824924][ T2746] total_cache 314081280 [ 110.829080][ T2746] total_rss 483328 [ 110.832899][ T2746] total_rss_huge 0 [ 110.837078][ T2746] total_shmem 314023936 [ 110.842132][ T2746] total_mapped_file 4096 [ 110.846380][ T2746] total_dirty 0 [ 110.850115][ T2746] total_writeback 0 [ 110.853919][ T2746] total_workingset_refault_anon 65 [ 110.859025][ T2746] total_workingset_refault_file 5222 [ 110.864597][ T2746] total_swap 60051456 [ 110.868584][ T2746] total_swapcached 20480 [ 110.872986][ T2746] total_pgpgin 134939 [ 110.877094][ T2746] total_pgpgout 58650 [ 110.881644][ T2746] total_pgfault 15696 [ 110.885641][ T2746] total_pgmajfault 134 [ 110.889954][ T2746] total_inactive_anon 251699200 [ 110.894807][ T2746] total_active_anon 62816256 [ 110.899645][ T367] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 110.907588][ T2746] total_inactive_file 57344 [ 110.913061][ T2746] total_active_file 0 [ 110.917203][ T2746] total_unevictable 0 [ 110.921626][ T2746] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.612,pid=2761,uid=0 [ 110.936868][ T2746] Memory cgroup out of memory: Killed process 2761 (syz.5.612) total-vm:139144kB, anon-rss:1408kB, file-rss:102340kB, shmem-rss:0kB, UID:0 pgtables:292kB oom_score_adj:1000 [ 111.039465][ T1216] usb 4-1: device descriptor read/64, error -71 [ 111.049493][ T367] usb 1-1: device descriptor read/64, error -71 [ 111.062249][ T2747] syz.5.612 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 111.102566][ T2747] CPU: 0 UID: 0 PID: 2747 Comm: syz.5.612 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 111.102604][ T2747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 111.102617][ T2747] Call Trace: [ 111.102624][ T2747] [ 111.102632][ T2747] __dump_stack+0x21/0x30 [ 111.102656][ T2747] dump_stack_lvl+0x140/0x1c0 [ 111.102675][ T2747] ? __cfi_dump_stack_lvl+0x10/0x10 [ 111.102694][ T2747] ? ___ratelimit+0x41c/0x5c0 [ 111.102717][ T2747] ? __kasan_check_write+0x18/0x20 [ 111.102745][ T2747] dump_stack+0x19/0x20 [ 111.102763][ T2747] dump_header+0xd9/0x460 [ 111.102791][ T2747] oom_kill_process+0x35d/0x640 [ 111.102811][ T2747] out_of_memory+0x5d1/0xa20 [ 111.102830][ T2747] ? __cfi_out_of_memory+0x10/0x10 [ 111.102849][ T2747] ? mutex_lock_killable+0x97/0x1d0 [ 111.102874][ T2747] ? __cfi_mutex_lock_killable+0x10/0x10 [ 111.102899][ T2747] mem_cgroup_out_of_memory+0x2c5/0x390 [ 111.102927][ T2747] ? css_next_descendant_pre+0x1ec/0x210 [ 111.102946][ T2747] ? __kasan_check_write+0x18/0x20 [ 111.102971][ T2747] ? drain_obj_stock+0xec0/0xec0 [ 111.102996][ T2747] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 111.103022][ T2747] try_charge_memcg+0x925/0xe10 [ 111.103043][ T2747] ? static_key_count+0x45/0x70 [ 111.103065][ T2747] ? lruvec_init+0x201/0x280 [ 111.103083][ T2747] ? __cfi_try_charge_memcg+0x10/0x10 [ 111.103106][ T2747] ? __alloc_pages_noprof+0x35a/0x7e0 [ 111.103131][ T2747] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 111.103156][ T2747] __mem_cgroup_charge+0xfc/0x420 [ 111.103181][ T2747] ? folio_add_lru+0x116/0x400 [ 111.103201][ T2747] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 111.103227][ T2747] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 111.103250][ T2747] ? shmem_replace_folio+0x9b0/0x9b0 [ 111.103269][ T2747] ? shmem_huge_global_enabled+0x2da/0x360 [ 111.103304][ T2747] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 111.103332][ T2747] ? __kasan_check_write+0x18/0x20 [ 111.103358][ T2747] ? _raw_spin_lock+0x92/0x120 [ 111.103377][ T2747] shmem_get_folio_gfp+0x5cd/0x12e0 [ 111.103398][ T2747] ? shmem_get_folio+0xc0/0xc0 [ 111.103415][ T2747] ? follow_page_pte+0x8fb/0xba0 [ 111.103445][ T2747] ? inode_to_bdi+0x6d/0x100 [ 111.103468][ T2747] shmem_write_begin+0xf4/0x260 [ 111.103488][ T2747] generic_perform_write+0x329/0x970 [ 111.103509][ T2747] ? __cfi_generic_perform_write+0x10/0x10 [ 111.103530][ T2747] ? generic_write_checks_count+0x426/0x540 [ 111.103554][ T2747] ? file_update_time+0xa3/0x210 [ 111.103579][ T2747] shmem_file_write_iter+0x105/0x130 [ 111.103601][ T2747] __kernel_write_iter+0x462/0x900 [ 111.103628][ T2747] ? __cfi___kernel_write_iter+0x10/0x10 [ 111.103654][ T2747] ? get_dump_page+0x165/0x220 [ 111.103676][ T2747] ? __asan_memset+0x39/0x50 [ 111.103701][ T2747] ? iov_iter_bvec+0xc0/0x180 [ 111.103723][ T2747] dump_user_range+0xb8b/0xe60 [ 111.103752][ T2747] ? __cfi_dump_user_range+0x10/0x10 [ 111.103779][ T2747] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 111.103800][ T2747] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 111.103820][ T2747] ? elf_core_dump+0x23cf/0x3840 [ 111.103842][ T2747] elf_core_dump+0x2d61/0x3840 [ 111.103865][ T2747] ? __cfi_elf_core_dump+0x10/0x10 [ 111.103885][ T2747] ? mas_next_slot+0xf01/0xfd0 [ 111.103916][ T2747] ? dump_interrupted+0xf0/0xf0 [ 111.103940][ T2747] ? filp_open+0x199/0x1f0 [ 111.103962][ T2747] ? 0xffffffffff600000 [ 111.103978][ T2747] do_coredump+0x20d5/0x3050 [ 111.104007][ T2747] ? __cfi_do_coredump+0x10/0x10 [ 111.104032][ T2747] ? asm_exc_page_fault+0x2b/0x30 [ 111.104061][ T2747] ? __kasan_slab_free+0x6a/0x80 [ 111.104080][ T2747] ? get_signal+0xa2a/0x1490 [ 111.104098][ T2747] get_signal+0x11bf/0x1490 [ 111.104118][ T2747] arch_do_signal_or_restart+0xbc/0x700 [ 111.104136][ T2747] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 111.104158][ T2747] ? __bad_area_nosemaphore+0x2fb/0x680 [ 111.104177][ T2747] irqentry_exit_to_user_mode+0x4d/0xb0 [ 111.104201][ T2747] irqentry_exit+0x16/0x60 [ 111.104222][ T2747] exc_page_fault+0x65/0xc0 [ 111.104244][ T2747] asm_exc_page_fault+0x2b/0x30 [ 111.104264][ T2747] RIP: 0033:0x7f9762c54db7 [ 111.104280][ T2747] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 22 24 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 111.104295][ T2747] RSP: 002b:00007f9763b86120 EFLAGS: 00010202 [ 111.104312][ T2747] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9762d9fb19 [ 111.104326][ T2747] RDX: 00007f9763b86140 RSI: 00007f9763b86270 RDI: 000000000000000b [ 111.104340][ T2747] RBP: 00007f9762e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 111.104353][ T2747] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 111.104366][ T2747] R13: 00007f9763026128 R14: 00007f9763026090 R15: 00007ffc591d79b8 [ 111.104383][ T2747] [ 111.377207][ T2747] memory: usage 307068kB, limit 307200kB, failcnt 23253 [ 111.382204][ T1216] usb usb4-port1: attempt power cycle [ 111.387405][ T2747] memory+swap: usage 364800kB, limit 9007199254740988kB, failcnt 0 [ 111.529680][ T367] usb 1-1: device descriptor read/64, error -71 [ 111.597437][ T2747] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 111.627985][ T2747] Memory cgroup stats for /syz5: [ 111.628126][ T2747] cache 294322176 [ 111.653519][ T2747] rss 405504 [ 111.660083][ T2747] rss_huge 0 [ 111.666402][ T2747] shmem 294322176 [ 111.670500][ T2747] mapped_file 0 [ 111.673972][ T2747] dirty 0 [ 111.676920][ T2747] writeback 0 [ 111.680603][ T2747] workingset_refault_anon 65 [ 111.685204][ T2747] workingset_refault_file 5222 [ 111.690385][ T2747] swap 54751232 [ 111.694548][ T2747] swapcached 389120 [ 111.698441][ T2747] pgpgin 140453 [ 111.702067][ T367] usb usb1-port1: attempt power cycle [ 111.708084][ T2747] pgpgout 68914 [ 111.711825][ T2747] pgfault 15697 [ 111.715298][ T2747] pgmajfault 134 [ 111.718853][ T2747] inactive_anon 225898496 [ 111.723484][ T2747] active_anon 69120000 [ 111.727570][ T2747] inactive_file 0 [ 111.731349][ T1216] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 111.739246][ T2747] active_file 0 [ 111.742894][ T2747] unevictable 0 [ 111.746359][ T2747] hierarchical_memory_limit 314572800 [ 111.753054][ T2747] hierarchical_memsw_limit 9223372036854771712 [ 111.759713][ T2747] total_cache 294322176 [ 111.763938][ T1216] usb 4-1: device descriptor read/8, error -71 [ 111.765870][ T2747] total_rss 405504 [ 111.774301][ T2747] total_rss_huge 0 [ 111.778584][ T2747] total_shmem 294322176 [ 111.786939][ T2747] total_mapped_file 0 [ 111.793684][ T2747] total_dirty 0 [ 111.801578][ T2747] total_writeback 0 [ 111.811975][ T2747] total_workingset_refault_anon 65 [ 111.817891][ T2747] total_workingset_refault_file 5222 [ 111.829798][ T2747] total_swap 54751232 [ 111.839716][ T2747] total_swapcached 389120 [ 111.851759][ T2747] total_pgpgin 140453 [ 111.859201][ T2747] total_pgpgout 68914 [ 111.863698][ T2747] total_pgfault 15697 [ 111.867744][ T2747] total_pgmajfault 134 [ 111.876053][ T2747] total_inactive_anon 225898496 [ 111.881387][ T2747] total_active_anon 69120000 [ 111.886137][ T2747] total_inactive_file 0 [ 111.891674][ T2747] total_active_file 0 [ 111.898989][ T2747] total_unevictable 0 [ 111.903386][ T2747] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.612,pid=2759,uid=0 [ 111.910455][ T1216] usb 4-1: device descriptor read/8, error -71 [ 111.929498][ T2747] Memory cgroup out of memory: Killed process 2759 (syz.5.612) total-vm:139144kB, anon-rss:1280kB, file-rss:102204kB, shmem-rss:0kB, UID:0 pgtables:284kB oom_score_adj:1000 [ 112.034646][ T3691] 8021q: VLANs not supported on lo [ 112.049470][ T367] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 112.092958][ T367] usb 1-1: device descriptor read/8, error -71 [ 112.173767][ T1216] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 112.205630][ T1216] usb 4-1: device descriptor read/8, error -71 [ 112.223770][ T367] usb 1-1: device descriptor read/8, error -71 [ 112.340585][ T1216] usb 4-1: device descriptor read/8, error -71 [ 112.449553][ T1216] usb usb4-port1: unable to enumerate USB device [ 112.469455][ T367] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 112.500473][ T367] usb 1-1: device descriptor read/8, error -71 [ 112.544436][ T36] audit: type=1400 audit(1793730895.829:10458): avc: denied { search } for pid=3727 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.589486][ T36] audit: type=1400 audit(1793730895.829:10459): avc: denied { create } for pid=3724 comm="syz.3.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.629438][ T36] audit: type=1400 audit(1793730895.829:10460): avc: denied { read } for pid=3724 comm="syz.3.680" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 112.660713][ T367] usb 1-1: device descriptor read/8, error -71 [ 112.669608][ T36] audit: type=1400 audit(1793730895.829:10461): avc: denied { open } for pid=3724 comm="syz.3.680" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 112.719536][ T36] audit: type=1400 audit(1793730895.829:10462): avc: denied { create } for pid=3724 comm="syz.3.680" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 112.759441][ T36] audit: type=1400 audit(1793730895.829:10463): avc: denied { map } for pid=3724 comm="syz.3.680" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 112.790775][ T367] usb usb1-port1: unable to enumerate USB device [ 112.811812][ T36] audit: type=1400 audit(1793730895.829:10464): avc: denied { read write } for pid=3724 comm="syz.3.680" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 112.839130][ T3748] tipc: Enabling of bearer rejected, failed to enable media [ 112.854344][ T36] audit: type=1400 audit(1793730895.879:10465): avc: denied { read } for pid=3728 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.855502][ T1216] rust_binder: 3745: undelivered TRANSACTION_COMPLETE [ 112.893237][ T9] rust_binder: 3745: undelivered transaction 488, process died [ 112.899471][ T36] audit: type=1400 audit(1793730895.879:10466): avc: denied { open } for pid=3728 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.959439][ T36] audit: type=1400 audit(1793730895.879:10467): avc: denied { getattr } for pid=3728 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.127701][ T2746] syz.5.612 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 113.158726][ T2746] CPU: 0 UID: 0 PID: 2746 Comm: syz.5.612 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 113.158758][ T2746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.158771][ T2746] Call Trace: [ 113.158777][ T2746] [ 113.158784][ T2746] __dump_stack+0x21/0x30 [ 113.158807][ T2746] dump_stack_lvl+0x140/0x1c0 [ 113.158825][ T2746] ? __cfi_dump_stack_lvl+0x10/0x10 [ 113.158852][ T2746] ? ___ratelimit+0x41c/0x5c0 [ 113.158871][ T2746] ? __kasan_check_write+0x18/0x20 [ 113.158894][ T2746] dump_stack+0x19/0x20 [ 113.158908][ T2746] dump_header+0xd9/0x460 [ 113.158933][ T2746] oom_kill_process+0x35d/0x640 [ 113.158950][ T2746] out_of_memory+0x5d1/0xa20 [ 113.158967][ T2746] ? __cfi_out_of_memory+0x10/0x10 [ 113.158983][ T2746] ? mutex_lock_killable+0x97/0x1d0 [ 113.159005][ T2746] ? __cfi_mutex_lock_killable+0x10/0x10 [ 113.159028][ T2746] mem_cgroup_out_of_memory+0x2c5/0x390 [ 113.159054][ T2746] ? css_next_descendant_pre+0x1ec/0x210 [ 113.159073][ T2746] ? __kasan_check_write+0x18/0x20 [ 113.159094][ T2746] ? drain_obj_stock+0xec0/0xec0 [ 113.159116][ T2746] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 113.159140][ T2746] try_charge_memcg+0x925/0xe10 [ 113.159160][ T2746] ? static_key_count+0x45/0x70 [ 113.159178][ T2746] ? lruvec_init+0x201/0x280 [ 113.159195][ T2746] ? __cfi_try_charge_memcg+0x10/0x10 [ 113.159215][ T2746] ? __alloc_pages_noprof+0x35a/0x7e0 [ 113.159236][ T2746] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 113.159258][ T2746] __mem_cgroup_charge+0xfc/0x420 [ 113.159279][ T2746] ? folio_add_lru+0x116/0x400 [ 113.159297][ T2746] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 113.159320][ T2746] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 113.159339][ T2746] ? shmem_replace_folio+0x9b0/0x9b0 [ 113.159355][ T2746] ? shmem_huge_global_enabled+0x2da/0x360 [ 113.159377][ T2746] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 113.159400][ T2746] ? __kasan_check_write+0x18/0x20 [ 113.159421][ T2746] ? _raw_spin_lock+0x92/0x120 [ 113.159438][ T2746] shmem_get_folio_gfp+0x5cd/0x12e0 [ 113.159455][ T2746] ? shmem_get_folio+0xc0/0xc0 [ 113.159470][ T2746] ? follow_page_pte+0x8fb/0xba0 [ 113.159492][ T2746] ? inode_to_bdi+0x6d/0x100 [ 113.159511][ T2746] shmem_write_begin+0xf4/0x260 [ 113.159530][ T2746] generic_perform_write+0x329/0x970 [ 113.159550][ T2746] ? __cfi_generic_perform_write+0x10/0x10 [ 113.159568][ T2746] ? generic_write_checks_count+0x426/0x540 [ 113.159590][ T2746] ? file_update_time+0xa3/0x210 [ 113.159612][ T2746] shmem_file_write_iter+0x105/0x130 [ 113.159633][ T2746] __kernel_write_iter+0x462/0x900 [ 113.159658][ T2746] ? __cfi___kernel_write_iter+0x10/0x10 [ 113.159681][ T2746] ? get_dump_page+0x165/0x220 [ 113.159701][ T2746] ? __asan_memset+0x39/0x50 [ 113.159723][ T2746] ? iov_iter_bvec+0xc0/0x180 [ 113.159744][ T2746] dump_user_range+0xb8b/0xe60 [ 113.159771][ T2746] ? __cfi_dump_user_range+0x10/0x10 [ 113.159797][ T2746] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 113.159816][ T2746] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 113.159847][ T2746] ? elf_core_dump+0x23cf/0x3840 [ 113.159869][ T2746] elf_core_dump+0x2d61/0x3840 [ 113.159891][ T2746] ? __cfi_elf_core_dump+0x10/0x10 [ 113.159910][ T2746] ? mas_next_slot+0xf01/0xfd0 [ 113.159938][ T2746] ? dump_interrupted+0xf0/0xf0 [ 113.159963][ T2746] ? filp_open+0x199/0x1f0 [ 113.159984][ T2746] ? 0xffffffffff600000 [ 113.160000][ T2746] do_coredump+0x20d5/0x3050 [ 113.160029][ T2746] ? __cfi_do_coredump+0x10/0x10 [ 113.160052][ T2746] ? asm_exc_page_fault+0x2b/0x30 [ 113.160083][ T2746] ? __kasan_slab_free+0x6a/0x80 [ 113.160103][ T2746] ? get_signal+0xa2a/0x1490 [ 113.160120][ T2746] get_signal+0x11bf/0x1490 [ 113.160140][ T2746] arch_do_signal_or_restart+0xbc/0x700 [ 113.160162][ T2746] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 113.160183][ T2746] ? __bad_area_nosemaphore+0x2fb/0x680 [ 113.160205][ T2746] irqentry_exit_to_user_mode+0x4d/0xb0 [ 113.160232][ T2746] irqentry_exit+0x16/0x60 [ 113.160252][ T2746] exc_page_fault+0x65/0xc0 [ 113.160272][ T2746] asm_exc_page_fault+0x2b/0x30 [ 113.160294][ T2746] RIP: 0033:0x7f9762c54db7 [ 113.160311][ T2746] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 22 24 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 113.160327][ T2746] RSP: 002b:00007f9763b86120 EFLAGS: 00010202 [ 113.160351][ T2746] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9762d9fb19 [ 113.160365][ T2746] RDX: 00007f9763b86140 RSI: 00007f9763b86270 RDI: 000000000000000b [ 113.160378][ T2746] RBP: 00007f9762e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 113.160391][ T2746] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 113.160404][ T2746] R13: 00007f9763026128 R14: 00007f9763026090 R15: 00007ffc591d79b8 [ 113.160420][ T2746] [ 113.642385][ T2746] memory: usage 307200kB, limit 307200kB, failcnt 27737 [ 113.649510][ T2746] memory+swap: usage 365748kB, limit 9007199254740988kB, failcnt 0 [ 113.657530][ T2746] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 113.665566][ T2746] Memory cgroup stats for /syz5: [ 113.665712][ T2746] cache 314028032 [ 113.678664][ T2746] rss 425984 [ 113.688444][ T2746] rss_huge 0 [ 113.697125][ T2746] shmem 314028032 [ 113.713142][ T2746] mapped_file 0 [ 113.717884][ T3845] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 113.726378][ T2746] dirty 0 [ 113.739454][ T2746] writeback 0 [ 113.742817][ T2746] workingset_refault_anon 123 [ 113.750095][ T2746] workingset_refault_file 5716 [ 113.768836][ T691] rust_binder: 3591: undelivered TRANSACTION_COMPLETE [ 113.776556][ T2746] swap 59953152 [ 113.780567][ T691] rust_binder: 3591: undelivered transaction 480, process died [ 113.784133][ T367] rust_binder: 3850: undelivered TRANSACTION_COMPLETE [ 113.795029][ T2746] swapcached 118784 [ 113.798930][ T2746] pgpgin 178739 [ 113.802437][ T2746] pgpgout 102450 [ 113.806111][ T2746] pgfault 16018 [ 113.808652][ T691] rust_binder: 3850: undelivered transaction 497, process died [ 113.809601][ T2746] pgmajfault 161 [ 113.809610][ T2746] inactive_anon 259964928 [ 113.825125][ T2746] active_anon 54607872 [ 113.829207][ T2746] inactive_file 0 [ 113.829915][ T3843] sit0: entered promiscuous mode [ 113.832869][ T2746] active_file 0 [ 113.841246][ T2746] unevictable 0 [ 113.841790][ T3843] netlink: 'syz.3.691': attribute type 1 has an invalid length. [ 113.844694][ T2746] hierarchical_memory_limit 314572800 [ 113.844706][ T2746] hierarchical_memsw_limit 9223372036854771712 [ 113.853144][ T3843] netlink: 'syz.3.691': attribute type 3 has an invalid length. [ 113.868735][ T2746] total_cache 314028032 [ 113.880117][ T2746] total_rss 425984 [ 113.883886][ T2746] total_rss_huge 0 [ 113.887625][ T2746] total_shmem 314028032 [ 113.891831][ T2746] total_mapped_file 0 [ 113.903962][ T2746] total_dirty 0 [ 113.907431][ T2746] total_writeback 0 [ 113.912289][ T2746] total_workingset_refault_anon 123 [ 113.917488][ T2746] total_workingset_refault_file 5716 [ 113.922787][ T2746] total_swap 59953152 [ 113.926762][ T2746] total_swapcached 118784 [ 113.931331][ T2746] total_pgpgin 178739 [ 113.935317][ T2746] total_pgpgout 102450 [ 113.939459][ T2746] total_pgfault 16018 [ 113.943498][ T2746] total_pgmajfault 161 [ 113.947558][ T2746] total_inactive_anon 259964928 [ 113.952434][ T2746] total_active_anon 54607872 [ 113.957015][ T2746] total_inactive_file 0 [ 113.961205][ T2746] total_active_file 0 [ 113.965180][ T2746] total_unevictable 0 [ 113.969161][ T2746] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.612,pid=2760,uid=0 [ 113.984215][ T2746] Memory cgroup out of memory: Killed process 2760 (syz.5.612) total-vm:139144kB, anon-rss:1280kB, file-rss:102340kB, shmem-rss:0kB, UID:0 pgtables:292kB oom_score_adj:1000 [ 114.129443][ T691] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 114.158051][ T2751] syz.5.612 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 114.210850][ T2751] CPU: 1 UID: 0 PID: 2751 Comm: syz.5.612 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 114.210883][ T2751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 114.210896][ T2751] Call Trace: [ 114.210902][ T2751] [ 114.210910][ T2751] __dump_stack+0x21/0x30 [ 114.210932][ T2751] dump_stack_lvl+0x140/0x1c0 [ 114.210949][ T2751] ? __cfi_dump_stack_lvl+0x10/0x10 [ 114.210967][ T2751] ? ___ratelimit+0x41c/0x5c0 [ 114.210987][ T2751] ? __kasan_check_write+0x18/0x20 [ 114.211014][ T2751] dump_stack+0x19/0x20 [ 114.211029][ T2751] dump_header+0xd9/0x460 [ 114.211056][ T2751] oom_kill_process+0x35d/0x640 [ 114.211075][ T2751] out_of_memory+0x5d1/0xa20 [ 114.211093][ T2751] ? __cfi_out_of_memory+0x10/0x10 [ 114.211110][ T2751] ? mutex_lock_killable+0x97/0x1d0 [ 114.211132][ T2751] ? __cfi_mutex_lock_killable+0x10/0x10 [ 114.211156][ T2751] mem_cgroup_out_of_memory+0x2c5/0x390 [ 114.211183][ T2751] ? css_next_descendant_pre+0x1ec/0x210 [ 114.211203][ T2751] ? __kasan_check_write+0x18/0x20 [ 114.211228][ T2751] ? drain_obj_stock+0xec0/0xec0 [ 114.211255][ T2751] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 114.211283][ T2751] try_charge_memcg+0x925/0xe10 [ 114.211305][ T2751] ? static_key_count+0x45/0x70 [ 114.211327][ T2751] ? lruvec_init+0x201/0x280 [ 114.211345][ T2751] ? __cfi_try_charge_memcg+0x10/0x10 [ 114.211367][ T2751] ? __alloc_pages_noprof+0x35a/0x7e0 [ 114.211390][ T2751] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 114.211410][ T2751] __mem_cgroup_charge+0xfc/0x420 [ 114.211435][ T2751] ? folio_add_lru+0x116/0x400 [ 114.211453][ T2751] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 114.211478][ T2751] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 114.211505][ T2751] ? shmem_replace_folio+0x9b0/0x9b0 [ 114.211535][ T2751] ? shmem_huge_global_enabled+0x2da/0x360 [ 114.211562][ T2751] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 114.211590][ T2751] ? __kasan_check_write+0x18/0x20 [ 114.211615][ T2751] ? _raw_spin_lock+0x92/0x120 [ 114.211634][ T2751] shmem_get_folio_gfp+0x5cd/0x12e0 [ 114.211655][ T2751] ? shmem_get_folio+0xc0/0xc0 [ 114.211671][ T2751] ? follow_page_pte+0x8fb/0xba0 [ 114.211693][ T2751] ? inode_to_bdi+0x6d/0x100 [ 114.211716][ T2751] shmem_write_begin+0xf4/0x260 [ 114.211736][ T2751] generic_perform_write+0x329/0x970 [ 114.211761][ T2751] ? __cfi_generic_perform_write+0x10/0x10 [ 114.211782][ T2751] ? generic_write_checks_count+0x426/0x540 [ 114.211804][ T2751] ? file_update_time+0xa3/0x210 [ 114.211826][ T2751] shmem_file_write_iter+0x105/0x130 [ 114.211846][ T2751] __kernel_write_iter+0x462/0x900 [ 114.211873][ T2751] ? __cfi___kernel_write_iter+0x10/0x10 [ 114.211896][ T2751] ? get_dump_page+0x165/0x220 [ 114.211917][ T2751] ? __asan_memset+0x39/0x50 [ 114.211942][ T2751] ? iov_iter_bvec+0xc0/0x180 [ 114.211964][ T2751] dump_user_range+0xb8b/0xe60 [ 114.211993][ T2751] ? __cfi_dump_user_range+0x10/0x10 [ 114.212020][ T2751] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 114.212042][ T2751] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 114.212062][ T2751] ? elf_core_dump+0x23cf/0x3840 [ 114.212084][ T2751] elf_core_dump+0x2d61/0x3840 [ 114.212108][ T2751] ? __cfi_elf_core_dump+0x10/0x10 [ 114.212128][ T2751] ? mas_next_slot+0xf01/0xfd0 [ 114.212159][ T2751] ? dump_interrupted+0xf0/0xf0 [ 114.212184][ T2751] ? filp_open+0x199/0x1f0 [ 114.212206][ T2751] ? irqentry_exit+0x4a/0x60 [ 114.212230][ T2751] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 114.212255][ T2751] ? 0xffffffffff600000 [ 114.212271][ T2751] do_coredump+0x20d5/0x3050 [ 114.212300][ T2751] ? __cfi_do_coredump+0x10/0x10 [ 114.212325][ T2751] ? asm_exc_page_fault+0x2b/0x30 [ 114.212355][ T2751] ? __kasan_slab_free+0x6a/0x80 [ 114.212376][ T2751] ? get_signal+0xa2a/0x1490 [ 114.212394][ T2751] get_signal+0x11bf/0x1490 [ 114.212414][ T2751] arch_do_signal_or_restart+0xbc/0x700 [ 114.212436][ T2751] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 114.212459][ T2751] ? __bad_area_nosemaphore+0x2fb/0x680 [ 114.212482][ T2751] irqentry_exit_to_user_mode+0x4d/0xb0 [ 114.212509][ T2751] irqentry_exit+0x16/0x60 [ 114.212541][ T2751] exc_page_fault+0x65/0xc0 [ 114.212565][ T2751] asm_exc_page_fault+0x2b/0x30 [ 114.212587][ T2751] RIP: 0033:0x7f9762c54db7 [ 114.212605][ T2751] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 22 24 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 114.212621][ T2751] RSP: 002b:00007f9763b86120 EFLAGS: 00010202 [ 114.212640][ T2751] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9762d9fb19 [ 114.212654][ T2751] RDX: 00007f9763b86140 RSI: 00007f9763b86270 RDI: 000000000000000b [ 114.212669][ T2751] RBP: 00007f9762e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 114.212682][ T2751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 114.212694][ T2751] R13: 00007f9763026128 R14: 00007f9763026090 R15: 00007ffc591d79b8 [ 114.212710][ T2751] [ 114.215677][ T2751] memory: usage 306720kB, limit 307200kB, failcnt 29079 [ 114.399450][ T367] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 114.402044][ T2751] memory+swap: usage 317404kB, limit 9007199254740988kB, failcnt 0 [ 114.559429][ T367] usb 4-1: Using ep0 maxpacket: 8 [ 114.564421][ T2751] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 114.581392][ T367] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.583550][ T691] usb 5-1: Using ep0 maxpacket: 8 [ 114.603345][ T2751] Memory cgroup stats for [ 114.608838][ T691] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 114.631809][ T2751] /syz5 [ 114.641012][ T691] usb 5-1: config 0 has no interface number 0 [ 114.683398][ T2751] : [ 114.702487][ T691] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 114.719585][ T2751] cache 266842112 [ 114.723581][ T691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.733511][ T367] usb 4-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 114.744554][ T691] usb 5-1: Product: syz [ 114.758381][ T367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.789524][ T691] usb 5-1: Manufacturer: syz [ 114.804190][ T2751] rss 471040 [ 114.815369][ T2751] rss_huge 0 [ 114.818583][ T2751] shmem 266842112 [ 114.822497][ T367] usb 4-1: Product: syz [ 114.826733][ T367] usb 4-1: Manufacturer: syz [ 114.831753][ T2751] mapped_file 0 [ 114.832177][ T691] usb 5-1: SerialNumber: syz [ 114.835330][ T2751] dirty 0 [ 114.843041][ T367] usb 4-1: SerialNumber: syz [ 114.864644][ T691] usb 5-1: config 0 descriptor?? [ 114.869665][ T2751] writeback 0 [ 114.873082][ T2751] workingset_refault_anon 123 [ 114.887494][ T2751] workingset_refault_file 5716 [ 114.902500][ T2751] swap 56868864 [ 114.906013][ T2751] swapcached 94208 [ 114.911476][ T3931] netlink: 'syz.0.700': attribute type 2 has an invalid length. [ 114.921138][ T2751] pgpgin 181164 [ 114.924634][ T2751] pgpgout 116390 [ 114.928185][ T2751] pgfault 16368 [ 114.934344][ T2751] pgmajfault 161 [ 114.937906][ T2751] inactive_anon 215474176 [ 114.949746][ T3931] netlink: 1 bytes leftover after parsing attributes in process `syz.0.700'. [ 114.959468][ T2751] active_anon 51896320 [ 114.962388][ T3931] netlink: 140 bytes leftover after parsing attributes in process `syz.0.700'. [ 114.969458][ T2751] inactive_file 0 [ 114.976130][ T2751] active_file 0 [ 114.981431][ T2751] unevictable 0 [ 114.989575][ T2751] hierarchical_memory_limit 314572800 [ 114.995009][ T3931] ptp ptp0: max value is 2 [ 115.009458][ T2751] hierarchical_memsw_limit 9223372036854771712 [ 115.015724][ T2751] total_cache 266842112 [ 115.025818][ T2751] total_rss 471040 [ 115.035925][ T2751] total_rss_huge 0 [ 115.039915][ T2751] total_shmem 266842112 [ 115.049607][ T2751] total_mapped_file 0 [ 115.053633][ T2751] total_dirty 0 [ 115.067309][ T2751] total_writeback 0 [ 115.071345][ T2751] total_workingset_refault_anon 123 [ 115.078376][ T1216] rust_binder: 3875: undelivered TRANSACTION_COMPLETE [ 115.086388][ T2751] total_workingset_refault_file 5716 [ 115.096920][ T691] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 115.096998][ T367] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 115.112614][ T367] usb 4-1: 1:1 : unsupported sample bitwidth 12 in 84 bytes [ 115.119930][ T691] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 115.120002][ T691] usb 5-1: Failed to create links for entity 5 [ 115.128822][ T2751] total_swap 56868864 [ 115.140584][ T691] usb 5-1: Failed to register entities (-22). [ 115.142291][ T2751] total_swapcached 94208 [ 115.154051][ T2751] total_pgpgin 181164 [ 115.158127][ T367] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 115.164944][ T691] usb 5-1: USB disconnect, device number 25 [ 115.164978][ T2751] total_pgpgout 116390 [ 115.175397][ T2751] total_pgfault 16368 [ 115.195342][ T367] usb 4-1: USB disconnect, device number 29 [ 115.213672][ T2751] total_pgmajfault 161 [ 115.217776][ T2751] total_inactive_anon 215474176 [ 115.231569][ T2751] total_active_anon 51896320 [ 115.236279][ T2751] total_inactive_file 0 [ 115.240789][ T2751] total_active_file 0 [ 115.244835][ T2751] total_unevictable 0 [ 115.248833][ T2751] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.612,pid=2751,uid=0 [ 115.263868][ T2751] Memory cgroup out of memory: Killed process 2751 (syz.5.612) total-vm:129268kB, anon-rss:1264kB, file-rss:92680kB, shmem-rss:0kB, UID:0 pgtables:272kB oom_score_adj:1000 [ 115.280974][ T9] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 115.429452][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 115.569494][ T9] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 115.619901][ T367] rust_binder: 3875: undelivered transaction 505, process died [ 115.639581][ T311] rust_binder: 3989: undelivered TRANSACTION_COMPLETE [ 115.661682][ T367] rust_binder: 3989: undelivered transaction 513, process died [ 115.721331][ T4000] netlink: 'syz.4.706': attribute type 9 has an invalid length. [ 115.729543][ T691] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 115.739762][ T4000] netlink: 'syz.4.706': attribute type 2 has an invalid length. [ 115.749474][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 115.760699][ T9] usb usb1-port1: attempt power cycle [ 115.774299][ T4000] netlink: 'syz.4.706': attribute type 9 has an invalid length. [ 115.789462][ T4000] netlink: 'syz.4.706': attribute type 2 has an invalid length. [ 115.806724][ T4000] netlink: 'syz.4.706': attribute type 9 has an invalid length. [ 115.840152][ T4000] netlink: 'syz.4.706': attribute type 2 has an invalid length. [ 115.858311][ T4000] netlink: 'syz.4.706': attribute type 9 has an invalid length. [ 115.879444][ T4000] netlink: 'syz.4.706': attribute type 2 has an invalid length. [ 115.887371][ T4000] netlink: 'syz.4.706': attribute type 9 has an invalid length. [ 115.899441][ T691] usb 6-1: Using ep0 maxpacket: 8 [ 115.918453][ T691] usb 6-1: unable to get BOS descriptor or descriptor too short [ 115.976968][ T691] usb 6-1: config 2 has an invalid interface number: 34 but max is 0 [ 116.004071][ T691] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 116.024399][ T691] usb 6-1: config 2 has no interface number 0 [ 116.034691][ T691] usb 6-1: config 2 interface 34 has no altsetting 0 [ 116.087823][ T691] usb 6-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=67.ec [ 116.103299][ T691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.119331][ T691] usb 6-1: Product: syz [ 116.129584][ T691] usb 6-1: Manufacturer: syz [ 116.132877][ T9] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 116.136635][ T691] usb 6-1: SerialNumber: syz [ 116.169804][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 116.209451][ T367] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 116.251713][ T807] rust_binder: 4051: undelivered TRANSACTION_COMPLETE [ 116.268805][ T807] rust_binder: 4051: undelivered transaction 522, process died [ 116.309465][ T9] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 116.349843][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 116.355495][ T9] usb usb1-port1: unable to enumerate USB device [ 116.369553][ T367] usb 5-1: Using ep0 maxpacket: 32 [ 116.375427][ T3975] rust_binder: 3973:3975 failed to claim space for a BINDER_TYPE_PTR (offset: 112, limit: 112, size: 8) [ 116.395697][ T367] usb 5-1: unable to get BOS descriptor or descriptor too short [ 116.409144][ T3975] rust_binder: 3973:3975 error while translating object: EINVAL [ 116.416981][ T367] usb 5-1: config 1 has an invalid descriptor of length 88, skipping remainder of the config [ 116.433126][ T367] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 116.447990][ T3975] rust_binder: 3973:3975 transaction async to 3973:0 failed EINVAL, code 1 size 88-24 line thread.rs:926 [ 116.460986][ T4072] fuse: Bad value for 'group_id' [ 116.462926][ T367] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= 0.40 [ 116.467384][ T3975] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 116.475493][ T367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.484067][ T4072] fuse: Bad value for 'group_id' [ 116.493063][ T3975] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 116.509368][ T367] usb 5-1: Product: syz [ 116.523728][ T311] rust_binder: 3973: undelivered TRANSACTION_ERROR: 29201 [ 116.529453][ T367] usb 5-1: Manufacturer: syz [ 116.535983][ T691] usb 6-1: USB disconnect, device number 9 [ 116.537069][ T367] usb 5-1: SerialNumber: syz [ 116.552290][ T367] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 116.751908][ T9] usb 5-1: USB disconnect, device number 26 [ 116.769490][ T807] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 116.943050][ T807] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.953355][ T807] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.963480][ T807] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 116.972726][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 116.983823][ T807] usb 4-1: SerialNumber: syz [ 117.068436][ T4160] ------------[ cut here ]------------ [ 117.074055][ T4160] WARNING: CPU: 1 PID: 4160 at mm/page_alloc.c:5286 __alloc_pages_noprof+0x109/0x7e0 [ 117.083643][ T4160] Modules linked in: [ 117.087598][ T4160] CPU: 1 UID: 0 PID: 4160 Comm: syz.5.720 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 117.099150][ T4160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 117.109278][ T4160] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 117.115368][ T4160] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 3b fd 89 06 00 0f 85 c2 00 00 00 c6 05 2e fd 89 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 117.135144][ T4160] RSP: 0018:ffffc900039e7520 EFLAGS: 00010246 [ 117.141381][ T4160] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 117.149435][ T4160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900039e75d8 [ 117.157460][ T4160] RBP: ffffc900039e7660 R08: ffffc900039e75d7 R09: 0000000000000000 [ 117.165510][ T4160] R10: ffffc900039e75c0 R11: fffff5200073cebb R12: ffffc900039e7560 [ 117.173549][ T4160] R13: dffffc0000000000 R14: 1ffff9200073cea8 R15: 0000000000000000 [ 117.181585][ T4160] FS: 00007f9763cc76c0(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 117.190595][ T4160] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.197225][ T4160] CR2: 0000200000010000 CR3: 000000013be54000 CR4: 00000000003526b0 [ 117.205324][ T4160] Call Trace: [ 117.208640][ T4160] [ 117.211621][ T4160] ? vfs_write+0x3c1/0xfd0 [ 117.216098][ T4160] ? ksys_write+0x145/0x260 [ 117.220659][ T4160] ? x64_sys_call+0x271c/0x2ee0 [ 117.225551][ T4160] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 117.231452][ T4160] ? hashtab_init+0xd6/0x1f0 [ 117.236107][ T4160] ___kmalloc_large_node+0x81/0x220 [ 117.241373][ T4160] ? hashtab_init+0xd6/0x1f0 [ 117.246007][ T4160] __kmalloc_large_node_noprof+0x1e/0xd0 [ 117.251707][ T4160] ? hashtab_init+0xd6/0x1f0 [ 117.256345][ T4160] __kmalloc_noprof+0x326/0x510 [ 117.261367][ T4160] ? kasan_save_alloc_info+0x3a/0x50 [ 117.266701][ T4160] hashtab_init+0xd6/0x1f0 [ 117.271179][ T4160] ? class_read+0x17f/0x8a0 [ 117.275722][ T4160] symtab_init+0x44/0x70 [ 117.280088][ T4160] class_read+0x208/0x8a0 [ 117.284455][ T4160] ? __kasan_kmalloc+0x96/0xb0 [ 117.289261][ T4160] ? hashtab_init+0xd6/0x1f0 [ 117.293923][ T4160] ? __cfi_class_read+0x10/0x10 [ 117.298813][ T4160] ? hashtab_init+0x100/0x1f0 [ 117.303558][ T4160] policydb_read+0xa86/0x2860 [ 117.308290][ T4160] ? __kasan_kmalloc+0x96/0xb0 [ 117.313123][ T4160] ? __cfi_policydb_read+0x10/0x10 [ 117.318296][ T4160] ? security_load_policy+0x130/0x12d0 [ 117.323843][ T4160] security_load_policy+0x16a/0x12d0 [ 117.329177][ T4160] ? irqentry_exit+0x4a/0x60 [ 117.333834][ T4160] ? __kasan_check_write+0x18/0x20 [ 117.338996][ T4160] ? mutex_lock+0x97/0x1d0 [ 117.343476][ T4160] ? __cfi_security_load_policy+0x10/0x10 [ 117.349243][ T4160] ? rep_movs_alternative+0x4a/0xa0 [ 117.354522][ T4160] sel_write_load+0x258/0x600 [ 117.359240][ T4160] ? __cfi_futex_wake+0x10/0x10 [ 117.364172][ T4160] ? __cfi_sel_write_load+0x10/0x10 [ 117.369423][ T4160] ? kvm_vcpu_ioctl+0x819/0x1000 [ 117.374405][ T4160] ? bpf_lsm_file_permission+0xd/0x20 [ 117.379870][ T4160] ? __cfi_sel_write_load+0x10/0x10 [ 117.385107][ T4160] vfs_write+0x3c1/0xfd0 [ 117.389435][ T4160] ? __cfi_vfs_write+0x10/0x10 [ 117.394246][ T4160] ? __kasan_check_write+0x18/0x20 [ 117.399475][ T4160] ? mutex_lock+0x97/0x1d0 [ 117.403942][ T4160] ? __cfi_mutex_lock+0x10/0x10 [ 117.408837][ T4160] ksys_write+0x145/0x260 [ 117.413266][ T4160] ? xfd_validate_state+0x68/0x140 [ 117.418427][ T4160] ? __cfi_ksys_write+0x10/0x10 [ 117.423439][ T4160] ? __kasan_check_write+0x18/0x20 [ 117.428571][ T4160] ? fpregs_restore_userregs+0x11c/0x260 [ 117.434285][ T4160] __x64_sys_write+0x7f/0x90 [ 117.438895][ T4160] x64_sys_call+0x271c/0x2ee0 [ 117.443651][ T4160] do_syscall_64+0x57/0xf0 [ 117.448081][ T4160] ? clear_bhb_loop+0x50/0xa0 [ 117.452938][ T4160] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 117.458854][ T4160] RIP: 0033:0x7f9762d9fb19 [ 117.463345][ T4160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.483021][ T4160] RSP: 002b:00007f9763cc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.491512][ T4160] RAX: ffffffffffffffda RBX: 00007f9763025fa0 RCX: 00007f9762d9fb19 [ 117.499620][ T4160] RDX: 000000000000febc RSI: 0000200000000280 RDI: 0000000000000003 [ 117.507623][ T4160] RBP: 00007f9762e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 117.515661][ T4160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.523686][ T4160] R13: 00007f9763026038 R14: 00007f9763025fa0 R15: 00007ffc591d79b8 [ 117.531718][ T4160] [ 117.534743][ T4160] ---[ end trace 0000000000000000 ]--- [ 117.540494][ T4160] SELinux: failed to load policy [ 117.546217][ T807] usb 4-1: 0:2 : does not exist [ 117.551356][ T807] usb 4-1: unit 5: unexpected type 0x09 [ 117.560747][ T807] usb 4-1: USB disconnect, device number 30 [ 117.588426][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 117.933151][ T36] kauditd_printk_skb: 94 callbacks suppressed [ 117.933168][ T36] audit: type=1400 audit(1793730901.219:10562): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1